Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-52332 (GCVE-0-2024-52332)
Vulnerability from cvelistv5
Published
2025-01-11 12:25
Modified
2025-05-04 09:51
Severity ?
VLAI Severity ?
EPSS score ?
Summary
In the Linux kernel, the following vulnerability has been resolved:
igb: Fix potential invalid memory access in igb_init_module()
The pci_register_driver() can fail and when this happened, the dca_notifier
needs to be unregistered, otherwise the dca_notifier can be called when
igb fails to install, resulting to invalid memory access.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| ► | Linux | Linux |
Version: bbd98fe48a43464b4a044bc4cbeefad284d6aa80 Version: bbd98fe48a43464b4a044bc4cbeefad284d6aa80 Version: bbd98fe48a43464b4a044bc4cbeefad284d6aa80 Version: bbd98fe48a43464b4a044bc4cbeefad284d6aa80 Version: bbd98fe48a43464b4a044bc4cbeefad284d6aa80 Version: bbd98fe48a43464b4a044bc4cbeefad284d6aa80 Version: bbd98fe48a43464b4a044bc4cbeefad284d6aa80 |
|
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/net/ethernet/intel/igb/igb_main.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "4458046617dfadc351162dbaea1945c57eebdf36",
"status": "affected",
"version": "bbd98fe48a43464b4a044bc4cbeefad284d6aa80",
"versionType": "git"
},
{
"lessThan": "e0155b1b1509d0ef4799bd1cd73309ca466df3f3",
"status": "affected",
"version": "bbd98fe48a43464b4a044bc4cbeefad284d6aa80",
"versionType": "git"
},
{
"lessThan": "4fe517643f529e805bb6b890a4331c100e8f2484",
"status": "affected",
"version": "bbd98fe48a43464b4a044bc4cbeefad284d6aa80",
"versionType": "git"
},
{
"lessThan": "8009cdcc493fa30d4572016daf2d6999da4d6c54",
"status": "affected",
"version": "bbd98fe48a43464b4a044bc4cbeefad284d6aa80",
"versionType": "git"
},
{
"lessThan": "f309733a8c9da7d4266a8a3755020b738a570cae",
"status": "affected",
"version": "bbd98fe48a43464b4a044bc4cbeefad284d6aa80",
"versionType": "git"
},
{
"lessThan": "992fd34122de377b45cb75b64fc7f17fc1e6ed2f",
"status": "affected",
"version": "bbd98fe48a43464b4a044bc4cbeefad284d6aa80",
"versionType": "git"
},
{
"lessThan": "0566f83d206c7a864abcd741fe39d6e0ae5eef29",
"status": "affected",
"version": "bbd98fe48a43464b4a044bc4cbeefad284d6aa80",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/net/ethernet/intel/igb/igb_main.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "2.6.29"
},
{
"lessThan": "2.6.29",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"version": "5.4.287",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.231",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.174",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.120",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.66",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.13",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.287",
"versionStartIncluding": "2.6.29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.231",
"versionStartIncluding": "2.6.29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.174",
"versionStartIncluding": "2.6.29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.120",
"versionStartIncluding": "2.6.29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.66",
"versionStartIncluding": "2.6.29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.5",
"versionStartIncluding": "2.6.29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.13",
"versionStartIncluding": "2.6.29",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access."
}
],
"providerMetadata": {
"dateUpdated": "2025-05-04T09:51:22.265Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36"
},
{
"url": "https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3"
},
{
"url": "https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484"
},
{
"url": "https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54"
},
{
"url": "https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae"
},
{
"url": "https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f"
},
{
"url": "https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29"
}
],
"title": "igb: Fix potential invalid memory access in igb_init_module()",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2024-52332",
"datePublished": "2025-01-11T12:25:21.014Z",
"dateReserved": "2025-01-09T09:50:31.799Z",
"dateUpdated": "2025-05-04T09:51:22.265Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2024-52332\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-01-11T13:15:25.070\",\"lastModified\":\"2025-01-11T13:15:25.070\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nigb: Fix potential invalid memory access in igb_init_module()\\n\\nThe pci_register_driver() can fail and when this happened, the dca_notifier\\nneeds to be unregistered, otherwise the dca_notifier can be called when\\nigb fails to install, resulting to invalid memory access.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: igb: Se corrige un posible acceso no v\u00e1lido a la memoria en igb_init_module(). pci_register_driver() puede fallar y cuando esto sucede, se debe anular el registro de dca_notifier; de lo contrario, se puede llamar a dca_notifier cuando igb no se instala, lo que genera un acceso no v\u00e1lido a la memoria.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0566f83d206c7a864abcd741fe39d6e0ae5eef29\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4458046617dfadc351162dbaea1945c57eebdf36\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/4fe517643f529e805bb6b890a4331c100e8f2484\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8009cdcc493fa30d4572016daf2d6999da4d6c54\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/992fd34122de377b45cb75b64fc7f17fc1e6ed2f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e0155b1b1509d0ef4799bd1cd73309ca466df3f3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f309733a8c9da7d4266a8a3755020b738a570cae\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
}
}
ssa-398330
Vulnerability from csaf_siemens
Published
2023-12-12 00:00
Modified
2025-08-12 00:00
Summary
SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5
Notes
Summary
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).
These GNU/Linux vulnerabilities have been externally identified.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 (
https://cert-portal.siemens.com/productcert/html/ssb-439005.html).
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version \u003e= V3.1.0 and \u003c V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant).\n\nThese GNU/Linux vulnerabilities have been externally identified. \nSiemens has released new versions for the affected products and recommends to update to the latest versions.\n\nNote: This SSA advises vulnerabilities for firmware version V3.1 only; for versions \u003c V3.1 refer to Siemens Security Bulletin SSB-439005 (\nhttps://cert-portal.siemens.com/productcert/html/ssb-439005.html).",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP \u003e= V3.1.0 and \u003c V3.1.5 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-398330.html"
},
{
"category": "self",
"summary": "SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP \u003e= V3.1.0 and \u003c V3.1.5 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-398330.json"
}
],
"title": "SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP \u003e= V3.1.0 and \u003c V3.1.5",
"tracking": {
"current_release_date": "2025-08-12T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-398330",
"initial_release_date": "2023-12-12T00:00:00Z",
"revision_history": [
{
"date": "2023-12-12T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2024-01-09T00:00:00Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Added CVE-2021-44879, CVE-2023-46218, CVE-2023-46219, and CVE-2023-48795"
},
{
"date": "2024-02-13T00:00:00Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Added CVE-2023-45898, CVE-2023-46862, CVE-2023-6121, CVE-2023-6817, CVE-2023-6931, CVE-2023-6932, CVE-2024-0584"
},
{
"date": "2024-03-12T00:00:00Z",
"legacy_version": "1.3",
"number": "4",
"summary": "Added CVE-2023-52425, CVE-2023-52426, CVE-2023-45918"
},
{
"date": "2024-04-09T00:00:00Z",
"legacy_version": "1.4",
"number": "5",
"summary": "Added CVE-2024-28757"
},
{
"date": "2024-05-14T00:00:00Z",
"legacy_version": "1.5",
"number": "6",
"summary": "Added CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-2511, CVE-2024-28085, CVE-2024-28182, CVE-2024-28834, CVE-2024-28835"
},
{
"date": "2024-06-11T00:00:00Z",
"legacy_version": "1.6",
"number": "7",
"summary": "Added CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602, CVE-2024-34459"
},
{
"date": "2024-07-09T00:00:00Z",
"legacy_version": "1.7",
"number": "8",
"summary": "Added CVE-2024-5535, CVE-2024-5742"
},
{
"date": "2024-08-13T00:00:00Z",
"legacy_version": "1.8",
"number": "9",
"summary": "Added CVE-2017-15422, CVE-2024-7264, CVE-2024-37370, CVE-2024-37371"
},
{
"date": "2024-10-08T00:00:00Z",
"legacy_version": "1.9",
"number": "10",
"summary": "Added CVE-2024-6409, CVE-2024-8096, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492"
},
{
"date": "2024-11-12T00:00:00Z",
"legacy_version": "2.0",
"number": "11",
"summary": "Added CVE-2024-2236, CVE-2024-9143"
},
{
"date": "2024-12-10T00:00:00Z",
"legacy_version": "2.1",
"number": "12",
"summary": "Added CVE-2024-50602, CVE-2024-52533"
},
{
"date": "2025-01-14T00:00:00Z",
"legacy_version": "2.2",
"number": "13",
"summary": "Added CVE-2024-11053"
},
{
"date": "2025-02-11T00:00:00Z",
"legacy_version": "2.3",
"number": "14",
"summary": "Added multiple CVEs"
},
{
"date": "2025-03-11T00:00:00Z",
"legacy_version": "2.4",
"number": "15",
"summary": "Added CVE-2023-52622, CVE-2024-12133, -12243, -26645, -26671, -26679, -26772, -26773, -26777, -26805, -26923, -27020, -27032, -36017, -36484, -36904, -36905, -36934, -39487, -41046, -42106, -42131, -42154, -43871, -44944, -44965, -46743, -46745, -46750, -47684, -47701, -47737, -49881, -49884, -49948, -49949, -49952, -49997, -50006, -50040, -50045, -50251, -50262, -50299, -50301, -53057, -53140, -53165, -53217, CVE-2025-0167, -0395, -0665, -0725, -26465, -26466"
},
{
"date": "2025-04-08T00:00:00Z",
"legacy_version": "2.5",
"number": "16",
"summary": "Added CVE-2025-21694, CVE-2025-1390, CVE-2024-8176, CVE-2024-57901, CVE-2024-57884, CVE-2024-56780, CVE-2024-56779, CVE-2024-56770, CVE-2024-56650, CVE-2024-56644, CVE-2024-56606, CVE-2024-56601, CVE-2024-56600, CVE-2024-56570, CVE-2024-56569, CVE-2024-53164, CVE-2024-53124, CVE-2024-52332, CVE-2024-48881, CVE-2024-47707, CVE-2024-12243"
},
{
"date": "2025-06-10T00:00:00Z",
"legacy_version": "2.6",
"number": "17",
"summary": "Added fix for SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP incl. SIPLUS variants"
},
{
"date": "2025-08-12T00:00:00Z",
"legacy_version": "2.7",
"number": "18",
"summary": "Removed CVE-2021-41617, CVE-2023-28531, CVE-2023-38545, CVE-2023-38546, CVE-2023-44487, CVE-2023-4527, CVE-2023-46218, CVE-2023-46219, CVE-2023-4806, CVE-2023-48795, CVE-2023-4911, CVE-2024-12133, CVE-2024-12243, CVE-2024-28085, CVE-2024-2961, CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602, CVE-2024-37370, CVE-2024-37371, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2025-26465, CVE-2025-46836 as they are not fixed in V3.1.5 and advised in SSA-082556"
}
],
"status": "interim",
"version": "18"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=3.1.0|\u003c3.1.5",
"product": {
"name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)",
"product_id": "1",
"product_identification_helper": {
"model_numbers": [
"6ES7518-4AX00-1AB0"
]
}
}
}
],
"category": "product_name",
"name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=3.1.0|\u003c3.1.5",
"product": {
"name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)",
"product_id": "2",
"product_identification_helper": {
"model_numbers": [
"6ES7518-4AX00-1AC0"
]
}
}
}
],
"category": "product_name",
"name": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=3.1.0|\u003c3.1.5",
"product": {
"name": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)",
"product_id": "3",
"product_identification_helper": {
"model_numbers": [
"6ES7518-4FX00-1AB0"
]
}
}
}
],
"category": "product_name",
"name": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=3.1.0|\u003c3.1.5",
"product": {
"name": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)",
"product_id": "4",
"product_identification_helper": {
"model_numbers": [
"6ES7518-4FX00-1AC0"
]
}
}
}
],
"category": "product_name",
"name": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003e=3.1.0|\u003c3.1.5",
"product": {
"name": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)",
"product_id": "5",
"product_identification_helper": {
"model_numbers": [
"6AG1518-4AX00-4AC0"
]
}
}
}
],
"category": "product_name",
"name": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-0340",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"notes": [
{
"category": "summary",
"text": "expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2013-0340"
},
{
"cve": "CVE-2013-4235",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "summary",
"text": "shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2013-4235"
},
{
"cve": "CVE-2014-7209",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2014-7209"
},
{
"cve": "CVE-2015-20107",
"cwe": {
"id": "CWE-77",
"name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2015-20107"
},
{
"cve": "CVE-2016-3189",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-3189"
},
{
"cve": "CVE-2016-3709",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Possible cross-site scripting vulnerability in libxml after commit 960f0e2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-3709"
},
{
"cve": "CVE-2016-4658",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-4658"
},
{
"cve": "CVE-2016-5131",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-5131"
},
{
"cve": "CVE-2016-9318",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"notes": [
{
"category": "summary",
"text": "libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-9318"
},
{
"cve": "CVE-2016-10228",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-10228"
},
{
"cve": "CVE-2016-10739",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2016-10739"
},
{
"cve": "CVE-2017-0663",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses this library. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37104170.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-0663"
},
{
"cve": "CVE-2017-7375",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"notes": [
{
"category": "summary",
"text": "A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, this may expose a higher-risk attack surface in libxml2 not usually reachable with default parser flags, and expose content from local files, HTTP, or FTP servers (which might be otherwise unreachable).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-7375"
},
{
"cve": "CVE-2017-7376",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-7376"
},
{
"cve": "CVE-2017-9047",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer \u0027buf\u0027 of size \u0027size\u0027. The variable len is assigned strlen(buf). If the content-\u003etype is XML_ELEMENT_CONTENT_ELEMENT, then (i) the content-\u003eprefix is appended to buf (if it actually fits) whereupon (ii) content-\u003ename is written to the buffer. However, the check for whether the content-\u003ename actually fits also uses \u0027len\u0027 rather than the updated buffer length strlen(buf). This allows us to write about \"size\" many bytes beyond the allocated memory. This vulnerability causes programs that use libxml2, such as PHP, to crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-9047"
},
{
"cve": "CVE-2017-9048",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer \u0027buf\u0027 of size \u0027size\u0027. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 \u003c size. This vulnerability causes programs that use libxml2, such as PHP, to crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-9048"
},
{
"cve": "CVE-2017-9049",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for libxml2 Bug 759398.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-9049"
},
{
"cve": "CVE-2017-9050",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix for CVE-2016-1839.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-9050"
},
{
"cve": "CVE-2017-15422",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-15422"
},
{
"cve": "CVE-2017-16931",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a \u0027%\u0027 character in a DTD name.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-16931"
},
{
"cve": "CVE-2017-16932",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-16932"
},
{
"cve": "CVE-2017-17512",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-17512"
},
{
"cve": "CVE-2017-18258",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required for a legitimate file.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2017-18258"
},
{
"cve": "CVE-2018-0495",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-0495"
},
{
"cve": "CVE-2018-12886",
"cwe": {
"id": "CWE-209",
"name": "Generation of Error Message Containing Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-12886"
},
{
"cve": "CVE-2018-14404",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL format inputs with the use of the libxml2 library may be vulnerable to a denial of service attack due to a crash of the application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-14404"
},
{
"cve": "CVE-2018-14567",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-14567"
},
{
"cve": "CVE-2018-18928",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-18928"
},
{
"cve": "CVE-2018-19591",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-19591"
},
{
"cve": "CVE-2018-20482",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to be archived by a different user\u0027s process (e.g., a system backup running as root).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-20482"
},
{
"cve": "CVE-2018-20843",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"notes": [
{
"category": "summary",
"text": "In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service attacks).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-20843"
},
{
"cve": "CVE-2018-25032",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2018-25032"
},
{
"cve": "CVE-2019-3855",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3855"
},
{
"cve": "CVE-2019-3856",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3856"
},
{
"cve": "CVE-2019-3857",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3857"
},
{
"cve": "CVE-2019-3858",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3858"
},
{
"cve": "CVE-2019-3859",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3859"
},
{
"cve": "CVE-2019-3860",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with empty payloads are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3860"
},
{
"cve": "CVE-2019-3861",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a padding length value greater than the packet length are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3861"
},
{
"cve": "CVE-2019-3862",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3862"
},
{
"cve": "CVE-2019-3863",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive response messages whose total length are greater than unsigned char max characters. This value is used as an index to copy memory causing in an out of bounds memory write error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-3863"
},
{
"cve": "CVE-2019-5018",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5018"
},
{
"cve": "CVE-2019-5094",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5094"
},
{
"cve": "CVE-2019-5188",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5188"
},
{
"cve": "CVE-2019-5435",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An integer overflow in curl\u0027s URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5435"
},
{
"cve": "CVE-2019-5436",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5436"
},
{
"cve": "CVE-2019-5443",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"notes": [
{
"category": "summary",
"text": "A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl \u003c= 7.65.1 automatically run the code (as an openssl \"engine\") on invocation. If that curl is invoked by a privileged user it can do anything it wants.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5443"
},
{
"cve": "CVE-2019-5481",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5481"
},
{
"cve": "CVE-2019-5482",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-5482"
},
{
"cve": "CVE-2019-6109",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-6109"
},
{
"cve": "CVE-2019-6110",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"notes": [
{
"category": "summary",
"text": "In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-6110"
},
{
"cve": "CVE-2019-6111",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-6111"
},
{
"cve": "CVE-2019-6488",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "summary",
"text": "The string component in the GNU C Library (aka glibc or libc6) through 2.28, when running on the x32 architecture, incorrectly attempts to use a 64-bit register for size_t in assembly codes, which can lead to a segmentation fault or possibly unspecified other impact, as demonstrated by a crash in __memmove_avx_unaligned_erms in sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S during a memcpy.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-6488"
},
{
"cve": "CVE-2019-7309",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-7309"
},
{
"cve": "CVE-2019-8457",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-8457"
},
{
"cve": "CVE-2019-9169",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9169"
},
{
"cve": "CVE-2019-9636",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9636"
},
{
"cve": "CVE-2019-9674",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9674"
},
{
"cve": "CVE-2019-9740",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9740"
},
{
"cve": "CVE-2019-9923",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9923"
},
{
"cve": "CVE-2019-9936",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9936"
},
{
"cve": "CVE-2019-9937",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9937"
},
{
"cve": "CVE-2019-9947",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9947"
},
{
"cve": "CVE-2019-9948",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen(\u0027local_file:///etc/passwd\u0027) call.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-9948"
},
{
"cve": "CVE-2019-10160",
"cwe": {
"id": "CWE-172",
"name": "Encoding Error"
},
"notes": [
{
"category": "summary",
"text": "A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-10160"
},
{
"cve": "CVE-2019-11360",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-11360"
},
{
"cve": "CVE-2019-12290",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-12290"
},
{
"cve": "CVE-2019-12900",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-12900"
},
{
"cve": "CVE-2019-12904",
"cwe": {
"id": "CWE-668",
"name": "Exposure of Resource to Wrong Sphere"
},
"notes": [
{
"category": "summary",
"text": "In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on platforms where an assembly-language implementation is unavailable.) NOTE: the vendor\u0027s position is that the issue report cannot be validated because there is no description of an attack",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-12904"
},
{
"cve": "CVE-2019-13057",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN (database admin) privileges for certain databases but wants to maintain isolation (e.g., for multi-tenant deployments), slapd does not properly stop a rootDN from requesting authorization as an identity from another database during a SASL bind or with a proxyAuthz (RFC 4370) control. (It is not a common configuration to deploy a system where the server administrator and a DB administrator enjoy different levels of trust.)",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-13057"
},
{
"cve": "CVE-2019-13565",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in those ACLs. After the first SASL bind is completed, the sasl_ssf value is retained for all new non-SASL connections. Depending on the ACL configuration, this can affect different types of operations (searches, modifications, etc.). In other words, a successful authorization step completed by one user affects the authorization requirement for a different user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-13565"
},
{
"cve": "CVE-2019-13627",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Version affected: 1.8.4-5, 1.7.6-2+deb9u3, and 1.6.3-2+deb8u4. Versions fixed: 1.8.5-2 and 1.6.3-2+deb8u7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-13627"
},
{
"cve": "CVE-2019-15847",
"cwe": {
"id": "CWE-331",
"name": "Insufficient Entropy"
},
"notes": [
{
"category": "summary",
"text": "The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator. This occurred because a volatile operation was not specified. For example, within a single execution of a program, the output of every __builtin_darn() call may be the same.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-15847"
},
{
"cve": "CVE-2019-15903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-15903"
},
{
"cve": "CVE-2019-16056",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-16056"
},
{
"cve": "CVE-2019-16168",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a \"severe division by zero in the query planner.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-16168"
},
{
"cve": "CVE-2019-16905",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-16905"
},
{
"cve": "CVE-2019-17498",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-17498"
},
{
"cve": "CVE-2019-17543",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states \"only a few specific / uncommon usages of the API are at risk.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-17543"
},
{
"cve": "CVE-2019-17594",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-17594"
},
{
"cve": "CVE-2019-17595",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-17595"
},
{
"cve": "CVE-2019-18224",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-18224"
},
{
"cve": "CVE-2019-18276",
"cwe": {
"id": "CWE-273",
"name": "Improper Check for Dropped Privileges"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support \"saved UID\" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use \"enable -f\" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-18276"
},
{
"cve": "CVE-2019-18348",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \\r\\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-18348"
},
{
"cve": "CVE-2019-19126",
"cwe": {
"id": "CWE-665",
"name": "Improper Initialization"
},
"notes": [
{
"category": "summary",
"text": "On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19126"
},
{
"cve": "CVE-2019-19242",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "SQLite 3.30.1 mishandles pExpr-\u003ey.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19242"
},
{
"cve": "CVE-2019-19244",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19244"
},
{
"cve": "CVE-2019-19317",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"notes": [
{
"category": "summary",
"text": "lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19317"
},
{
"cve": "CVE-2019-19603",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19603"
},
{
"cve": "CVE-2019-19645",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19645"
},
{
"cve": "CVE-2019-19646",
"cwe": {
"id": "CWE-754",
"name": "Improper Check for Unusual or Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19646"
},
{
"cve": "CVE-2019-19880",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19880"
},
{
"cve": "CVE-2019-19906",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19906"
},
{
"cve": "CVE-2019-19923",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19923"
},
{
"cve": "CVE-2019-19924",
"cwe": {
"id": "CWE-755",
"name": "Improper Handling of Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19924"
},
{
"cve": "CVE-2019-19925",
"cwe": {
"id": "CWE-434",
"name": "Unrestricted Upload of File with Dangerous Type"
},
"notes": [
{
"category": "summary",
"text": "zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19925"
},
{
"cve": "CVE-2019-19926",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19926"
},
{
"cve": "CVE-2019-19956",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19956"
},
{
"cve": "CVE-2019-19959",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded \u0027\\0\u0027 characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-19959"
},
{
"cve": "CVE-2019-20218",
"cwe": {
"id": "CWE-755",
"name": "Improper Handling of Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-20218"
},
{
"cve": "CVE-2019-20367",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-20367"
},
{
"cve": "CVE-2019-20388",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-20388"
},
{
"cve": "CVE-2019-20795",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-20795"
},
{
"cve": "CVE-2019-20907",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-20907"
},
{
"cve": "CVE-2019-25013",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-25013"
},
{
"cve": "CVE-2019-1010022",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-1010022"
},
{
"cve": "CVE-2019-1010023",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-1010023"
},
{
"cve": "CVE-2019-1010024",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate \"this is being treated as a non-security bug and no real threat.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-1010024"
},
{
"cve": "CVE-2019-1010025",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor\u0027s position is \"ASLR bypass itself is not a vulnerability.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-1010025"
},
{
"cve": "CVE-2019-1010180",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2019-1010180"
},
{
"cve": "CVE-2020-1712",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-1712"
},
{
"cve": "CVE-2020-1751",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-1751"
},
{
"cve": "CVE-2020-1752",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-1752"
},
{
"cve": "CVE-2020-6096",
"cwe": {
"id": "CWE-195",
"name": "Signed to Unsigned Conversion Error"
},
"notes": [
{
"category": "summary",
"text": "An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the \u0027num\u0027 parameter results in a signed comparison vulnerability. If an attacker underflows the \u0027num\u0027 parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows for program execution to continue in scenarios where a segmentation fault or crash should have occurred. The dangers occur in that subsequent execution and iterations of this code will be executed with this corrupted data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-6096"
},
{
"cve": "CVE-2020-7595",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-7595"
},
{
"cve": "CVE-2020-8169",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "The libcurl library versions 7.62.0 to and including 7.70.0 are vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8169"
},
{
"cve": "CVE-2020-8177",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8177"
},
{
"cve": "CVE-2020-8231",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8231"
},
{
"cve": "CVE-2020-8284",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8284"
},
{
"cve": "CVE-2020-8285",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8285"
},
{
"cve": "CVE-2020-8286",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "The libcurl library versions 7.41.0 to and including 7.73.0 are vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response. This vulnerability could allow an attacker to pass a revoked certificate as valid.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8286"
},
{
"cve": "CVE-2020-8315",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"notes": [
{
"category": "summary",
"text": "In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker\u0027s copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system\u0027s copy. Windows 8 and later are unaffected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8315"
},
{
"cve": "CVE-2020-8492",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-8492"
},
{
"cve": "CVE-2020-9327",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-9327"
},
{
"cve": "CVE-2020-10029",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-10029"
},
{
"cve": "CVE-2020-10531",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-10531"
},
{
"cve": "CVE-2020-10543",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-10543"
},
{
"cve": "CVE-2020-10735",
"cwe": {
"id": "CWE-704",
"name": "Incorrect Type Conversion or Cast"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(\"text\"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-10735"
},
{
"cve": "CVE-2020-10878",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Perl before 5.30.3 has an integer overflow related to mishandling of a \"PL_regkind[OP(n)] == NOTHING\" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-10878"
},
{
"cve": "CVE-2020-11501",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"notes": [
{
"category": "summary",
"text": "GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06 commit. The DTLS client always uses 32 \u0027\\0\u0027 bytes instead of a random value, and thus contributes no randomness to a DTLS negotiation. This breaks the security guarantees of the DTLS protocol.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-11501"
},
{
"cve": "CVE-2020-11655",
"cwe": {
"id": "CWE-665",
"name": "Improper Initialization"
},
"notes": [
{
"category": "summary",
"text": "SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object\u0027s initialization is mishandled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-11655"
},
{
"cve": "CVE-2020-11656",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-11656"
},
{
"cve": "CVE-2020-12062",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client\u0027s download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a file hierarchy containing, anywhere inside, this crafted subdirectory. NOTE: the vendor points out that \"this attack can achieve no more than a hostile peer is already able to achieve within the scp protocol\" and \"utimes does not fail under normal circumstances.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-12062"
},
{
"cve": "CVE-2020-12243",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Limit remote access to port 22350/tcp on systems where the Codemeter runtime network server is running (for details refer to the updated security manual of WinCC OA).",
"product_ids": [
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-12243"
},
{
"cve": "CVE-2020-12723",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-12723"
},
{
"cve": "CVE-2020-12762",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-12762"
},
{
"cve": "CVE-2020-13434",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13434"
},
{
"cve": "CVE-2020-13435",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13435"
},
{
"cve": "CVE-2020-13529",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"notes": [
{
"category": "summary",
"text": "An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13529"
},
{
"cve": "CVE-2020-13630",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13630"
},
{
"cve": "CVE-2020-13631",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13631"
},
{
"cve": "CVE-2020-13632",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13632"
},
{
"cve": "CVE-2020-13776",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "summary",
"text": "systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13776"
},
{
"cve": "CVE-2020-13777",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13777"
},
{
"cve": "CVE-2020-13871",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-13871"
},
{
"cve": "CVE-2020-14145",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-14145"
},
{
"cve": "CVE-2020-14422",
"cwe": {
"id": "CWE-682",
"name": "Incorrect Calculation"
},
"notes": [
{
"category": "summary",
"text": "Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. This is fixed in: v3.5.10, v3.5.10rc1; v3.6.12; v3.7.9; v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1; v3.9.0, v3.9.0b4, v3.9.0b5, v3.9.0rc1, v3.9.0rc2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-14422"
},
{
"cve": "CVE-2020-15358",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-15358"
},
{
"cve": "CVE-2020-15523",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"notes": [
{
"category": "summary",
"text": "In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-15523"
},
{
"cve": "CVE-2020-15778",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of \"anomalous argument transfers\" because that could \"stand a great chance of breaking existing workflows.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-15778"
},
{
"cve": "CVE-2020-15801",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "summary",
"text": "In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The \u003cexecutable-name\u003e._pth file (e.g., the python._pth file) is not affected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-15801"
},
{
"cve": "CVE-2020-19185",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Buffer Overflow vulnerability in one_one_mapping function in progs/dump_entry.c:1373 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-19185"
},
{
"cve": "CVE-2020-19186",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-19186"
},
{
"cve": "CVE-2020-19187",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-19187"
},
{
"cve": "CVE-2020-19188",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-19188"
},
{
"cve": "CVE-2020-19189",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Buffer Overflow vulnerability in postprocess_terminfo function in tinfo/parse_entry.c:997 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-19189"
},
{
"cve": "CVE-2020-19190",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-19190"
},
{
"cve": "CVE-2020-19909",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow vulnerability in tool_operate.c in curl 7.65.2 via a large value as the retry delay. NOTE: many parties report that this has no direct security impact on the curl user; however, it may (in theory) cause a denial of service to associated systems or networks if, for example, --retry-delay is misinterpreted as a value much smaller than what was intended. This is not especially plausible because the overflow only happens if the user was trying to specify that curl should wait weeks (or longer) before trying to recover from a transient error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-19909"
},
{
"cve": "CVE-2020-21047",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application crashes due to out-of-bounds write (CWE-787), off-by-one error (CWE-193) and reachable assertion (CWE-617); to exploit the vulnerability, the attackers need to craft certain ELF files which bypass the missing bound checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-21047"
},
{
"cve": "CVE-2020-21913",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-21913"
},
{
"cve": "CVE-2020-22218",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-22218"
},
{
"cve": "CVE-2020-24659",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application\u0027s error handling path, where the gnutls_deinit function is called after detecting a handshake failure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-24659"
},
{
"cve": "CVE-2020-24977",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-24977"
},
{
"cve": "CVE-2020-25692",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sending a specially crafted request, causing a Denial of Service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-25692"
},
{
"cve": "CVE-2020-25709",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP\u2019s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-25709"
},
{
"cve": "CVE-2020-25710",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-25710"
},
{
"cve": "CVE-2020-26116",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-26116"
},
{
"cve": "CVE-2020-27618",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-27618"
},
{
"cve": "CVE-2020-28196",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-28196"
},
{
"cve": "CVE-2020-29361",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow checks are missing before calling realloc or calloc.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-29361"
},
{
"cve": "CVE-2020-29362",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call, the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-29362"
},
{
"cve": "CVE-2020-29363",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in p11-kit 0.23.6 through 0.23.21. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in a CK_ATTRIBUTE, the receiving entity may not allocate sufficient length for the buffer to store the deserialized value.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-29363"
},
{
"cve": "CVE-2020-29562",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-29562"
},
{
"cve": "CVE-2020-29573",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \\x00\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of \"Fixed for glibc 2.33\" in the 26649 reference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-29573"
},
{
"cve": "CVE-2020-35525",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-35525"
},
{
"cve": "CVE-2020-35527",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-35527"
},
{
"cve": "CVE-2020-36221",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "summary",
"text": "An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c serialNumberAndIssuerCheck).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36221"
},
{
"cve": "CVE-2020-36222",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36222"
},
{
"cve": "CVE-2020-36223",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36223"
},
{
"cve": "CVE-2020-36224",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36224"
},
{
"cve": "CVE-2020-36225",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36225"
},
{
"cve": "CVE-2020-36226",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch-\u003ebv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36226"
},
{
"cve": "CVE-2020-36227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36227"
},
{
"cve": "CVE-2020-36228",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "summary",
"text": "An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36228"
},
{
"cve": "CVE-2020-36229",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36229"
},
{
"cve": "CVE-2020-36230",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2020-36230"
},
{
"cve": "CVE-2021-3177",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3177"
},
{
"cve": "CVE-2021-3326",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3326"
},
{
"cve": "CVE-2021-3426",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "There\u0027s a flaw in Python 3\u0027s pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3426"
},
{
"cve": "CVE-2021-3516",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "There\u0027s a flaw in libxml2\u0027s xmllint in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by xmllint could trigger a use-after-free. The greatest impact of this flaw is to confidentiality, integrity, and availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3516"
},
{
"cve": "CVE-2021-3517",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3517"
},
{
"cve": "CVE-2021-3518",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "There\u0027s a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3518"
},
{
"cve": "CVE-2021-3520",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "There\u0027s a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3520"
},
{
"cve": "CVE-2021-3537",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3537"
},
{
"cve": "CVE-2021-3541",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3541"
},
{
"cve": "CVE-2021-3580",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the way nettle\u0027s RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3580"
},
{
"cve": "CVE-2021-3733",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "There\u0027s a flaw in urllib\u0027s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3733"
},
{
"cve": "CVE-2021-3737",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3737"
},
{
"cve": "CVE-2021-3826",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3826"
},
{
"cve": "CVE-2021-3997",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3997"
},
{
"cve": "CVE-2021-3998",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3998"
},
{
"cve": "CVE-2021-3999",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-3999"
},
{
"cve": "CVE-2021-4122",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"notes": [
{
"category": "summary",
"text": "It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-4122"
},
{
"cve": "CVE-2021-4189",
"cwe": {
"id": "CWE-252",
"name": "Unchecked Return Value"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-4189"
},
{
"cve": "CVE-2021-4209",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference flaw was found in GnuTLS. As Nettle\u0027s hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-4209"
},
{
"cve": "CVE-2021-20193",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-20193"
},
{
"cve": "CVE-2021-20227",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in SQLite\u0027s SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-20227"
},
{
"cve": "CVE-2021-20231",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-20231"
},
{
"cve": "CVE-2021-20232",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-20232"
},
{
"cve": "CVE-2021-20305",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA \u0026 ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-20305"
},
{
"cve": "CVE-2021-22876",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "curl 7.1.1 to and including 7.75.0 is vulnerable to an \"Exposure of Private Personal Information to an Unauthorized Actor\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22876"
},
{
"cve": "CVE-2021-22890",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"notes": [
{
"category": "summary",
"text": "curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived from the remote server and then wrongly \"short-cut\" the host handshake. When confusing the tickets, a HTTPS proxy can trick libcurl to use the wrong session ticket resume for the host and thereby circumvent the server TLS certificate check and make a MITM attack to be possible to perform unnoticed. Note that such a malicious HTTPS proxy needs to provide a certificate that curl will accept for the MITMed server for an attack to work - unless curl has been told to ignore the server certificate check.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22890"
},
{
"cve": "CVE-2021-22897",
"cwe": {
"id": "CWE-668",
"name": "Exposure of Resource to Wrong Sphere"
},
"notes": [
{
"category": "summary",
"text": "curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single \"static\" variable in the library, which has the surprising side-effect that if an application sets up multiple concurrent transfers, the last one that sets the ciphers will accidentally control the set used by all transfers. In a worst-case scenario, this weakens transport security significantly.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22897"
},
{
"cve": "CVE-2021-22898",
"cwe": {
"id": "CWE-909",
"name": "Missing Initialization of Resource"
},
"notes": [
{
"category": "summary",
"text": "**NOTE: CVE-2021-22898 is an incomplete fix (see https://hackerone.com/reports/1223882)! Check if affected products also have fixed CVE-22925 instead! Do not use CVE-2021-22898 in public advisories!**\r\n\r\ncurl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22898"
},
{
"cve": "CVE-2021-22901",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. When libcurl at run-time sets up support for TLS 1.3 session tickets on a connection using OpenSSL, it stores pointers to the transfer in-memory object for later retrieval when a session ticket arrives. If the connection is used by multiple transfers (like with a reused HTTP/1.1 connection or multiplexed HTTP/2 connection) that first transfer object might be freed before the new session is established on that connection and then the function will access a memory buffer that might be freed. When using that memory, libcurl might even call a function pointer in the object, making it possible for a remote code execution if the server could somehow manage to get crafted memory content into the correct place in memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22901"
},
{
"cve": "CVE-2021-22922",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"notes": [
{
"category": "summary",
"text": "When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22922"
},
{
"cve": "CVE-2021-22923",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user\u0027s expectations and intentions and without telling the user it happened.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22923"
},
{
"cve": "CVE-2021-22924",
"cwe": {
"id": "CWE-706",
"name": "Use of Incorrectly-Resolved Name or Reference"
},
"notes": [
{
"category": "summary",
"text": "libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse, if one of them matches the setup. Due to errors in the logic, the config matching function did not take \u0027issuercert\u0027 into account and it compared the involved paths *case insensitively*, which could lead to libcurl reusing wrong connections. File paths are, or can be, case sensitive on many systems but not all, and can even vary depending on used file systems. The comparison also didn\u0027t include the \u0027issuer cert\u0027 which a transfer can set to qualify how to verify the server certificate.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22924"
},
{
"cve": "CVE-2021-22925",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl. This rarely used option is used to send variable=content pairs to TELNET servers. Due to flaw in the option parser for sending `NEW_ENV` variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server. Therefore potentially revealing sensitive internal information to the server using a clear-text network protocol. This could happen because curl did not call and use sscanf() correctly when parsing the string provided by the application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22925"
},
{
"cve": "CVE-2021-22926",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certificate by name or with a file name - using the same option. If the name exists as a file, it will be used instead of by name.If the appliction runs with a current working directory that is writable by other users (like `/tmp`), a malicious user can create a file name with the same name as the app wants to use by name, and thereby trick the application to use the file based cert instead of the one referred to by name making libcurl send the wrong client certificate in the TLS connection handshake.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22926"
},
{
"cve": "CVE-2021-22945",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "When sending data to an MQTT server, libcurl \u003c= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22945"
},
{
"cve": "CVE-2021-22946",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "A user can tell curl \u003e= 7.20.0 and \u003c= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22946"
},
{
"cve": "CVE-2021-22947",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"notes": [
{
"category": "summary",
"text": "When curl \u003e= 7.20.0 and \u003c= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker\u0027s injected data comes from the TLS-protected server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-22947"
},
{
"cve": "CVE-2021-23336",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-23336"
},
{
"cve": "CVE-2021-27212",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-27212"
},
{
"cve": "CVE-2021-27218",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-27218"
},
{
"cve": "CVE-2021-27219",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-27219"
},
{
"cve": "CVE-2021-27645",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-27645"
},
{
"cve": "CVE-2021-28041",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-28041"
},
{
"cve": "CVE-2021-28153",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-28153"
},
{
"cve": "CVE-2021-28363",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn\u0027t given via proxy_config) doesn\u0027t verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-28363"
},
{
"cve": "CVE-2021-28861",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states \"Warning: http.server is not recommended for production. It only implements basic security checks.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-28861"
},
{
"cve": "CVE-2021-31239",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An issue found in SQLite SQLite3 v.3.35.4 that could allow a remote attacker to cause a denial of service via the appendvfs.c function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-31239"
},
{
"cve": "CVE-2021-32292",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-32292"
},
{
"cve": "CVE-2021-33294",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In elfutils 0.183, an infinite loop was found in the function handle_symtab in readelf.c .Which allows attackers to cause a denial of service (infinite loop) via crafted file.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-33294"
},
{
"cve": "CVE-2021-33560",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-33560"
},
{
"cve": "CVE-2021-33574",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-33574"
},
{
"cve": "CVE-2021-33910",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "The use of alloca function with an uncontrolled size in function unit_name_path_escape allows a local attacker, able to mount a filesystem on a very long path, to crash systemd and the whole system by allocating a very large space in the stack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-33910"
},
{
"cve": "CVE-2021-35942",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-35942"
},
{
"cve": "CVE-2021-36084",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-36084"
},
{
"cve": "CVE-2021-36085",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-36085"
},
{
"cve": "CVE-2021-36086",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-36086"
},
{
"cve": "CVE-2021-36087",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-36087"
},
{
"cve": "CVE-2021-36222",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-36222"
},
{
"cve": "CVE-2021-36690",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-36690"
},
{
"cve": "CVE-2021-37600",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "For earlier versions see the recommendations from section Workarounds and Mitigations",
"product_ids": [
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-37600"
},
{
"cve": "CVE-2021-37750",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "For earlier versions see the recommendations from section Workarounds and Mitigations",
"product_ids": [
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-37750"
},
{
"cve": "CVE-2021-38604",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-38604"
},
{
"cve": "CVE-2021-43396",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious \u0027\\0\u0027 character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states \"the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to require a separate application bug to do so unintentionally. Hence there\u0027s no security impact to the bug.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-43396"
},
{
"cve": "CVE-2021-43618",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-43618"
},
{
"cve": "CVE-2021-44879",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-44879"
},
{
"cve": "CVE-2021-45960",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-45960"
},
{
"cve": "CVE-2021-46143",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-46143"
},
{
"cve": "CVE-2021-46195",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-46195"
},
{
"cve": "CVE-2021-46828",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-46828"
},
{
"cve": "CVE-2021-46848",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"notes": [
{
"category": "summary",
"text": "GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2021-46848"
},
{
"cve": "CVE-2022-0391",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like \u0027\\r\u0027 and \u0027\\n\u0027 in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-0391"
},
{
"cve": "CVE-2022-0563",
"cwe": {
"id": "CWE-209",
"name": "Generation of Error Message Containing Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an \"INPUTRC\" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-0563"
},
{
"cve": "CVE-2022-0778",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The BN_mod_sqrt() function in openSSL, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite loop by crafting a certificate that has invalid explicit curve parameters. Since certificate parsing happens prior to verification of the certificate signature, any process that parses an externally supplied certificate may thus be subject to a denial of service attack. The infinite loop can also be reached when parsing crafted private keys as they can contain explicit elliptic curve parameters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-0778"
},
{
"cve": "CVE-2022-1271",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "An arbitrary file write vulnerability was found in GNU gzip\u0027s zgrep utility. When zgrep is applied on the attacker\u0027s chosen file name (for example, a crafted file name), this can overwrite an attacker\u0027s content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-1271"
},
{
"cve": "CVE-2022-1292",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-1292"
},
{
"cve": "CVE-2022-1304",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-1304"
},
{
"cve": "CVE-2022-1343",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "Under certain circumstances, the command line OCSP verify function reports successful verification when the verification in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-1343"
},
{
"cve": "CVE-2022-1434",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "When using the RC4-MD5 ciphersuite, which is disabled by default, an attacker is able to modify data in transit due to an incorrect use of the AAD data as the MAC key in OpenSSL 3.0. An attacker is not able to decrypt any communication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-1434"
},
{
"cve": "CVE-2022-1473",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "summary",
"text": "The used OpenSSL version improperly reuses memory when decoding certificates or keys. This can lead to a process termination and Denial of Service for long lived processes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-1473"
},
{
"cve": "CVE-2022-2068",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-2068"
},
{
"cve": "CVE-2022-2097",
"cwe": {
"id": "CWE-326",
"name": "Inadequate Encryption Strength"
},
"notes": [
{
"category": "summary",
"text": "AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn\u0027t written. In the special case of \"in place\" encryption, sixteen bytes of the plaintext would be revealed. Since OpenSSL does not support OCB based cipher suites for TLS and DTLS, they are both unaffected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-2097"
},
{
"cve": "CVE-2022-2274",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-2274"
},
{
"cve": "CVE-2022-2509",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-2509"
},
{
"cve": "CVE-2022-3715",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-3715"
},
{
"cve": "CVE-2022-3821",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"notes": [
{
"category": "summary",
"text": "An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in format_timespan(), leading to a Denial of Service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-3821"
},
{
"cve": "CVE-2022-4304",
"cwe": {
"id": "CWE-326",
"name": "Inadequate Encryption Strength"
},
"notes": [
{
"category": "summary",
"text": "A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Disable the use of RSA ciphers in the web server configuration; note that RSA ciphers are disabled by default",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-4304"
},
{
"cve": "CVE-2022-4450",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the \"name\" (e.g. \"CERTIFICATE\"), any header data and the payload data. If the function succeeds then the \"name_out\", \"header\" and \"data\" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will return a failure code but will populate the header argument with a pointer to a buffer that has already been freed. If the caller also frees this buffer then a double free will occur. This will most likely lead to a crash. This could be exploited by an attacker who has the ability to supply malicious PEM files for parsing to achieve a denial of service attack. The functions PEM_read_bio() and PEM_read() are simple wrappers around PEM_read_bio_ex() and therefore these functions are also directly affected. These functions are also called indirectly by a number of other OpenSSL functions including PEM_X509_INFO_read_bio_ex() and SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL internal uses of these functions are not vulnerable because the caller does not free the header argument if PEM_read_bio_ex() returns a failure code. These locations include the PEM_read_bio_TYPE() functions as well as the decoders introduced in OpenSSL 3.0. The OpenSSL asn1parse command line application is also impacted by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Do not import or configure certificate files in PEM format from untrusted sources",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-4450"
},
{
"cve": "CVE-2022-22576",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-22576"
},
{
"cve": "CVE-2022-22822",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-22822"
},
{
"cve": "CVE-2022-22823",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-22823"
},
{
"cve": "CVE-2022-22824",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-22824"
},
{
"cve": "CVE-2022-22825",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-22825"
},
{
"cve": "CVE-2022-22826",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-22826"
},
{
"cve": "CVE-2022-22827",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-22827"
},
{
"cve": "CVE-2022-23218",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-23218"
},
{
"cve": "CVE-2022-23219",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-23219"
},
{
"cve": "CVE-2022-23308",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-23308"
},
{
"cve": "CVE-2022-23852",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-23852"
},
{
"cve": "CVE-2022-23990",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-23990"
},
{
"cve": "CVE-2022-24407",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-24407"
},
{
"cve": "CVE-2022-25235",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "summary",
"text": "xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-25235"
},
{
"cve": "CVE-2022-25236",
"cwe": {
"id": "CWE-668",
"name": "Exposure of Resource to Wrong Sphere"
},
"notes": [
{
"category": "summary",
"text": "xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-25236"
},
{
"cve": "CVE-2022-25313",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-25313"
},
{
"cve": "CVE-2022-25314",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-25314"
},
{
"cve": "CVE-2022-25315",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-25315"
},
{
"cve": "CVE-2022-26488",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"notes": [
{
"category": "summary",
"text": "In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-26488"
},
{
"cve": "CVE-2022-27774",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27774"
},
{
"cve": "CVE-2022-27775",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27775"
},
{
"cve": "CVE-2022-27776",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27776"
},
{
"cve": "CVE-2022-27778",
"cwe": {
"id": "CWE-706",
"name": "Use of Incorrectly-Resolved Name or Reference"
},
"notes": [
{
"category": "summary",
"text": "A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27778"
},
{
"cve": "CVE-2022-27779",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl\u0027s \"cookie engine\" can bebuilt with or without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would get sent to adifferent and unrelated site or domain.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27779"
},
{
"cve": "CVE-2022-27780",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "summary",
"text": "The curl URL parser wrongly accepts percent-encoded URL separators like \u0027/\u0027when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27780"
},
{
"cve": "CVE-2022-27781",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server\u0027s certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27781"
},
{
"cve": "CVE-2022-27782",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if one of them matches the setup. However, several TLS andSSH settings were left out from the configuration match checks, making themmatch too easily.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27782"
},
{
"cve": "CVE-2022-27943",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-27943"
},
{
"cve": "CVE-2022-28321",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn\u0027t correctly restrict login if a user tries to connect from an IP address that is not resolvable via DNS. In such conditions, a user with denied access to a machine can still get access. NOTE: the relevance of this issue is largely limited to openSUSE Tumbleweed and openSUSE Factory; it does not affect Linux-PAM upstream.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-28321"
},
{
"cve": "CVE-2022-29155",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-29155"
},
{
"cve": "CVE-2022-29824",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don\u0027t check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, multi-gigabyte XML file. Other software using libxml2\u0027s buffer functions, for example libxslt through 1.1.35, is affected as well.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-29824"
},
{
"cve": "CVE-2022-30115",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-30115"
},
{
"cve": "CVE-2022-32205",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "A malicious server can serve excessive amounts of \"Set-Cookie:\" headers in a HTTP response to curl and curl \u003c 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger than the threshold that curl uses internally to avoid sending crazy large requests (1048576 bytes) and instead returns an error.This denial state might remain for as long as the same cookies are kept, match and haven\u0027t expired. Due to cookie matching rules, a server on \"foo.example.com\" can set cookies that also would match for \"bar.example.com\", making it it possible for a \"sister server\" to effectively cause a denial of service for a sibling site on the same second level domain using this method.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-32205"
},
{
"cve": "CVE-2022-32206",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "curl \u003c 7.84.0 supports \"chained\" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms. The number of acceptable \"links\" in this \"decompression chain\" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps.The use of such a decompression chain could result in a \"malloc bomb\", makingcurl end up spending enormous amounts of allocated heap memory, or trying toand returning out of memory errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-32206"
},
{
"cve": "CVE-2022-32207",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "summary",
"text": "When curl \u003c 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-32207"
},
{
"cve": "CVE-2022-32208",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "When curl \u003c 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a Man-In-The-Middle attack to go unnoticed and even allows it to inject data to the client.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-32208"
},
{
"cve": "CVE-2022-32221",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"notes": [
{
"category": "summary",
"text": "When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIELDS` option has been set, if the same handle previously was used to issue a `PUT` request which used that callback. This flaw may surprise the application and cause it to misbehave and either send off the wrong data or use memory after free or similar in the subsequent `POST` request. The problem exists in the logic for a reused handle when it is changed from a PUT to a POST.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-32221"
},
{
"cve": "CVE-2022-35252",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"notes": [
{
"category": "summary",
"text": "When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a\"sister site\" to deny service to all siblings.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-35252"
},
{
"cve": "CVE-2022-35260",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a zero byte beyond its boundary.This will in most cases cause a segfault or similar, but circumstances might also cause different outcomes.If a malicious user can provide a custom netrc file to an application or otherwise affect its contents, this flaw could be used as denial-of-service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-35260"
},
{
"cve": "CVE-2022-35737",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "summary",
"text": "SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-35737"
},
{
"cve": "CVE-2022-37434",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-37434"
},
{
"cve": "CVE-2022-37454",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-37454"
},
{
"cve": "CVE-2022-40303",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XML_PARSE_HUGE parser option enabled, several integer counters can overflow. This results in an attempt to access an array at a negative 2GB offset, typically leading to a segmentation fault.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-40303"
},
{
"cve": "CVE-2022-40304",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-40304"
},
{
"cve": "CVE-2022-40674",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-40674"
},
{
"cve": "CVE-2022-42898",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a resultant heap-based buffer overflow), and cause a denial of service on other platforms. This occurs in krb5_pac_parse in lib/krb5/krb/pac.c. Heimdal before 7.7.1 has \"a similar bug.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-42898"
},
{
"cve": "CVE-2022-42915",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the protocol through. An HTTP proxy might refuse this request (HTTP proxies often only allow outgoing connections to specific port numbers, like 443 for HTTPS) and instead return a non-200 status code to the client. Due to flaws in the error/cleanup handling, this could trigger a double free in curl if one of the following schemes were used in the URL for the transfer: dict, gopher, gophers, ldap, ldaps, rtmp, rtmps, or telnet. The earliest affected version is 7.77.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-42915"
},
{
"cve": "CVE-2022-42916",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided in the URL. This mechanism could be bypassed if the host name in the given URL uses IDN characters that get replaced with ASCII counterparts as part of the IDN conversion, e.g., using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop of U+002E (.). The earliest affected version is 7.77.0 2021-05-26.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-42916"
},
{
"cve": "CVE-2022-43551",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability exists in curl \u003c7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop U+002E (.). Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-43551"
},
{
"cve": "CVE-2022-43552",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations using an appropriate HTTP error response code. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-43552"
},
{
"cve": "CVE-2022-43680",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-43680"
},
{
"cve": "CVE-2022-45061",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-45061"
},
{
"cve": "CVE-2022-45873",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested directory to make its backtrace large enough to cause the deadlock. This must be done 16 times when MaxConnections=16 is set for the systemd/units/systemd-coredump.socket file.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-45873"
},
{
"cve": "CVE-2022-46908",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-46908"
},
{
"cve": "CVE-2022-48303",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-48303"
},
{
"cve": "CVE-2022-48522",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-48522"
},
{
"cve": "CVE-2022-48560",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free exists in Python through 3.9 via heappushpop in heapq.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2022-48560"
},
{
"cve": "CVE-2023-0215",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receives a BIO from the caller, prepends a new BIO_f_asn1 filter BIO onto the front of it to form a BIO chain, and then returns the new head of the BIO chain to the caller. Under certain conditions, for example if a CMS recipient public key is invalid, the new filter BIO is freed and the function returns a NULL result indicating a failure. However, in this case, the BIO chain is not properly cleaned up and the BIO passed by the caller still retains internal pointers to the previously freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO then a use-after-free will occur. This will most likely result in a crash. This scenario occurs directly in the internal function B64_write_ASN1() which may cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on the BIO. This internal function is in turn called by the public API functions PEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream, SMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7. Other public API functions that may be impacted by this include i2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and i2d_PKCS7_bio_stream. The OpenSSL cms and smime command line applications are similarly affected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-0215"
},
{
"cve": "CVE-2023-0286",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Disable CRL (certification revocation list) checking, if possible",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-0286"
},
{
"cve": "CVE-2023-0361",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-0361"
},
{
"cve": "CVE-2023-0464",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of computational resources, leading to a denial-of-service (DoS) attack on affected systems.\r\n\r\nPolicy processing is disabled by default but can be enabled by passing the `-policy` argument to the command line utilities or by calling the `X509_VERIFY_PARAM_set1_policies()` function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-0464"
},
{
"cve": "CVE-2023-0465",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "Applications that use a non-default option when verifying certificates may be\r\nvulnerable to an attack from a malicious CA to circumvent certain checks.\r\n\r\nInvalid certificate policies in leaf certificates are silently ignored by\r\nOpenSSL and other certificate policy checks are skipped for that certificate.\r\nA malicious CA could use this to deliberately assert invalid certificate policies\r\nin order to circumvent policy checking on the certificate altogether.\r\n\r\nPolicy processing is disabled by default but can be enabled by passing\r\nthe `-policy` argument to the command line utilities or by calling the\r\n`X509_VERIFY_PARAM_set1_policies()` function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-0465"
},
{
"cve": "CVE-2023-0466",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "The function X509_VERIFY_PARAM_add0_policy() is documented to\r\nimplicitly enable the certificate policy check when doing certificate\r\nverification. However the implementation of the function does not\r\nenable the check which allows certificates with invalid or incorrect\r\npolicies to pass the certificate verification.\r\n\r\nAs suddenly enabling the policy check could break existing deployments it was\r\ndecided to keep the existing behavior of the X509_VERIFY_PARAM_add0_policy()\r\nfunction.\r\n\r\nInstead the applications that require OpenSSL to perform certificate\r\npolicy check need to use X509_VERIFY_PARAM_set1_policies() or explicitly\r\nenable the policy check by calling X509_VERIFY_PARAM_set_flags() with\r\nthe X509_V_FLAG_POLICY_CHECK flag argument.\r\n\r\nCertificate policy checks are disabled by default in OpenSSL and are not\r\ncommonly used by applications.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-0466"
},
{
"cve": "CVE-2023-0687",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. It is recommended to apply a patch to fix this issue. VDB-220246 is the identifier assigned to this vulnerability. NOTE: The real existence of this vulnerability is still doubted at the moment. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It\u0027s basically trusted input or input that needs an actual security flaw to be compromised or controlled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-0687"
},
{
"cve": "CVE-2023-1077",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-1077"
},
{
"cve": "CVE-2023-1206",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel\u2019s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-1206"
},
{
"cve": "CVE-2023-2650",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience notable to very long delays when processing those messages, which may lead to a Denial of Service. An OBJECT IDENTIFIER is composed of a series of numbers - sub-identifiers - most of which have no size limit. OBJ_obj2txt() may be used to translate an ASN.1 OBJECT IDENTIFIER given in DER encoding form (using the OpenSSL type ASN1_OBJECT) to its canonical numeric text form, which are the sub-identifiers of the OBJECT IDENTIFIER in decimal form, separated by periods. When one of the sub-identifiers in the OBJECT IDENTIFIER is very large (these are sizes that are seen as absurdly large, taking up tens or hundreds of KiBs), the translation to a decimal number in text may take a very long time. The time complexity is O(square(n)) with \u0027n\u0027 being the size of the sub-identifiers in bytes (*). With OpenSSL 3.0, support to fetch cryptographic algorithms using names / identifiers in string form was introduced. This includes using OBJECT IDENTIFIERs in canonical numeric text form as identifiers for fetching algorithms. Such OBJECT IDENTIFIERs may be received through the ASN.1 structure AlgorithmIdentifier, which is commonly used in multiple protocols to specify what cryptographic algorithm should be used to sign or verify, encrypt or decrypt, or digest passed data. Applications that call OBJ_obj2txt() directly with untrusted data are affected, with any version of OpenSSL. If the use is for the mere purpose of display, the severity is considered low. In OpenSSL 3.0 and newer, this affects the subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS. It also impacts anything that processes X.509 certificates, including simple things like verifying its signature. The impact on TLS is relatively low, because all versions of OpenSSL have a 100KiB limit on the peer\u0027s certificate chain. Additionally, this only impacts clients, or servers that have explicitly enabled client authentication. In OpenSSL 1.1.1 and 1.0.2, this only affects displaying diverse objects, such as X.509 certificates. This is assumed to not happen in such a way that it would cause a Denial of Service, so these versions are considered not affected by this issue in such a way that it would be cause for concern, and the severity is therefore considered low.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-2650"
},
{
"cve": "CVE-2023-2953",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-2953"
},
{
"cve": "CVE-2023-3212",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-3212"
},
{
"cve": "CVE-2023-3446",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"notes": [
{
"category": "summary",
"text": "Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus (\u0027p\u0027 parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulernable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the \u0027-check\u0027 option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-3446"
},
{
"cve": "CVE-2023-3609",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-3609"
},
{
"cve": "CVE-2023-3611",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds write vulnerability in the Linux kernel\u0027s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\r\n\r\nThe qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-3611"
},
{
"cve": "CVE-2023-3772",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3817",
"cwe": {
"id": "CWE-834",
"name": "Excessive Iteration"
},
"notes": [
{
"category": "summary",
"text": "Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus p parameter, thus it is unnecessary to perform these checks if q is larger than p. An application that calls DH_check() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. The function DH_check() is itself called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_ex() and EVP_PKEY_param_check(). Also vulnerable are the OpenSSL dhparam and pkeyparam command line applications when using the \"-check\" option. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-3817"
},
{
"cve": "CVE-2023-4016",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "Under some circumstances, this weakness allows a user who has access to run the \u201cps\u201d utility on a machine, the ability to write almost unlimited amounts of unfiltered data into the process heap.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-4016"
},
{
"cve": "CVE-2023-4039",
"cwe": {
"id": "CWE-693",
"name": "Protection Mechanism Failure"
},
"notes": [
{
"category": "summary",
"text": "A failure in the -fstack-protector feature in GCC-based toolchains \nthat target AArch64 allows an attacker to exploit an existing buffer \noverflow in dynamically-sized local variables in your application \nwithout this being detected. This stack-protector failure only applies \nto C99-style dynamically-sized local variables or those created using \nalloca(). The stack-protector operates as intended for statically-sized \nlocal variables.\n\nThe default behavior when the stack-protector \ndetects an overflow is to terminate your application, resulting in \ncontrolled loss of availability. An attacker who can exploit a buffer \noverflow without triggering the stack-protector might be able to change \nprogram flow control to cause an uncontrolled loss of availability or to\n go further and affect confidentiality or integrity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-4039"
},
{
"cve": "CVE-2023-4623",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.\n\nIf a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.\n\nWe recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-4623"
},
{
"cve": "CVE-2023-4807",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"notes": [
{
"category": "summary",
"text": "Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86_64 processors supporting the AVX512-IFMA instructions. Impact summary: If in an application that uses the OpenSSL library an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. The POLY1305 MAC (message authentication code) implementation in OpenSSL does not save the contents of non-volatile XMM registers on Windows 64 platform when calculating the MAC of data larger than 64 bytes. Before returning to the caller all the XMM registers are set to zero rather than restoring their previous content. The vulnerable code is used only on newer x86_64 processors supporting the AVX512-IFMA instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However given the contents of the registers are just zeroized so the attacker cannot put arbitrary values inside, the most likely consequence, if any, would be an incorrect result of some application dependent calculations or a crash leading to a denial of service. The POLY1305 MAC algorithm is most frequently used as part of the CHACHA20-POLY1305 AEAD (authenticated encryption with associated data) algorithm. The most common usage of this AEAD cipher is with TLS protocol versions 1.2 and 1.3 and a malicious client can influence whether this AEAD cipher is used by the server. This implies that server applications using OpenSSL can be potentially impacted. However we are currently not aware of any concrete application that would be affected by this issue therefore we consider this a Low severity security issue. As a workaround the AVX512-IFMA instructions support can be disabled at runtime by setting the environment variable OPENSSL_ia32cap: OPENSSL_ia32cap=:~0x200000 The FIPS provider is not affected by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-4807"
},
{
"cve": "CVE-2023-4813",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-4813"
},
{
"cve": "CVE-2023-4921",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\n\nWhen the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue().\n\nWe recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-4921"
},
{
"cve": "CVE-2023-5156",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-5156"
},
{
"cve": "CVE-2023-5678",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"notes": [
{
"category": "summary",
"text": "Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications that use DH_check_pub_key(), DH_check_pub_key_ex() or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42 DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. While DH_check() performs all the necessary checks (as of CVE-2023-3817), DH_check_pub_key() doesn\u0027t make any of these checks, and is therefore vulnerable for excessively large P and Q parameters. Likewise, while DH_generate_key() performs a check for an excessively large P, it doesn\u0027t check for an excessively large Q. An application that calls DH_generate_key() or DH_check_pub_key() and supplies a key or parameters obtained from an untrusted source could be vulnerable to a Denial of Service attack. DH_generate_key() and DH_check_pub_key() are also called by a number of other OpenSSL functions. An application calling any of those other functions may similarly be affected. The other functions affected by this are DH_check_pub_key_ex(), EVP_PKEY_public_check(), and EVP_PKEY_generate(). Also vulnerable are the OpenSSL pkey command line application when using the \"-pubcheck\" option, as well as the OpenSSL genpkey command line application. The OpenSSL SSL/TLS implementation is not affected by this issue. The OpenSSL 3.0 and 3.1 FIPS providers are not affected by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-5678"
},
{
"cve": "CVE-2023-5717",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A heap out-of-bounds write vulnerability in the Linux kernel\u0027s Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation.\r\n\r\nIf perf_read_group() is called while an event\u0027s sibling_list is smaller than its child\u0027s sibling_list, it can increment or write to memory locations outside of the allocated buffer.\r\n\r\nWe recommend upgrading past commit 32671e3799ca2e4590773fd0e63aaa4229e50c06.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-5717"
},
{
"cve": "CVE-2023-5981",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-5981"
},
{
"cve": "CVE-2023-6121",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer (dmesg).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-6121"
},
{
"cve": "CVE-2023-6817",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nThe function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.\n\nWe recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-6817"
},
{
"cve": "CVE-2023-6931",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A heap out-of-bounds write vulnerability in the Linux kernel\u0027s Performance Events system component can be exploited to achieve local privilege escalation.\n\nA perf_event\u0027s read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_group().\n\nWe recommend upgrading past commit 382c27f4ed28f803b1f1473ac2d8db0afc795a1b.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-6931"
},
{
"cve": "CVE-2023-6932",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s ipv4: igmp component can be exploited to achieve local privilege escalation.\n\nA race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread.\n\nWe recommend upgrading past commit e2b706c691905fe78468c361aaabc719d0a496f1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-6932"
},
{
"cve": "CVE-2023-23914",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "A cleartext transmission of sensitive information vulnerability exists in curl \u003cv7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-23914"
},
{
"cve": "CVE-2023-23915",
"cwe": {
"id": "CWE-319",
"name": "Cleartext Transmission of Sensitive Information"
},
"notes": [
{
"category": "summary",
"text": "A cleartext transmission of sensitive information vulnerability exists in curl \u003cv7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when multiple transfers are done in parallel as the HSTS cache file gets overwritten by the most recentlycompleted transfer. A later HTTP-only transfer to the earlier host name would then *not* get upgraded properly to HSTS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "For earlier versions see the recommendations from section Workarounds and Mitigations",
"product_ids": [
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-23915"
},
{
"cve": "CVE-2023-23916",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "An allocation of resources without limits or throttling vulnerability exists in curl \u003cv7.88.0 based on the \"chained\" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable \"links\" in this \"decompression chain\" wascapped, but the cap was implemented on a per-header basis allowing a maliciousserver to insert a virtually unlimited number of compression steps simply byusing many headers. The use of such a decompression chain could result in a \"malloc bomb\", making curl end up spending enormous amounts of allocated heap memory, or trying to and returning out of memory errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-23916"
},
{
"cve": "CVE-2023-24329",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-24329"
},
{
"cve": "CVE-2023-25136",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states \"remote code execution is theoretically possible.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-25136"
},
{
"cve": "CVE-2023-25139",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a number, if the buffer is allocated the exact size required to represent that number as a string. For example, 1,234,567 (with padding to 13) overflows by two bytes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-25139"
},
{
"cve": "CVE-2023-26604",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the \"systemctl status\" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less program. This presents a substantial security risk when running systemctl from Sudo, because less executes as root when the terminal size is too small to show the complete systemctl output.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-26604"
},
{
"cve": "CVE-2023-27371",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious HTTP POST packet that includes one or more \u0027\\0\u0027 bytes in a multipart/form-data boundary field, which - assuming a specific heap layout - will result in an out-of-bounds read and a crash in the find_boundary() function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-27371"
},
{
"cve": "CVE-2023-27533",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability in input validation exists in curl \u003c8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and \"telnet options\" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application\u0027s intent. This vulnerability could be exploited if an application allows user input, thereby enabling attackers to execute arbitrary code on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-27533"
},
{
"cve": "CVE-2023-27534",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A path traversal vulnerability exists in curl \u003c8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user\u0027s home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-27534"
},
{
"cve": "CVE-2023-27535",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An authentication bypass vulnerability exists in libcurl \u003c8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-27535"
},
{
"cve": "CVE-2023-27536",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An authentication bypass vulnerability exists libcurl \u003c8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-27536"
},
{
"cve": "CVE-2023-27537",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "A double free vulnerability exists in libcurl \u003c8.0.0 when sharing HSTS data between separate \"handles\". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-27537"
},
{
"cve": "CVE-2023-27538",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "libcurl would reuse a previously created connection even when an SSH related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, two SSH settings were left out from the configuration match checks, making them match too easily.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-27538"
},
{
"cve": "CVE-2023-28484",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-28484"
},
{
"cve": "CVE-2023-29383",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \\n is in the block list), it is possible to misrepresent the /etc/passwd file when viewed. Use of \\r manipulations and Unicode characters to work around blocking of the : character make it possible to give the impression that a new user has been added. In other words, an adversary may be able to convince a system administrator to take the system offline (an indirect, social-engineered denial of service) by demonstrating that \"cat /etc/passwd\" shows a rogue user account.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-29383"
},
{
"cve": "CVE-2023-29469",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to use the first byte of an empty string, and any value is possible (not solely the \u0027\\0\u0027 value).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-29469"
},
{
"cve": "CVE-2023-29491",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or TERM environment variable.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-29491"
},
{
"cve": "CVE-2023-29499",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-29499"
},
{
"cve": "CVE-2023-31085",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd-\u003eerasesize), used indirectly by ctrl_cdev_ioctl, when mtd-\u003eerasesize is 0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-31085"
},
{
"cve": "CVE-2023-32611",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-32611"
},
{
"cve": "CVE-2023-32636",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-32636"
},
{
"cve": "CVE-2023-32643",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who followed the guidance of GLib developers to backport the initial fix for CVE-2023-32665.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-32643"
},
{
"cve": "CVE-2023-32665",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing, leading to denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "mitigation",
"details": "Limit remote access to port 22350/tcp on systems where the Codemeter runtime network server is running. Note that this is the default configuration, which therefore limits the exploitability to local attacks only.",
"product_ids": [
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-32665"
},
{
"cve": "CVE-2023-34319",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with\na frontend splitting a packet in a way such that not all of the headers\nwould come in one piece. Unfortunately the logic introduced there\ndidn\u0027t account for the extreme case of the entire packet being split\ninto as many pieces as permitted by the protocol, yet still being\nsmaller than the area that\u0027s specially dealt with to keep all (possible)\nheaders together. Such an unusual packet would therefore trigger a\nbuffer overrun in the driver.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-34319"
},
{
"cve": "CVE-2023-34969",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-34969"
},
{
"cve": "CVE-2023-35001",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-35001"
},
{
"cve": "CVE-2023-35945",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy\u2019s HTTP/2 codec may leak a header map and bookkeeping structures upon receiving `RST_STREAM` immediately followed by the `GOAWAY` frames from an upstream server. In nghttp2, cleanup of pending requests due to receipt of the `GOAWAY` frame skips de-allocation of the bookkeeping structure and pending compressed header. The error return [code path] is taken if connection is already marked for not sending more requests due to `GOAWAY` frame. The clean-up code is right after the return statement, causing memory leak. Denial of service through memory exhaustion. This vulnerability was patched in versions(s) 1.26.3, 1.25.8, 1.24.9, 1.23.11.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-35945"
},
{
"cve": "CVE-2023-38408",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-38408"
},
{
"cve": "CVE-2023-39128",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-39128"
},
{
"cve": "CVE-2023-39189",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-39189"
},
{
"cve": "CVE-2023-39192",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-39192"
},
{
"cve": "CVE-2023-39193",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Netfilter subsystem in the Linux kernel. The sctp_mt_check did not validate the flag_count field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-39193"
},
{
"cve": "CVE-2023-39194",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.2,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-39194"
},
{
"cve": "CVE-2023-39615",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor\u0027s position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-39615"
},
{
"cve": "CVE-2023-40283",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-40283"
},
{
"cve": "CVE-2023-42754",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-42754"
},
{
"cve": "CVE-2023-42755",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-42755"
},
{
"cve": "CVE-2023-45322",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor\u0027s position is \"I don\u0027t think these issues are critical enough to warrant a CVE ID ... because an attacker typically can\u0027t control when memory allocations fail.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-45322"
},
{
"cve": "CVE-2023-45853",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-45853"
},
{
"cve": "CVE-2023-45871",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-45871"
},
{
"cve": "CVE-2023-45898",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-45898"
},
{
"cve": "CVE-2023-45918",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-45918"
},
{
"cve": "CVE-2023-46862",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-46862"
},
{
"cve": "CVE-2023-52425",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52425"
},
{
"cve": "CVE-2023-52426",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52426"
},
{
"cve": "CVE-2023-52444",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid dirent corruption As Al reported in link[1]: f2fs_rename() ... if (old_dir != new_dir \u0026\u0026 !whiteout) f2fs_set_link(old_inode, old_dir_entry, old_dir_page, new_dir); else f2fs_put_page(old_dir_page, 0); You want correct inumber in the \"..\" link. And cross-directory rename does move the source to new parent, even if you\u0027d been asked to leave a whiteout in the old place. [1] https://lore.kernel.org/all/20231017055040.GN800259@ZenIV/ With below testcase, it may cause dirent corruption, due to it missed to call f2fs_set_link() to update \"..\" link to new directory. - mkdir -p dir/foo - renameat2 -w dir/foo bar [ASSERT] (__chk_dots_dentries:1421) --\u003e Bad inode number[0x4] for \u0027..\u0027, parent parent ino is [0x3] [FSCK] other corrupted bugs [Fail]",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52444"
},
{
"cve": "CVE-2023-52464",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of-bounds string access Enabling -Wstringop-overflow globally exposes a warning for a common bug in the usage of strncat(): drivers/edac/thunderx_edac.c: In function \u0027thunderx_ocx_com_threaded_isr\u0027: drivers/edac/thunderx_edac.c:1136:17: error: \u0027strncat\u0027 specified bound 1024 equals destination size [-Werror=stringop-overflow=] 1136 | strncat(msg, other, OCX_MESSAGE_SIZE); | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ... 1145 | strncat(msg, other, OCX_MESSAGE_SIZE); ... 1150 | strncat(msg, other, OCX_MESSAGE_SIZE); ... Apparently the author of this driver expected strncat() to behave the way that strlcat() does, which uses the size of the destination buffer as its third argument rather than the length of the source buffer. The result is that there is no check on the size of the allocated buffer. Change it to strlcat(). [ bp: Trim compiler output, fixup commit message. ]",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52464"
},
{
"cve": "CVE-2023-52612",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req-\u003edst buffer overflow The req-\u003edst buffer size should be checked before copying from the scomp_scratch-\u003edst to avoid req-\u003edst buffer overflow problem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52612"
},
{
"cve": "CVE-2023-52622",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52622"
},
{
"cve": "CVE-2023-52675",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() kasprintf() returns a pointer to dynamically allocated memory which can be NULL upon failure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52675"
},
{
"cve": "CVE-2023-52699",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: sysv: don\u0027t call sb_bread() with pointers_lock held syzbot is reporting sleep in atomic context in SysV filesystem [1], for sb_bread() is called with rw_spinlock held. A \"write_lock(\u0026pointers_lock) =\u003e read_lock(\u0026pointers_lock) deadlock\" bug and a \"sb_bread() with write_lock(\u0026pointers_lock)\" bug were introduced by \"Replace BKL for chain locking with sysvfs-private rwlock\" in Linux 2.5.12. Then, \"[PATCH] err1-40: sysvfs locking fix\" in Linux 2.6.8 fixed the former bug by moving pointers_lock lock to the callers, but instead introduced a \"sb_bread() with read_lock(\u0026pointers_lock)\" bug (which made this problem easier to hit). Al Viro suggested that why not to do like get_branch()/get_block()/ find_shared() in Minix filesystem does. And doing like that is almost a revert of \"[PATCH] err1-40: sysvfs locking fix\" except that get_branch() from with find_shared() is called without write_lock(\u0026pointers_lock).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2023-52699"
},
{
"cve": "CVE-2024-0584",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free issue was found in igmp_start_timer in net/ipv4/igmp.c in the network sub-component in the Linux Kernel. This flaw allows a local user to observe a refcnt use-after-free issue when receiving an igmp query packet, leading to a kernel information leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-0584"
},
{
"cve": "CVE-2024-2004",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "When a protocol selection parameter option disables all protocols without adding any then the default set of protocols would remain in the allowed set due to an error in the logic for removing protocols. The below command would perform a request to curl.se with a plaintext protocol which has been explicitly disabled. curl --proto -all,-http http://curl.se The flaw is only present if the set of selected protocols disables the entire set of available protocols, in itself a command with no practical use and therefore unlikely to be encountered in real situations. The curl security team has thus assessed this to be low severity bug.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-2004"
},
{
"cve": "CVE-2024-2236",
"cwe": {
"id": "CWE-208",
"name": "Observable Timing Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "A timing-based side-channel flaw was found in libgcrypt\u0027s RSA implementation. This issue may allow a remote attacker to initiate a Bleichenbacher-style attack, which can lead to the decryption of RSA ciphertexts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-2236"
},
{
"cve": "CVE-2024-2379",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-2379"
},
{
"cve": "CVE-2024-2398",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit (1000), libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead leaks the memory. Further, this error condition fails silently and is therefore not easily detected by an application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-2398"
},
{
"cve": "CVE-2024-2466",
"cwe": {
"id": "CWE-297",
"name": "Improper Validation of Certificate with Host Mismatch"
},
"notes": [
{
"category": "summary",
"text": "libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-2466"
},
{
"cve": "CVE-2024-2511",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions. An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is being used (but not if early_data support is also configured and the default anti-replay protection is in use). In this case, under certain conditions, the session cache can get into an incorrect state and it will fail to flush properly as it fills. The session cache will continue to grow in an unbounded manner. A malicious client could deliberately create the scenario for this failure to force a Denial of Service. It may also happen by accident in normal operation. This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS clients. The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL 1.0.2 is also not affected by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-2511"
},
{
"cve": "CVE-2024-5535",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or a crash. In particular this issue could result in up to 255 bytes of arbitrary private data from memory being sent to the peer leading to a loss of confidentiality. However, only applications that directly call the SSL_select_next_proto function with a 0 length list of supported client protocols are affected by this issue. This would normally never be a valid scenario and is typically not under attacker control but may occur by accident in the case of a configuration or programming error in the calling application. The OpenSSL API function SSL_select_next_proto is typically used by TLS applications that support ALPN (Application Layer Protocol Negotiation) or NPN (Next Protocol Negotiation). NPN is older, was never standardised and is deprecated in favour of ALPN. We believe that ALPN is significantly more widely deployed than NPN. The SSL_select_next_proto function accepts a list of protocols from the server and a list of protocols from the client and returns the first protocol that appears in the server list that also appears in the client list. In the case of no overlap between the two lists it returns the first item in the client list. In either case it will signal whether an overlap between the two lists was found. In the case where SSL_select_next_proto is called with a zero length client list it fails to notice this condition and returns the memory immediately following the client list pointer (and reports that there was no overlap in the lists). This function is typically called from a server side application callback for ALPN or a client side application callback for NPN. In the case of ALPN the list of protocols supplied by the client is guaranteed by libssl to never be zero in length. The list of server protocols comes from the application and should never normally be expected to be of zero length. In this case if the SSL_select_next_proto function has been called as expected (with the list supplied by the client passed in the client/client_len parameters), then the application will not be vulnerable to this issue. If the application has accidentally been configured with a zero length server list, and has accidentally passed that zero length server list in the client/client_len parameters, and has additionally failed to correctly handle a \"no overlap\" response (which would normally result in a handshake failure in ALPN) then it will be vulnerable to this problem. In the case of NPN, the protocol permits the client to opportunistically select a protocol when there is no overlap. OpenSSL returns the first client protocol in the no overlap case in support of this. The list of client protocols comes from the application and should never normally be expected to be of zero length. However if the SSL_select_next_proto function is accidentally called with a client_len of 0 then an invalid memory pointer will be returned instead. If the application uses this output as the opportunistic protocol then the loss of confidentiality will occur. This issue has been assessed as Low severity because applications are most likely to be vulnerable if they are using NPN instead of ALPN - but NPN is not widely used. It also requires an application configuration or programming error. Finally, this issue would not typically be under attacker control making active exploitation unlikely. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue. Due to the low severity of this issue we are not issuing new releases of OpenSSL at this time. The fix will be included in the next releases when they become available.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-5535"
},
{
"cve": "CVE-2024-5742",
"cwe": {
"id": "CWE-377",
"name": "Insecure Temporary File"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-5742"
},
{
"cve": "CVE-2024-6409",
"cwe": {
"id": "CWE-364",
"name": "Signal Handler Race Condition"
},
"notes": [
{
"category": "summary",
"text": "A race condition vulnerability was discovered in how signals are handled by OpenSSH\u0027s server (sshd). If a remote attacker does not authenticate within a set time period, then sshd\u0027s SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). As a consequence of a successful attack, in the worst case scenario, an attacker may be able to perform a remote code execution (RCE) as an unprivileged user running the sshd server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-6409"
},
{
"cve": "CVE-2024-7264",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "libcurl\u0027s ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-7264"
},
{
"cve": "CVE-2024-8096",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "summary",
"text": "When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error than \u0027revoked\u0027 (like for example \u0027unauthorized\u0027) it is not treated as a bad certficate.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-8096"
},
{
"cve": "CVE-2024-8176",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"notes": [
{
"category": "summary",
"text": "A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-8176"
},
{
"cve": "CVE-2024-9143",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Issue summary: Use of the low-level GF(2m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a possibility of a remote code execution, however, in all the protocols involving Elliptic Curve Cryptography that we\u0027re aware of, either only \"named curves\" are supported, or, if explicit curve parameters are supported, they specify an X9.62 encoding of binary (GF(2m)) curves that can\u0027t represent problematic input values. Thus the likelihood of existence of a vulnerable application is low. In particular, the X9.62 encoding is used for ECC keys in X.509 certificates, so problematic inputs cannot occur in the context of processing X.509 certificates. Any problematic use-cases would have to be using an \"exotic\" curve encoding. The affected APIs include: EC_GROUP_new_curve_GF2m(), EC_GROUP_new_from_params(), and various supporting BN_GF2m_*() functions. Applications working with \"exotic\" explicit binary (GF(2m)) curve parameters, that make it possible to represent invalid field polynomials with a zero constant term, via the above or similar APIs, may terminate abruptly as a result of reading or writing outside of array bounds. Remote code execution cannot easily be ruled out. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-9143"
},
{
"cve": "CVE-2024-11053",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-11053"
},
{
"cve": "CVE-2024-26645",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an element into tracing_map.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26645"
},
{
"cve": "CVE-2024-26671",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix IO hang from sbitmap wakeup race.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26671"
},
{
"cve": "CVE-2024-26679",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\ninet: read sk-\u003esk_family once in inet_recv_error()",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26679"
},
{
"cve": "CVE-2024-26772",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\next4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()\r\n\r\nPlaces the logic for checking if the group\u0027s block bitmap is corrupt under\r\nthe protection of the group lock to avoid allocating blocks from the group\r\nwith a corrupted block bitmap.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26772"
},
{
"cve": "CVE-2024-26773",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26773"
},
{
"cve": "CVE-2024-26777",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nfbdev: sis: Error out if pixclock equals zero",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26777"
},
{
"cve": "CVE-2024-26805",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netlink: Fix kernel-infoleak-after-free in skb_datagram_iter.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26805"
},
{
"cve": "CVE-2024-26835",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nnetfilter: nf_tables: set dormant flag on hook register failure",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26835"
},
{
"cve": "CVE-2024-26863",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsr_get_node().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26863"
},
{
"cve": "CVE-2024-26878",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26878"
},
{
"cve": "CVE-2024-26880",
"cwe": {
"id": "CWE-99",
"name": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: dm: call the resume method on internal suspend.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26880"
},
{
"cve": "CVE-2024-26898",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26898"
},
{
"cve": "CVE-2024-26901",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26901"
},
{
"cve": "CVE-2024-26923",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix garbage collector racing against connect().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26923"
},
{
"cve": "CVE-2024-26957",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: fix reference counting on zcrypt card objects.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26957"
},
{
"cve": "CVE-2024-26973",
"cwe": {
"id": "CWE-457",
"name": "Use of Uninitialized Variable"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-26973"
},
{
"cve": "CVE-2024-27020",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in nft_expr_type_get().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-27020"
},
{
"cve": "CVE-2024-27032",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let\u0027s change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-27032"
},
{
"cve": "CVE-2024-27065",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-27065"
},
{
"cve": "CVE-2024-27074",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: media: go7007: fix a memleak in go7007_load_encoder.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-27074"
},
{
"cve": "CVE-2024-28182",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the unbounded number of HTTP/2 CONTINUATION frames even after a stream is reset to keep HPACK context in sync. This causes excessive CPU usage to decode HPACK stream. nghttp2 v1.61.0 mitigates this vulnerability by limiting the number of CONTINUATION frames it accepts per stream. There is no workaround for this vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-28182"
},
{
"cve": "CVE-2024-28757",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-28757"
},
{
"cve": "CVE-2024-28834",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like GnuTLS, leading to side-channel leaks. In specific scenarios, such as when using the GNUTLS_PRIVKEY_FLAG_REPRODUCIBLE flag, it can result in a noticeable step in nonce size from 513 to 512 bits, exposing a potential timing side-channel.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-28834"
},
{
"cve": "CVE-2024-28835",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"notes": [
{
"category": "summary",
"text": "A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the \"certtool --verify-chain\" command.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-28835"
},
{
"cve": "CVE-2024-33621",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ipvlan: Dont Use skb-\u003esk in ipvlan_process_v4 / 6_outbound.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-33621"
},
{
"cve": "CVE-2024-34459",
"cwe": {
"id": "CWE-126",
"name": "Buffer Over-read"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-34459"
},
{
"cve": "CVE-2024-35807",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-35807"
},
{
"cve": "CVE-2024-35809",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: PCI/PM: Drain runtime-idle callbacks before driver removal.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-35809"
},
{
"cve": "CVE-2024-35830",
"cwe": {
"id": "CWE-665",
"name": "Improper Initialization"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: media: tc358743: register v4l2 async device only after successful setup Ensure the device has been setup correctly before registering the v4l2 async device, thus allowing userspace to access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-35830"
},
{
"cve": "CVE-2024-35888",
"cwe": {
"id": "CWE-457",
"name": "Use of Uninitialized Variable"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: erspan: make sure erspan_base_hdr is present in skb-\u003ehead.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-35888"
},
{
"cve": "CVE-2024-35910",
"cwe": {
"id": "CWE-665",
"name": "Improper Initialization"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tcp: properly terminate timers for kernel sockets We had various syzbot reports about tcp timers firing after the corresponding netns has been dismantled. Fortunately Josef Bacik could trigger the issue more often, and could test a patch I wrote two years ago. When TCP sockets are closed, we call inet_csk_clear_xmit_timers() to \u0027stop\u0027 the timers. inet_csk_clear_xmit_timers() can be called from any context, including when socket lock is held. This is the reason it uses sk_stop_timer(), aka del_timer(). This means that ongoing timers might finish much later. For user sockets, this is fine because each running timer holds a reference on the socket, and the user socket holds a reference on the netns. For kernel sockets, we risk that the netns is freed before timer can complete, because kernel sockets do not hold reference on the netns. This patch adds inet_csk_clear_xmit_timers_sync() function that using sk_stop_timer_sync() to make sure all timers are terminated before the kernel socket is released. Modules using kernel sockets close them in their netns exit() handler. Also add sock_not_owned_by_me() helper to get LOCKDEP support : inet_csk_clear_xmit_timers_sync() must not be called while socket lock is held. It is very possible we can revert in the future commit 3a58f13a881e (\"net: rds: acquire refcount on TCP sockets\") which attempted to solve the issue in rds only. (net/smc/af_smc.c and net/mptcp/subflow.c have similar code) We probably can remove the check_net() tests from tcp_out_of_resources() and __tcp_close() in the future.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-35910"
},
{
"cve": "CVE-2024-35925",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "block: prevent division by zero in blk_rq_stat_sum()",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-35925"
},
{
"cve": "CVE-2024-35944",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-35944"
},
{
"cve": "CVE-2024-36017",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least of sizeof(struct ifla_vf_vlan_info) which is 14 bytes. The current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes) which is less than sizeof(struct ifla_vf_vlan_info) so this validation is not enough and a too small attribute might be cast to a struct ifla_vf_vlan_info, this might result in an out of bands read access when accessing the saved (casted) entry in ivvl.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-36017"
},
{
"cve": "CVE-2024-36286",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-36286"
},
{
"cve": "CVE-2024-36484",
"cwe": {
"id": "CWE-99",
"name": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-36484"
},
{
"cve": "CVE-2024-36904",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-36904"
},
{
"cve": "CVE-2024-36905",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-36905"
},
{
"cve": "CVE-2024-36934",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer and copy nbytes from userspace to that buffer. Later, we use sscanf on this buffer but we don\u0027t ensure that the string is terminated inside the buffer, this can lead to OOB read when using sscanf. Fix this issue by using memdup_user_nul instead of memdup_user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-36934"
},
{
"cve": "CVE-2024-37356",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tcp: Fix shift-out-of-bounds in dctcp_update_alpha().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-37356"
},
{
"cve": "CVE-2024-38596",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-38596"
},
{
"cve": "CVE-2024-38598",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-38598"
},
{
"cve": "CVE-2024-38612",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix invalid unregister error path The error path of seg6_init() is wrong in case CONFIG_IPV6_SEG6_LWTUNNEL is not defined. In that case if seg6_hmac_init() fails, the genl_unregister_family() isn\u0027t called. This issue exist since commit 46738b1317e1 (\"ipv6: sr: add option to control lwtunnel support\"), and commit 5559cea2d5aa (\"ipv6: sr: fix possible use-after-free and null-ptr-deref\") replaced unregister_pernet_subsys() with genl_unregister_family() in this error path.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-38612"
},
{
"cve": "CVE-2024-38621",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: media: stk1160: fix bounds checking in stk1160_copy_video() The subtract in this condition is reversed. The -\u003elength is the length of the buffer. The -\u003ebytesused is how many bytes we have copied thus far. When the condition is reversed that means the result of the subtraction is always negative but since it\u0027s unsigned then the result is a very high positive value. That means the overflow check is never true. Additionally, the -\u003ebytesused doesn\u0027t actually work for this purpose because we\u0027re not writing to \"buf-\u003emem + buf-\u003ebytesused\". Instead, the math to calculate the destination where we are writing is a bit involved. You calculate the number of full lines already written, multiply by two, skip a line if necessary so that we start on an odd numbered line, and add the offset into the line. To fix this buffer overflow, just take the actual destination where we are writing, if the offset is already out of bounds print an error and return. Otherwise, write up to buf-\u003elength bytes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-38621"
},
{
"cve": "CVE-2024-38780",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don\u0027t enable IRQ from sync_print_obj().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-38780"
},
{
"cve": "CVE-2024-39292",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: um: Add winch to winch_handlers before registering winch IRQ Registering a winch IRQ is racy, an interrupt may occur before the winch is added to the winch_handlers list. If that happens, register_winch_irq() adds to that list a winch that is scheduled to be (or has already been) freed, causing a panic later in winch_cleanup(). Avoid the race by adding the winch to the winch_handlers list before registering the IRQ, and rolling back if um_request_irq() fails.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-39292"
},
{
"cve": "CVE-2024-39469",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors The error handling in nilfs_empty_dir() when a directory folio/page read fails is incorrect, as in the old ext2 implementation, and if the folio/page cannot be read or nilfs_check_folio() fails, it will falsely determine the directory as empty and corrupt the file system. In addition, since nilfs_empty_dir() does not immediately return on a failed folio/page read, but continues to loop, this can cause a long loop with I/O if i_size of the directory\u0027s inode is also corrupted, causing the log writer thread to wait and hang, as reported by syzbot. Fix these issues by making nilfs_empty_dir() immediately return a false value (0) if it fails to get a directory folio/page.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-39469"
},
{
"cve": "CVE-2024-39487",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-39487"
},
{
"cve": "CVE-2024-39489",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix memleak in seg6_hmac_init_algo seg6_hmac_init_algo returns without cleaning up the previous allocations if one fails, so it\u0027s going to leak all that memory and the crypto tfms. Update seg6_hmac_exit to only free the memory when allocated, so we can reuse the code directly.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-39489"
},
{
"cve": "CVE-2024-40901",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-40901"
},
{
"cve": "CVE-2024-40959",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-40959"
},
{
"cve": "CVE-2024-41046",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-41046"
},
{
"cve": "CVE-2024-42070",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-42070"
},
{
"cve": "CVE-2024-42096",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-42096"
},
{
"cve": "CVE-2024-42106",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-42106"
},
{
"cve": "CVE-2024-42131",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGE_SIZE units fit into 32-bit (so that various multiplications fit into 64-bits). If limits end up being larger, we will hit overflows, possible divisions by 0 etc. Fix these problems by never allowing so large dirty limits as they have dubious practical value anyway. For dirty_bytes / dirty_background_bytes interfaces we can just refuse to set so large limits. For dirty_ratio / dirty_background_ratio it isn\u0027t so simple as the dirty limit is computed from the amount of available memory which can change due to memory hotplug etc. So when converting dirty limits from ratios to numbers of pages, we just don\u0027t allow the result to exceed UINT_MAX. This is root-only triggerable problem which occurs when the operator sets dirty limits to \u003e16 TB.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-42131"
},
{
"cve": "CVE-2024-42154",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don\u0027t see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn\u0027t have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-42154"
},
{
"cve": "CVE-2024-43871",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-43871"
},
{
"cve": "CVE-2024-44944",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-44944"
},
{
"cve": "CVE-2024-44965",
"cwe": {
"id": "CWE-229",
"name": "Improper Handling of Values"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pti_clone_pgtable() alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then #DF from the stack guard. It turned out that pti_clone_pgtable() had alignment assumptions on the start address, notably it hard assumes start is PMD aligned. This is true on x86_64, but very much not true on i386. These assumptions can cause the end condition to malfunction, leading to a \u0027short\u0027 clone. Guess what happens when the user mapping has a short copy of the entry text? Use the correct increment form for addr to avoid alignment assumptions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-44965"
},
{
"cve": "CVE-2024-46743",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-46743"
},
{
"cve": "CVE-2024-46745",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in input_mt_init_slots(). While this allocation failure is handled properly and request is rejected, it results in syzkaller reports. Additionally, such request may put undue burden on the system which will try to free a lot of memory for a bogus request. Fix it by limiting allowed number of slots to 100. This can easily be extended if we see devices that can track more than 100 contacts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-46745"
},
{
"cve": "CVE-2024-46750",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-46750"
},
{
"cve": "CVE-2024-47684",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\ntcp: check skb is non-NULL in tcp_rto_delta_us()\r\n\r\nWe have some machines running stock Ubuntu 20.04.6 which is their 5.4.0-174-generic\r\nkernel that are running ceph and recently hit a null ptr dereference in\r\ntcp_rearm_rto(). Initially hitting it from the TLP path, but then later we also\r\nsaw it getting hit from the RACK case as well. Here are examples of the oops\r\nmessages we saw in each of those cases:\r\n\r\nJul 26 15:05:02 rx [11061395.780353] BUG: kernel NULL pointer dereference, address: 0000000000000020\r\nJul 26 15:05:02 rx [11061395.787572] #PF: supervisor read access in kernel mode\r\nJul 26 15:05:02 rx [11061395.792971] #PF: error_code(0x0000) - not-present page\r\nJul 26 15:05:02 rx [11061395.798362] PGD 0 P4D 0\r\nJul 26 15:05:02 rx [11061395.801164] Oops: 0000 [#1] SMP NOPTI\r\nJul 26 15:05:02 rx [11061395.805091] CPU: 0 PID: 9180 Comm: msgr-worker-1 Tainted: G W 5.4.0-174-generic #193-Ubuntu\r\nJul 26 15:05:02 rx [11061395.814996] Hardware name: Supermicro SMC 2x26 os-gen8 64C NVME-Y 256G/H12SSW-NTR, BIOS 2.5.V1.2U.NVMe.UEFI 05/09/2023\r\nJul 26 15:05:02 rx [11061395.825952] RIP: 0010:tcp_rearm_rto+0xe4/0x160\r\nJul 26 15:05:02 rx [11061395.830656] Code: 87 ca 04 00 00 00 5b 41 5c 41 5d 5d c3 c3 49 8b bc 24 40 06 00 00 eb 8d 48 bb cf f7 53 e3 a5 9b c4 20 4c 89 ef e8 0c fe 0e 00 \u003c48\u003e 8b 78 20 48 c1 ef 03 48 89 f8 41 8b bc 24 80 04 00 00 48 f7 e3\r\nJul 26 15:05:02 rx [11061395.849665] RSP: 0018:ffffb75d40003e08 EFLAGS: 00010246\r\nJul 26 15:05:02 rx [11061395.855149] RAX: 0000000000000000 RBX: 20c49ba5e353f7cf RCX: 0000000000000000\r\nJul 26 15:05:02 rx [11061395.862542] RDX: 0000000062177c30 RSI: 000000000000231c RDI: ffff9874ad283a60\r\nJul 26 15:05:02 rx [11061395.869933] RBP: ffffb75d40003e20 R08: 0000000000000000 R09: ffff987605e20aa8\r\nJul 26 15:05:02 rx [11061395.877318] R10: ffffb75d40003f00 R11: ffffb75d4460f740 R12: ffff9874ad283900\r\nJul 26 15:05:02 rx [11061395.884710] R13: ffff9874ad283a60 R14: ffff9874ad283980 R15: ffff9874ad283d30\r\nJul 26 15:05:02 rx [11061395.892095] FS: 00007f1ef4a2e700(0000) GS:ffff987605e00000(0000) knlGS:0000000000000000\r\nJul 26 15:05:02 rx [11061395.900438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\r\nJul 26 15:05:02 rx [11061395.906435] CR2: 0000000000000020 CR3: 0000003e450ba003 CR4: 0000000000760ef0\r\nJul 26 15:05:02 rx [11061395.913822] PKRU: 55555554\r\nJul 26 15:05:02 rx [11061395.916786] Call Trace:\r\nJul 26 15:05:02 rx [11061395.919488]\r\nJul 26 15:05:02 rx [11061395.921765] ? show_regs.cold+0x1a/0x1f\r\nJul 26 15:05:02 rx [11061395.925859] ? __die+0x90/0xd9\r\nJul 26 15:05:02 rx [11061395.929169] ? no_context+0x196/0x380\r\nJul 26 15:05:02 rx [11061395.933088] ? ip6_protocol_deliver_rcu+0x4e0/0x4e0\r\nJul 26 15:05:02 rx [11061395.938216] ? ip6_sublist_rcv_finish+0x3d/0x50\r\nJul 26 15:05:02 rx [11061395.943000] ? __bad_area_nosemaphore+0x50/0x1a0\r\nJul 26 15:05:02 rx [11061395.947873] ? bad_area_nosemaphore+0x16/0x20\r\nJul 26 15:05:02 rx [11061395.952486] ? do_user_addr_fault+0x267/0x450\r\nJul 26 15:05:02 rx [11061395.957104] ? ipv6_list_rcv+0x112/0x140\r\nJul 26 15:05:02 rx [11061395.961279] ? __do_page_fault+0x58/0x90\r\nJul 26 15:05:02 rx [11061395.965458] ? do_page_fault+0x2c/0xe0\r\nJul 26 15:05:02 rx [11061395.969465] ? page_fault+0x34/0x40\r\nJul 26 15:05:02 rx [11061395.973217] ? tcp_rearm_rto+0xe4/0x160\r\nJul 26 15:05:02 rx [11061395.977313] ? tcp_rearm_rto+0xe4/0x160\r\nJul 26 15:05:02 rx [11061395.981408] tcp_send_loss_probe+0x10b/0x220\r\nJul 26 15:05:02 rx [11061395.985937] tcp_write_timer_handler+0x1b4/0x240\r\nJul 26 15:05:02 rx [11061395.990809] tcp_write_timer+0x9e/0xe0\r\nJul 26 15:05:02 rx [11061395.994814] ? tcp_write_timer_handler+0x240/0x240\r\nJul 26 15:05:02 rx [11061395.999866] call_timer_fn+0x32/0x130\r\nJul 26 15:05:02 rx [11061396.003782] __run_timers.part.0+0x180/0x280\r\nJul 26 15:05:02 rx [11061396.008309] ? recalibrate_cpu_khz+0x10/0x10\r\nJul 26 15:05:02 rx [11061396.012841] ? native_x2apic_icr_write+0x30/0x30\r\nJul 26 15:05:02 rx [11061396.017718] ? lapic_next_even\r\n---truncated---",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-47684"
},
{
"cve": "CVE-2024-47701",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-47701"
},
{
"cve": "CVE-2024-47707",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ipv6: A NULL dereference vulnerability may occur in rt6_uncached_list_flush_dev() due to the necessary check being removed by a previous commit.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-47707"
},
{
"cve": "CVE-2024-47737",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: nfsd: call cache_put if xdr_reserve_space returns NULL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-47737"
},
{
"cve": "CVE-2024-48881",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49881",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-49881"
},
{
"cve": "CVE-2024-49884",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-49884"
},
{
"cve": "CVE-2024-49948",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdisc_pkt_len_init().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-49949",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-49949"
},
{
"cve": "CVE-2024-49952",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-49952"
},
{
"cve": "CVE-2024-49982",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 (\"aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\") makes tx() calling dev_put() instead of doing in aoecmd_cfg_pkts(). It avoids that the tx() runs into use-after-free. Then Nicolai Stange found more places in aoe have potential use-after-free problem with tx(). e.g. revalidate(), aoecmd_ata_rw(), resend(), probe() and aoecmd_cfg_rsp(). Those functions also use aoenet_xmit() to push packet to tx queue. So they should also use dev_hold() to increase the refcnt of skb-\u003edev. On the other hand, moving dev_put() to tx() causes that the refcnt of skb-\u003edev be reduced to a negative value, because corresponding dev_hold() are not called in revalidate(), aoecmd_ata_rw(), resend(), probe(), and aoecmd_cfg_rsp(). This patch fixed this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-49982"
},
{
"cve": "CVE-2024-49997",
"cwe": {
"id": "CWE-226",
"name": "Sensitive Information in Resource Not Removed Before Reuse"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skb_put_padto() to pad Ethernet frames properly. The mentioned function zeroes the expanded buffer. In case the packet cannot be padded it is silently dropped. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bit format. These will be added in the future. In its current form, the patch should be easily backported to stable versions. Ethernet MACs on Amazon-SE and Danube cannot do padding of the packets in hardware, so software padding must be applied.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-49997"
},
{
"cve": "CVE-2024-50006",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50006"
},
{
"cve": "CVE-2024-50040",
"cwe": {
"id": "CWE-390",
"name": "Detection of Error Condition Without Action"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50040"
},
{
"cve": "CVE-2024-50045",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: fix panic with metadata_dst skb.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50045"
},
{
"cve": "CVE-2024-50251",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON(). skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50251"
},
{
"cve": "CVE-2024-50262",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50262"
},
{
"cve": "CVE-2024-50299",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb()",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-50301",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50301"
},
{
"cve": "CVE-2024-50602",
"cwe": {
"id": "CWE-754",
"name": "Improper Check for Unusual or Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-50602"
},
{
"cve": "CVE-2024-52332",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() can fail and when this happened, the dca_notifier needs to be unregistered, otherwise the dca_notifier can be called when igb fails to install, resulting to invalid memory access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-52533",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing \u0027\\\\0\u0027 character.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-52533"
},
{
"cve": "CVE-2024-53057",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-53057"
},
{
"cve": "CVE-2024-53124",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "net: fix data-races around sk sk_forward_alloc.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-53124"
},
{
"cve": "CVE-2024-53140",
"cwe": {
"id": "CWE-755",
"name": "Improper Handling of Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. It provides the families the following ops: - start - (optional) kicks off the dumping process - dump - actual dump helper, keeps getting called until it returns 0 - done - (optional) pairs with .start, can be used for cleanup The whole process is asynchronous and the repeated calls to .dump don\u0027t actually happen in a tight loop, but rather are triggered in response to recvmsg() on the socket. This gives the user full control over the dump, but also means that the user can close the socket without getting to the end of the dump. To make sure .start is always paired with .done we check if there is an ongoing dump before freeing the socket, and if so call .done. The complication is that sockets can get freed from BH and .done is allowed to sleep. So we use a workqueue to defer the call, when needed. Unfortunately this does not work correctly. What we defer is not the cleanup but rather releasing a reference on the socket. We have no guarantee that we own the last reference, if someone else holds the socket they may release it in BH and we\u0027re back to square one. The whole dance, however, appears to be unnecessary. Only the user can interact with dumps, so we can clean up when socket is closed. And close always happens in process context. Some async code may still access the socket after close, queue notification skbs to it etc. but no dumps can start, end or otherwise make progress. Delete the workqueue and flush the dump state directly from the release handler. Note that further cleanup is possible in -next, for instance we now always call .done before releasing the main module reference, so dump doesn\u0027t have to take a reference of its own.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-53140"
},
{
"cve": "CVE-2024-53164",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch-\u003eq.qlen around qdisc_tree_reduce_backlog() need to happen _before_ a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become empty.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-53164"
},
{
"cve": "CVE-2024-53165",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let\u0027s only add it to the list after everything has succeeded.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-53165"
},
{
"cve": "CVE-2024-53217",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-53217"
},
{
"cve": "CVE-2024-56433",
"cwe": {
"id": "CWE-1188",
"name": "Initialization of a Resource with an Insecure Default"
},
"notes": [
{
"category": "summary",
"text": "shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56433"
},
{
"cve": "CVE-2024-56569",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ftrace: Fix regression with module command in stack_trace_filter When executing the following command: # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter The current mod command causes a null pointer dereference. While commit 0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function.This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56600",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attaches the allocated sk pointer to the provided sock object. If inet6_create() fails later, the sk object is released, but the sock object retains the dangling sk pointer, which may cause use-after-free later. Clear the sock sk pointer on error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56606",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56644",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6_negative_advice() when this function is executed for an expired IPv6 route located in the exception table.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56650",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following BUG detected by KASAN",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56770",
"cwe": {
"id": "CWE-670",
"name": "Always-Incorrect Control Flow Implementation"
},
"notes": [
{
"category": "summary",
"text": "net/sched: netem: The interface fully stops transferring packets and \"locks\". In this case, the child qdisc and tfifo are empty, but \u0027qlen\u0027 indicates the tfifo is at its limit and no more packets are accepted.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56770"
},
{
"cve": "CVE-2024-56779",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\r\n\r\nThe action force umount(umount -f) will attempt to kill all rpc_task even\r\numount operation may ultimately fail if some files remain open.\r\nConsequently, if an action attempts to open a file, it can potentially\r\nsend two rpc_task to nfs server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"notes": [
{
"category": "summary",
"text": "quota: flush quota_release_work upon quota writeback One of the paths quota writeback is called from is: freeze_super() sync_filesystem() ext4_sync_fs() dquot_writeback_dquots().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-57884",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()\r\n\r\nThe task sometimes continues looping in throttle_direct_reclaim() because\r\nallow_direct_reclaim(pgdat) keeps returning false.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-57884"
},
{
"cve": "CVE-2024-57901",
"cwe": {
"id": "CWE-664",
"name": "Improper Control of a Resource Through its Lifetime"
},
"notes": [
{
"category": "summary",
"text": "af_packet: vlan_get_protocol_dgram() vs MSG_PEEK Blamed allowing a crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2024-57901"
},
{
"cve": "CVE-2025-0167",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "summary",
"text": "When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a default entry that omits both login and password. A rare circumstance.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.4,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-0167"
},
{
"cve": "CVE-2025-0395",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "summary",
"text": "When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-0395"
},
{
"cve": "CVE-2025-0665",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"notes": [
{
"category": "summary",
"text": "libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-0665"
},
{
"cve": "CVE-2025-0725",
"cwe": {
"id": "CWE-680",
"name": "Integer Overflow to Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPT_ACCEPT_ENCODING option, using zlib 1.2.0.3 or older, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-0725"
},
{
"cve": "CVE-2025-1390",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "The PAM module pam_cap.so of libcap configuration supports group names starting with \u201c@\u201d, during actual parsing, configurations not starting with \u201c@\u201d are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by constructing specific usernames.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-1390"
},
{
"cve": "CVE-2025-3277",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "An integer overflow can be triggered in SQLite\u0027s \u0027concat_ws()\u0027 function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer overflow of size 4GB can be triggered. This can result in arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-3277"
},
{
"cve": "CVE-2025-3360",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "1. Describe what is the vulnerability about, e.g.:\n Affected devices do not properly validate input in the hack-me endpoint of the web service.\n\n 2. Describe what an attacker could do with it - e.g.:\n This could allow an unauthenticated remote attacker to execute arbitrary code on the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0.0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-3360"
},
{
"cve": "CVE-2025-21694",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "fs/proc: softlockup in __read_vmcore",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-21694"
},
{
"cve": "CVE-2025-26466",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-26466"
},
{
"cve": "CVE-2025-29087",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "In SQLite, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-29087"
},
{
"cve": "CVE-2025-29088",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability in sqlite allows an attacker to cause a denial of service via the SQLITE_DBCONFIG_LOOKASIDE component.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-29088"
},
{
"cve": "CVE-2025-32728",
"cwe": {
"id": "CWE-440",
"name": "Expected Behavior Violation"
},
"notes": [
{
"category": "summary",
"text": "In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5"
]
},
"remediations": [
{
"category": "mitigation",
"details": "Only build and run applications from trusted sources.",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
]
},
{
"category": "vendor_fix",
"details": "Update to V3.1.5 or later version",
"product_ids": [
"1",
"2",
"3",
"4",
"5"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109478459/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5"
]
}
],
"title": "CVE-2025-32728"
}
]
}
ssa-355557
Vulnerability from csaf_siemens
Published
2025-08-12 00:00
Modified
2025-08-12 00:00
Summary
SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.2
Notes
Summary
SINEC OS before V3.2 contains third-party components with multiple vulnerabilities.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SINEC OS before V3.2 contains third-party components with multiple vulnerabilities.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.2 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-355557.html"
},
{
"category": "self",
"summary": "SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.2 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-355557.json"
}
],
"title": "SSA-355557: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.2",
"tracking": {
"current_release_date": "2025-08-12T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-355557",
"initial_release_date": "2025-08-12T00:00:00Z",
"revision_history": [
{
"date": "2025-08-12T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "interim",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.2",
"product": {
"name": "RUGGEDCOM RST2428P (6GK6242-6PA00)",
"product_id": "1",
"product_identification_helper": {
"model_numbers": [
"6GK6242-6PA00"
]
}
}
}
],
"category": "product_name",
"name": "RUGGEDCOM RST2428P (6GK6242-6PA00)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.2",
"product": {
"name": "SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family",
"product_id": "2"
}
}
],
"category": "product_name",
"name": "SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:intdot/\u003c3.2",
"product": {
"name": "SCALANCE XCM-/XRM-/XCH-/XRH-300 family",
"product_id": "3"
}
}
],
"category": "product_name",
"name": "SCALANCE XCM-/XRM-/XCH-/XRH-300 family"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-47316",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nfsd: NULL dereference in nfs3svc_encode_getaclres.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2021-47316"
},
{
"cve": "CVE-2022-48666",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "scsi: core: use-after-free vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2022-48666"
},
{
"cve": "CVE-2022-48827",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "NFSD: vulnerability caused by loff_t overflow on the server when a client reads near the maximum offset, causing the server to return an EINVAL error, which the client retries indefinitely, instead of handling out-of-range READ requests by returning a short result with an EOF flag.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2022-48827"
},
{
"cve": "CVE-2022-48828",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "NFSD: Vulnerability caused by an underflow in ia_size due to a mismatch between signed and unsigned 64-bit file size values, which can cause issues when handling large file sizes from NFS clients.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2022-48828"
},
{
"cve": "CVE-2022-48829",
"cwe": {
"id": "CWE-253",
"name": "Incorrect Check of Function Return Value"
},
"notes": [
{
"category": "summary",
"text": "NFSD: Vulnerability handling large file sizes for NFSv3 improperly capping client size values larger than s64_max, leading to unexpected behavior and potential data corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2022-48829"
},
{
"cve": "CVE-2022-49034",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "sh: cpuinfo: warning for CONFIG_CPUMASK_OFFSTACK. When CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS are selected, cpu_max_bits_warn() generates a runtime warning when showing /proc/cpuinfo.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2022-49034"
},
{
"cve": "CVE-2023-52887",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: can: j1939: vulnerability related to error handling for closely received RTS messages in xtp_rx_rts_session_new, which is addressed by replacing less informative backtraces with a new method that provides clearer error messages and allows for early termination of problematic sessions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2023-52887"
},
{
"cve": "CVE-2023-52917",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir(). The debugfs_create_dir() function returns error pointers. It never returns NULL. So use IS_ERR() to check it.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2023-52917"
},
{
"cve": "CVE-2024-9681",
"cwe": {
"id": "CWE-697",
"name": "Incorrect Comparison"
},
"notes": [
{
"category": "summary",
"text": "When curl is asked to use HSTS, the expiry time for a subdomain might\r\noverwrite a parent domain\u0027s cache entry, making it end sooner or later than\r\notherwise intended.\r\n\r\nThis affects curl using applications that enable HSTS and use URLs with the\r\ninsecure `HTTP://` scheme and perform transfers with hosts like\r\n`x.example.com` as well as `example.com` where the first host is a subdomain\r\nof the second host.\r\n\r\n(The HSTS cache either needs to have been populated manually or there needs to\r\nhave been previous HTTPS accesses done as the cache needs to have entries for\r\nthe domains involved to trigger this problem.)\r\n\r\nWhen `x.example.com` responds with `Strict-Transport-Security:` headers, this\r\nbug can make the subdomain\u0027s expiry timeout *bleed over* and get set for the\r\nparent domain `example.com` in curl\u0027s HSTS cache.\r\n\r\nThe result of a triggered bug is that HTTP accesses to `example.com` get\r\nconverted to HTTPS for a different period of time than what was asked for by\r\nthe origin server. If `example.com` for example stops supporting HTTPS at its\r\nexpiry time, curl might then fail to access `http://example.com` until the\r\n(wrongly set) timeout expires. This bug can also expire the parent\u0027s entry\r\n*earlier*, thus making curl inadvertently switch back to insecure HTTP earlier\r\nthan otherwise intended.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-9681"
},
{
"cve": "CVE-2024-36484",
"cwe": {
"id": "CWE-99",
"name": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: relax socket state check at accept time.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-36484"
},
{
"cve": "CVE-2024-36894",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-36894"
},
{
"cve": "CVE-2024-36901",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance that ip6_dst_idev() returns NULL in ip6_output().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-36901"
},
{
"cve": "CVE-2024-36938",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Denial of Service Vulnerability in the Linux Kernel: bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue Fix NULL pointer data-races in sk_psock_skb_ingress_enqueue() which syzbot reported.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-36938"
},
{
"cve": "CVE-2024-36974",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP. If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev-\u003enum_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-36974"
},
{
"cve": "CVE-2024-36978",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: sched: sch_multiq: possible OOB write in multiq_tune() q-\u003ebands will be assigned to qopt-\u003ebands to execute subsequent code logic after kmalloc. So the old q-\u003ebands should not be used in kmalloc. Otherwise, an out-of-bounds write will occur.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-36978"
},
{
"cve": "CVE-2024-37078",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: kernel vulnerability due to lack of writeback flag waiting. When the log writer starts a writeback for segment summary blocks or a super root block that use the backing devices page cache, it does not wait for the ongoing folio/page writeback, resulting in an inconsistent writeback state.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-37078"
},
{
"cve": "CVE-2024-38586",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "r8169: possible ring buffer corruption on fragmented Tx packets. Vulnerability on the RTL8125b when transmitting small fragmented packets, whereby invalid entries were inserted into the transmit ring buffer, subsequently leading to calls to dma_unmap_single() with a null address. This was caused by rtl8169_start_xmit() not noticing changes to nr_frags which may occur when small packets are padded (to work around hardware quirks) in rtl8169_tso_csum_v2().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-38586"
},
{
"cve": "CVE-2024-38619",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb-storage: alauda: Check whether the media is initialized. The member \"uzonesize\" of struct alauda_info will remain 0 if alauda_init_media() fails, potentially causing divide errors in alauda_read_data() and alauda_write_lba().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-38619"
},
{
"cve": "CVE-2024-39468",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "smb: client: Deadlock in smb2_find_smb_tcon().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39468"
},
{
"cve": "CVE-2024-39469",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors The error handling in nilfs_empty_dir() when a directory folio/page read fails is incorrect, as in the old ext2 implementation, and if the folio/page cannot be read or nilfs_check_folio() fails, it will falsely determine the directory as empty and corrupt the file system. In addition, since nilfs_empty_dir() does not immediately return on a failed folio/page read, but continues to loop, this can cause a long loop with I/O if i_size of the directory\u0027s inode is also corrupted, causing the log writer thread to wait and hang, as reported by syzbot. Fix these issues by making nilfs_empty_dir() immediately return a false value (0) if it fails to get a directory folio/page.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39469"
},
{
"cve": "CVE-2024-39482",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "bcache: Variable length array abuse in btree_iter.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39482"
},
{
"cve": "CVE-2024-39484",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "mmc: davinci: Vulnerability from resource leaks. Using __exit for the remove function results in the remove callback being discarded with CONFIG_MMC_DAVINCI=y. When such a device gets unbound (e.g. using sysfs or hotplug), the driver is just removed without the cleanup being performed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39484"
},
{
"cve": "CVE-2024-39487",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39487"
},
{
"cve": "CVE-2024-39495",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "greybus: use-after-free vulnerability in gb_interface_release due to race condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39495"
},
{
"cve": "CVE-2024-39499",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "vmci: speculation leaks by sanitizing event in event_deliver(). event_msg is controlled by user-space, event_msg-\u003eevent_data.event is passed to event_deliver() and used as an index without sanitization, leading to information leaks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39499"
},
{
"cve": "CVE-2024-39501",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drivers: core: synchronize really_probe() and dev_uevent(). Synchronize the dev-\u003edriver usage in really_probe() and dev_uevent(). These can run in different threads, what can result in the following race condition for dev-\u003edriver uninitialization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39501"
},
{
"cve": "CVE-2024-39502",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "ionic: use after netif_napi_del(). When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues\u0027 napi should be registered and enabled. The ionic_qcq_enable() checks whether the .poll pointer is not NULL for enabling only the using queue\u0027 napi. Unused queues\u0027 napi will not be registered by netif_napi_add(), so the .poll pointer indicates NULL. But it couldn\u0027t distinguish whether the napi was unregistered or not because netif_napi_del() doesn\u0027t reset the .poll pointer to NULL. So, ionic_qcq_enable() calls napi_enable() for the queue, which was unregistered by netif_napi_del().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39502"
},
{
"cve": "CVE-2024-39503",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "netfilter: ipset: race between namespace cleanup and gc in the list:set type. The namespace cleanup can destroy the list:set type of sets while the gc of the set type is waiting to run in rcu cleanup. The latter uses data from the destroyed set which thus leads use after free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39503"
},
{
"cve": "CVE-2024-39505",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/komeda: check for error-valued pointer. komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39505"
},
{
"cve": "CVE-2024-39506",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet. In lio_vf_rep_copy_packet() pg_info-\u003epage is compared to a NULL value, but then it is unconditionally passed to skb_add_rx_frag(), which could lead to null pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39506"
},
{
"cve": "CVE-2024-39509",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "HID: core: remove unnecessary WARN_ON() in implement(). There is a warning in a call to implement() when trying to write a value into a field of smaller size in an output report. Since implement() already has a warn message printed out with the help of hid_warn() and value in question gets trimmed with: ... value \u0026= m; ... WARN_ON may be considered superfluous.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-39509"
},
{
"cve": "CVE-2024-40901",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40901"
},
{
"cve": "CVE-2024-40902",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "jfs: xattr: buffer overflow for invalid xattr. When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40902"
},
{
"cve": "CVE-2024-40904",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "USB: class: cdc-wdm: CPU lockup caused by excessive log messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40904"
},
{
"cve": "CVE-2024-40905",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ipv6: possible race in __fib6_drop_pcpu_from().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40905"
},
{
"cve": "CVE-2024-40912",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: mac80211: deadlock in ieee80211_sta_ps_deliver_wakeup().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40912"
},
{
"cve": "CVE-2024-40916",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading EDID fails and driver reports no modes available, the DRM core adds an artificial 1024x786 mode to the connector.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40916"
},
{
"cve": "CVE-2024-40929",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: iwlwifi: mvm: check n_ssids before accessing the ssids.In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of-bound access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40929"
},
{
"cve": "CVE-2024-40931",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mptcp: ensure snd_una is properly initialized on connect.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40931"
},
{
"cve": "CVE-2024-40932",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/exynos/vidi: memory leak in .get_modes().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40932"
},
{
"cve": "CVE-2024-40934",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "summary",
"text": "HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak on logi_dj_recv_send_report() error path.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40934"
},
{
"cve": "CVE-2024-40941",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "wifi: iwlwifi: mvm: don\u0027t read past the mfuart notifcation. In case the firmware sends a notification that claims it has more data than it has, it will read past that was allocated for the notification.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40941"
},
{
"cve": "CVE-2024-40942",
"cwe": {
"id": "CWE-402",
"name": "Transmission of Private Resources into a New Sphere (\u0027Resource Leak\u0027)"
},
"notes": [
{
"category": "summary",
"text": "wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp code use objects of type mesh_preq_queue, added to a list in ieee80211_if_mesh, to keep track of mpath we need to resolve. If the mpath gets deleted, ex mesh interface is removed, the entries in that list will never get cleaned.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40942"
},
{
"cve": "CVE-2024-40943",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: fix races between hole punching and AIO+DIO.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40943"
},
{
"cve": "CVE-2024-40945",
"cwe": {
"id": "CWE-393",
"name": "Return of Wrong Status Code"
},
"notes": [
{
"category": "summary",
"text": "iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should return either a sva bond handle or an ERR_PTR value in error cases. Existing drivers (idxd and uacce) only check the return value with IS_ERR(). This could potentially lead to a kernel NULL pointer dereference issue if the function returns NULL instead of an error pointer. In reality, this doesn\u0027t cause any problems because iommu_sva_bind_device() only returns NULL when the kernel is not configured with CONFIG_IOMMU_SVA.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40945"
},
{
"cve": "CVE-2024-40947",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ima: Avoid blocking in RCU read-side critical section, a panic happens in ima_match_policy.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40947"
},
{
"cve": "CVE-2024-40958",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "netns: Make get_net_ns() handle zero refcount net Syzkaller hit a warning: refcount_t: addition on 0; use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40958"
},
{
"cve": "CVE-2024-40959",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40959"
},
{
"cve": "CVE-2024-40960",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in rt6_probe() [1] Bail out if __in6_dev_get() returns NULL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40960"
},
{
"cve": "CVE-2024-40961",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get() can return NULL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40961"
},
{
"cve": "CVE-2024-40963",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mips: bmips: BCM6358: Some device have CBR address set to 0 causing kernel panic when arch_sync_dma_for_cpu_all is called.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40963"
},
{
"cve": "CVE-2024-40968",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "MIPS:The standard PCIe configuration read-write interface is used to access the configuration space of the peripheral PCIe devices of the mips processor after the PCIe link surprise down, it can generate kernel panic caused by \"Data bus error\".",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40968"
},
{
"cve": "CVE-2024-40971",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "f2fs: remove clear SB_INLINECRYPT flag in default_options In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40971"
},
{
"cve": "CVE-2024-40974",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "powerpc/pseries: stack corruption at runtime when plpar_hcall9() stores results past the end of the array.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40974"
},
{
"cve": "CVE-2024-40976",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/lima: There is a race condition in which a rendering job might take just long enough to trigger the drm sched job timeout handler but also still complete before the hard reset is done by the timeout handler. This runs into race conditions not expected by the timeout handler. In some very specific cases it currently may result in a refcount imbalance on lima_pm_idle, with a stack dump.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40976"
},
{
"cve": "CVE-2024-40978",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "scsi: qedi: crash while reading debugfs attribute. The qedi_dbg_do_not_recover_cmd_read() function invokes sprintf() directly on a __user pointer, which results into the crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40978"
},
{
"cve": "CVE-2024-40980",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drop_monitor: replace spin_lock by raw_spin_lock trace_drop_common() is called with preemption disabled, and it acquires a spin_lock. This is problematic for RT kernels because spin_locks are sleeping locks in this configuration, which causes the following splat.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40980"
},
{
"cve": "CVE-2024-40981",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "batman-adv: empty buckets in batadv_purge_orig_ref() are pointing to soft lockups in batadv_purge_orig_ref().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40981"
},
{
"cve": "CVE-2024-40983",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tipc: possible crash before doing decryption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40983"
},
{
"cve": "CVE-2024-40984",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ACPICA: Revert \"ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40984"
},
{
"cve": "CVE-2024-40987",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: UBSAN warning in kv_dpm.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40987"
},
{
"cve": "CVE-2024-40988",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/radeon: UBSAN warning in kv_dpm.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40988"
},
{
"cve": "CVE-2024-40990",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ptp: integer overflow in max_vclocks_store.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40990"
},
{
"cve": "CVE-2024-40995",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net/sched: act_api: possible infinite loop in tcf_idr_check_alloc().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-40995"
},
{
"cve": "CVE-2024-41000",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed integer overflow sanitizer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41000"
},
{
"cve": "CVE-2024-41004",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tracing: Build event generation tests only as modules The kprobes and synth event generation test modules add events and lock (get a reference) those event file reference in module init function, and unlock and delete it in module exit function. This is because those are designed for playing as modules. If we make those modules as built-in, those events are left locked in the kernel, and never be removed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41004"
},
{
"cve": "CVE-2024-41005",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "netpoll: race condition in netpoll_owner_active KCSAN detected a race condition in netpoll.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41005"
},
{
"cve": "CVE-2024-41006",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "summary",
"text": "netrom: a memory leak in nr_heartbeat_expiry().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41006"
},
{
"cve": "CVE-2024-41007",
"cwe": {
"id": "CWE-99",
"name": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "tcp: avoid too many retransmit packets If a TCP socket is using TCP_USER_TIMEOUT.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41007"
},
{
"cve": "CVE-2024-41009",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "bpf: Fix overrunning reservations in ringbuf.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41009"
},
{
"cve": "CVE-2024-41012",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "filelock: Remove locks reliably when fcntl/close race is detected When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41012"
},
{
"cve": "CVE-2024-41015",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: add bounds checking to ocfs2_check_dir_entry(). This adds sanity checks for ocfs2_dir_entry to make sure all members of ocfs2_dir_entry don\u0027t stray beyond valid memory region.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41015"
},
{
"cve": "CVE-2024-41017",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "jfs: vulnerability involves the risk of accessing memory beyond the end of ealist, which can lead to undefined behavior or crashes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41017"
},
{
"cve": "CVE-2024-41020",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "filelock: race condition vulnerability between fcntl and close operations, which can lead to issues in the recovery compatibility path.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41020"
},
{
"cve": "CVE-2024-41022",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: vulnerability involves a signedness problem in sdma_v4_0_process_trap_irq(), which can lead to incorrect handling of values and potential errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41022"
},
{
"cve": "CVE-2024-41034",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: kernel bug on rename operation of broken directory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41034"
},
{
"cve": "CVE-2024-41035",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "USB: core: duplicate endpoint bug.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41035"
},
{
"cve": "CVE-2024-41040",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net/sched: UAF when resolving a clash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41040"
},
{
"cve": "CVE-2024-41041",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "udp: small race window.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41041"
},
{
"cve": "CVE-2024-41044",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ppp: claimed-as-LCP but actually malformed packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41044"
},
{
"cve": "CVE-2024-41046",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix double free in detach The number of the currently released descriptor is never incremented which results in the same skb being released multiple times.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41046"
},
{
"cve": "CVE-2024-41049",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode\u0027s list. However, before the tracepoint could fire, another task raced in and freed that lock. Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn\u0027t happen.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41049"
},
{
"cve": "CVE-2024-41055",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 (\"mm/sparsemem: fix race in accessing memory_section-\u003eusage\") changed pfn_section_valid() to add a READ_ONCE() call around \"ms-\u003eusage\" to fix a race with section_deactivate() where ms-\u003eusage can be cleared. The READ_ONCE() call, by itself, is not enough to prevent NULL pointer dereference. We need to check its value before dereferencing it.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41055"
},
{
"cve": "CVE-2024-41059",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "hfsplus: uninit-value in copy_name.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41059"
},
{
"cve": "CVE-2024-41063",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Bluetooth: hci_core: deadlock at destroy_workqueue().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41063"
},
{
"cve": "CVE-2024-41064",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "powerpc/eeh: possible crash when edev-\u003epdev changes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41064"
},
{
"cve": "CVE-2024-41065",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "powerpc/pseries: Reading the dispatch trace log from /sys/kernel/debug/powerpc/dtl/cpu-* results in a BUG().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41065"
},
{
"cve": "CVE-2024-41068",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "s390/sclp: sclp_init() failure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41068"
},
{
"cve": "CVE-2024-41070",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "KVM: PPC: Book3S HV: UAF in kvm_spapr_tce_attach_iommu_group().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41070"
},
{
"cve": "CVE-2024-41072",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In \u0027cfg80211_wext_siwscan()\u0027, add extra check whether number of channels passed via \u0027ioctl(sock, SIOCSIWSCAN, ...)\u0027 doesn\u0027t exceed IW_MAX_FREQUENCIES and reject invalid request with -EINVAL otherwise.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41072"
},
{
"cve": "CVE-2024-41077",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "null_blk: validation error on block size.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41077"
},
{
"cve": "CVE-2024-41078",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "btrfs: qgroup: quota root leak after quota disable failure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41078"
},
{
"cve": "CVE-2024-41081",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ila: block BH in ila_output().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41081"
},
{
"cve": "CVE-2024-41087",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ata: libata-core: double free on error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41087"
},
{
"cve": "CVE-2024-41089",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/nouveau/dispnv04: null pointer dereference in nv17_tv_get_hd_modes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41089"
},
{
"cve": "CVE-2024-41090",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tap: add missing verification for short frame. Missing to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tap_get_user_xdp()--\u003eskb_set_network_header() may assume the size is more than ETH_HLEN. Once transmitted, this could either cause out-of-bound access beyond the actual length, or confuse the underlayer with incorrect or inconsistent header length in the skb metadata.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41090"
},
{
"cve": "CVE-2024-41091",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tun: add missing verification for short frame. Missing to check against the validity of the frame length in the tun_xdp_one() path could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tun_xdp_one--\u003eeth_type_trans() may access the Ethernet header although it can be less than ETH_HLEN. Once transmitted, this could either causeout-of-bound access beyond the actual length, or confuse the underlayer with incorrect or inconsistent header length in the skb metadata.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41091"
},
{
"cve": "CVE-2024-41092",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/i915/gt: potential UAF by revoke of fence registers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41092"
},
{
"cve": "CVE-2024-41095",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/nouveau/dispnv04: null pointer dereference in nv17_tv_get_ld_modes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41095"
},
{
"cve": "CVE-2024-41097",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: atm: cxacru: incomplete endpoint checking in cxacru_bind().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-41097"
},
{
"cve": "CVE-2024-42076",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: can: j1939: unused data in j1939_send_one().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42076"
},
{
"cve": "CVE-2024-42077",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: DIO failure due to insufficient transaction credits.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42077"
},
{
"cve": "CVE-2024-42082",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "xdp: unused WARN() in __xdp_reg_mem_model().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42082"
},
{
"cve": "CVE-2024-42084",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ftruncate: passing a negative length accidentally succeeds in truncating to file size between 2GiB and 4GiB.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42084"
},
{
"cve": "CVE-2024-42086",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "iio: chemical: bme680: overflows in compensate() functions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42086"
},
{
"cve": "CVE-2024-42087",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/panel: ilitek-ili9881c: warning with GPIO controllers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42087"
},
{
"cve": "CVE-2024-42092",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "gpio: davinci: There can be out of chips-\u003eirqs array boundaries access in davinci_gpio_probe().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42092"
},
{
"cve": "CVE-2024-42093",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net/dpaa2: explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack can cause potential stack overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42093"
},
{
"cve": "CVE-2024-42094",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net/iucv: explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack can cause potential stack overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42094"
},
{
"cve": "CVE-2024-42095",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "serial: 8250_omap: Erroneous timeout can be triggered, and it may lead to storm of interrupts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42095"
},
{
"cve": "CVE-2024-42101",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/nouveau: null pointer dereference in nouveau_connector_get_modes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42101"
},
{
"cve": "CVE-2024-42105",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42105"
},
{
"cve": "CVE-2024-42143",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "orangefs: out-of-bounds fsid access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42143"
},
{
"cve": "CVE-2024-42145",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "IB/core: an unbounded UMAD receive list, poses a risk of uncontrolled growth.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42145"
},
{
"cve": "CVE-2024-42148",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "bnx2x: multiple UBSAN array-index-out-of-bounds.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42148"
},
{
"cve": "CVE-2024-42152",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nvmet: possible leak when destroy a ctrl during qp establishment.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42152"
},
{
"cve": "CVE-2024-42153",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "i2c: pnx: potential deadlock warning from del_timer_sync() call in isr.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42153"
},
{
"cve": "CVE-2024-42154",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don\u0027t see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn\u0027t have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42154"
},
{
"cve": "CVE-2024-42161",
"cwe": {
"id": "CWE-457",
"name": "Use of Uninitialized Variable"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42161"
},
{
"cve": "CVE-2024-42223",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: dvb-frontends: tda10048: integer overflow state-\u003extal_hz can be up to 16M, so it can overflow a 32 bit integer when multiplied by pll_mfactor.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42223"
},
{
"cve": "CVE-2024-42224",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: dsa: mv88e6xxx: wrong check on empty list.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42224"
},
{
"cve": "CVE-2024-42229",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "crypto: aead,cipher - key buffer after use not zeroized.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42229"
},
{
"cve": "CVE-2024-42232",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "libceph: fix race between delayed_work() and ceph_monc_stop() The way the delayed work is handled in ceph_monc_stop() is prone to races with mon_fault() and possibly also finish_hunting(). Both of these can requeue the delayed work which wouldn\u0027t be canceled by any of the following code in case that happens after cancel_delayed_work_sync() runs -- __close_session() doesn\u0027t mess with the delayed work in order to avoid interfering with the hunting interval logic. This part was missed in(libceph: behave in mon_fault() if cur_mon \u003c \") and use-after-free can still ensue on monc and objects that hang off of it, with monc-\u003e auth and monc-\u003emonmap being particularly susceptible to quickly being reused.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42232"
},
{
"cve": "CVE-2024-42236",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: gadget: configfs: OOB read/write in usb_string_copy().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42236"
},
{
"cve": "CVE-2024-42244",
"cwe": {
"id": "CWE-99",
"name": "Improper Control of Resource Identifiers (\u0027Resource Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "USB: serial: mos7840: fix crash on resume Since(\"USB: serial: use generic method if no alternative is provided in usb serial layer\"), USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multiple read URBs was added back in 2011. Specifically, both port read URBs are now submitted on resume for open ports, but the context pointer of the second URB is left set to the core rather than mos7840 port structure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42244"
},
{
"cve": "CVE-2024-42247",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wireguard: allowedips: unaligned 64-bit memory accesses.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-42247"
},
{
"cve": "CVE-2024-43098",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "i3c: Use i3cdev-\u003edesc-\u003einfo instead of calling i3c_device_get_info() to avoid deadlock. A deadlock may happen since the i3c_master_register() acquires i3cbus-\u003elock twice.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43098"
},
{
"cve": "CVE-2024-43861",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: usb: qmi_wwan: memory leak for not ip packets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43861"
},
{
"cve": "CVE-2024-43867",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/nouveau: prime: refcount underflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43867"
},
{
"cve": "CVE-2024-43871",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43871"
},
{
"cve": "CVE-2024-43879",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: cfg80211: Currently NL80211_RATE_INFO_HE_RU_ALLOC_2x996 is not handled in cfg80211_calculate_bitrate_he(), leading to warning.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43879"
},
{
"cve": "CVE-2024-43880",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mlxsw: spectrum_acl_erp: object nesting warning.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43880"
},
{
"cve": "CVE-2024-43882",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "exec: the execution may gain unintended privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43882"
},
{
"cve": "CVE-2024-43883",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: vhci-hcd: vulnerability due to the vhci-hcd driver dropping references before new ones were gained, potentially leading to the use of stale pointers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43883"
},
{
"cve": "CVE-2024-43889",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "padata: vulnerability due to a possible divide-by-zero error in padata_mt_helper() during bootup, caused by an uninitialized chunk_size being zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43889"
},
{
"cve": "CVE-2024-43890",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tracing: vulnerability due to an overflow in get_free_elt(), which could lead to infinite loops and CPU hangs when the tracing map becomes full.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43890"
},
{
"cve": "CVE-2024-43893",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "serial: core: vulnerability due to a missing check for uartclk being zero, leading to a potential divide-by-zero error when calling ioctl TIOCSSERIAL with an invalid baud_base.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43893"
},
{
"cve": "CVE-2024-43894",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/client: vulnerability due to a potential null pointer dereference in drm_client_modeset_probe() when drm_mode_duplicate() fails, which was fixed by adding a check.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43894"
},
{
"cve": "CVE-2024-43907",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu/pm: null pointer dereference in apply_state_adjust_rules.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43907"
},
{
"cve": "CVE-2024-43908",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: null pointer dereference in ras_manager.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43908"
},
{
"cve": "CVE-2024-43914",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "md/raid5: BUG_ON() while continue reshape after reassembling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-43914"
},
{
"cve": "CVE-2024-44935",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "sctp: Fix null-ptr-deref in reuseport_add_sock(). A Null Pointer Dereference in reuseport_add_sock() while accessing sk2-\u003esk_reuseport_cb . The repro first creates a listener with SO_REUSEPORT. Then, it creates another listener on the same port and concurrently closes the first listener. The second listen() calls reuseport_add_sock() with the first listener as sk2, where sk2-\u003esk_reuseport_cb is not expected to be cleared concurrently, but the close() does clear it by reuseport_detach_sock().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44935"
},
{
"cve": "CVE-2024-44944",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44944"
},
{
"cve": "CVE-2024-44949",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "parisc: fix a possible DMA corruption ARCH_DMA_MINALIGN was defined as 16 - this is too small - it may be possible that two unrelated 16-byte allocations share a cache line. If one of these allocations is written using DMA and the other is written using cached write, the value that was written with DMA may be corrupted.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44949"
},
{
"cve": "CVE-2024-44952",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "driver core: vulnerability due to a potential deadlock due to improper handling of device attributes and driver detachment, which has been fixed by using synchronize_rcu() to prevent race conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44952"
},
{
"cve": "CVE-2024-44954",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ALSA: line6: vulnerability involved racy access to the midibuf in the ALSA line6 driver, which has been fixed by using a spinlock to prevent concurrent access issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44954"
},
{
"cve": "CVE-2024-44960",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: gadget: core: Check for unset descriptor. It needs to be reassured that the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn\u0027t properly set up the endpoint for the current speed, or the gadget descriptors are malformed and the descriptor for the speed/endpoint are not found. No current gadget driver is known to have this problem, but this may cause a hard-to-find bug during development of new gadgets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44960"
},
{
"cve": "CVE-2024-44965",
"cwe": {
"id": "CWE-229",
"name": "Improper Handling of Values"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix pti_clone_pgtable() alignment assumption Guenter reported dodgy crashes on an i386-nosmp build using GCC-11 that had the form of endless traps until entry stack exhaust and then #DF from the stack guard. It turned out that pti_clone_pgtable() had alignment assumptions on the start address, notably it hard assumes start is PMD aligned. This is true on x86_64, but very much not true on i386. These assumptions can cause the end condition to malfunction, leading to a \u0027short\u0027 clone. Guess what happens when the user mapping has a short copy of the entry text? Use the correct increment form for addr to avoid alignment assumptions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44965"
},
{
"cve": "CVE-2024-44969",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "s390/sclp: vulnerability could lead to data corruption if a Store Data operation is interrupted and the halt attempt fails, which was resolved by preventing the release of data buffers in such cases.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44969"
},
{
"cve": "CVE-2024-44971",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "net: dsa: bcm_sf2: vulnerability caused a memory leak by not decrementing the reference count after finding and removing PHY devices, which has been fixed by adding a call to phy_device_free() to balance the reference count.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44971"
},
{
"cve": "CVE-2024-44987",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44987"
},
{
"cve": "CVE-2024-44988",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: dsa: mv88e6xxx: vulnerability caused an out-of-bound access in the mv88e6xxx driver due to an ATU violation causing the SPID to exceed DSA_MAX_PORTS, which was resolved by ensuring the SPID stays within the valid range.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44988"
},
{
"cve": "CVE-2024-44989",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44989"
},
{
"cve": "CVE-2024-44990",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an active slave before dereferencing the pointer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44990"
},
{
"cve": "CVE-2024-44995",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: hns3: a deadlock problem when config TC during resetting.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44995"
},
{
"cve": "CVE-2024-44998",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "atm: idt77252: use after free in dequeue_rx().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44998"
},
{
"cve": "CVE-2024-44999",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "gtp: missing network headers in gtp_dev_xmit().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-44999"
},
{
"cve": "CVE-2024-45003",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "vfs: Some filesystems(eg. ext4 with ea_inode feature, ubifs with xattr) may do inode lookup in the inode evicting callback function, if the inode lookup is operated under the inode lru traversing context, deadlock problems may happen.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-45003"
},
{
"cve": "CVE-2024-45006",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "xhci: Panther point NULL pointer deref at full-speed re-enumeration.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-45006"
},
{
"cve": "CVE-2024-45008",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Input: missing limit on max slots results in too large allocation at input_mt_init_slots().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-45008"
},
{
"cve": "CVE-2024-45021",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "memcg_write_event_control(): a user-triggerable oops.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-45021"
},
{
"cve": "CVE-2024-45025",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE copy_fd_bitmaps.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-45025"
},
{
"cve": "CVE-2024-46673",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "scsi: aacraid: Fix double-free on probe failure. aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter(). If aac_init_adapter() fails after allocating memory for aac_dev::queues, it frees the memory but does not clear that member. After the hardware-specific init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev::queues, resulting in a double-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46673"
},
{
"cve": "CVE-2024-46674",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "usb: dwc3: st: fix probed platform device ref count on probe error path. The probe function never performs any paltform device allocation, thus error path \"undo_platform_dev_alloc\" is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this will lead to unbalanced device reference counts and premature release of device resources, thus possible use-after-free when releasing remaining devm-managed resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46674"
},
{
"cve": "CVE-2024-46675",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: dwc3: core: A vulnerability where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and other memory issues in Exynos platforms.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46675"
},
{
"cve": "CVE-2024-46676",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nfc: pn533: Add poll mod list filling check. In case of im_protocols value is 1 and tm_protocols value is 0 this combination successfully passes the check \u0027if (!im_protocols \u0026\u0026 !tm_protocols)\u0027 in the nfc_start_poll(). But then after pn533_poll_create_mod_list() call in pn533_start_poll() poll mod list will remain empty and dev-\u003epoll_mod_count will remain 0 which lead to division by zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46676"
},
{
"cve": "CVE-2024-46677",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "gtp: fix NULL pointer dereference. When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46677"
},
{
"cve": "CVE-2024-46679",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46679"
},
{
"cve": "CVE-2024-46685",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "pinctrl: single: fix NULL dereference in pcs_get_function(). pinmux_generic_get_function() can return NULL and the pointer \u0027function\u0027 was dereferenced without checking against NULL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46685"
},
{
"cve": "CVE-2024-46689",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as \"write\" into the write protected region leading to secure interrupt which causes an endless loop somewhere in Trust Zone.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46689"
},
{
"cve": "CVE-2024-46702",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "thunderbolt: Mark XDomain as unplugged when router is removed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46702"
},
{
"cve": "CVE-2024-46707",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn\u0027t been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICC_*SGI*_EL1 registers is trapped to EL2.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46707"
},
{
"cve": "CVE-2024-46713",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "perf/aux: AUX buffer serialization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46713"
},
{
"cve": "CVE-2024-46714",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: Skip wbscl_set_scaler_filter if filter is null Callers can pass null in filter (i.e. from returned from the function wbscl_get_filter_coeffs_16p) and a null check is added to ensure that is not the case.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46714"
},
{
"cve": "CVE-2024-46719",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: typec: ucsi: Fix null pointer dereference in trace ucsi_register_altmode checks IS_ERR for the alt pointer and treats NULL as valid. When CONFIG_TYPEC_DP_ALTMODE is not enabled, ucsi_register_displayport returns NULL which causes a NULL pointer dereference in trace. Rather than return NULL, call typec_port_register_altmode to register DisplayPort alternate mode as a non-controllable mode when CONFIG_TYPEC_DP_ALTMODE is not enabled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46719"
},
{
"cve": "CVE-2024-46721",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "apparmor: fix possible NULL pointer dereference. profile-\u003eparent-\u003edents[AAFS_PROF_DIR] could be NULL only if its parent is made from __create_missing_ancestors(..) and \u0027ent-\u003eold\u0027 is NULL in aa_replace_profiles(..). In that case, it must return an error code and the code, -ENOENT represents its state that the path of its parent is not existed yet.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46721"
},
{
"cve": "CVE-2024-46722",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: vulnerability due to an out-of-bounds read warning when accessing mc_data[i-1].",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46722"
},
{
"cve": "CVE-2024-46723",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: vulnerability due to an out-of-bounds read warning when accessing ucode[].",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46723"
},
{
"cve": "CVE-2024-46724",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: vulnerability in drm/amdgpu that involved an out-of-bounds read of df_v1_7_channel_number.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46724"
},
{
"cve": "CVE-2024-46725",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: vulnerability caused by an out-of-bounds write warning due to an unchecked ring type value.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46725"
},
{
"cve": "CVE-2024-46731",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/pm: vulnerability caused by an out-of-bounds read warning where the index i - 1U can exceed the bounds of the mc_data[] array when i is zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46731"
},
{
"cve": "CVE-2024-46737",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nvmet-tcp: kernel crash if commands allocation fails.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46737"
},
{
"cve": "CVE-2024-46738",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "VMCI: use-after-free when removing resource in vmci_resource_remove().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46738"
},
{
"cve": "CVE-2024-46739",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "uio_hv_generic: kernel NULL pointer dereference in hv_uio_rescind.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46739"
},
{
"cve": "CVE-2024-46740",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "binder: UAF caused by offsets overwrite.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46740"
},
{
"cve": "CVE-2024-46743",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46743"
},
{
"cve": "CVE-2024-46744",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46744"
},
{
"cve": "CVE-2024-46745",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in input_mt_init_slots(). While this allocation failure is handled properly and request is rejected, it results in syzkaller reports. Additionally, such request may put undue burden on the system which will try to free a lot of memory for a bogus request. Fix it by limiting allowed number of slots to 100. This can easily be extended if we see devices that can track more than 100 contacts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46745"
},
{
"cve": "CVE-2024-46747",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "HID: cougar: slab-out-of-bounds Read in cougar_report_fixup. Report_fixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing it.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46747"
},
{
"cve": "CVE-2024-46750",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46750"
},
{
"cve": "CVE-2024-46755",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id(). mwifiex_get_priv_by_id() returns the priv pointer corresponding to the bss_num and bss_type, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL pointer dereferences further down the callstack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46755"
},
{
"cve": "CVE-2024-46756",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "hwmon: (w83627ehf) underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46756"
},
{
"cve": "CVE-2024-46757",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "hwmon: (nct6775-core) underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46757"
},
{
"cve": "CVE-2024-46758",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "hwmon: (lm95234) underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46758"
},
{
"cve": "CVE-2024-46759",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46759"
},
{
"cve": "CVE-2024-46761",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "pci/hotplug/pnv_php: hotplug driver crash on Powernv.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46761"
},
{
"cve": "CVE-2024-46763",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "fou: null-ptr-deref in GRO.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46763"
},
{
"cve": "CVE-2024-46771",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "can: bcm: Remove proc entry when dev is unregistered.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46771"
},
{
"cve": "CVE-2024-46777",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "udf: Avoid excessive partition lengths Avoid mounting filesystems where the partition would overflow the 32-bits used for block number. Also refuse to mount filesystems where the partition length is so large we cannot safely index bits in a block bitmap.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46777"
},
{
"cve": "CVE-2024-46780",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: vulnerability caused by the need for mutual exclusion using nilfs-\u003ens_sem when accessing superblock buffers in sysfs attribute show methods to prevent issues with pointer dereferencing and memory access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46780"
},
{
"cve": "CVE-2024-46781",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: vulnerability involves a use-after-free bug during mount-time recovery, where inodes with recovered data are not freed if an error occurs before the log writer starts, leading to potential memory issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46781"
},
{
"cve": "CVE-2024-46782",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ila: call nf_unregister_net_hooks() use-after-free Read in ila_nf_input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46782"
},
{
"cve": "CVE-2024-46783",
"cwe": {
"id": "CWE-229",
"name": "Improper Handling of Values"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46783"
},
{
"cve": "CVE-2024-46791",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open The mcp251x_hw_wake() function is called with the mpc_lock mutex held and disables the interrupt handler so that no interrupts can be processed while waking the device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46791"
},
{
"cve": "CVE-2024-46798",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ASoC: dapm: vulnerability is an use-after-free bug where snd_pcm_suspend_all() accessed a freed snd_soc_pcm_runtime object during system suspension, detected with KASAN configurations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46798"
},
{
"cve": "CVE-2024-46800",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "sch/netem: use after free in netem_dequeue If netem_dequeue() enqueues packet to inner qdisc and that qdisc returns __NET_XMIT_STOLEN.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46800"
},
{
"cve": "CVE-2024-46804",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: Add array index check for hdcp ddc access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46804"
},
{
"cve": "CVE-2024-46814",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: Check msg_id before processing transcation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46814"
},
{
"cve": "CVE-2024-46815",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[].",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46815"
},
{
"cve": "CVE-2024-46817",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46817"
},
{
"cve": "CVE-2024-46818",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: Check gpio_id before used as array index.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46818"
},
{
"cve": "CVE-2024-46819",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: the warning dereferencing obj for nbio_v7_4 if ras_manager obj null, don\u0027t print NBIO err data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46819"
},
{
"cve": "CVE-2024-46822",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46822"
},
{
"cve": "CVE-2024-46828",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "sched: sch_cake: fix bulk flow accounting logic for host fairness In sch_cake, we keep track of the count of active bulk flows per host, when running in dst/src host fairness mode, which is used as the round-robin weight when iterating through flows.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46828"
},
{
"cve": "CVE-2024-46829",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "rtmutex: Drop rt_mutex::wait_lock before scheduling. rt_mutex_handle_deadlock() is called with rt_mutex::wait_lock held. In the good case it returns with the lock held and in the deadlock case it emits a warning and goes into an endless scheduling loop with the lock held, which triggers the \u0027scheduling in atomic\u0027 warning. Unlock rt_mutex::wait_lock in the dead lock case before issuing the warning and dropping into the schedule for ever loop.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46829"
},
{
"cve": "CVE-2024-46832",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "MIPS: cevt-r4k: Don\u0027t call get_c0_compare_int if timer irq is installed This avoids warning: [ 0.118053] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:283 Caused by get_c0_compare_int on secondary CPU. We also skipped saving IRQ number to struct clock_event_device *cd as it\u0027s never used by clockevent core, as per comments it\u0027s only meant for \"non CPU local devices\".",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46832"
},
{
"cve": "CVE-2024-46840",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "btrfs: clean up our handling of refs == 0 in snapshot delete. In reada we BUG_ON(refs == 0), which may be problematic because there is no lock on the extent leave, potentially leading to a transient incorrect answer. In walk_down_proc, BUG_ON(refs == 0) is also used, which could occur due to extent tree corruption. This has been changed to return -EUCLEAN. In do_walk_down() this case is caught and handled correctly, however -EIO is returned, whereas -EUCLEAN would a more appropriate error code. Finally in walk_up_proc, BUG_ON(refs == 0) is also used, it has also been converted to proper error handling.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46840"
},
{
"cve": "CVE-2024-46844",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "um: line: always fill *error_out in setup_one_line() The pointer isn\u0027t initialized by callers, but I have encountered cases where it\u0027s still printed; initialize it in all possible cases in setup_one_line().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-46844"
},
{
"cve": "CVE-2024-47143",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "dma-debug: possible deadlock on radix_lock. radix_lock() shouldn\u0027t be held while holding dma_hash_entry[idx].lock otherwise, there\u0027s a possible deadlock scenario when dma debug API is called holding rq_lock().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47143"
},
{
"cve": "CVE-2024-47659",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "smack: tcp: vulnerability in Smack\u2019s TCP/IPv4 labeling allows packets to be incorrectly labeled, enabling unauthorized data writing from one label to another.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47659"
},
{
"cve": "CVE-2024-47660",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily In some setups directories can have many (usually negative) dentries. Hence __fsnotify_update_child_dentry_flags() function can take a significant amount of time. Since the bulk of this function happens under inode-\u003ei_lock this causes a significant contention on the lock when we remove the watch from the directory as the __fsnotify_update_child_dentry_flags() call from fsnotify_recalc_mask() races with __fsnotify_update_child_dentry_flags() calls from __fsnotify_parent() happening on children. This can lead upto softlockup reports reported by users. Fix the problem by calling fsnotify_update_children_dentry_flags() to set PARENT_WATCHED flags only when parent starts watching children. When parent stops watching children, clear false positive PARENT_WATCHED flags lazily in __fsnotify_parent() for each accessed child.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47660"
},
{
"cve": "CVE-2024-47663",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "staging: iio: frequency: ad9834: In ad9834_write_frequency() clk_get_rate() can return 0. In such case ad9834_calc_freqreg() call will lead to division by zero. Checking \u0027if (fout \u003e (clk_freq / 2))\u0027 doesn\u0027t protect in case of \u0027fout\u0027 is 0. ad9834_write_frequency() is called from ad9834_write(), where fout is taken from text buffer, which can contain any value.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47663"
},
{
"cve": "CVE-2024-47667",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "PCI: keystone: Missing workaround for Errata #i2037 (AM65x SR 1.0).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47667"
},
{
"cve": "CVE-2024-47668",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "lib/generic-radix-tree.c: race in __genradix_ptr_alloc().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47668"
},
{
"cve": "CVE-2024-47669",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: state management vulnerability in error path of log writing function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47669"
},
{
"cve": "CVE-2024-47679",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "vfs: race between evice_inodes() and find_inode()\u0026iput().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47679"
},
{
"cve": "CVE-2024-47684",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\ntcp: check skb is non-NULL in tcp_rto_delta_us()\r\n\r\nWe have some machines running stock Ubuntu 20.04.6 which is their 5.4.0-174-generic\r\nkernel that are running ceph and recently hit a null ptr dereference in\r\ntcp_rearm_rto(). Initially hitting it from the TLP path, but then later we also\r\nsaw it getting hit from the RACK case as well. Here are examples of the oops\r\nmessages we saw in each of those cases:\r\n\r\nJul 26 15:05:02 rx [11061395.780353] BUG: kernel NULL pointer dereference, address: 0000000000000020\r\nJul 26 15:05:02 rx [11061395.787572] #PF: supervisor read access in kernel mode\r\nJul 26 15:05:02 rx [11061395.792971] #PF: error_code(0x0000) - not-present page\r\nJul 26 15:05:02 rx [11061395.798362] PGD 0 P4D 0\r\nJul 26 15:05:02 rx [11061395.801164] Oops: 0000 [#1] SMP NOPTI\r\nJul 26 15:05:02 rx [11061395.805091] CPU: 0 PID: 9180 Comm: msgr-worker-1 Tainted: G W 5.4.0-174-generic #193-Ubuntu\r\nJul 26 15:05:02 rx [11061395.814996] Hardware name: Supermicro SMC 2x26 os-gen8 64C NVME-Y 256G/H12SSW-NTR, BIOS 2.5.V1.2U.NVMe.UEFI 05/09/2023\r\nJul 26 15:05:02 rx [11061395.825952] RIP: 0010:tcp_rearm_rto+0xe4/0x160\r\nJul 26 15:05:02 rx [11061395.830656] Code: 87 ca 04 00 00 00 5b 41 5c 41 5d 5d c3 c3 49 8b bc 24 40 06 00 00 eb 8d 48 bb cf f7 53 e3 a5 9b c4 20 4c 89 ef e8 0c fe 0e 00 \u003c48\u003e 8b 78 20 48 c1 ef 03 48 89 f8 41 8b bc 24 80 04 00 00 48 f7 e3\r\nJul 26 15:05:02 rx [11061395.849665] RSP: 0018:ffffb75d40003e08 EFLAGS: 00010246\r\nJul 26 15:05:02 rx [11061395.855149] RAX: 0000000000000000 RBX: 20c49ba5e353f7cf RCX: 0000000000000000\r\nJul 26 15:05:02 rx [11061395.862542] RDX: 0000000062177c30 RSI: 000000000000231c RDI: ffff9874ad283a60\r\nJul 26 15:05:02 rx [11061395.869933] RBP: ffffb75d40003e20 R08: 0000000000000000 R09: ffff987605e20aa8\r\nJul 26 15:05:02 rx [11061395.877318] R10: ffffb75d40003f00 R11: ffffb75d4460f740 R12: ffff9874ad283900\r\nJul 26 15:05:02 rx [11061395.884710] R13: ffff9874ad283a60 R14: ffff9874ad283980 R15: ffff9874ad283d30\r\nJul 26 15:05:02 rx [11061395.892095] FS: 00007f1ef4a2e700(0000) GS:ffff987605e00000(0000) knlGS:0000000000000000\r\nJul 26 15:05:02 rx [11061395.900438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\r\nJul 26 15:05:02 rx [11061395.906435] CR2: 0000000000000020 CR3: 0000003e450ba003 CR4: 0000000000760ef0\r\nJul 26 15:05:02 rx [11061395.913822] PKRU: 55555554\r\nJul 26 15:05:02 rx [11061395.916786] Call Trace:\r\nJul 26 15:05:02 rx [11061395.919488]\r\nJul 26 15:05:02 rx [11061395.921765] ? show_regs.cold+0x1a/0x1f\r\nJul 26 15:05:02 rx [11061395.925859] ? __die+0x90/0xd9\r\nJul 26 15:05:02 rx [11061395.929169] ? no_context+0x196/0x380\r\nJul 26 15:05:02 rx [11061395.933088] ? ip6_protocol_deliver_rcu+0x4e0/0x4e0\r\nJul 26 15:05:02 rx [11061395.938216] ? ip6_sublist_rcv_finish+0x3d/0x50\r\nJul 26 15:05:02 rx [11061395.943000] ? __bad_area_nosemaphore+0x50/0x1a0\r\nJul 26 15:05:02 rx [11061395.947873] ? bad_area_nosemaphore+0x16/0x20\r\nJul 26 15:05:02 rx [11061395.952486] ? do_user_addr_fault+0x267/0x450\r\nJul 26 15:05:02 rx [11061395.957104] ? ipv6_list_rcv+0x112/0x140\r\nJul 26 15:05:02 rx [11061395.961279] ? __do_page_fault+0x58/0x90\r\nJul 26 15:05:02 rx [11061395.965458] ? do_page_fault+0x2c/0xe0\r\nJul 26 15:05:02 rx [11061395.969465] ? page_fault+0x34/0x40\r\nJul 26 15:05:02 rx [11061395.973217] ? tcp_rearm_rto+0xe4/0x160\r\nJul 26 15:05:02 rx [11061395.977313] ? tcp_rearm_rto+0xe4/0x160\r\nJul 26 15:05:02 rx [11061395.981408] tcp_send_loss_probe+0x10b/0x220\r\nJul 26 15:05:02 rx [11061395.985937] tcp_write_timer_handler+0x1b4/0x240\r\nJul 26 15:05:02 rx [11061395.990809] tcp_write_timer+0x9e/0xe0\r\nJul 26 15:05:02 rx [11061395.994814] ? tcp_write_timer_handler+0x240/0x240\r\nJul 26 15:05:02 rx [11061395.999866] call_timer_fn+0x32/0x130\r\nJul 26 15:05:02 rx [11061396.003782] __run_timers.part.0+0x180/0x280\r\nJul 26 15:05:02 rx [11061396.008309] ? recalibrate_cpu_khz+0x10/0x10\r\nJul 26 15:05:02 rx [11061396.012841] ? native_x2apic_icr_write+0x30/0x30\r\nJul 26 15:05:02 rx [11061396.017718] ? lapic_next_even\r\n---truncated---",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47684"
},
{
"cve": "CVE-2024-47685",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nnetfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()\r\n\r\nsyzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th-\u003eres1)\r\n\r\nUse skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put()\r\n\r\nBUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255\r\n nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255\r\n nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344\r\n nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48\r\n expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]\r\n nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288\r\n nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161\r\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\r\n nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626\r\n nf_hook include/linux/netfilter.h:269 [inline]\r\n NF_HOOK include/linux/netfilter.h:312 [inline]\r\n ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310\r\n __netif_receive_skb_one_core net/core/dev.c:5661 [inline]\r\n __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775\r\n process_backlog+0x4ad/0xa50 net/core/dev.c:6108\r\n __napi_poll+0xe7/0x980 net/core/dev.c:6772\r\n napi_poll net/core/dev.c:6841 [inline]\r\n net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963\r\n handle_softirqs+0x1ce/0x800 kernel/softirq.c:554\r\n __do_softirq+0x14/0x1a kernel/softirq.c:588\r\n do_softirq+0x9a/0x100 kernel/softirq.c:455\r\n __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:382\r\n local_bh_enable include/linux/bottom_half.h:33 [inline]\r\n rcu_read_unlock_bh include/linux/rcupdate.h:908 [inline]\r\n __dev_queue_xmit+0x2692/0x5610 net/core/dev.c:4450\r\n dev_queue_xmit include/linux/netdevice.h:3105 [inline]\r\n neigh_resolve_output+0x9ca/0xae0 net/core/neighbour.c:1565\r\n neigh_output include/net/neighbour.h:542 [inline]\r\n ip6_finish_output2+0x2347/0x2ba0 net/ipv6/ip6_output.c:141\r\n __ip6_finish_output net/ipv6/ip6_output.c:215 [inline]\r\n ip6_finish_output+0xbb8/0x14b0 net/ipv6/ip6_output.c:226\r\n NF_HOOK_COND include/linux/netfilter.h:303 [inline]\r\n ip6_output+0x356/0x620 net/ipv6/ip6_output.c:247\r\n dst_output include/net/dst.h:450 [inline]\r\n NF_HOOK include/linux/netfilter.h:314 [inline]\r\n ip6_xmit+0x1ba6/0x25d0 net/ipv6/ip6_output.c:366\r\n inet6_csk_xmit+0x442/0x530 net/ipv6/inet6_connection_sock.c:135\r\n __tcp_transmit_skb+0x3b07/0x4880 net/ipv4/tcp_output.c:1466\r\n tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline]\r\n tcp_connect+0x35b6/0x7130 net/ipv4/tcp_output.c:4143\r\n tcp_v6_connect+0x1bcc/0x1e40 net/ipv6/tcp_ipv6.c:333\r\n __inet_stream_connect+0x2ef/0x1730 net/ipv4/af_inet.c:679\r\n inet_stream_connect+0x6a/0xd0 net/ipv4/af_inet.c:750\r\n __sys_connect_file net/socket.c:2061 [inline]\r\n __sys_connect+0x606/0x690 net/socket.c:2078\r\n __do_sys_connect net/socket.c:2088 [inline]\r\n __se_sys_connect net/socket.c:2085 [inline]\r\n __x64_sys_connect+0x91/0xe0 net/socket.c:2085\r\n x64_sys_call+0x27a5/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:43\r\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\r\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\r\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\r\n\r\nUninit was stored to memory at:\r\n nf_reject_ip6_tcphdr_put+0x60c/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:249\r\n nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344\r\n nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48\r\n expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]\r\n nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288\r\n nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161\r\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\r\n nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626\r\n nf_hook include/linux/netfilter.h:269 [inline]\r\n NF_HOOK include/linux/netfilter.h:312 [inline]\r\n ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310\r\n __netif_receive_skb_one_core\r\n---truncated---",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47685"
},
{
"cve": "CVE-2024-47692",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nnfsd: return -EINVAL when namelen is 0\r\nWhen we have a corrupted main.sqlite in /var/lib/nfs/nfsdcld/, it may result in namelen being 0, which will cause memdup_user() to return ZERO_SIZE_PTR.\r\nWhen we access the name.data that has been assigned the value of ZERO_SIZE_PTR in nfs4_client_to_reclaim(), null pointer dereference is triggered.\r\n\r\n[ T1205] ==================================================================\r\n[ T1205] BUG: KASAN: null-ptr-deref in nfs4_client_to_reclaim+0xe9/0x260\r\n[ T1205] Read of size 1 at addr 0000000000000010 by task nfsdcld/1205\r\n[ T1205]\r\n[ T1205] CPU: 11 PID: 1205 Comm: nfsdcld Not tainted 5.10.0-00003-g2c1423731b8d #406\r\n[ T1205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ?-20190727_073836-buildvm-ppc64le-16.ppc.fedoraproject.org-3.fc31 04/01/2014\r\n[ T1205] Call Trace:\r\n[ T1205] dump_stack+0x9a/0xd0\r\n[ T1205] ? nfs4_client_to_reclaim+0xe9/0x260\r\n[ T1205] __kasan_report.cold+0x34/0x84\r\n[ T1205] ? nfs4_client_to_reclaim+0xe9/0x260\r\n[ T1205] kasan_report+0x3a/0x50\r\n[ T1205] nfs4_client_to_reclaim+0xe9/0x260\r\n[ T1205] ? nfsd4_release_lockowner+0x410/0x410\r\n[ T1205] cld_pipe_downcall+0x5ca/0x760\r\n[ T1205] ? nfsd4_cld_tracking_exit+0x1d0/0x1d0\r\n[ T1205] ? down_write_killable_nested+0x170/0x170\r\n[ T1205] ? avc_policy_seqno+0x28/0x40\r\n[ T1205] ? selinux_file_permission+0x1b4/0x1e0\r\n[ T1205] rpc_pipe_write+0x84/0xb0\r\n[ T1205] vfs_write+0x143/0x520\r\n[ T1205] ksys_write+0xc9/0x170\r\n[ T1205] ? __ia32_sys_read+0x50/0x50\r\n[ T1205] ? ktime_get_coarse_real_ts64+0xfe/0x110\r\n[ T1205] ? ktime_get_coarse_real_ts64+0xa2/0x110\r\n[ T1205] do_syscall_64+0x33/0x40\r\n[ T1205] entry_SYSCALL_64_after_hwframe+0x67/0xd1\r\n[ T1205] RIP: 0033:0x7fdbdb761bc7\r\n[ T1205] Code: 0f 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 01 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 514\r\n[ T1205] RSP: 002b:00007fff8c4b7248 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\r\n[ T1205] RAX: ffffffffffffffda RBX: 000000000000042b RCX: 00007fdbdb761bc7\r\n[ T1205] RDX: 000000000000042b RSI: 00007fff8c4b75f0 RDI: 0000000000000008\r\n[ T1205] RBP: 00007fdbdb761bb0 R08: 0000000000000000 R09: 0000000000000001\r\n[ T1205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000042b\r\n[ T1205] R13: 0000000000000008 R14: 00007fff8c4b75f0 R15: 0000000000000000\r\n[ T1205] ==================================================================",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47692"
},
{
"cve": "CVE-2024-47696",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nRDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency\r\n\r\nIn the commit aee2424246f9 (\"RDMA/iwcm: Fix a use-after-free related to destroying CM IDs\"), the function flush_workqueue is invoked to flush the work queue iwcm_wq.\r\n\r\nBut at that time, the work queue iwcm_wq was created via the function alloc_ordered_workqueue without the flag WQ_MEM_RECLAIM.\r\n\r\nBecause the current process is trying to flush the whole iwcm_wq, if iwcm_wq doesn\u0027t have the flag WQ_MEM_RECLAIM, verify that the current process is not reclaiming memory or running on a workqueue which doesn\u0027t have the flag WQ_MEM_RECLAIM as that can break forward-progress guarantee leading to a deadlock.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47696"
},
{
"cve": "CVE-2024-47697",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error\r\n\r\nEnsure index in rtl2830_pid_filter does not exceed 31 to prevent out-of-bounds access.\r\n\r\ndev-\u003efilters is a 32-bit value, so set_bit and clear_bit functions should only operate on indices from 0 to 31. If index is 32, it will attempt to access a non-existent 33rd bit, leading to out-of-bounds access.\r\nChange the boundary check from index \u003e 32 to index \u003e= 32 to resolve this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47697"
},
{
"cve": "CVE-2024-47698",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drivers: media: dvb-frontends/rtl2832: An out-of-bounds access occurs if rtl2832_pid_filter exceed 31, which was not verified.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47698"
},
{
"cve": "CVE-2024-47699",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nnilfs2: fix potential null-ptr-deref in nilfs_btree_insert()\r\n\r\nPatch series \"nilfs2: fix potential issues with empty b-tree nodes\".\r\n\r\nThis series addresses three potential issues with empty b-tree nodes that can occur with corrupted filesystem images, including one recently discovered by syzbot.\r\n\r\n\r\nThis patch (of 3):\r\n\r\nIf a b-tree is broken on the device, and the b-tree height is greater than 2 (the level of the root node is greater than 1) even if the number of child nodes of the b-tree root is 0, a NULL pointer dereference occurs in nilfs_btree_prepare_insert(), which is called from nilfs_btree_insert().\r\n\r\nThis is because, when the number of child nodes of the b-tree root is 0, nilfs_btree_do_lookup() does not set the block buffer head in any of path[x].bp_bh, leaving it as the initial value of NULL, but if the level of the b-tree root node is greater than 1, nilfs_btree_get_nonroot_node(), which accesses the buffer memory of path[x].bp_bh, is called.\r\n\r\nFix this issue by adding a check to nilfs_btree_root_broken(), which performs sanity checks when reading the root node from the device, to detect this inconsistency.\r\n\r\nThanks to Lizhi Xu for trying to solve the bug and clarifying the cause early on.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47699"
},
{
"cve": "CVE-2024-47701",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47701"
},
{
"cve": "CVE-2024-47705",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nblock: fix potential invalid pointer dereference in blk_add_partition\r\n\r\nThe blk_add_partition() function initially used a single if-condition (IS_ERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where md_autodetect_dev() could be called without confirming that part is a valid pointer.\r\n\r\nThis commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of md_autodetect_dev() calls.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47705"
},
{
"cve": "CVE-2024-47706",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nblock, bfq: fix possible UAF for bfqq-\u003ebic with merge chain\r\n\r\nIn this case, IO from Process 1 will get bfqq2 from BIC1 first, and then\r\nget bfqq3 through merge chain, and finially handle IO by bfqq3.\r\nHowerver, current code will think bfqq2 is owned by BIC1, like initial\r\nstate, and set bfqq2-\u003ebic to BIC1.\r\n\r\nAllocated by task 20776:\r\n kasan_save_stack+0x20/0x40 mm/kasan/common.c:45\r\n kasan_set_track+0x25/0x30 mm/kasan/common.c:52\r\n __kasan_slab_alloc+0x87/0x90 mm/kasan/common.c:328\r\n kasan_slab_alloc include/linux/kasan.h:188 [inline]\r\n slab_post_alloc_hook mm/slab.h:763 [inline]\r\n slab_alloc_node mm/slub.c:3458 [inline]\r\n kmem_cache_alloc_node+0x1a4/0x6f0 mm/slub.c:3503\r\n ioc_create_icq block/blk-ioc.c:370 [inline]\r\n---truncated---",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47706"
},
{
"cve": "CVE-2024-47709",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "can: bcm: A warning is triggered when connect() is issued again for a socket whose connect()ed device has been unregistered. However, if the socket is just close()d without the 2nd connect(), the remaining bo-\u003ebcm_proc_read triggers unnecessary remove_proc_entry() in bcm_release().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47709"
},
{
"cve": "CVE-2024-47710",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "sock_map: vulnerability result of adding a cond_resched() in sock_hash_free() to prevent CPU soft lockups when destroying maps with a large number of buckets.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47710"
},
{
"cve": "CVE-2024-47712",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "wifi: wilc1000: vulnerability caused by a potential RCU dereference issue in wilc_parse_join_bss_param by storing the TSF value in a local variable before releasing the RCU lock to prevent use-after-free errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47712"
},
{
"cve": "CVE-2024-47713",
"cwe": {
"id": "CWE-664",
"name": "Improper Control of a Resource Through its Lifetime"
},
"notes": [
{
"category": "summary",
"text": "wifi: mac80211: vulnerability caused by implementing a two-phase skb reclamation in ieee80211_do_stop() to avoid warnings and potential issues caused by calling __dev_queue_xmit() with interrupts disabled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47713"
},
{
"cve": "CVE-2024-47718",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "wifi: rtw88: vulnerability may lead to a use-after-free (UAF) error if firmware loading is not properly synchronized during USB initialization and disconnection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47718"
},
{
"cve": "CVE-2024-47723",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\njfs: fix out-of-bounds in dbNextAG() and diAlloc()\r\n\r\nIn dbNextAG() , there is no check for the case where bmp-\u003edb_numag is greater or same than MAXAG due to a polluted image, which causes an out-of-bounds. Therefore, a bounds check should be added in dbMount().\r\n\r\nAnd in dbNextAG(), a check for the case where agpref is greater than bmp-\u003edb_numag should be added, so an out-of-bounds exception should be prevented.\r\n\r\nAdditionally, a check for the case where agno is greater or same than MAXAG should be added in diAlloc() to prevent out-of-bounds.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47723"
},
{
"cve": "CVE-2024-47735",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "RDMA/hns: missuse of spin_lock_irq()/spin_unlock_irq() when spin_lock_irqsave()/spin_lock_irqrestore() was hold.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47735"
},
{
"cve": "CVE-2024-47737",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: nfsd: call cache_put if xdr_reserve_space returns NULL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47737"
},
{
"cve": "CVE-2024-47739",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "padata: missing integer wrap around can cause deadlock on seq_nr overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47739"
},
{
"cve": "CVE-2024-47740",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Inf2fs: Require FMODE_WRITE for atomic write ioctls. The F2FS ioctls for starting and committing atomic writes check for inode_owner_or_capable(), but this does not give LSMs like SELinux or Landlock an opportunity to deny the write access - if the caller\u0027s FSUID matches the inode\u0027s UID, inode_owner_or_capable() immediately returns true.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47740"
},
{
"cve": "CVE-2024-47742",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "firmware_loader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple codepaths in the kernel where firmware file names contain string components that are passed through from a device or semi-privileged userspace.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47742"
},
{
"cve": "CVE-2024-47747",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition. In the ether3_probe function, a timer is initialized with a callback function ether3_ledoff, bound to \u0026prev(dev)-\u003etimer. Once the timer is started, there is a risk of a race condition if the module or device is removed, triggering the ether3_remove function to perform cleanup.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47747"
},
{
"cve": "CVE-2024-47748",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "vhost_vdpa: assign irq bypass producer token correctly.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47748"
},
{
"cve": "CVE-2024-47749",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "RDMA/cxgb4: Added NULL check for lookup_atid. The lookup_atid() function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the `act_establish()` and `act_open_rpl()` functions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47749"
},
{
"cve": "CVE-2024-47756",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "PCI: keystone: Fix if-statement expression in ks_pcie_quirk(). This code accidentally uses \u0026\u0026 where || was intended. It potentially results in a NULL dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47756"
},
{
"cve": "CVE-2024-47757",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: potential oob read in nilfs_btree_check_delete(). The function nilfs_btree_check_delete(), which checks whether degeneration to direct mapping occurs before deleting a b-tree entry, causes memory access outside the block buffer when retrieving the maximum key if the root node has no entries.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-47757"
},
{
"cve": "CVE-2024-48881",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49851",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"notes": [
{
"category": "summary",
"text": "tpm: Clean up TPM space after command failure tpm_dev_transmit prepares the TPM space before attempting command transmission. However if the command fails no rollback of this preparation is done. This can result in transient handles being leaked if the device is subsequently closed with no further commands performed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49851"
},
{
"cve": "CVE-2024-49858",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption The TPM event log table is a Linux specific construct, where the data produced by the GetEventLog() boot service is cached in memory, and passed on to the OS using an EFI configuration table. The use of EFI_LOADER_DATA here results in the region being left unreserved in the E820 memory map constructed by the EFI stub, and this is the memory description that is passed on to the incoming kernel by kexec, which is therefore unaware that the region should be reserved. Even though the utility of the TPM2 event log after a kexec is questionable, any corruption might send the parsing code off into the weeds and crash the kernel.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49858"
},
{
"cve": "CVE-2024-49860",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "CPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access invalid memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49860"
},
{
"cve": "CVE-2024-49863",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "vhost/scsi: null-ptr-dereference in vhost_scsi_get_req().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49863"
},
{
"cve": "CVE-2024-49867",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "btrfs: wait for fixup workers before stopping cleaner kthread during umount During unmount, at close_ctree().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49867"
},
{
"cve": "CVE-2024-49868",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "btrfs: a NULL pointer dereference when failed to start a new trasacntion.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49868"
},
{
"cve": "CVE-2024-49875",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nfsd: map the EBADMSG to nfserr_io to avoid warning Ext4 will throw -EBADMSG through ext4_readdir when a checksum error occurs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49875"
},
{
"cve": "CVE-2024-49877",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: When doing cleanup, if flags do not have OCFS2_BH_READAHEAD set, it may trigger NULL pointer dereference in the following ocfs2_set_buffer_uptodate() if bh is NULL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49877"
},
{
"cve": "CVE-2024-49878",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "resource: Because drivers/dax/kmem.c calls add_memory_driver_managed() during onlining CXL memory, which makes \"System RAM (kmem)\" a descendant of \"CXL Window X\". This confuses region_intersects(), which expects all \"System RAM\" resources to be at the top level of iomem_resource.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49878"
},
{
"cve": "CVE-2024-49879",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm: omapdrm: alloc_ordered_workqueue may return NULL pointer and cause NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49879"
},
{
"cve": "CVE-2024-49881",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49881"
},
{
"cve": "CVE-2024-49882",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ext4: In ext4_ext_try_to_merge_up(), path[1].p_bh should be set to NULL after it has been released, otherwise it may be released twice.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49882"
},
{
"cve": "CVE-2024-49883",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ext4: In ext4_ext_insert_extent(), if the path is reallocated in ext4_ext_create_new_leaf(), the stale path will be used and cause use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49883"
},
{
"cve": "CVE-2024-49884",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49884"
},
{
"cve": "CVE-2024-49889",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\next4: avoid use-after-free in ext4_ext_show_leaf()\r\n\r\nIn ext4_find_extent(), path may be freed by error or be reallocated, so\r\nusing a previously saved *ppath may have been freed and thus may trigger\r\nuse-after-free, as follows:\r\n\r\next4_split_extent\r\n path = *ppath;\r\n ext4_split_extent_at(ppath)\r\n path = ext4_find_extent(ppath)\r\n ext4_split_extent_at(ppath)\r\n // ext4_find_extent fails to free path\r\n // but zeroout succeeds\r\n ext4_ext_show_leaf(inode, path)\r\n eh = path[depth].p_hdr\r\n // path use-after-free !!!\r\n\r\nSimilar to ext4_split_extent_at(), we use *ppath directly as an input to\r\next4_ext_show_leaf(). Fix a spelling error by the way.\r\n\r\nSame problem in ext4_ext_handle_unwritten_extents(). Since \u0027path\u0027 is only\r\nused in ext4_ext_show_leaf(), remove \u0027path\u0027 and use *ppath directly.\r\n\r\nThis issue is triggered only when EXT_DEBUG is defined and therefore does\r\nnot affect functionality.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49889"
},
{
"cve": "CVE-2024-49890",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/pm: ensure the fw_info is not null before using it\r\n\r\nThis resolves the dereference null return value warning reported by Coverity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49890"
},
{
"cve": "CVE-2024-49892",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/display: Initialize get_bytes_per_element\u0027s default to 1\r\n\r\nVariables, used as denominators and maybe not assigned to other values, should not be 0. bytes_per_element_y \u0026 bytes_per_element_c are initialized by get_bytes_per_element() which should never return 0.\r\n\r\nThis fixes 10 DIVIDE_BY_ZERO issues reported by Coverity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49892"
},
{
"cve": "CVE-2024-49894",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\ndrm/amd/display: Fix index out of bounds in degamma hardware format translation\r\n\r\nFixes index out of bounds issue in\r\n`cm_helper_translate_curve_to_degamma_hw_format` function. The issue\r\ncould occur when the index \u0027i\u0027 exceeds the number of transfer function\r\npoints (TRANSFER_FUNC_POINTS).\r\n\r\nThe fix adds a check to ensure \u0027i\u0027 is within bounds before accessing the\r\ntransfer function points. If \u0027i\u0027 is out of bounds the function returns\r\nfalse to indicate an error.\r\n\r\nReported by smatch:\r\ndrivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:594 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow \u0027output_tf-\u003etf_pts.red\u0027 1025 \u003c= s32max\r\ndrivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:595 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow \u0027output_tf-\u003etf_pts.green\u0027 1025 \u003c= s32max\r\ndrivers/gpu/drm/amd/amdgpu/../display/dc/dcn10/dcn10_cm_common.c:596 cm_helper_translate_curve_to_degamma_hw_format() error: buffer overflow \u0027output_tf-\u003etf_pts.blue\u0027 1025 \u003c= s32max",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49894"
},
{
"cve": "CVE-2024-49895",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: vulnerability caused by adding a check to ensure the index \u0027i\u0027 is within bounds before accessing transfer function points in cm_helper_translate_curve_to_degamma_hw_format, preventing buffer overflow errors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49895"
},
{
"cve": "CVE-2024-49896",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: vulnerability caused by adding a null check for the stream before dereferencing it in dc_is_stream_unchanged to prevent null pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49896"
},
{
"cve": "CVE-2024-49900",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\njfs: Fix uninit-value access of new_ea in ea_buffer\r\n\r\nsyzbot reports that lzo1x_1_do_compress is using uninit-value:\r\n\r\n=====================================================\r\nBUG: KMSAN: uninit-value in lzo1x_1_do_compress+0x19f9/0x2510 lib/lzo/lzo1x_compress.c:178\r\n\r\n...\r\n\r\nUninit was stored to memory at:\r\n ea_put fs/jfs/xattr.c:639 [inline]\r\n\r\n...\r\n\r\nLocal variable ea_buf created at:\r\n __jfs_setxattr+0x5d/0x1ae0 fs/jfs/xattr.c:662\r\n __jfs_xattr_set+0xe6/0x1f0 fs/jfs/xattr.c:934\r\n\r\n=====================================================\r\n\r\nThe reason is ea_buf-\u003enew_ea is not initialized properly.\r\n\r\nFix this by using memset to empty its content at the beginning\r\nin ea_get().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49900"
},
{
"cve": "CVE-2024-49901",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/msm/adreno: vulnerability caused by assigning msm_gpu-\u003epdev earlier in the initialization process to prevent null pointer dereferences in msm_gpu_cleanup.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49901"
},
{
"cve": "CVE-2024-49902",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "jfs: vulnerability caused by assigning msm_gpu-\u003epdev earlier in the initialization process to prevent null pointer dereferences in msm_gpu_cleanup.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49902"
},
{
"cve": "CVE-2024-49903",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\njfs: Fix uaf in dbFreeBits\r\n\r\n[syzbot reported]\r\n==================================================================\r\nBUG: KASAN: slab-use-after-free in __mutex_lock_common kernel/locking/mutex.c:587 [inline]\r\nBUG: KASAN: slab-use-after-free in __mutex_lock+0xfe/0xd70 kernel/locking/mutex.c:752\r\nRead of size 8 at addr ffff8880229254b0 by task syz-executor357/5216\r\n\r\nCPU: 0 UID: 0 PID: 5216 Comm: syz-executor357 Not tainted 6.11.0-rc3-syzkaller-00156-gd7a5aa4b3c00 #0\r\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024\r\nCall Trace:\r\n \u003cTASK\u003e\r\n __dump_stack lib/dump_stack.c:93 [inline]\r\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119\r\n print_address_description mm/kasan/report.c:377 [inline]\r\n print_report+0x169/0x550 mm/kasan/report.c:488\r\n kasan_report+0x143/0x180 mm/kasan/report.c:601\r\n __mutex_lock_common kernel/locking/mutex.c:587 [inline]\r\n __mutex_lock+0xfe/0xd70 kernel/locking/mutex.c:752\r\n dbFreeBits+0x7ea/0xd90 fs/jfs/jfs_dmap.c:2390\r\n dbFreeDmap fs/jfs/jfs_dmap.c:2089 [inline]\r\n dbFree+0x35b/0x680 fs/jfs/jfs_dmap.c:409\r\n dbDiscardAG+0x8a9/0xa20 fs/jfs/jfs_dmap.c:1650\r\n jfs_ioc_trim+0x433/0x670 fs/jfs/jfs_discard.c:100\r\n jfs_ioctl+0x2d0/0x3e0 fs/jfs/ioctl.c:131\r\n vfs_ioctl fs/ioctl.c:51 [inline]\r\n __do_sys_ioctl fs/ioctl.c:907 [inline]\r\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893\r\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\r\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\r\n\r\nFreed by task 5218:\r\n kasan_save_stack mm/kasan/common.c:47 [inline]\r\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\r\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579\r\n poison_slab_object+0xe0/0x150 mm/kasan/common.c:240\r\n __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256\r\n kasan_slab_free include/linux/kasan.h:184 [inline]\r\n slab_free_hook mm/slub.c:2252 [inline]\r\n slab_free mm/slub.c:4473 [inline]\r\n kfree+0x149/0x360 mm/slub.c:4594\r\n dbUnmount+0x11d/0x190 fs/jfs/jfs_dmap.c:278\r\n jfs_mount_rw+0x4ac/0x6a0 fs/jfs/jfs_mount.c:247\r\n jfs_remount+0x3d1/0x6b0 fs/jfs/super.c:454\r\n reconfigure_super+0x445/0x880 fs/super.c:1083\r\n vfs_cmd_reconfigure fs/fsopen.c:263 [inline]\r\n vfs_fsconfig_locked fs/fsopen.c:292 [inline]\r\n __do_sys_fsconfig fs/fsopen.c:473 [inline]\r\n __se_sys_fsconfig+0xb6e/0xf80 fs/fsopen.c:345\r\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\r\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\r\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\r\n\r\n[Analysis]\r\nThere are two paths (dbUnmount and jfs_ioc_trim) that generate race condition when accessing bmap, which leads to the occurrence of uaf.\r\n\r\nUse the lock s_umount to synchronize them, in order to avoid uaf caused by race condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49903"
},
{
"cve": "CVE-2024-49907",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: missing null pointer check before using dc-\u003eclk_mgr.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49907"
},
{
"cve": "CVE-2024-49913",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: missing null check for top_pipe_to_program in commit_planes_for_stream.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49913"
},
{
"cve": "CVE-2024-49924",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "fbdev: pxafb:use after free in pxafb_task(). In the pxafb_probe function, it calls the pxafb_init_fbinfo function, after which \u0026fbi-\u003etask is associated with pxafb_task. Moreover, within this pxafb_init_fbinfo function, the pxafb_blank function within the \u0026pxafb_ops struct is capable of scheduling work. If we remove the module which will call pxafb_remove to make cleanup, it will call unregister_framebuffer function which can call do_unregister_framebuffer to free fbi-\u003efb through put_fb_info(fb_info), while the work mentioned above will be used.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49924"
},
{
"cve": "CVE-2024-49930",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "wifi: ath11k: fix array out-of-bound access in SoC stats. Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath11k_dp_process_rx() function access ath11k_soc_dp_stats::hal_reo_error using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49930"
},
{
"cve": "CVE-2024-49933",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "blk_iocost: fix more out of bound shifts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49933"
},
{
"cve": "CVE-2024-49936",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "net/xen-netback: prevent UAF in xenvif_flush_hash(). During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head-\u003enext after the entry becomes free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49936"
},
{
"cve": "CVE-2024-49938",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nwifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit\r\n\r\nSyzbot points out that skb_trim() has a sanity check on the existing length of the skb, which can be uninitialised in some error paths. The intent here is clearly just to reset the length to zero before resubmitting, so switch to calling __skb_set_length(skb, 0) directly. In addition, __skb_set_length() already contains a call to skb_reset_tail_pointer(), so remove the redundant call.\r\n\r\nThe syzbot report came from ath9k_hif_usb_reg_in_cb(), but there\u0027s a similar usage of skb_trim() in ath9k_hif_usb_rx_cb(), change both while we\u0027re at it.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49938"
},
{
"cve": "CVE-2024-49944",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start. In sctp_listen_start() invoked by sctp_inet_listen(), it should set the sk_state back to CLOSED if sctp_autobind() fails due to whatever reason. Otherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)-\u003ereuse is already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)-\u003ebind_hash will be dereferenced as sk_state is LISTENING, which causes a crash as bind_hash is NULL",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49944"
},
{
"cve": "CVE-2024-49948",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: add more sanity checks to qdisc_pkt_len_init().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-49949",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: avoid potential underflow in qdisc_pkt_len_init() with UFO.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49949"
},
{
"cve": "CVE-2024-49952",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: prevent nf_skb_duplicated corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49952"
},
{
"cve": "CVE-2024-49955",
"cwe": {
"id": "CWE-672",
"name": "Operation on a Resource after Expiration or Release"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nACPI: battery: Fix possible crash when unregistering a battery hook\r\n\r\nWhen a battery hook returns an error when adding a new battery, then the battery hook is automatically unregistered.\r\nHowever the battery hook provider cannot know that, so it will later call battery_hook_unregister() on the already unregistered battery hook, resulting in a crash.\r\n\r\nFix this by using the list head to mark already unregistered battery hooks as already being unregistered so that they can be ignored by battery_hook_unregister().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49955"
},
{
"cve": "CVE-2024-49957",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: null-ptr-deref when journal load failed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49957"
},
{
"cve": "CVE-2024-49958",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: reserve space for inline xattr before attaching reflink tree.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49958"
},
{
"cve": "CVE-2024-49959",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error In __jbd2_log_wait_for_space(), we might call jbd2_cleanup_journal_tail() to recover some journal space.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49959"
},
{
"cve": "CVE-2024-49962",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49962"
},
{
"cve": "CVE-2024-49963",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mailbox: bcm2835: timeout during suspend mode.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49963"
},
{
"cve": "CVE-2024-49965",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series \"Misc fixes for ocfs2_read_blocks\", v5.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49965"
},
{
"cve": "CVE-2024-49966",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: cancel dqi_sync_work before freeing oinfo ocfs2_global_read_info() will initialize and schedule dqi_sync_work at the end.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49966"
},
{
"cve": "CVE-2024-49967",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ext4: no need to continue when the number of entries is 1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49967"
},
{
"cve": "CVE-2024-49969",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: index out of bounds in DCN30 color transformation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49969"
},
{
"cve": "CVE-2024-49971",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: dml2_core_shared_mode_support and dml_core_mode_support access the third element of dummy_boolean, for example: hw_debug5 = \u0026s-\u003edummy_boolean. Any assignment to hw_debug5 would cause an OVERRUN.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49971"
},
{
"cve": "CVE-2024-49973",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "r8169: RTL8125 added fields to the tally counter, this change could cause the chip to perform Direct Memory Access on these new fields, potentially writing to unallocated memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49973"
},
{
"cve": "CVE-2024-49975",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "uprobes: vma xol_add_vma() maps the uninitialized page allocated by __create_xol_area() into userspace. On some architectures (x86) this memory is readable even without VM_READ permission. Additionally setting VM_EXEC produces the same page protection attributes (pgprot_t) as setting both VM_EXEC and VM_READ. Nevertheless, the debugger can read this memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49975"
},
{
"cve": "CVE-2024-49977",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: stmmac: port_transmit_rate_kbps could be set to a value of 0, which is then passed to the \"div_s64\" function when tc-cbs is disabled. This leads to a zero-division error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49977"
},
{
"cve": "CVE-2024-49981",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: venus: A race condition may trigger a use after free vulnerability in venus_remove.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49981"
},
{
"cve": "CVE-2024-49982",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in more places For fixing CVE-2023-6270, f98364e92662 (\"aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts\") makes tx() calling dev_put() instead of doing in aoecmd_cfg_pkts(). It avoids that the tx() runs into use-after-free. Then Nicolai Stange found more places in aoe have potential use-after-free problem with tx(). e.g. revalidate(), aoecmd_ata_rw(), resend(), probe() and aoecmd_cfg_rsp(). Those functions also use aoenet_xmit() to push packet to tx queue. So they should also use dev_hold() to increase the refcnt of skb-\u003edev. On the other hand, moving dev_put() to tx() causes that the refcnt of skb-\u003edev be reduced to a negative value, because corresponding dev_hold() are not called in revalidate(), aoecmd_ata_rw(), resend(), probe(), and aoecmd_cfg_rsp(). This patch fixed this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49982"
},
{
"cve": "CVE-2024-49983",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ext4: When calling ext4_force_split_extent_at() in ext4_ext_replay_update_ex(), the \u0027ppath\u0027 is updated but it is the \u0027path\u0027 that is freed, thus potentially triggering a double-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49983"
},
{
"cve": "CVE-2024-49985",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "i2c: stm32f7: In case there is any sort of clock controller attached to the I2C bus controller, for example Versaclock or even an AIC32x4 I2C codec, then an I2C transfer triggered from the clock controller clk_ops .prepare callback may trigger a deadlock on drivers/clk/clk.c prepare_lock mutex.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49985"
},
{
"cve": "CVE-2024-49993",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "iommu/vt-d: vulnerability may cause a soft lockup if qi_submit_sync() is called with zero invalidation descriptors, as the completion of invalidation_wait may not be detected, leading to an indefinite wait.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49993"
},
{
"cve": "CVE-2024-49995",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tipc: vulnerability due to a potential buffer overrun when copying media_name and if_name to name_parts, which may be prevented by using strscpy() to avoid overwriting the destination buffer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49995"
},
{
"cve": "CVE-2024-49997",
"cwe": {
"id": "CWE-226",
"name": "Sensitive Information in Resource Not Removed Before Reuse"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying padding, the buffer is not zeroed, which results in memory disclosure. The mentioned data is observed on the wire. This patch uses skb_put_padto() to pad Ethernet frames properly. The mentioned function zeroes the expanded buffer. In case the packet cannot be padded it is silently dropped. Statistics are also not incremented. This driver does not support statistics in the old 32-bit format or the new 64-bit format. These will be added in the future. In its current form, the patch should be easily backported to stable versions. Ethernet MACs on Amazon-SE and Danube cannot do padding of the packets in hardware, so software padding must be applied.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-49997"
},
{
"cve": "CVE-2024-50001",
"cwe": {
"id": "CWE-755",
"name": "Improper Handling of Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nnet/mlx5: Fix error path in multi-packet WQE transmit\r\n\r\nRemove the erroneous unmap in case no DMA mapping was established\r\n\r\nThe multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under memory pressure, when the IOMMU driver just can\u0027t allocate more memory for page tables. While the code tries to handle this in the path below the err_unmap label it erroneously unmaps one entry from the sq\u0027s FIFO list of active mappings. Since the current map attempt failed this unmap is removing some random DMA mapping that might still be required. If the PCI function now presents that IOVA, the IOMMU may assumes a rogue DMA access and e.g. on s390 puts the PCI function in error state.\r\n\r\nThe erroneous behavior was seen in a stress-test environment that created memory pressure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50001"
},
{
"cve": "CVE-2024-50006",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50006"
},
{
"cve": "CVE-2024-50007",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ALSA: asihpi: potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50007"
},
{
"cve": "CVE-2024-50008",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "wifi: mwifiex: memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() Replace one-element array with a flexible-array member in `struct host_cmd_ds_802_11_scan_ext`.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50008"
},
{
"cve": "CVE-2024-50013",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "exfat: memory leak in exfat_load_bitmap() If the first directory entry in the root directory is not a bitmap directory entry, \u0027bh\u0027 will not be released and reassigned, which will cause a memory leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50013"
},
{
"cve": "CVE-2024-50015",
"cwe": {
"id": "CWE-665",
"name": "Improper Initialization"
},
"notes": [
{
"category": "summary",
"text": "ext4: dax: Overflowing extents beyond inode size when partially writing.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50015"
},
{
"cve": "CVE-2024-50024",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: unsafe loop on the list.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50024"
},
{
"cve": "CVE-2024-50033",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nslip: make slhc_remember() more robust against malicious packets\r\n\r\nsyzbot found that slhc_remember() was missing checks against\r\nmalicious packets [1].\r\n\r\nslhc_remember() only checked the size of the packet was at least 20,\r\nwhich is not good enough.\r\n\r\nWe need to make sure the packet includes the IPv4 and TCP header\r\nthat are supposed to be carried.\r\n\r\nAdd iph and th pointers to make the code more readable.\r\n\r\n[1]\r\n\r\nBUG: KMSAN: uninit-value in slhc_remember+0x2e8/0x7b0 drivers/net/slip/slhc.c:666\r\n slhc_remember+0x2e8/0x7b0 drivers/net/slip/slhc.c:666\r\n ppp_receive_nonmp_frame+0xe45/0x35e0 drivers/net/ppp/ppp_generic.c:2455\r\n ppp_receive_frame drivers/net/ppp/ppp_generic.c:2372 [inline]\r\n ppp_do_recv+0x65f/0x40d0 drivers/net/ppp/ppp_generic.c:2212\r\n ppp_input+0x7dc/0xe60 drivers/net/ppp/ppp_generic.c:2327\r\n pppoe_rcv_core+0x1d3/0x720 drivers/net/ppp/pppoe.c:379\r\n sk_backlog_rcv+0x13b/0x420 include/net/sock.h:1113\r\n __release_sock+0x1da/0x330 net/core/sock.c:3072\r\n release_sock+0x6b/0x250 net/core/sock.c:3626\r\n pppoe_sendmsg+0x2b8/0xb90 drivers/net/ppp/pppoe.c:903\r\n sock_sendmsg_nosec net/socket.c:729 [inline]\r\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\r\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\r\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\r\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\r\n __do_sys_sendmmsg net/socket.c:2771 [inline]\r\n __se_sys_sendmmsg net/socket.c:2768 [inline]\r\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\r\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\r\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\r\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\r\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\r\n\r\nUninit was created at:\r\n slab_post_alloc_hook mm/slub.c:4091 [inline]\r\n slab_alloc_node mm/slub.c:4134 [inline]\r\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\r\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\r\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\r\n alloc_skb include/linux/skbuff.h:1322 [inline]\r\n sock_wmalloc+0xfe/0x1a0 net/core/sock.c:2732\r\n pppoe_sendmsg+0x3a7/0xb90 drivers/net/ppp/pppoe.c:867\r\n sock_sendmsg_nosec net/socket.c:729 [inline]\r\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\r\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\r\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\r\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\r\n __do_sys_sendmmsg net/socket.c:2771 [inline]\r\n __se_sys_sendmmsg net/socket.c:2768 [inline]\r\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\r\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\r\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\r\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\r\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\r\n\r\nCPU: 0 UID: 0 PID: 5460 Comm: syz.2.33 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0\r\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50033"
},
{
"cve": "CVE-2024-50035",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nppp: fix ppp_async_encode() illegal access\r\n\r\nsyzbot reported an issue in ppp_async_encode() [1]\r\n\r\nIn this case, pppoe_sendmsg() is called with a zero size.\r\nThen ppp_async_encode() is called with an empty skb.\r\n\r\nBUG: KMSAN: uninit-value in ppp_async_encode drivers/net/ppp/ppp_async.c:545 [inline]\r\n BUG: KMSAN: uninit-value in ppp_async_push+0xb4f/0x2660 drivers/net/ppp/ppp_async.c:675\r\n ppp_async_encode drivers/net/ppp/ppp_async.c:545 [inline]\r\n ppp_async_push+0xb4f/0x2660 drivers/net/ppp/ppp_async.c:675\r\n ppp_async_send+0x130/0x1b0 drivers/net/ppp/ppp_async.c:634\r\n ppp_channel_bridge_input drivers/net/ppp/ppp_generic.c:2280 [inline]\r\n ppp_input+0x1f1/0xe60 drivers/net/ppp/ppp_generic.c:2304\r\n pppoe_rcv_core+0x1d3/0x720 drivers/net/ppp/pppoe.c:379\r\n sk_backlog_rcv+0x13b/0x420 include/net/sock.h:1113\r\n __release_sock+0x1da/0x330 net/core/sock.c:3072\r\n release_sock+0x6b/0x250 net/core/sock.c:3626\r\n pppoe_sendmsg+0x2b8/0xb90 drivers/net/ppp/pppoe.c:903\r\n sock_sendmsg_nosec net/socket.c:729 [inline]\r\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\r\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\r\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\r\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\r\n __do_sys_sendmmsg net/socket.c:2771 [inline]\r\n __se_sys_sendmmsg net/socket.c:2768 [inline]\r\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\r\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\r\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\r\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\r\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\r\n\r\nUninit was created at:\r\n slab_post_alloc_hook mm/slub.c:4092 [inline]\r\n slab_alloc_node mm/slub.c:4135 [inline]\r\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4187\r\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\r\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\r\n alloc_skb include/linux/skbuff.h:1322 [inline]\r\n sock_wmalloc+0xfe/0x1a0 net/core/sock.c:2732\r\n pppoe_sendmsg+0x3a7/0xb90 drivers/net/ppp/pppoe.c:867\r\n sock_sendmsg_nosec net/socket.c:729 [inline]\r\n __sock_sendmsg+0x30f/0x380 net/socket.c:744\r\n ____sys_sendmsg+0x903/0xb60 net/socket.c:2602\r\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2656\r\n __sys_sendmmsg+0x3c1/0x960 net/socket.c:2742\r\n __do_sys_sendmmsg net/socket.c:2771 [inline]\r\n __se_sys_sendmmsg net/socket.c:2768 [inline]\r\n __x64_sys_sendmmsg+0xbc/0x120 net/socket.c:2768\r\n x64_sys_call+0xb6e/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:308\r\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\r\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\r\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\r\n\r\nCPU: 1 UID: 0 PID: 5411 Comm: syz.1.14 Not tainted 6.12.0-rc1-syzkaller-00165-g360c1f1f24c6 #0\r\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50035"
},
{
"cve": "CVE-2024-50039",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nnet/sched: accept TCA_STAB only for root qdisc\r\n\r\nMost qdiscs maintain their backlog using qdisc_pkt_len(skb) on the assumption it is invariant between the enqueue() and dequeue() handlers.\r\n\r\nUnfortunately syzbot can crash a host rather easily using a TBF + SFQ combination, with an STAB on SFQ [1]\r\n\r\nWe can\u0027t support TCA_STAB on arbitrary level, this would require to maintain per-qdisc storage.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50039"
},
{
"cve": "CVE-2024-50040",
"cwe": {
"id": "CWE-390",
"name": "Detection of Error Condition Without Action"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: igb: Do not bring the device up after non-fatal error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50040"
},
{
"cve": "CVE-2024-50044",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nBluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change\r\n\r\nrfcomm_sk_state_change attempts to use sock_lock so it must never be called with it locked but rfcomm_sock_ioctl always attempt to lock it.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50044"
},
{
"cve": "CVE-2024-50045",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: fix panic with metadata_dst skb.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50045"
},
{
"cve": "CVE-2024-50046",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nNFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()\r\n\r\nOn the node of an NFS client, some files saved in the mountpoint of the NFS server were copied to another location of the same NFS server.\r\nAccidentally, the nfs42_complete_copies() got a NULL-pointer dereference crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50046"
},
{
"cve": "CVE-2024-50049",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amd/display: null pointer before dereferencing se.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50049"
},
{
"cve": "CVE-2024-50051",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "spi: mpc52xx: Add cancel_work_sync before module remove. If the module which will call mpc52xx_spi_remove is removed, it will free \u0027ms\u0027 through spi_unregister_controller. while the work ms-\u003ework will be used. The sequence of operations that may lead to a UAF bug.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50051"
},
{
"cve": "CVE-2024-50059",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ntb: ntb_hw_switchtec: use after free vulnerability in switchtec_ntb_remove due to race condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50059"
},
{
"cve": "CVE-2024-50074",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "parport: The recent fix for array out-of-bounds accesses replaced sprintf() calls blindly with snprintf(). However, since snprintf() returns the would-be-printed size, not the actually output size, the length calculation can still go over the given limit.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50074"
},
{
"cve": "CVE-2024-50082",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "blk-rq-qos: vulnerability in blk-rq-qos can cause a crash due to a race condition between rq_qos_wait and rq_qos_wake_function, which is fixed by ensuring the waitqueue entry is accessed in the correct order.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50082"
},
{
"cve": "CVE-2024-50083",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tcp: vulnerability in may cause DSS corruption due to large PMTU transmissions, which is fixed by addressing the issue in the __mptcp_move_skbs_from_subflow function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50083"
},
{
"cve": "CVE-2024-50089",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "unicode: problematic ignorable code points.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50089"
},
{
"cve": "CVE-2024-50095",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nRDMA/mad: Improve handling of timed out WRs of mad agent\r\n\r\nCurrent timeout handler of mad agent acquires/releases mad_agent_priv lock for every timed out WRs. This causes heavy locking contention when higher no. of WRs are to be handled inside timeout handler.\r\n\r\nThis leads to softlockup with below trace in some use cases where rdma-cm path is used to establish connection between peer nodes\r\n\r\n\r\nSimplified timeout handler by creating local list of timed out WRs and invoke send handler post creating the list. The new method acquires/releases lock once to fetch the list and hence helps to reduce locking contetiong when processing higher no. of WRs",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50095"
},
{
"cve": "CVE-2024-50096",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nouveau/dmem: vulnerability in migrate_to_ram upon copy error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50096"
},
{
"cve": "CVE-2024-50099",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "arm64: probes: Broken LDR (literal) uprobe support.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50099"
},
{
"cve": "CVE-2024-50179",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ceph: incorrect Fw reference check when dirtying pages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50179"
},
{
"cve": "CVE-2024-50180",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "fbdev: sisfb: Fix strbuf array overflow. The values of the variables xres and yres are placed in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters and a space if the array contains non-digit characters. Then, when executing sprintf(strbuf, \"%ux%ux8\", xres, yres); more than 16 bytes will be written to strbuf.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50180"
},
{
"cve": "CVE-2024-50181",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D. For i.MX7D DRAM related mux clock, the clock source change should ONLY be done done in low level asm code without accessing DRAM, and then calling clk API to sync the HW clock status with clk tree, it should never touch real clock source switch via clk API, so CLK_SET_PARENT_GATE flag should NOT be added, otherwise, DRAM\u0027s clock parent will be disabled when DRAM is active, and system will hang.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50181"
},
{
"cve": "CVE-2024-50184",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "virtio_pmem: Check device status before requesting flush. If a pmem device is in a bad status, the driver side could wait for host ack forever in virtio_pmem_flush(), causing the system to hang.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50184"
},
{
"cve": "CVE-2024-50185",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "linux: mptcp: handle consistently DSS corruption. Bugged peer implementation can send corrupted DSS options, consistently hitting a few warning in the data path.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50185"
},
{
"cve": "CVE-2024-50188",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "net: phy: dp83869: fix memory corruption when enabling fiber. When configuring the fiber port, the DP83869 PHY driver incorrectly calls linkmode_set_bit() with a bit mask (1 \u0026lt;\u0026lt; 10) rather than a bit number (10). This corrupts some other memory location -- in case of arm64 the priv pointer in the same structure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50188"
},
{
"cve": "CVE-2024-50193",
"cwe": {
"id": "CWE-665",
"name": "Improper Initialization"
},
"notes": [
{
"category": "summary",
"text": "x86/entry_32: Clear CPU buffers after register restore in NMI return CPU buffers are currently cleared after call to exc_nmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS mitigation requires CPU buffers to be cleared when registers don\u0027t have any sensitive data. Move CLEAR_CPU_BUFFERS after RESTORE_ALL_NMI.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50193"
},
{
"cve": "CVE-2024-50194",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "arm64: probes: Fix uprobes for big-endian kernels The arm64 uprobes code is broken for big-endian kernels as it doesn\u0027t convert the in-memory instruction encoding (which is always little-endian) into the kernel\u0027s native endianness before analyzing and simulating instructions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50194"
},
{
"cve": "CVE-2024-50195",
"cwe": {
"id": "CWE-754",
"name": "Improper Check for Unusual or Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "posix-clock: Fix missing timespec64 check in pc_clock_settime().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50195"
},
{
"cve": "CVE-2024-50198",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "iio: light: veml6030: fix IIO device retrieval from embedded device. The dev pointer that is received as an argument in the in_illuminance_period_available_show function references the device embedded in the IIO device, not in the i2c client. dev_to_iio_dev() must be used to accessthe right data. The current implementation leads to a segmentation fault on every attempt to read the attribute because indio_dev gets a NULL assignment.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50198"
},
{
"cve": "CVE-2024-50199",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mm/swapfile: skip HugeTLB pages for unuse_vma I got a bad pud error and lost a 1GB HugeTLB when calling swapoff.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50199"
},
{
"cve": "CVE-2024-50201",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "linux: drm/radeon: encoder-\u003epossible_clones. In the past nothing validated that drivers were populating possible_clones correctly, which resulted in some warnings during driver initialization.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50201"
},
{
"cve": "CVE-2024-50202",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: propagate directory read errors from nilfs_find_entry(). A task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50202"
},
{
"cve": "CVE-2024-50218",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50218"
},
{
"cve": "CVE-2024-50234",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"notes": [
{
"category": "summary",
"text": "wifi: iwlegacy: vulnerability due to stale interrupts not being cleared before resuming the iwl4965 device from hibernation, causing a race condition between the resume process and restart work.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50234"
},
{
"cve": "CVE-2024-50236",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: ath10k: Fix memory leak in management tx In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed during management TX completion. Similar leaks are seen in the management TX cleanup logic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50236"
},
{
"cve": "CVE-2024-50237",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50237"
},
{
"cve": "CVE-2024-50251",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON(). skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50251"
},
{
"cve": "CVE-2024-50262",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50262"
},
{
"cve": "CVE-2024-50264",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "vsock/virtio: Initialization of the dangling pointer occurring in vsk-\u003etrans. During loopback communication, a dangling pointer can be created in vsk-\u003etrans, potentially leading to a Use-After-Free condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50264"
},
{
"cve": "CVE-2024-50265",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() Syzkaller is able to provoke null-ptr-dereference in ocfs2_xa_remove().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50265"
},
{
"cve": "CVE-2024-50267",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "USB: serial: io_edgeport: fix use after free in debug printk The \"dev_dbg(\u0026urb-\u003edev-\u003edev, ...\" which happens after usb_free_urb(urb) is a use after free of the \"urb\" pointer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50267"
},
{
"cve": "CVE-2024-50268",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd(). The \"*cmd\" variable can be controlled by the user via debugfs. That means \"new_cam\" can be as high as 255 while the size of the uc-\u003eupdated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -\u003e ucsi_send_command() -\u003e ucsi_send_command_common() -\u003e ucsi_run_command() // calls ucsi-\u003eops-\u003esync_control() -\u003e ucsi_ccg_sync_control().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50268"
},
{
"cve": "CVE-2024-50269",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "usb: musb: sunxi: accessing an released usb phy will cause that usb phy @glue-\u003exceiv is accessed after released.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50269"
},
{
"cve": "CVE-2024-50273",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "btrfs: reinitialize delayed ref list after deleting it from the list. At insert_delayed_ref() if there is a need to update the action of an existing ref to BTRFS_DROP_DELAYED_REF, the ref from its ref head\u0027s ref_add_list is deleted using list_del(), which leaves the ref\u0027s add_list member not reinitialized, as list_del() sets the next and prev members of the list to LIST_POISON1 and LIST_POISON2, respectively.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50273"
},
{
"cve": "CVE-2024-50278",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "dm cache: potential out-of-bounds access on the first resume Out-of-bounds access occurs if the fast device is expanded unexpectedly before the first-time resume of the cache table.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50278"
},
{
"cve": "CVE-2024-50279",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "dm cache: out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50279"
},
{
"cve": "CVE-2024-50282",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() Avoid a possible buffer overflow if size is larger than 4K.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50282"
},
{
"cve": "CVE-2024-50287",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: v4l2-tpg: prevent the risk of a division by zero As reported by Coverity, the logic at tpg_precalculate_line() blindly rescales the buffer even when scaled_witdh is equal to zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50287"
},
{
"cve": "CVE-2024-50290",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registers fail, a negative number will be returned, causing an underflow when reading SNR registers. Prevent that.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50290"
},
{
"cve": "CVE-2024-50292",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ASoC: stm32: spdifrx: dma channel release in stm32_spdifrx_remove In case of error when requesting ctrl_chan DMA channel, ctrl_chan is not null.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50292"
},
{
"cve": "CVE-2024-50295",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: arc: A warning is shown because ndev-\u003edev and pdev-\u003edev are not the same device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50295"
},
{
"cve": "CVE-2024-50296",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "hns3: A kernel crash may occur when the driver is uninstalled and the VF is disabled concurrently.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50296"
},
{
"cve": "CVE-2024-50299",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb()",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-50301",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_permission.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50301"
},
{
"cve": "CVE-2024-50302",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let\u0027s zero-initialize it during allocation to make sure that it can\u0027t be ever used to leak kernel memory via specially-crafted report.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50302"
},
{
"cve": "CVE-2024-50304",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ipv4: ip_tunnel: Suspicious RCU usage warning in ip_tunnel_find().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50304"
},
{
"cve": "CVE-2024-50602",
"cwe": {
"id": "CWE-754",
"name": "Improper Check for Unusual or Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-50602"
},
{
"cve": "CVE-2024-52332",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "igb: Fix potential invalid memory access in igb_init_module() The pci_register_driver() can fail and when this happened, the dca_notifier needs to be unregistered, otherwise the dca_notifier can be called when igb fails to install, resulting to invalid memory access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53052",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "io_uring/rw: vulnerability due to io_uring not checking for IOCB_NOWAIT when starting an O_DIRECT write, leading to potential deadlocks if the mount point is being frozen.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53052"
},
{
"cve": "CVE-2024-53057",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53057"
},
{
"cve": "CVE-2024-53059",
"cwe": {
"id": "CWE-460",
"name": "Improper Cleanup on Thrown Exception"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved:\r\n\r\nwifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()\r\n\r\n1. The size of the response packet is not validated.\r\n2. The response buffer is not freed.\r\n\r\nResolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53059"
},
{
"cve": "CVE-2024-53060",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: vulnerability due to a potential NULL pointer dereference in drm/amdgpu if acpi_evaluate_object() returns AE_NOT_FOUND, which is mitigated by bailing out when this status is encountered.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53060"
},
{
"cve": "CVE-2024-53061",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "summary",
"text": "media: s5p-jpeg: vulnerability due to the possibility of buffer overflows when the variable word is less than 2, which is prevented by adding extra checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53061"
},
{
"cve": "CVE-2024-53063",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: dvbdev: risk of out of memory access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53063"
},
{
"cve": "CVE-2024-53066",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nfs: KMSAN warning in decode_getfattr_attrs().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53066"
},
{
"cve": "CVE-2024-53097",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mm: krealloc: MTE false alarm in __do_krealloc.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53097"
},
{
"cve": "CVE-2024-53101",
"cwe": {
"id": "CWE-456",
"name": "Missing Initialization of a Variable"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr-\u003eia_mode, attr-\u003eia_uid and attr-\u003eia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren\u0027t set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53101"
},
{
"cve": "CVE-2024-53103",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer When hvs is released, there is a possibility that vsk-\u003etrans may not be initialized to NULL, which could lead to a dangling pointer.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53103"
},
{
"cve": "CVE-2024-53104",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in uvc_parse_streaming.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53104"
},
{
"cve": "CVE-2024-53145",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "um: potential integer overflow during physmem setup. This vulnerability happens when the real map size is greater than LONG_MAX, which can be easily triggered on UML/i386.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53145"
},
{
"cve": "CVE-2024-53146",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "NFSD: Prevent a potential integer overflow If the tag length is \u003e= U32_MAX - 3 then the \"length + 4\" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53146"
},
{
"cve": "CVE-2024-53148",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "comedi: Flush partial mappings in error case If some remap_pfn_range() calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buffer reference with comedi_buf_map_put(bm). The userspace mappings are only cleaned up later in the mmap error path.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53148"
},
{
"cve": "CVE-2024-53150",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "ALSA: usb-audio: out of bounds reads when finding clock sources The current USB-audio driver code doesn\u0027t check bLength of each descriptor at traversing for clock descriptors. That is, when a device provides a bogus descriptor with a shorter bLength, the driver might hit out-of-bounds reads. For addressing it, this patch adds sanity checks to the validator functions for the clock descriptor traversal. When the descriptor length is shorter than expected, it\u0027s skipped in the loop. For the clock source and clock multiplier descriptors, we can just check bLength against the sizeof() of each descriptor type.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:H/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53150"
},
{
"cve": "CVE-2024-53155",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: uninitialized value in ocfs2_file_read_iter().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53155"
},
{
"cve": "CVE-2024-53156",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53156"
},
{
"cve": "CVE-2024-53157",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "firmware: arm_scpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53157"
},
{
"cve": "CVE-2024-53158",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "soc: qcom: geni-se: array underflow in geni_se_clk_tbl_get() This loop is supposed to break if the frequency returned from clk_round_rate() is the same as on the previous iteration. However, that check doesn\u0027t make sense on the first iteration through the loop. It leads to reading before the start of these-\u003eclk_perf_tbl[] array.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53158"
},
{
"cve": "CVE-2024-53161",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "EDAC/bluefield: potential integer overflow The 64-bit argument for the \"get DIMM info\" SMC call consists of mem_ctrl_idx left-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as 32-bits wide the left-shift operation truncates the upper 16 bits of information during the calculation of the SMC argument. The mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any potential integer overflow, i.e. loss of data from upper 16 bits.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53161"
},
{
"cve": "CVE-2024-53165",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this function, d is freed without ever removing it from intc_list which would lead to a use after free. To fix this, let\u0027s only add it to the list after everything has succeeded.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53165"
},
{
"cve": "CVE-2024-53171",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ubifs: authentication: After an insertion in TNC, the tree might split and cause a node to change its `znode-\u003eparent`. A further deletion of other nodes in the tree (which also could free the nodes), the aforementioned node\u0027s `znode-\u003ecparent` could still point to a freed node. This `znode-\u003ecparent` may not be updated when getting nodes to commit in `ubifs_tnc_start_commit()`. This could then trigger a use-after-free when accessing the `znode-\u003ecparent` in `write_index()` in `ubifs_tnc_end_commit()`.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53171"
},
{
"cve": "CVE-2024-53172",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ubi: fastmap: The duplicate slab cache names can be detected and a kernel WARNING is thrown out.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53172"
},
{
"cve": "CVE-2024-53173",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "NFSv4.0: When two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfs_release_seqid() in nfs4_opendata_free() can result in a use-after-free of the pointer to the defunct rpc task of the other thread.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53173"
},
{
"cve": "CVE-2024-53174",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "SUNRPC: The function `c_show` was called with protection from RCU. This only ensures that `cp` will not be freed. Therefore, the reference count for `cp` can drop to zero, which will trigger a refcount use-after-free warning when `cache_get` is called.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53174"
},
{
"cve": "CVE-2024-53181",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "um: vector: The drvdata is not available in release",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53181"
},
{
"cve": "CVE-2024-53183",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "um: net: The drvdata is not available in release.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53183"
},
{
"cve": "CVE-2024-53184",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "um: ubd: The drvdata is not available in release.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53184"
},
{
"cve": "CVE-2024-53194",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "PCI: vulnerability causes a use-after-free error during hot removal of a USB4 dock due to improper handling of pci_slot and pci_bus references, which is fixed by ensuring pci_slot acquires a reference to pci_bus.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53194"
},
{
"cve": "CVE-2024-53197",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ALSA: usb-audio: vulnerability leading to out-of-bound accesses due to a bogus device providing an excessive bNumConfigurations value, which is fixed by ensuring proper allocation in usb_get_configuration.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53198",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "xen: issue of resource not being properly released in xenbus_dev_probe().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53198"
},
{
"cve": "CVE-2024-53214",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "vfio/pci: out-of-bounds access to ecap_perms array.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53214"
},
{
"cve": "CVE-2024-53217",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53217"
},
{
"cve": "CVE-2024-53226",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "RDMA/hns: vulnerability due to a potential NULL pointer dereference in hns_roce_map_mr_sg() because ib_map_mr_sg() allows upper layer protocols (ULPs) to specify NULL as the sg_offset argument, requiring the driver to check for NULL before dereferencing.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53226"
},
{
"cve": "CVE-2024-53227",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "scsi: bfa: use-after-free in bfad_im_module_exit().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-53237",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Bluetooth: vulnerability due to an use-after-free error in the device_for_each_child function, where a device may be accessed after it has been freed, potentially leading to a dangling pointer and system instability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53237"
},
{
"cve": "CVE-2024-53239",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ALSA: 6fire: The current 6fire code tries to release the resources right after the call of usb6fire_chip_abort(). But at this moment, the card object might be still in use (as we\u0027re calling snd_card_free_when_closed()) and cause potential UAFs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53239"
},
{
"cve": "CVE-2024-53240",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "xen/netfront: vulnerability causes a crash when removing a device after a suspend/resume cycle due to uninitialized queues, which is fixed by checking for the existence of queues before attempting to stop them.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53240"
},
{
"cve": "CVE-2024-53241",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "x86/xen: vulnerability due to issues with the PV iret hypercall through the hypercall page, which is fixed by directly coding the sequence in xen-asm.S to avoid problems with speculation mitigations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53241"
},
{
"cve": "CVE-2024-53680",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ipvs: vulnerability causes undefined behavior due to uninitialized stack access in ip_vs_protocol_init(), which is fixed by zeroing the on-stack buffer to prevent out-of-bound accesses.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-53680"
},
{
"cve": "CVE-2024-56531",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ALSA: caiaq: OTOH, the current code uses snd_card_free() at disconnection, but this waits for the close of all used fds, hence it can take long. It eventually blocks the upper layer USB ioctls, which may trigger a soft lockup.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56531"
},
{
"cve": "CVE-2024-56532",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ALSA: us122l: OTOH, the current code uses snd_card_free() at disconnection, but this waits for the close of all used fds, hence it can take long. It eventually blocks the upper layer USB ioctls, which may trigger a soft lockup.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ALSA: usx2y: The USB disconnect callback takes longer than it should. The current code uses snd_card_free() at disconnection, but this waits for the close of all used fds, hence it can take long. It eventually blocks the upper layer USB ioctls, which may trigger a soft lockup.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56539",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56539"
},
{
"cve": "CVE-2024-56548",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "hfsplus: Devices block sizes may change. One of these cases is a loop device by using ioctl LOOP_SET_BLOCK_SIZE. While this may cause other issues like IO being rejected, in the case of hfsplus, it will allocate a block by using that size and potentially write out-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the latter function reads a different io_size.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56548"
},
{
"cve": "CVE-2024-56558",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nfsd: make sure exp active before svc_export_show The function `e_show` was called with protection from RCU. This only ensures that `exp` will not be freed. Therefore, the reference count for `exp` can drop to zero, which will trigger a refcount use-after-free warning when `exp_get` is called.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56558"
},
{
"cve": "CVE-2024-56562",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "i3c: master: miss free init_dyn_addr at i3c_master_put_i3c_addrs().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56562"
},
{
"cve": "CVE-2024-56567",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "ad7780: division by zero in ad7780_write_raw() In the ad7780_write_raw() , val2 can be zero, which might lead to a division by zero error in DIV_ROUND_CLOSEST(). The ad7780_write_raw() is based on iio_info\u0027s write_raw. While val is explicitly declared that can be zero (in read mode), val2 is not specified to be non-zero.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56567"
},
{
"cve": "CVE-2024-56568",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "iommu/arm-smmu: Defer probe of clients after smmu device bound Null pointer dereference occurs due to a race between smmu driver probe and client driver probe, when of_dma_configure() for client is called after the iommu_device_register() for smmu driver probe has executed but before the driver_bound() for smmu driver has been called.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56568"
},
{
"cve": "CVE-2024-56569",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "ftrace: Fix regression with module command in stack_trace_filter When executing the following command: # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter The current mod command causes a null pointer dereference. While commit 0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\") has addressed part of the issue, it left a corner case unhandled, which still results in a kernel crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function.This is important because such inodes can cause errors in overlayfs when passed to the lowerstack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56571",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: uvcvideo: Require entities to have a non-zero unique ID.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56571"
},
{
"cve": "CVE-2024-56572",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "media: platform: allegro-dvt: possible memory leak in allocate_buffers_internal(). If The buffer in the loop is not released under the exception path, it may lead to a memory leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56572"
},
{
"cve": "CVE-2024-56574",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: ts2020: null-ptr-deref in ts2020_probe().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56576",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: i2c: tc358743: crash in the probe error path when using polling. If an error occurs in the probe() function, the polling timer that was alarmed earlier should be removed, otherwise the timer is called with arguments that are already freed, which results in a crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56576"
},
{
"cve": "CVE-2024-56581",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "btrfs: ref-verify: use-after-free after invalid ref action.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56581"
},
{
"cve": "CVE-2024-56586",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. creating a large files during checkpoint disable until it runs out of space and then delete it, then remount to enable checkpoint again, and then unmount the filesystem triggers the f2fs_bug_on.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56586"
},
{
"cve": "CVE-2024-56587",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "leds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex. There is NULL pointer vulnerability observed if from Process A where hid device being added which results in adding a led_cdev addition and later a another call to access of led_cdev attribute from Process B can result in NULL pointer vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56587"
},
{
"cve": "CVE-2024-56589",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "scsi: hisi_sas: Add cond_resched() for no forced preemption model. For no forced preemption model kernel, in the scenario where the expander is connected to 12 high performance SAS SSDs, a call trace may occur.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56589"
},
{
"cve": "CVE-2024-56593",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw(). This patch fixes a NULL pointer dereference bug in brcmfmac that occurs when a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs are sent from the pkt queue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "drm/amdgpu: set the right AMDGPU sg segment limitation. The driver needs to set the correct max_segment_size; otherwise debug_dma_map_sg() will complain about the over-mapping of the AMDGPU sg length.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56595",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree. When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56595"
},
{
"cve": "CVE-2024-56596",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "jfs: array-index-out-of-bounds in jfs_readdir. The stbl might contain some invalid values. Added a check to return error code in that case.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56596"
},
{
"cve": "CVE-2024-56597",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "jfs: fix shift-out-of-bounds in dbSplit. When dmt_budmin is less than zero, it causes errors in the later stages. Added a check to return an error beforehand in dbAllocCtl itself.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56597"
},
{
"cve": "CVE-2024-56598",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "jfs: array-index-out-of-bounds fix in dtReadFirst. The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56598"
},
{
"cve": "CVE-2024-56600",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "net: inet6: do not leave a dangling sk pointer in inet6_create() sock_init_data() attaches the allocated sk pointer to the provided sock object. If inet6_create() fails later, the sk object is released, but the sock object retains the dangling sk pointer, which may cause use-after-free later. Clear the sock sk pointer on error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net: inet: do not leave a dangling sk pointer in inet_create() sock_init_data() attaches the allocated sk object to the provided sock object. If inet_create() fails later, the sk object is freed, but the sock object retains the dangling pointer, which may create use-after-free later. Clear the sk pointer in the sock object on error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56602",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "net: ieee802154: do not leave a dangling sk pointer in ieee802154_create(). sock_init_data() attaches the allocated sk object to the provided sock object. If ieee802154_create() fails later, the allocated sk object is freed, but the dangling pointer remains in the provided sock object, which may allow use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2024-56603",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: af_can: do not leave a dangling sk pointer in can_create(). On error can_create() frees the allocated sk object, but sock_init_data() has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56603"
},
{
"cve": "CVE-2024-56605",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() bt_sock_alloc() allocates the sk object and attaches it to the provided sock object. On error l2cap_sock_alloc() frees the sk object, but the dangling pointer is still attached to the sock object, which may create use-after-free in other code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56605"
},
{
"cve": "CVE-2024-56606",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "af_packet: avoid erroring out after sock_init_data() in packet_create() After sock_init_data() the allocated sk object is attached to the provided sock object. On error, packet_create() frees the sk object leaving the dangling pointer in the sock object on return. Some other code may try to use this pointer and cause use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56610",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "kcsan: Turn report_filterlist_lock into a raw_spinlock, with a KCSAN-enabled PREEMPT_RT kernel, we can see splats like sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56610"
},
{
"cve": "CVE-2024-56615",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "bpf: OOB devmap writes when deleting elements against XSKMAP which also applies to DEVMAP - the index used for accessing map entry, due to being a signed integer, causes the OOB writes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56619",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nilfs2: When searching for records in a directory where the inode\u0027s i_size is corrupted and has a large value, memory access outside the folio/page range may occur, or a use-after-free bug may be detected if KASAN is enabled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56619"
},
{
"cve": "CVE-2024-56623",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "scsi: qla2xxx: System crash is observed with stack trace warning of use after free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56629",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "HID: wacom: Due to incorrect dev-\u003eproduct reporting by certain devices, null pointer dereferences occur when dev-\u003eproduct is empty, leading to potential system crashes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56629"
},
{
"cve": "CVE-2024-56630",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "ocfs2: iput() is not called when new_inode() succeeded and dquot_initialize() failed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56633",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tcp_bpf: The current sk memory accounting logic in __SK_REDIRECT is pre-uncharging tosend bytes, which is either msg-\u003esg.size or a smaller value apply_bytes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56633"
},
{
"cve": "CVE-2024-56634",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "gpio: grgpio: vulnerability due to a missing NULL check in grgpio_probe for the return value of devm_kasprintf(), leading to a kernel NULL pointer dereference error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56634"
},
{
"cve": "CVE-2024-56636",
"cwe": {
"id": "CWE-241",
"name": "Improper Handling of Unexpected Data Type"
},
"notes": [
{
"category": "summary",
"text": "geneve: vulnerability in geneve_xmit_skb() arises from incorrectly assuming the MAC header is set in the output path, which can lead to errors. The fix involves using skb_eth_hdr() instead of eth_hdr() to ensure the MAC header is correctly referenced, preventing potential issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56636"
},
{
"cve": "CVE-2024-56637",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "netfilter: ipset: vulnerability involves a race condition where the ip_set.ko module can be unloaded by user space while it is requesting a set type backend module, potentially causing a kernel crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56642",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tipc: vulnerability in TIPC (Transparent Inter-Process Communication) involves a use-after-free issue with the UDP kernel socket in cleanup_bearer(), caused by premature reference count decrements, which is resolved by moving the decrement after releasing the socket.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56642"
},
{
"cve": "CVE-2024-56643",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "dccp: vulnerability in DCCP (Datagram Congestion Control Protocol) involves a memory leak in dccp_feat_change_recv where memory allocated for a new SP feature value is not freed if dccp_feat_push_confirm() fails, leading to potential resource exhaustion.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56644",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6_negative_advice() when this function is executed for an expired IPv6 route located in the exception table.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56645",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "can: j1939: vulnerability involves a reference count underflow issue in j1939_session_new(), which is fixed by adding an extra skb_get() to match the behavior of j1939_session_skb_queue().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56645"
},
{
"cve": "CVE-2024-56648",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: hsr: avoid potential out-of-bound access in fill_frame_info(). By extending the check to cover packets with only 14 bytes, it prevents uninitialized values from causing undefined behavior or security issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56648"
},
{
"cve": "CVE-2024-56650",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix LED ID check in led_tg_check() Syzbot has reported the following BUG detected by KASAN",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56659",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "net: lapb: It is unclear if net/lapb code is supposed to be ready for 8021q, this may lead to crashes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56659"
},
{
"cve": "CVE-2024-56661",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "tipc: NULL deref in cleanup_bearer().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56670",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: gadget: u_serial: gs_start_io crashed due to accessing null pointer. Considering that in some extreme cases, when u_serial driver is accessed by multiple threads, Thread A is executing the open operation and calling the gs_open, Thread B is executing the disconnect operation and calling the gserial_disconnect function, the port-\u003eport_usb pointer will be set to NULL.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56670"
},
{
"cve": "CVE-2024-56681",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "crypto: bcm - add error check in the ahash_hmac_init function The ahash_init functions may return fails. The ahash_hmac_init should not return ok when ahash_init returns error.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56688",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport Since transport-\u003esock has been set to NULL during reset transport, XPRT_SOCK_UPD_TIMEOUT also needs to be cleared.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56688"
},
{
"cve": "CVE-2024-56690",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56690"
},
{
"cve": "CVE-2024-56691",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) flaws.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56691"
},
{
"cve": "CVE-2024-56698",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "usb: dwc3: gadget: looping of queued SG entries The dwc3_request-\u003enum_queued_sgs is decremented on completion. If a partially completed request is handled, then the dwc3_request-\u003enum_queued_sgs no longer reflects the total number of num_queued_sgs (it would be cleared).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56698"
},
{
"cve": "CVE-2024-56700",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: wl128x: Atomicity violation occurs when the fmc_send_cmd() function is executed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56701",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "powerpc/pseries: The dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because the code calls kmalloc() while holding it, which can sleep.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56701"
},
{
"cve": "CVE-2024-56704",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "9p/xen: A fix release of IRQ Kernel logs indicate an IRQ was double-freed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56704"
},
{
"cve": "CVE-2024-56705",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "media: atomisp: In ia_css_3a_statistics_allocate(), there is no check on the allocation result of the rgby_data memory. If rgby_data is not successfully allocated, it may trigger the assert(host_stats-\u003ergby_data) assertion in ia_css_s3a_hmem_decode().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56705"
},
{
"cve": "CVE-2024-56720",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "bpf, sockmap: Several fixes to bpf_msg_pop_data, 1. In sk_msg_shift_left, it should put_page 2. if (len == 0), returning early is better 3. pop the entire sk_msg (last == msg-\u003esg.size) should be supported 4. Fix for the value of variable \"a\" 5. In sk_msg_shift_left, after shifting, it has already pointed to the next element. Addtional sk_msg_iter_var_next may result in BUG.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56720"
},
{
"cve": "CVE-2024-56723",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices. While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) vulnerabilities. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56723"
},
{
"cve": "CVE-2024-56724",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device. While design wise the idea of converting the driver to use the hierarchy of the IRQ chips is correct, the implementation has (inherited) vulnerability. This was unveiled when platform_get_irq() had started WARN() on IRQ 0 that is supposed to be a Linux IRQ number (also known as vIRQ).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56724"
},
{
"cve": "CVE-2024-56728",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c. Add error pointer check after calling otx2_mbox_get_rsp().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56728"
},
{
"cve": "CVE-2024-56739",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "rtc: check if __rtc_read_time was successful in rtc_timer_do_work() If the __rtc_read_time call fails, the struct rtc_time tm; may contain uninitialized data, or an illegal date/time read from the RTC hardware. When calling rtc_tm_to_ktime later, the result may be a very large value (possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue, they will continually expire, may causing kernel softlockup.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56741",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "apparmor: test: Fix memory leak for aa_unpack_strdup() The string allocated by kmemdup() in aa_unpack_strdup() is not freed and cause following memory leaks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56741"
},
{
"cve": "CVE-2024-56746",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "fbdev: sh7760fb: vulnerability involves a potential memory leak in sh7760fb_alloc_mem() where sh7760fb_free_mem() does not release memory correctly if info-\u003escreen_base is not ready, which is fixed by calling dma_free_coherent() instead.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56746"
},
{
"cve": "CVE-2024-56747",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "scsi: qedi: vulnerability involves a potential memory leak in qedi_alloc_and_init_sb() where the DMA memory sb_virt is not released upon failure, which is fixed by adding dma_free_coherent() to free the memory, similar to other functions like qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "scsi: qedf: vulnerability involves a potential memory leak in qedf_alloc_and_init_sb() where the DMA memory sb_virt is not released upon failure, which is fixed by adding dma_free_coherent() to free the memory, similar to other functions like qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56754",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "crypto: vulnerability due to passing an incorrect parameter type to devm_add_action_or_reset() in the CAAM driver, which is fixed by ensuring the correct parameter type is used to properly release resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56754"
},
{
"cve": "CVE-2024-56756",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "nvme-pci: vulnerability involves an incorrect size being passed to dma_free_coherent in nvme-pci due to __nvme_alloc_host_mem potentially using fewer descriptors than planned, which is fixed by ensuring the correct size is used for freeing the HMB descriptor table.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56756"
},
{
"cve": "CVE-2024-56770",
"cwe": {
"id": "CWE-670",
"name": "Always-Incorrect Control Flow Implementation"
},
"notes": [
{
"category": "summary",
"text": "net/sched: netem: The interface fully stops transferring packets and \"locks\". In this case, the child qdisc and tfifo are empty, but \u0027qlen\u0027 indicates the tfifo is at its limit and no more packets are accepted.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56770"
},
{
"cve": "CVE-2024-56779",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\r\n\r\nThe action force umount(umount -f) will attempt to kill all rpc_task even\r\numount operation may ultimately fail if some files remain open.\r\nConsequently, if an action attempts to open a file, it can potentially\r\nsend two rpc_task to nfs server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"cwe": {
"id": "CWE-833",
"name": "Deadlock"
},
"notes": [
{
"category": "summary",
"text": "quota: flush quota_release_work upon quota writeback One of the paths quota writeback is called from is: freeze_super() sync_filesystem() ext4_sync_fs() dquot_writeback_dquots().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-56781",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "powerpc/prom_init: missing powermac #size-cells.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56781"
},
{
"cve": "CVE-2024-56785",
"cwe": {
"id": "CWE-129",
"name": "Improper Validation of Array Index"
},
"notes": [
{
"category": "summary",
"text": "MIPS: Loongson64: DTS: issues with PCIe port nodes for ls7a.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-56785"
},
{
"cve": "CVE-2024-57874",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"notes": [
{
"category": "summary",
"text": "arm64: ptrace: vulnerability due to an uninitialized variable in the tagged_addr_ctrl_set() function, leading to potential memory leakage from the kernel stack when a zero-length SETREGSET call is made, exposing up to 64 bits of memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V3.2 or later version",
"product_ids": [
"1",
"2",
"3"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109988839/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3"
]
}
],
"title": "CVE-2024-57874"
}
]
}
suse-su-2025:0565-1
Vulnerability from csaf_suse
Published
2025-02-17 13:28
Modified
2025-02-17 13:28
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (bsc#1224857).
- CVE-2021-47223: net: bridge: fix vlan tunnel dst null pointer dereference (bsc#1224856).
- CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1222072).
- CVE-2024-47809: dlm: fix possible lkb_resource null dereference (bsc#1235714).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
- CVE-2024-52332: igb: Fix potential invalid memory access in igb_init_module() (bsc#1235700).
- CVE-2024-53155: ocfs2: fix uninitialized value in ocfs2_file_read_iter() (bsc#1234855).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-55916: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (bsc#1235747).
- CVE-2024-56369: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (bsc#1235750).
- CVE-2024-56532: ALSA: us122l: Use snd_card_free_when_closed() at disconnection (bsc#1235059).
- CVE-2024-56533: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (bsc#1235053).
- CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (bsc#1234963).
- CVE-2024-56574: media: ts2020: fix null-ptr-deref in ts2020_probe() (bsc#1235040).
- CVE-2024-56593: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (bsc#1235252).
- CVE-2024-56594: drm/amdgpu: set the right AMDGPU sg segment limitation (bsc#1235413).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
- CVE-2024-56630: ocfs2: free inode when ocfs2_get_init_inode() fails (bsc#1235479).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56662: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (bsc#1235533).
- CVE-2024-56681: crypto: bcm - add error check in the ahash_hmac_init function (bsc#1235557).
- CVE-2024-56700: media: wl128x: Fix atomicity violation in fmc_send_cmd() (bsc#1235500).
- CVE-2024-56722: RDMA/hns: Fix cpu stuck caused by printings during reset (bsc#1235570).
- CVE-2024-56739: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (bsc#1235611).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-56769: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (bsc#1235155).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57890: RDMA/uverbs: Prevent integer overflow issue (bsc#1235919).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57899: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (bsc#1235924).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57922: drm/amd/display: Add check for granularity in dml ceil/floor helpers (bsc#1236080).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
The following non-security bugs were fixed:
- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
- drm/modes: Switch to 64bit maths to avoid integer overflow (bsc#1235750).
- vfio/pci: Lock external INTx masking ops (bsc#1222803).
- btrfs: fstests btrfs/309 fails on btrfs (bsc#1221282).
Patchnames
SUSE-2025-565,SUSE-SLE-HA-12-SP5-2025-565,SUSE-SLE-Live-Patching-12-SP5-2025-565,SUSE-SLE-SERVER-12-SP5-LTSS-2025-565,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-565
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (bsc#1224857).\n- CVE-2021-47223: net: bridge: fix vlan tunnel dst null pointer dereference (bsc#1224856).\n- CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1222072).\n- CVE-2024-47809: dlm: fix possible lkb_resource null dereference (bsc#1235714).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).\n- CVE-2024-50142: xfrm: validate new SA\u0027s prefixlen using SA family when sel.family is unset (bsc#1233028).\n- CVE-2024-52332: igb: Fix potential invalid memory access in igb_init_module() (bsc#1235700).\n- CVE-2024-53155: ocfs2: fix uninitialized value in ocfs2_file_read_iter() (bsc#1234855).\n- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).\n- CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).\n- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).\n- CVE-2024-55916: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (bsc#1235747).\n- CVE-2024-56369: drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (bsc#1235750).\n- CVE-2024-56532: ALSA: us122l: Use snd_card_free_when_closed() at disconnection (bsc#1235059).\n- CVE-2024-56533: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (bsc#1235053).\n- CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (bsc#1234963).\n- CVE-2024-56574: media: ts2020: fix null-ptr-deref in ts2020_probe() (bsc#1235040).\n- CVE-2024-56593: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (bsc#1235252).\n- CVE-2024-56594: drm/amdgpu: set the right AMDGPU sg segment limitation (bsc#1235413).\n- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).\n- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).\n- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).\n- CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).\n- CVE-2024-56630: ocfs2: free inode when ocfs2_get_init_inode() fails (bsc#1235479).\n- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).\n- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).\n- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).\n- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).\n- CVE-2024-56662: acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (bsc#1235533).\n- CVE-2024-56681: crypto: bcm - add error check in the ahash_hmac_init function (bsc#1235557).\n- CVE-2024-56700: media: wl128x: Fix atomicity violation in fmc_send_cmd() (bsc#1235500).\n- CVE-2024-56722: RDMA/hns: Fix cpu stuck caused by printings during reset (bsc#1235570).\n- CVE-2024-56739: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (bsc#1235611).\n- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).\n- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).\n- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).\n- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).\n- CVE-2024-56769: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (bsc#1235155).\n- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).\n- CVE-2024-57890: RDMA/uverbs: Prevent integer overflow issue (bsc#1235919).\n- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).\n- CVE-2024-57899: wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (bsc#1235924).\n- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).\n- CVE-2024-57922: drm/amd/display: Add check for granularity in dml ceil/floor helpers (bsc#1236080).\n- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).\n- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).\n- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).\n- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).\n- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).\n- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).\n- CVE-2025-21678: gtp: Destroy device along with udp socket\u0027s netns dismantle (bsc#1236698).\n- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).\n\nThe following non-security bugs were fixed:\n\n- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).\n- drm/modes: Switch to 64bit maths to avoid integer overflow (bsc#1235750).\n- vfio/pci: Lock external INTx masking ops (bsc#1222803).\n- btrfs: fstests btrfs/309 fails on btrfs (bsc#1221282).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-565,SUSE-SLE-HA-12-SP5-2025-565,SUSE-SLE-Live-Patching-12-SP5-2025-565,SUSE-SLE-SERVER-12-SP5-LTSS-2025-565,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-565",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0565-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:0565-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20250565-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:0565-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-February/020360.html"
},
{
"category": "self",
"summary": "SUSE Bug 1221282",
"url": "https://bugzilla.suse.com/1221282"
},
{
"category": "self",
"summary": "SUSE Bug 1222072",
"url": "https://bugzilla.suse.com/1222072"
},
{
"category": "self",
"summary": "SUSE Bug 1222803",
"url": "https://bugzilla.suse.com/1222803"
},
{
"category": "self",
"summary": "SUSE Bug 1224856",
"url": "https://bugzilla.suse.com/1224856"
},
{
"category": "self",
"summary": "SUSE Bug 1224857",
"url": "https://bugzilla.suse.com/1224857"
},
{
"category": "self",
"summary": "SUSE Bug 1232161",
"url": "https://bugzilla.suse.com/1232161"
},
{
"category": "self",
"summary": "SUSE Bug 1233028",
"url": "https://bugzilla.suse.com/1233028"
},
{
"category": "self",
"summary": "SUSE Bug 1234855",
"url": "https://bugzilla.suse.com/1234855"
},
{
"category": "self",
"summary": "SUSE Bug 1234901",
"url": "https://bugzilla.suse.com/1234901"
},
{
"category": "self",
"summary": "SUSE Bug 1234931",
"url": "https://bugzilla.suse.com/1234931"
},
{
"category": "self",
"summary": "SUSE Bug 1234934",
"url": "https://bugzilla.suse.com/1234934"
},
{
"category": "self",
"summary": "SUSE Bug 1234963",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "self",
"summary": "SUSE Bug 1235011",
"url": "https://bugzilla.suse.com/1235011"
},
{
"category": "self",
"summary": "SUSE Bug 1235040",
"url": "https://bugzilla.suse.com/1235040"
},
{
"category": "self",
"summary": "SUSE Bug 1235053",
"url": "https://bugzilla.suse.com/1235053"
},
{
"category": "self",
"summary": "SUSE Bug 1235059",
"url": "https://bugzilla.suse.com/1235059"
},
{
"category": "self",
"summary": "SUSE Bug 1235132",
"url": "https://bugzilla.suse.com/1235132"
},
{
"category": "self",
"summary": "SUSE Bug 1235155",
"url": "https://bugzilla.suse.com/1235155"
},
{
"category": "self",
"summary": "SUSE Bug 1235217",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "self",
"summary": "SUSE Bug 1235230",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "self",
"summary": "SUSE Bug 1235252",
"url": "https://bugzilla.suse.com/1235252"
},
{
"category": "self",
"summary": "SUSE Bug 1235413",
"url": "https://bugzilla.suse.com/1235413"
},
{
"category": "self",
"summary": "SUSE Bug 1235426",
"url": "https://bugzilla.suse.com/1235426"
},
{
"category": "self",
"summary": "SUSE Bug 1235430",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "self",
"summary": "SUSE Bug 1235433",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "self",
"summary": "SUSE Bug 1235464",
"url": "https://bugzilla.suse.com/1235464"
},
{
"category": "self",
"summary": "SUSE Bug 1235466",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "self",
"summary": "SUSE Bug 1235479",
"url": "https://bugzilla.suse.com/1235479"
},
{
"category": "self",
"summary": "SUSE Bug 1235500",
"url": "https://bugzilla.suse.com/1235500"
},
{
"category": "self",
"summary": "SUSE Bug 1235523",
"url": "https://bugzilla.suse.com/1235523"
},
{
"category": "self",
"summary": "SUSE Bug 1235526",
"url": "https://bugzilla.suse.com/1235526"
},
{
"category": "self",
"summary": "SUSE Bug 1235533",
"url": "https://bugzilla.suse.com/1235533"
},
{
"category": "self",
"summary": "SUSE Bug 1235557",
"url": "https://bugzilla.suse.com/1235557"
},
{
"category": "self",
"summary": "SUSE Bug 1235570",
"url": "https://bugzilla.suse.com/1235570"
},
{
"category": "self",
"summary": "SUSE Bug 1235611",
"url": "https://bugzilla.suse.com/1235611"
},
{
"category": "self",
"summary": "SUSE Bug 1235627",
"url": "https://bugzilla.suse.com/1235627"
},
{
"category": "self",
"summary": "SUSE Bug 1235638",
"url": "https://bugzilla.suse.com/1235638"
},
{
"category": "self",
"summary": "SUSE Bug 1235645",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "self",
"summary": "SUSE Bug 1235700",
"url": "https://bugzilla.suse.com/1235700"
},
{
"category": "self",
"summary": "SUSE Bug 1235714",
"url": "https://bugzilla.suse.com/1235714"
},
{
"category": "self",
"summary": "SUSE Bug 1235727",
"url": "https://bugzilla.suse.com/1235727"
},
{
"category": "self",
"summary": "SUSE Bug 1235747",
"url": "https://bugzilla.suse.com/1235747"
},
{
"category": "self",
"summary": "SUSE Bug 1235750",
"url": "https://bugzilla.suse.com/1235750"
},
{
"category": "self",
"summary": "SUSE Bug 1235919",
"url": "https://bugzilla.suse.com/1235919"
},
{
"category": "self",
"summary": "SUSE Bug 1235924",
"url": "https://bugzilla.suse.com/1235924"
},
{
"category": "self",
"summary": "SUSE Bug 1235948",
"url": "https://bugzilla.suse.com/1235948"
},
{
"category": "self",
"summary": "SUSE Bug 1235965",
"url": "https://bugzilla.suse.com/1235965"
},
{
"category": "self",
"summary": "SUSE Bug 1235967",
"url": "https://bugzilla.suse.com/1235967"
},
{
"category": "self",
"summary": "SUSE Bug 1236080",
"url": "https://bugzilla.suse.com/1236080"
},
{
"category": "self",
"summary": "SUSE Bug 1236096",
"url": "https://bugzilla.suse.com/1236096"
},
{
"category": "self",
"summary": "SUSE Bug 1236161",
"url": "https://bugzilla.suse.com/1236161"
},
{
"category": "self",
"summary": "SUSE Bug 1236182",
"url": "https://bugzilla.suse.com/1236182"
},
{
"category": "self",
"summary": "SUSE Bug 1236190",
"url": "https://bugzilla.suse.com/1236190"
},
{
"category": "self",
"summary": "SUSE Bug 1236192",
"url": "https://bugzilla.suse.com/1236192"
},
{
"category": "self",
"summary": "SUSE Bug 1236262",
"url": "https://bugzilla.suse.com/1236262"
},
{
"category": "self",
"summary": "SUSE Bug 1236698",
"url": "https://bugzilla.suse.com/1236698"
},
{
"category": "self",
"summary": "SUSE Bug 1236703",
"url": "https://bugzilla.suse.com/1236703"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47222 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-47223 page",
"url": "https://www.suse.com/security/cve/CVE-2021-47223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26644 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49948 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50142 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52332 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53155 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53197 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56369 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56533 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56539 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56574 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56593 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56594 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56600 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56601 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56623 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56637 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56641 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56643 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56650 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56661 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56662 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56681 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56700 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56722 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56747 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56748 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56759 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56763 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56769 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57890 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21653 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21664 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21678 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21682 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21682/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2025-02-17T13:28:23Z",
"generator": {
"date": "2025-02-17T13:28:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:0565-1",
"initial_release_date": "2025-02-17T13:28:23Z",
"revision_history": [
{
"date": "2025-02-17T13:28:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"product": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"product_id": "cluster-md-kmp-default-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-122.247.1.aarch64",
"product": {
"name": "dlm-kmp-default-4.12.14-122.247.1.aarch64",
"product_id": "dlm-kmp-default-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"product": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"product_id": "gfs2-kmp-default-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-default-4.12.14-122.247.1.aarch64",
"product_id": "kernel-default-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-default-base-4.12.14-122.247.1.aarch64",
"product_id": "kernel-default-base-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-default-devel-4.12.14-122.247.1.aarch64",
"product_id": "kernel-default-devel-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-default-extra-4.12.14-122.247.1.aarch64",
"product_id": "kernel-default-extra-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-kgraft-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-default-kgraft-4.12.14-122.247.1.aarch64",
"product_id": "kernel-default-kgraft-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-obs-build-4.12.14-122.247.1.aarch64",
"product_id": "kernel-obs-build-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-obs-qa-4.12.14-122.247.1.aarch64",
"product_id": "kernel-obs-qa-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-syms-4.12.14-122.247.1.aarch64",
"product_id": "kernel-syms-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-vanilla-4.12.14-122.247.1.aarch64",
"product_id": "kernel-vanilla-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-vanilla-base-4.12.14-122.247.1.aarch64",
"product_id": "kernel-vanilla-base-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-122.247.1.aarch64",
"product": {
"name": "kernel-vanilla-devel-4.12.14-122.247.1.aarch64",
"product_id": "kernel-vanilla-devel-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-122.247.1.aarch64",
"product": {
"name": "kselftests-kmp-default-4.12.14-122.247.1.aarch64",
"product_id": "kselftests-kmp-default-4.12.14-122.247.1.aarch64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"product": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"product_id": "ocfs2-kmp-default-4.12.14-122.247.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-4.12.14-122.247.1.noarch",
"product": {
"name": "kernel-devel-4.12.14-122.247.1.noarch",
"product_id": "kernel-devel-4.12.14-122.247.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-docs-4.12.14-122.247.1.noarch",
"product": {
"name": "kernel-docs-4.12.14-122.247.1.noarch",
"product_id": "kernel-docs-4.12.14-122.247.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-docs-html-4.12.14-122.247.1.noarch",
"product": {
"name": "kernel-docs-html-4.12.14-122.247.1.noarch",
"product_id": "kernel-docs-html-4.12.14-122.247.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-macros-4.12.14-122.247.1.noarch",
"product": {
"name": "kernel-macros-4.12.14-122.247.1.noarch",
"product_id": "kernel-macros-4.12.14-122.247.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-4.12.14-122.247.1.noarch",
"product": {
"name": "kernel-source-4.12.14-122.247.1.noarch",
"product_id": "kernel-source-4.12.14-122.247.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-4.12.14-122.247.1.noarch",
"product": {
"name": "kernel-source-vanilla-4.12.14-122.247.1.noarch",
"product_id": "kernel-source-vanilla-4.12.14-122.247.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"product": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"product_id": "cluster-md-kmp-default-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"product": {
"name": "dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"product_id": "dlm-kmp-default-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"product": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"product_id": "gfs2-kmp-default-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-debug-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-debug-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-debug-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-debug-base-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-debug-base-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-debug-base-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-debug-devel-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-debug-devel-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-default-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-default-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-default-base-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-default-base-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-default-devel-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-default-devel-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-default-extra-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-default-extra-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-default-kgraft-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-obs-build-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-obs-build-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-obs-qa-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-obs-qa-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-syms-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-syms-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-vanilla-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-vanilla-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-vanilla-base-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-vanilla-base-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kernel-vanilla-devel-4.12.14-122.247.1.ppc64le",
"product_id": "kernel-vanilla-devel-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"product": {
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"product_id": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-122.247.1.ppc64le",
"product": {
"name": "kselftests-kmp-default-4.12.14-122.247.1.ppc64le",
"product_id": "kselftests-kmp-default-4.12.14-122.247.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"product": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"product_id": "ocfs2-kmp-default-4.12.14-122.247.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"product": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"product_id": "cluster-md-kmp-default-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-122.247.1.s390x",
"product": {
"name": "dlm-kmp-default-4.12.14-122.247.1.s390x",
"product_id": "dlm-kmp-default-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-122.247.1.s390x",
"product": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.s390x",
"product_id": "gfs2-kmp-default-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-default-4.12.14-122.247.1.s390x",
"product_id": "kernel-default-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-default-base-4.12.14-122.247.1.s390x",
"product_id": "kernel-default-base-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-default-devel-4.12.14-122.247.1.s390x",
"product_id": "kernel-default-devel-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-default-extra-4.12.14-122.247.1.s390x",
"product_id": "kernel-default-extra-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-kgraft-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-default-kgraft-4.12.14-122.247.1.s390x",
"product_id": "kernel-default-kgraft-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"product_id": "kernel-default-kgraft-devel-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-man-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-default-man-4.12.14-122.247.1.s390x",
"product_id": "kernel-default-man-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-obs-build-4.12.14-122.247.1.s390x",
"product_id": "kernel-obs-build-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-obs-qa-4.12.14-122.247.1.s390x",
"product_id": "kernel-obs-qa-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-syms-4.12.14-122.247.1.s390x",
"product_id": "kernel-syms-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-vanilla-4.12.14-122.247.1.s390x",
"product_id": "kernel-vanilla-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-vanilla-base-4.12.14-122.247.1.s390x",
"product_id": "kernel-vanilla-base-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-vanilla-devel-4.12.14-122.247.1.s390x",
"product_id": "kernel-vanilla-devel-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-zfcpdump-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-zfcpdump-4.12.14-122.247.1.s390x",
"product_id": "kernel-zfcpdump-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-zfcpdump-man-4.12.14-122.247.1.s390x",
"product": {
"name": "kernel-zfcpdump-man-4.12.14-122.247.1.s390x",
"product_id": "kernel-zfcpdump-man-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"product": {
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"product_id": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-122.247.1.s390x",
"product": {
"name": "kselftests-kmp-default-4.12.14-122.247.1.s390x",
"product_id": "kselftests-kmp-default-4.12.14-122.247.1.s390x"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"product": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"product_id": "ocfs2-kmp-default-4.12.14-122.247.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"product": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"product_id": "cluster-md-kmp-default-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-122.247.1.x86_64",
"product": {
"name": "dlm-kmp-default-4.12.14-122.247.1.x86_64",
"product_id": "dlm-kmp-default-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"product": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"product_id": "gfs2-kmp-default-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-debug-4.12.14-122.247.1.x86_64",
"product_id": "kernel-debug-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-base-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-debug-base-4.12.14-122.247.1.x86_64",
"product_id": "kernel-debug-base-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-debug-devel-4.12.14-122.247.1.x86_64",
"product_id": "kernel-debug-devel-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-default-4.12.14-122.247.1.x86_64",
"product_id": "kernel-default-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-default-base-4.12.14-122.247.1.x86_64",
"product_id": "kernel-default-base-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-default-devel-4.12.14-122.247.1.x86_64",
"product_id": "kernel-default-devel-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-default-extra-4.12.14-122.247.1.x86_64",
"product_id": "kernel-default-extra-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"product_id": "kernel-default-kgraft-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"product_id": "kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-kvmsmall-4.12.14-122.247.1.x86_64",
"product_id": "kernel-kvmsmall-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-base-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-kvmsmall-base-4.12.14-122.247.1.x86_64",
"product_id": "kernel-kvmsmall-base-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-devel-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-kvmsmall-devel-4.12.14-122.247.1.x86_64",
"product_id": "kernel-kvmsmall-devel-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-obs-build-4.12.14-122.247.1.x86_64",
"product_id": "kernel-obs-build-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-obs-qa-4.12.14-122.247.1.x86_64",
"product_id": "kernel-obs-qa-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-syms-4.12.14-122.247.1.x86_64",
"product_id": "kernel-syms-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-vanilla-4.12.14-122.247.1.x86_64",
"product_id": "kernel-vanilla-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-vanilla-base-4.12.14-122.247.1.x86_64",
"product_id": "kernel-vanilla-base-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-122.247.1.x86_64",
"product": {
"name": "kernel-vanilla-devel-4.12.14-122.247.1.x86_64",
"product_id": "kernel-vanilla-devel-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"product": {
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"product_id": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-122.247.1.x86_64",
"product": {
"name": "kselftests-kmp-default-4.12.14-122.247.1.x86_64",
"product_id": "kselftests-kmp-default-4.12.14-122.247.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"product": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"product_id": "ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-live-patching:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-kgraft-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le"
},
"product_reference": "kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-kgraft-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x"
},
"product_reference": "kernel-default-kgraft-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-kgraft-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le"
},
"product_reference": "kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x"
},
"product_reference": "kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le"
},
"product_reference": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x"
},
"product_reference": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64"
},
"product_reference": "kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64"
},
"product_reference": "cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le"
},
"product_reference": "cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x"
},
"product_reference": "cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64"
},
"product_reference": "dlm-kmp-default-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le"
},
"product_reference": "dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x"
},
"product_reference": "dlm-kmp-default-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "dlm-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64"
},
"product_reference": "gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le"
},
"product_reference": "gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x"
},
"product_reference": "gfs2-kmp-default-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64"
},
"product_reference": "kernel-default-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le"
},
"product_reference": "kernel-default-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x"
},
"product_reference": "kernel-default-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64"
},
"product_reference": "kernel-default-base-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le"
},
"product_reference": "kernel-default-base-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x"
},
"product_reference": "kernel-default-base-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-base-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64"
},
"product_reference": "kernel-default-devel-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le"
},
"product_reference": "kernel-default-devel-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x"
},
"product_reference": "kernel-default-devel-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-devel-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-man-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x"
},
"product_reference": "kernel-default-man-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.12.14-122.247.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch"
},
"product_reference": "kernel-devel-4.12.14-122.247.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-4.12.14-122.247.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch"
},
"product_reference": "kernel-macros-4.12.14-122.247.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-4.12.14-122.247.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch"
},
"product_reference": "kernel-source-4.12.14-122.247.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64"
},
"product_reference": "kernel-syms-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le"
},
"product_reference": "kernel-syms-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x"
},
"product_reference": "kernel-syms-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-syms-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64"
},
"product_reference": "ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le"
},
"product_reference": "ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x"
},
"product_reference": "ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "dlm-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-base-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-default-devel-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.12.14-122.247.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch"
},
"product_reference": "kernel-devel-4.12.14-122.247.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-4.12.14-122.247.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch"
},
"product_reference": "kernel-macros-4.12.14-122.247.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-4.12.14-122.247.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch"
},
"product_reference": "kernel-source-4.12.14-122.247.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64"
},
"product_reference": "kernel-syms-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-122.247.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
},
"product_reference": "ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-47222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47222"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: fix vlan tunnel dst refcnt when egressing\n\nThe egress tunnel code uses dst_clone() and directly sets the result\nwhich is wrong because the entry might have 0 refcnt or be already deleted,\ncausing number of problems. It also triggers the WARN_ON() in dst_hold()[1]\nwhen a refcnt couldn\u0027t be taken. Fix it by using dst_hold_safe() and\nchecking if a reference was actually taken before setting the dst.\n\n[1] dmesg WARN_ON log and following refcnt errors\n WARNING: CPU: 5 PID: 38 at include/net/dst.h:230 br_handle_egress_vlan_tunnel+0x10b/0x134 [bridge]\n Modules linked in: 8021q garp mrp bridge stp llc bonding ipv6 virtio_net\n CPU: 5 PID: 38 Comm: ksoftirqd/5 Kdump: loaded Tainted: G W 5.13.0-rc3+ #360\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-1.fc33 04/01/2014\n RIP: 0010:br_handle_egress_vlan_tunnel+0x10b/0x134 [bridge]\n Code: e8 85 bc 01 e1 45 84 f6 74 90 45 31 f6 85 db 48 c7 c7 a0 02 19 a0 41 0f 94 c6 31 c9 31 d2 44 89 f6 e8 64 bc 01 e1 85 db 75 02 \u003c0f\u003e 0b 31 c9 31 d2 44 89 f6 48 c7 c7 70 02 19 a0 e8 4b bc 01 e1 49\n RSP: 0018:ffff8881003d39e8 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000\n RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffffa01902a0\n RBP: ffff8881040c6700 R08: 0000000000000000 R09: 0000000000000001\n R10: 2ce93d0054fe0d00 R11: 54fe0d00000e0000 R12: ffff888109515000\n R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000401\n FS: 0000000000000000(0000) GS:ffff88822bf40000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f42ba70f030 CR3: 0000000109926000 CR4: 00000000000006e0\n Call Trace:\n br_handle_vlan+0xbc/0xca [bridge]\n __br_forward+0x23/0x164 [bridge]\n deliver_clone+0x41/0x48 [bridge]\n br_handle_frame_finish+0x36f/0x3aa [bridge]\n ? skb_dst+0x2e/0x38 [bridge]\n ? br_handle_ingress_vlan_tunnel+0x3e/0x1c8 [bridge]\n ? br_handle_frame_finish+0x3aa/0x3aa [bridge]\n br_handle_frame+0x2c3/0x377 [bridge]\n ? __skb_pull+0x33/0x51\n ? vlan_do_receive+0x4f/0x36a\n ? br_handle_frame_finish+0x3aa/0x3aa [bridge]\n __netif_receive_skb_core+0x539/0x7c6\n ? __list_del_entry_valid+0x16e/0x1c2\n __netif_receive_skb_list_core+0x6d/0xd6\n netif_receive_skb_list_internal+0x1d9/0x1fa\n gro_normal_list+0x22/0x3e\n dev_gro_receive+0x55b/0x600\n ? detach_buf_split+0x58/0x140\n napi_gro_receive+0x94/0x12e\n virtnet_poll+0x15d/0x315 [virtio_net]\n __napi_poll+0x2c/0x1c9\n net_rx_action+0xe6/0x1fb\n __do_softirq+0x115/0x2d8\n run_ksoftirqd+0x18/0x20\n smpboot_thread_fn+0x183/0x19c\n ? smpboot_unregister_percpu_thread+0x66/0x66\n kthread+0x10a/0x10f\n ? kthread_mod_delayed_work+0xb6/0xb6\n ret_from_fork+0x22/0x30\n ---[ end trace 49f61b07f775fd2b ]---\n dst_release: dst:00000000c02d677a refcnt:-1\n dst_release underflow",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47222",
"url": "https://www.suse.com/security/cve/CVE-2021-47222"
},
{
"category": "external",
"summary": "SUSE Bug 1224857 for CVE-2021-47222",
"url": "https://bugzilla.suse.com/1224857"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2021-47222"
},
{
"cve": "CVE-2021-47223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-47223"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: fix vlan tunnel dst null pointer dereference\n\nThis patch fixes a tunnel_dst null pointer dereference due to lockless\naccess in the tunnel egress path. When deleting a vlan tunnel the\ntunnel_dst pointer is set to NULL without waiting a grace period (i.e.\nwhile it\u0027s still usable) and packets egressing are dereferencing it\nwithout checking. Use READ/WRITE_ONCE to annotate the lockless use of\ntunnel_id, use RCU for accessing tunnel_dst and make sure it is read\nonly once and checked in the egress path. The dst is already properly RCU\nprotected so we don\u0027t need to do anything fancy than to make sure\ntunnel_id and tunnel_dst are read only once and checked in the egress path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-47223",
"url": "https://www.suse.com/security/cve/CVE-2021-47223"
},
{
"category": "external",
"summary": "SUSE Bug 1224856 for CVE-2021-47223",
"url": "https://bugzilla.suse.com/1224856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2021-47223"
},
{
"cve": "CVE-2024-26644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26644"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: don\u0027t abort filesystem when attempting to snapshot deleted subvolume\n\nIf the source file descriptor to the snapshot ioctl refers to a deleted\nsubvolume, we get the following abort:\n\n BTRFS: Transaction aborted (error -2)\n WARNING: CPU: 0 PID: 833 at fs/btrfs/transaction.c:1875 create_pending_snapshot+0x1040/0x1190 [btrfs]\n Modules linked in: pata_acpi btrfs ata_piix libata scsi_mod virtio_net blake2b_generic xor net_failover virtio_rng failover scsi_common rng_core raid6_pq libcrc32c\n CPU: 0 PID: 833 Comm: t_snapshot_dele Not tainted 6.7.0-rc6 #2\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014\n RIP: 0010:create_pending_snapshot+0x1040/0x1190 [btrfs]\n RSP: 0018:ffffa09c01337af8 EFLAGS: 00010282\n RAX: 0000000000000000 RBX: ffff9982053e7c78 RCX: 0000000000000027\n RDX: ffff99827dc20848 RSI: 0000000000000001 RDI: ffff99827dc20840\n RBP: ffffa09c01337c00 R08: 0000000000000000 R09: ffffa09c01337998\n R10: 0000000000000003 R11: ffffffffb96da248 R12: fffffffffffffffe\n R13: ffff99820535bb28 R14: ffff99820b7bd000 R15: ffff99820381ea80\n FS: 00007fe20aadabc0(0000) GS:ffff99827dc00000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000559a120b502f CR3: 00000000055b6000 CR4: 00000000000006f0\n Call Trace:\n \u003cTASK\u003e\n ? create_pending_snapshot+0x1040/0x1190 [btrfs]\n ? __warn+0x81/0x130\n ? create_pending_snapshot+0x1040/0x1190 [btrfs]\n ? report_bug+0x171/0x1a0\n ? handle_bug+0x3a/0x70\n ? exc_invalid_op+0x17/0x70\n ? asm_exc_invalid_op+0x1a/0x20\n ? create_pending_snapshot+0x1040/0x1190 [btrfs]\n ? create_pending_snapshot+0x1040/0x1190 [btrfs]\n create_pending_snapshots+0x92/0xc0 [btrfs]\n btrfs_commit_transaction+0x66b/0xf40 [btrfs]\n btrfs_mksubvol+0x301/0x4d0 [btrfs]\n btrfs_mksnapshot+0x80/0xb0 [btrfs]\n __btrfs_ioctl_snap_create+0x1c2/0x1d0 [btrfs]\n btrfs_ioctl_snap_create_v2+0xc4/0x150 [btrfs]\n btrfs_ioctl+0x8a6/0x2650 [btrfs]\n ? kmem_cache_free+0x22/0x340\n ? do_sys_openat2+0x97/0xe0\n __x64_sys_ioctl+0x97/0xd0\n do_syscall_64+0x46/0xf0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n RIP: 0033:0x7fe20abe83af\n RSP: 002b:00007ffe6eff1360 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe20abe83af\n RDX: 00007ffe6eff23c0 RSI: 0000000050009417 RDI: 0000000000000003\n RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fe20ad16cd0\n R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\n R13: 00007ffe6eff13c0 R14: 00007fe20ad45000 R15: 0000559a120b6d58\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---\n BTRFS: error (device vdc: state A) in create_pending_snapshot:1875: errno=-2 No such entry\n BTRFS info (device vdc: state EA): forced readonly\n BTRFS warning (device vdc: state EA): Skipping commit of aborted transaction.\n BTRFS: error (device vdc: state EA) in cleanup_transaction:2055: errno=-2 No such entry\n\nThis happens because create_pending_snapshot() initializes the new root\nitem as a copy of the source root item. This includes the refs field,\nwhich is 0 for a deleted subvolume. The call to btrfs_insert_root()\ntherefore inserts a root with refs == 0. btrfs_get_new_fs_root() then\nfinds the root and returns -ENOENT if refs == 0, which causes\ncreate_pending_snapshot() to abort.\n\nFix it by checking the source root\u0027s refs before attempting the\nsnapshot, but after locking subvol_sem to avoid racing with deletion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26644",
"url": "https://www.suse.com/security/cve/CVE-2024-26644"
},
{
"category": "external",
"summary": "SUSE Bug 1222072 for CVE-2024-26644",
"url": "https://bugzilla.suse.com/1222072"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-26644"
},
{
"cve": "CVE-2024-47809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix possible lkb_resource null dereference\n\nThis patch fixes a possible null pointer dereference when this function is\ncalled from request_lock() as lkb-\u003elkb_resource is not assigned yet,\nonly after validate_lock_args() by calling attach_lkb(). Another issue\nis that a resource name could be a non printable bytearray and we cannot\nassume to be ASCII coded.\n\nThe log functionality is probably never being hit when DLM is used in\nnormal way and no debug logging is enabled. The null pointer dereference\ncan only occur on a new created lkb that does not have the resource\nassigned yet, it probably never hits the null pointer dereference but we\nshould be sure that other changes might not change this behaviour and we\nactually can hit the mentioned null pointer dereference.\n\nIn this patch we just drop the printout of the resource name, the lkb id\nis enough to make a possible connection to a resource name if this\nexists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47809",
"url": "https://www.suse.com/security/cve/CVE-2024-47809"
},
{
"category": "external",
"summary": "SUSE Bug 1235714 for CVE-2024-47809",
"url": "https://bugzilla.suse.com/1235714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-47809"
},
{
"cve": "CVE-2024-48881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721 if (!IS_ERR_OR_NULL(c-\u003eroot))\n1722 list_add(\u0026c-\u003eroot-\u003elist, \u0026c-\u003ebtree_cache);\n\n\u003eFrom the above code in cache_set_flush(), if previous registration code\nfails before allocating c-\u003eroot, it is possible c-\u003eroot is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc-\u003eroot is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48881",
"url": "https://www.suse.com/security/cve/CVE-2024-48881"
},
{
"category": "external",
"summary": "SUSE Bug 1235727 for CVE-2024-48881",
"url": "https://bugzilla.suse.com/1235727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: add more sanity checks to qdisc_pkt_len_init()\n\nOne path takes care of SKB_GSO_DODGY, assuming\nskb-\u003elen is bigger than hdr_len.\n\nvirtio_net_hdr_to_skb() does not fully dissect TCP headers,\nit only make sure it is at least 20 bytes.\n\nIt is possible for an user to provide a malicious \u0027GSO\u0027 packet,\ntotal length of 80 bytes.\n\n- 20 bytes of IPv4 header\n- 60 bytes TCP header\n- a small gso_size like 8\n\nvirtio_net_hdr_to_skb() would declare this packet as a normal\nGSO packet, because it would see 40 bytes of payload,\nbigger than gso_size.\n\nWe need to make detect this case to not underflow\nqdisc_skb_cb(skb)-\u003epkt_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49948",
"url": "https://www.suse.com/security/cve/CVE-2024-49948"
},
{
"category": "external",
"summary": "SUSE Bug 1232161 for CVE-2024-49948",
"url": "https://bugzilla.suse.com/1232161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-50142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50142"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: validate new SA\u0027s prefixlen using SA family when sel.family is unset\n\nThis expands the validation introduced in commit 07bf7908950a (\"xfrm:\nValidate address prefix lengths in the xfrm selector.\")\n\nsyzbot created an SA with\n usersa.sel.family = AF_UNSPEC\n usersa.sel.prefixlen_s = 128\n usersa.family = AF_INET\n\nBecause of the AF_UNSPEC selector, verify_newsa_info doesn\u0027t put\nlimits on prefixlen_{s,d}. But then copy_from_user_state sets\nx-\u003esel.family to usersa.family (AF_INET). Do the same conversion in\nverify_newsa_info before validating prefixlen_{s,d}, since that\u0027s how\nprefixlen is going to be used later on.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50142",
"url": "https://www.suse.com/security/cve/CVE-2024-50142"
},
{
"category": "external",
"summary": "SUSE Bug 1233028 for CVE-2024-50142",
"url": "https://bugzilla.suse.com/1233028"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-50142"
},
{
"cve": "CVE-2024-52332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52332",
"url": "https://www.suse.com/security/cve/CVE-2024-52332"
},
{
"category": "external",
"summary": "SUSE Bug 1235700 for CVE-2024-52332",
"url": "https://bugzilla.suse.com/1235700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53155"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix uninitialized value in ocfs2_file_read_iter()\n\nSyzbot has reported the following KMSAN splat:\n\nBUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80\n ocfs2_file_read_iter+0x9a4/0xf80\n __io_read+0x8d4/0x20f0\n io_read+0x3e/0xf0\n io_issue_sqe+0x42b/0x22c0\n io_wq_submit_work+0xaf9/0xdc0\n io_worker_handle_work+0xd13/0x2110\n io_wq_worker+0x447/0x1410\n ret_from_fork+0x6f/0x90\n ret_from_fork_asm+0x1a/0x30\n\nUninit was created at:\n __alloc_pages_noprof+0x9a7/0xe00\n alloc_pages_mpol_noprof+0x299/0x990\n alloc_pages_noprof+0x1bf/0x1e0\n allocate_slab+0x33a/0x1250\n ___slab_alloc+0x12ef/0x35e0\n kmem_cache_alloc_bulk_noprof+0x486/0x1330\n __io_alloc_req_refill+0x84/0x560\n io_submit_sqes+0x172f/0x2f30\n __se_sys_io_uring_enter+0x406/0x41c0\n __x64_sys_io_uring_enter+0x11f/0x1a0\n x64_sys_call+0x2b54/0x3ba0\n do_syscall_64+0xcd/0x1e0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nSince an instance of \u0027struct kiocb\u0027 may be passed from the block layer\nwith \u0027private\u0027 field uninitialized, introduce \u0027ocfs2_iocb_init_rw_locked()\u0027\nand use it from where \u0027ocfs2_dio_end_io()\u0027 might take care, i.e. in\n\u0027ocfs2_file_read_iter()\u0027 and \u0027ocfs2_file_write_iter()\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53155",
"url": "https://www.suse.com/security/cve/CVE-2024-53155"
},
{
"category": "external",
"summary": "SUSE Bug 1234855 for CVE-2024-53155",
"url": "https://bugzilla.suse.com/1234855"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-53155"
},
{
"cve": "CVE-2024-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix NULL ptr deref in crypto_aead_setkey()\n\nNeither SMB3.0 or SMB3.02 supports encryption negotiate context, so\nwhen SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response,\nthe client uses AES-128-CCM as the default cipher. See MS-SMB2\n3.3.5.4.\n\nCommit b0abcd65ec54 (\"smb: client: fix UAF in async decryption\") added\na @server-\u003ecipher_type check to conditionally call\nsmb3_crypto_aead_allocate(), but that check would always be false as\n@server-\u003ecipher_type is unset for SMB3.02.\n\nFix the following KASAN splat by setting @server-\u003ecipher_type for\nSMB3.02 as well.\n\nmount.cifs //srv/share /mnt -o vers=3.02,seal,...\n\nBUG: KASAN: null-ptr-deref in crypto_aead_setkey+0x2c/0x130\nRead of size 8 at addr 0000000000000020 by task mount.cifs/1095\nCPU: 1 UID: 0 PID: 1095 Comm: mount.cifs Not tainted 6.12.0 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? crypto_aead_setkey+0x2c/0x130\n kasan_report+0xda/0x110\n ? crypto_aead_setkey+0x2c/0x130\n crypto_aead_setkey+0x2c/0x130\n crypt_message+0x258/0xec0 [cifs]\n ? __asan_memset+0x23/0x50\n ? __pfx_crypt_message+0x10/0x10 [cifs]\n ? mark_lock+0xb0/0x6a0\n ? hlock_class+0x32/0xb0\n ? mark_lock+0xb0/0x6a0\n smb3_init_transform_rq+0x352/0x3f0 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n smb_send_rqst+0x144/0x230 [cifs]\n ? __pfx_smb_send_rqst+0x10/0x10 [cifs]\n ? hlock_class+0x32/0xb0\n ? smb2_setup_request+0x225/0x3a0 [cifs]\n ? __pfx_cifs_compound_last_callback+0x10/0x10 [cifs]\n compound_send_recv+0x59b/0x1140 [cifs]\n ? __pfx_compound_send_recv+0x10/0x10 [cifs]\n ? __create_object+0x5e/0x90\n ? hlock_class+0x32/0xb0\n ? do_raw_spin_unlock+0x9a/0xf0\n cifs_send_recv+0x23/0x30 [cifs]\n SMB2_tcon+0x3ec/0xb30 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? __pfx_lock_release+0x10/0x10\n ? do_raw_spin_trylock+0xc6/0x120\n ? lock_acquire+0x3f/0x90\n ? _get_xid+0x16/0xd0 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n ? __pfx_cifs_get_smb_ses+0x10/0x10 [cifs]\n ? cifs_get_tcp_session+0xaa0/0xca0 [cifs]\n cifs_mount_get_session+0x8a/0x210 [cifs]\n dfs_mount_share+0x1b0/0x11d0 [cifs]\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_dfs_mount_share+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? lock_release+0x203/0x5d0\n cifs_mount+0xb3/0x3d0 [cifs]\n ? do_raw_spin_trylock+0xc6/0x120\n ? __pfx_cifs_mount+0x10/0x10 [cifs]\n ? lock_acquire+0x3f/0x90\n ? find_nls+0x16/0xa0\n ? smb3_update_mnt_flags+0x372/0x3b0 [cifs]\n cifs_smb3_do_mount+0x1e2/0xc80 [cifs]\n ? __pfx_vfs_parse_fs_string+0x10/0x10\n ? __pfx_cifs_smb3_do_mount+0x10/0x10 [cifs]\n smb3_get_tree+0x1bf/0x330 [cifs]\n vfs_get_tree+0x4a/0x160\n path_mount+0x3c1/0xfb0\n ? kasan_quarantine_put+0xc7/0x1d0\n ? __pfx_path_mount+0x10/0x10\n ? kmem_cache_free+0x118/0x3e0\n ? user_path_at+0x74/0xa0\n __x64_sys_mount+0x1a6/0x1e0\n ? __pfx___x64_sys_mount+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53185",
"url": "https://www.suse.com/security/cve/CVE-2024-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1234901 for CVE-2024-53185",
"url": "https://bugzilla.suse.com/1234901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-53185"
},
{
"cve": "CVE-2024-53197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53197"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev-\u003econfig.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53197",
"url": "https://www.suse.com/security/cve/CVE-2024-53197"
},
{
"category": "external",
"summary": "SUSE Bug 1235464 for CVE-2024-53197",
"url": "https://bugzilla.suse.com/1235464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n error = bfad_im_module_init()\n fc_release_transport(bfad_im_scsi_transport_template);\n if (error)\n goto ext;\n\next:\n bfad_im_module_exit();\n fc_release_transport(bfad_im_scsi_transport_template);\n --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53227",
"url": "https://www.suse.com/security/cve/CVE-2024-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1235011 for CVE-2024-53227",
"url": "https://bugzilla.suse.com/1235011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-55916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet\n\nIf the KVP (or VSS) daemon starts before the VMBus channel\u0027s ringbuffer is\nfully initialized, we can hit the panic below:\n\nhv_utils: Registering HyperV Utility Driver\nhv_vmbus: registering driver hv_utils\n...\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1\nRIP: 0010:hv_pkt_iter_first+0x12/0xd0\nCall Trace:\n...\n vmbus_recvpacket\n hv_kvp_onchannelcallback\n vmbus_on_event\n tasklet_action_common\n tasklet_action\n handle_softirqs\n irq_exit_rcu\n sysvec_hyperv_stimer0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_hyperv_stimer0\n...\n kvp_register_done\n hvt_op_read\n vfs_read\n ksys_read\n __x64_sys_read\n\nThis can happen because the KVP/VSS channel callback can be invoked\neven before the channel is fully opened:\n1) as soon as hv_kvp_init() -\u003e hvutil_transport_init() creates\n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and\nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the\nfile (which is handled by kvp_on_msg() -\u003ekvp_handle_handshake()) and\nreading the file for the driver\u0027s response, which is handled by\nhvt_op_read(), which calls hvt-\u003eon_read(), i.e. kvp_register_done().\n\n2) the problem with kvp_register_done() is that it can cause the\nchannel callback to be called even before the channel is fully opened,\nand when the channel callback is starting to run, util_probe()-\u003e\nvmbus_open() may have not initialized the ringbuffer yet, so the\ncallback can hit the panic of NULL pointer dereference.\n\nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in\n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we\nunload and reload the driver hv_utils, and run the daemon manually within\nthe 10 seconds.\n\nFix the panic by reordering the steps in util_probe() so the char dev\nentry used by the KVP or VSS daemon is not created until after\nvmbus_open() has completed. This reordering prevents the race condition\nfrom happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55916",
"url": "https://www.suse.com/security/cve/CVE-2024-55916"
},
{
"category": "external",
"summary": "SUSE Bug 1235747 for CVE-2024-55916",
"url": "https://bugzilla.suse.com/1235747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-55916"
},
{
"cve": "CVE-2024-56369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/modes: Avoid divide by zero harder in drm_mode_vrefresh()\n\ndrm_mode_vrefresh() is trying to avoid divide by zero\nby checking whether htotal or vtotal are zero. But we may\nstill end up with a div-by-zero of vtotal*htotal*...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56369",
"url": "https://www.suse.com/security/cve/CVE-2024-56369"
},
{
"category": "external",
"summary": "SUSE Bug 1235750 for CVE-2024-56369",
"url": "https://bugzilla.suse.com/1235750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56369"
},
{
"cve": "CVE-2024-56532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: us122l: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThe loop of us122l-\u003emmap_count check is dropped as well. The check is\nuseless for the asynchronous operation with *_when_closed().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56532",
"url": "https://www.suse.com/security/cve/CVE-2024-56532"
},
{
"category": "external",
"summary": "SUSE Bug 1235059 for CVE-2024-56532",
"url": "https://bugzilla.suse.com/1235059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "low"
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56533"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56533",
"url": "https://www.suse.com/security/cve/CVE-2024-56533"
},
{
"category": "external",
"summary": "SUSE Bug 1235053 for CVE-2024-56533",
"url": "https://bugzilla.suse.com/1235053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "low"
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56539"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()\n\nReplace one-element array with a flexible-array member in `struct\nmwifiex_ie_types_wildcard_ssid_params` to fix the following warning\non a MT8173 Chromebook (mt8173-elm-hana):\n\n[ 356.775250] ------------[ cut here ]------------\n[ 356.784543] memcpy: detected field-spanning write (size 6) of single field \"wildcard_ssid_tlv-\u003essid\" at drivers/net/wireless/marvell/mwifiex/scan.c:904 (size 1)\n[ 356.813403] WARNING: CPU: 3 PID: 742 at drivers/net/wireless/marvell/mwifiex/scan.c:904 mwifiex_scan_networks+0x4fc/0xf28 [mwifiex]\n\nThe \"(size 6)\" above is exactly the length of the SSID of the network\nthis device was connected to. The source of the warning looks like:\n\n ssid_len = user_scan_in-\u003essid_list[i].ssid_len;\n [...]\n memcpy(wildcard_ssid_tlv-\u003essid,\n user_scan_in-\u003essid_list[i].ssid, ssid_len);\n\nThere is a #define WILDCARD_SSID_TLV_MAX_SIZE that uses sizeof() on this\nstruct, but it already didn\u0027t account for the size of the one-element\narray, so it doesn\u0027t need to be changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56539",
"url": "https://www.suse.com/security/cve/CVE-2024-56539"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234963 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "external",
"summary": "SUSE Bug 1234964 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "important"
}
],
"title": "CVE-2024-56539"
},
{
"cve": "CVE-2024-56574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56574"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ts2020: fix null-ptr-deref in ts2020_probe()\n\nKASAN reported a null-ptr-deref issue when executing the following\ncommand:\n\n # echo ts2020 0x20 \u003e /sys/bus/i2c/devices/i2c-0/new_device\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]\n RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809\n RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010\n RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6\n R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790\n R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001\n FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n ts2020_probe+0xad/0xe10 [ts2020]\n i2c_device_probe+0x421/0xb40\n really_probe+0x266/0x850\n ...\n\nThe cause of the problem is that when using sysfs to dynamically register\nan i2c device, there is no platform data, but the probe process of ts2020\nneeds to use platform data, resulting in a null pointer being accessed.\n\nSolve this problem by adding checks to platform data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56574",
"url": "https://www.suse.com/security/cve/CVE-2024-56574"
},
{
"category": "external",
"summary": "SUSE Bug 1235040 for CVE-2024-56574",
"url": "https://bugzilla.suse.com/1235040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56593"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()\n\nThis patch fixes a NULL pointer dereference bug in brcmfmac that occurs\nwhen a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs\nare sent from the pkt queue.\n\nThe problem is the number of entries in the pre-allocated sgtable, it is\nnents = max(rxglom_size, txglom_size) + max(rxglom_size, txglom_size) \u003e\u003e 4 + 1.\nGiven the default [rt]xglom_size=32 it\u0027s actually 35 which is too small.\nWorst case, the pkt queue can end up with 64 SKBs. This occurs when a new SKB\nis added for each original SKB if tailroom isn\u0027t enough to hold tail_pad.\nAt least one sg entry is needed for each SKB. So, eventually the \"skb_queue_walk loop\"\nin brcmf_sdiod_sglist_rw may run out of sg entries. This makes sg_next return\nNULL and this causes the oops.\n\nThe patch sets nents to max(rxglom_size, txglom_size) * 2 to be able handle\nthe worst-case.\nBtw. this requires only 64-35=29 * 16 (or 20 if CONFIG_NEED_SG_DMA_LENGTH) = 464\nadditional bytes of memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56593",
"url": "https://www.suse.com/security/cve/CVE-2024-56593"
},
{
"category": "external",
"summary": "SUSE Bug 1235252 for CVE-2024-56593",
"url": "https://bugzilla.suse.com/1235252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56594"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: set the right AMDGPU sg segment limitation\n\nThe driver needs to set the correct max_segment_size;\notherwise debug_dma_map_sg() will complain about the\nover-mapping of the AMDGPU sg length as following:\n\nWARNING: CPU: 6 PID: 1964 at kernel/dma/debug.c:1178 debug_dma_map_sg+0x2dc/0x370\n[ 364.049444] Modules linked in: veth amdgpu(OE) amdxcp drm_exec gpu_sched drm_buddy drm_ttm_helper ttm(OE) drm_suballoc_helper drm_display_helper drm_kms_helper i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc amd_atl intel_rapl_msr intel_rapl_common sunrpc sch_fq_codel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd binfmt_misc snd_hda_codec snd_pci_acp6x snd_hda_core snd_acp_config snd_hwdep snd_soc_acpi kvm_amd snd_pcm kvm snd_seq_midi snd_seq_midi_event crct10dif_pclmul ghash_clmulni_intel sha512_ssse3 snd_rawmidi sha256_ssse3 sha1_ssse3 aesni_intel snd_seq nls_iso8859_1 crypto_simd snd_seq_device cryptd snd_timer rapl input_leds snd\n[ 364.049532] ipmi_devintf wmi_bmof ccp serio_raw k10temp sp5100_tco soundcore ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 364.049576] CPU: 6 PID: 1964 Comm: rocminfo Tainted: G OE 6.10.0-custom #492\n[ 364.049579] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 364.049582] RIP: 0010:debug_dma_map_sg+0x2dc/0x370\n[ 364.049585] Code: 89 4d b8 e8 36 b1 86 00 8b 4d b8 48 8b 55 b0 44 8b 45 a8 4c 8b 4d a0 48 89 c6 48 c7 c7 00 4b 74 bc 4c 89 4d b8 e8 b4 73 f3 ff \u003c0f\u003e 0b 4c 8b 4d b8 8b 15 c8 2c b8 01 85 d2 0f 85 ee fd ff ff 8b 05\n[ 364.049588] RSP: 0018:ffff9ca600b57ac0 EFLAGS: 00010286\n[ 364.049590] RAX: 0000000000000000 RBX: ffff88b7c132b0c8 RCX: 0000000000000027\n[ 364.049592] RDX: ffff88bb0f521688 RSI: 0000000000000001 RDI: ffff88bb0f521680\n[ 364.049594] RBP: ffff9ca600b57b20 R08: 000000000000006f R09: ffff9ca600b57930\n[ 364.049596] R10: ffff9ca600b57928 R11: ffffffffbcb46328 R12: 0000000000000000\n[ 364.049597] R13: 0000000000000001 R14: ffff88b7c19c0700 R15: ffff88b7c9059800\n[ 364.049599] FS: 00007fb2d3516e80(0000) GS:ffff88bb0f500000(0000) knlGS:0000000000000000\n[ 364.049601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 364.049603] CR2: 000055610bd03598 CR3: 00000001049f6000 CR4: 0000000000350ef0\n[ 364.049605] Call Trace:\n[ 364.049607] \u003cTASK\u003e\n[ 364.049609] ? show_regs+0x6d/0x80\n[ 364.049614] ? __warn+0x8c/0x140\n[ 364.049618] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049621] ? report_bug+0x193/0x1a0\n[ 364.049627] ? handle_bug+0x46/0x80\n[ 364.049631] ? exc_invalid_op+0x1d/0x80\n[ 364.049635] ? asm_exc_invalid_op+0x1f/0x30\n[ 364.049642] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049647] __dma_map_sg_attrs+0x90/0xe0\n[ 364.049651] dma_map_sgtable+0x25/0x40\n[ 364.049654] amdgpu_bo_move+0x59a/0x850 [amdgpu]\n[ 364.049935] ? srso_return_thunk+0x5/0x5f\n[ 364.049939] ? amdgpu_ttm_tt_populate+0x5d/0xc0 [amdgpu]\n[ 364.050095] ttm_bo_handle_move_mem+0xc3/0x180 [ttm]\n[ 364.050103] ttm_bo_validate+0xc1/0x160 [ttm]\n[ 364.050108] ? amdgpu_ttm_tt_get_user_pages+0xe5/0x1b0 [amdgpu]\n[ 364.050263] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0xa12/0xc90 [amdgpu]\n[ 364.050473] kfd_ioctl_alloc_memory_of_gpu+0x16b/0x3b0 [amdgpu]\n[ 364.050680] kfd_ioctl+0x3c2/0x530 [amdgpu]\n[ 364.050866] ? __pfx_kfd_ioctl_alloc_memory_of_gpu+0x10/0x10 [amdgpu]\n[ 364.05105\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56594",
"url": "https://www.suse.com/security/cve/CVE-2024-56594"
},
{
"category": "external",
"summary": "SUSE Bug 1235413 for CVE-2024-56594",
"url": "https://bugzilla.suse.com/1235413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet6: do not leave a dangling sk pointer in inet6_create()\n\nsock_init_data() attaches the allocated sk pointer to the provided sock\nobject. If inet6_create() fails later, the sk object is released, but the\nsock object retains the dangling sk pointer, which may cause use-after-free\nlater.\n\nClear the sock sk pointer on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56600",
"url": "https://www.suse.com/security/cve/CVE-2024-56600"
},
{
"category": "external",
"summary": "SUSE Bug 1235217 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "external",
"summary": "SUSE Bug 1235218 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "important"
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56601"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet: do not leave a dangling sk pointer in inet_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If inet_create() fails later, the sk object is freed, but the\nsock object retains the dangling pointer, which may create use-after-free\nlater.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56601",
"url": "https://www.suse.com/security/cve/CVE-2024-56601"
},
{
"category": "external",
"summary": "SUSE Bug 1235230 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "external",
"summary": "SUSE Bug 1235231 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235231"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "important"
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix OOB devmap writes when deleting elements\n\nJordy reported issue against XSKMAP which also applies to DEVMAP - the\nindex used for accessing map entry, due to being a signed integer,\ncauses the OOB writes. Fix is simple as changing the type from int to\nu32, however, when compared to XSKMAP case, one more thing needs to be\naddressed.\n\nWhen map is released from system via dev_map_free(), we iterate through\nall of the entries and an iterator variable is also an int, which\nimplies OOB accesses. Again, change it to be u32.\n\nExample splat below:\n\n[ 160.724676] BUG: unable to handle page fault for address: ffffc8fc2c001000\n[ 160.731662] #PF: supervisor read access in kernel mode\n[ 160.736876] #PF: error_code(0x0000) - not-present page\n[ 160.742095] PGD 0 P4D 0\n[ 160.744678] Oops: Oops: 0000 [#1] PREEMPT SMP\n[ 160.749106] CPU: 1 UID: 0 PID: 520 Comm: kworker/u145:12 Not tainted 6.12.0-rc1+ #487\n[ 160.757050] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[ 160.767642] Workqueue: events_unbound bpf_map_free_deferred\n[ 160.773308] RIP: 0010:dev_map_free+0x77/0x170\n[ 160.777735] Code: 00 e8 fd 91 ed ff e8 b8 73 ed ff 41 83 7d 18 19 74 6e 41 8b 45 24 49 8b bd f8 00 00 00 31 db 85 c0 74 48 48 63 c3 48 8d 04 c7 \u003c48\u003e 8b 28 48 85 ed 74 30 48 8b 7d 18 48 85 ff 74 05 e8 b3 52 fa ff\n[ 160.796777] RSP: 0018:ffffc9000ee1fe38 EFLAGS: 00010202\n[ 160.802086] RAX: ffffc8fc2c001000 RBX: 0000000080000000 RCX: 0000000000000024\n[ 160.809331] RDX: 0000000000000000 RSI: 0000000000000024 RDI: ffffc9002c001000\n[ 160.816576] RBP: 0000000000000000 R08: 0000000000000023 R09: 0000000000000001\n[ 160.823823] R10: 0000000000000001 R11: 00000000000ee6b2 R12: dead000000000122\n[ 160.831066] R13: ffff88810c928e00 R14: ffff8881002df405 R15: 0000000000000000\n[ 160.838310] FS: 0000000000000000(0000) GS:ffff8897e0c40000(0000) knlGS:0000000000000000\n[ 160.846528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 160.852357] CR2: ffffc8fc2c001000 CR3: 0000000005c32006 CR4: 00000000007726f0\n[ 160.859604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 160.866847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 160.874092] PKRU: 55555554\n[ 160.876847] Call Trace:\n[ 160.879338] \u003cTASK\u003e\n[ 160.881477] ? __die+0x20/0x60\n[ 160.884586] ? page_fault_oops+0x15a/0x450\n[ 160.888746] ? search_extable+0x22/0x30\n[ 160.892647] ? search_bpf_extables+0x5f/0x80\n[ 160.896988] ? exc_page_fault+0xa9/0x140\n[ 160.900973] ? asm_exc_page_fault+0x22/0x30\n[ 160.905232] ? dev_map_free+0x77/0x170\n[ 160.909043] ? dev_map_free+0x58/0x170\n[ 160.912857] bpf_map_free_deferred+0x51/0x90\n[ 160.917196] process_one_work+0x142/0x370\n[ 160.921272] worker_thread+0x29e/0x3b0\n[ 160.925082] ? rescuer_thread+0x4b0/0x4b0\n[ 160.929157] kthread+0xd4/0x110\n[ 160.932355] ? kthread_park+0x80/0x80\n[ 160.936079] ret_from_fork+0x2d/0x50\n[ 160.943396] ? kthread_park+0x80/0x80\n[ 160.950803] ret_from_fork_asm+0x11/0x20\n[ 160.958482] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56615",
"url": "https://www.suse.com/security/cve/CVE-2024-56615"
},
{
"category": "external",
"summary": "SUSE Bug 1235426 for CVE-2024-56615",
"url": "https://bugzilla.suse.com/1235426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread. Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022] ? __dentry_kill+0x121/0x170\n[596663.813030] ? _cond_resched+0x15/0x30\n[596663.813034] ? _cond_resched+0x15/0x30\n[596663.813039] ? wait_for_completion+0x35/0x190\n[596663.813048] ? try_to_wake_up+0x63/0x540\n[596663.813055] free_task+0x5a/0x60\n[596663.813061] kthread_stop+0xf3/0x100\n[596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56623",
"url": "https://www.suse.com/security/cve/CVE-2024-56623"
},
{
"category": "external",
"summary": "SUSE Bug 1235466 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "external",
"summary": "SUSE Bug 1235468 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "important"
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: free inode when ocfs2_get_init_inode() fails\n\nsyzbot is reporting busy inodes after unmount, for commit 9c89fe0af826\n(\"ocfs2: Handle error from dquot_initialize()\") forgot to call iput() when\nnew_inode() succeeded and dquot_initialize() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56630",
"url": "https://www.suse.com/security/cve/CVE-2024-56630"
},
{
"category": "external",
"summary": "SUSE Bug 1235479 for CVE-2024-56630",
"url": "https://bugzilla.suse.com/1235479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56637"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: Hold module reference while requesting a module\n\nUser space may unload ip_set.ko while it is itself requesting a set type\nbackend module, leading to a kernel crash. The race condition may be\nprovoked by inserting an mdelay() right after the nfnl_unlock() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56637",
"url": "https://www.suse.com/security/cve/CVE-2024-56637"
},
{
"category": "external",
"summary": "SUSE Bug 1235523 for CVE-2024-56637",
"url": "https://bugzilla.suse.com/1235523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n Workqueue: events smc_lgr_terminate_work [smc]\n RIP: 0010:__flush_work+0x19e/0x1b0\n Call Trace:\n ? __wake_up_common+0x7a/0x190\n ? work_busy+0x80/0x80\n __cancel_work_timer+0xe3/0x160\n smc_close_cancel_work+0x1a/0x70 [smc]\n smc_close_active_abort+0x207/0x360 [smc]\n __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n process_one_work+0x19e/0x340\n worker_thread+0x30/0x370\n ? process_one_work+0x340/0x340\n kthread+0x117/0x130\n ? __kthread_cancel_work+0x50/0x50\n ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn-\u003eclose_work is\nflushed before initialization, resulting in WARN_ON(!work-\u003efunc).\n\n__smc_lgr_terminate | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr-\u003econns_all |\n\\- smc_conn_kill |\n \\- smc_close_active_abort |\n \\- smc_close_cancel_work |\n \\- cancel_work_sync |\n \\- __flush_work |\n\t (close_work) |\n\t | smc_close_init\n\t | \\- INIT_WORK(\u0026close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56641",
"url": "https://www.suse.com/security/cve/CVE-2024-56641"
},
{
"category": "external",
"summary": "SUSE Bug 1235526 for CVE-2024-56641",
"url": "https://bugzilla.suse.com/1235526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56641"
},
{
"cve": "CVE-2024-56643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56643"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: Fix memory leak in dccp_feat_change_recv\n\nIf dccp_feat_push_confirm() fails after new value for SP feature was accepted\nwithout reconciliation (\u0027entry == NULL\u0027 branch), memory allocated for that value\nwith dccp_feat_clone_sp_val() is never freed.\n\nHere is the kmemleak stack for this:\n\nunreferenced object 0xffff88801d4ab488 (size 8):\n comm \"syz-executor310\", pid 1127, jiffies 4295085598 (age 41.666s)\n hex dump (first 8 bytes):\n 01 b4 4a 1d 80 88 ff ff ..J.....\n backtrace:\n [\u003c00000000db7cabfe\u003e] kmemdup+0x23/0x50 mm/util.c:128\n [\u003c0000000019b38405\u003e] kmemdup include/linux/string.h:465 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:371 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:367 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_change_recv net/dccp/feat.c:1145 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_parse_options+0x1196/0x2180 net/dccp/feat.c:1416\n [\u003c00000000b1f6d94a\u003e] dccp_parse_options+0xa2a/0x1260 net/dccp/options.c:125\n [\u003c0000000030d7b621\u003e] dccp_rcv_state_process+0x197/0x13d0 net/dccp/input.c:650\n [\u003c000000001f74c72e\u003e] dccp_v4_do_rcv+0xf9/0x1a0 net/dccp/ipv4.c:688\n [\u003c00000000a6c24128\u003e] sk_backlog_rcv include/net/sock.h:1041 [inline]\n [\u003c00000000a6c24128\u003e] __release_sock+0x139/0x3b0 net/core/sock.c:2570\n [\u003c00000000cf1f3a53\u003e] release_sock+0x54/0x1b0 net/core/sock.c:3111\n [\u003c000000008422fa23\u003e] inet_wait_for_connect net/ipv4/af_inet.c:603 [inline]\n [\u003c000000008422fa23\u003e] __inet_stream_connect+0x5d0/0xf70 net/ipv4/af_inet.c:696\n [\u003c0000000015b6f64d\u003e] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:735\n [\u003c0000000010122488\u003e] __sys_connect_file+0x15c/0x1a0 net/socket.c:1865\n [\u003c00000000b4b70023\u003e] __sys_connect+0x165/0x1a0 net/socket.c:1882\n [\u003c00000000f4cb3815\u003e] __do_sys_connect net/socket.c:1892 [inline]\n [\u003c00000000f4cb3815\u003e] __se_sys_connect net/socket.c:1889 [inline]\n [\u003c00000000f4cb3815\u003e] __x64_sys_connect+0x6e/0xb0 net/socket.c:1889\n [\u003c00000000e7b1e839\u003e] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46\n [\u003c0000000055e91434\u003e] entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nClean up the allocated memory in case of dccp_feat_push_confirm() failure\nand bail out with an error reset code.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56643",
"url": "https://www.suse.com/security/cve/CVE-2024-56643"
},
{
"category": "external",
"summary": "SUSE Bug 1235132 for CVE-2024-56643",
"url": "https://bugzilla.suse.com/1235132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "low"
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix LED ID check in led_tg_check()\n\nSyzbot has reported the following BUG detected by KASAN:\n\nBUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70\nRead of size 1 at addr ffff8881022da0c8 by task repro/5879\n...\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x241/0x360\n ? __pfx_dump_stack_lvl+0x10/0x10\n ? __pfx__printk+0x10/0x10\n ? _printk+0xd5/0x120\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n print_report+0x169/0x550\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x45f/0x530\n ? __phys_addr+0xba/0x170\n ? strlen+0x58/0x70\n kasan_report+0x143/0x180\n ? strlen+0x58/0x70\n strlen+0x58/0x70\n kstrdup+0x20/0x80\n led_tg_check+0x18b/0x3c0\n xt_check_target+0x3bb/0xa40\n ? __pfx_xt_check_target+0x10/0x10\n ? stack_depot_save_flags+0x6e4/0x830\n ? nft_target_init+0x174/0xc30\n nft_target_init+0x82d/0xc30\n ? __pfx_nft_target_init+0x10/0x10\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? rcu_is_watching+0x15/0xb0\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? __kmalloc_noprof+0x21a/0x400\n nf_tables_newrule+0x1860/0x2980\n ? __pfx_nf_tables_newrule+0x10/0x10\n ? __nla_parse+0x40/0x60\n nfnetlink_rcv+0x14e5/0x2ab0\n ? __pfx_validate_chain+0x10/0x10\n ? __pfx_nfnetlink_rcv+0x10/0x10\n ? __lock_acquire+0x1384/0x2050\n ? netlink_deliver_tap+0x2e/0x1b0\n ? __pfx_lock_release+0x10/0x10\n ? netlink_deliver_tap+0x2e/0x1b0\n netlink_unicast+0x7f8/0x990\n ? __pfx_netlink_unicast+0x10/0x10\n ? __virt_addr_valid+0x183/0x530\n ? __check_object_size+0x48e/0x900\n netlink_sendmsg+0x8e4/0xcb0\n ? __pfx_netlink_sendmsg+0x10/0x10\n ? aa_sock_msg_perm+0x91/0x160\n ? __pfx_netlink_sendmsg+0x10/0x10\n __sock_sendmsg+0x223/0x270\n ____sys_sendmsg+0x52a/0x7e0\n ? __pfx_____sys_sendmsg+0x10/0x10\n __sys_sendmsg+0x292/0x380\n ? __pfx___sys_sendmsg+0x10/0x10\n ? lockdep_hardirqs_on_prepare+0x43d/0x780\n ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10\n ? exc_page_fault+0x590/0x8c0\n ? do_syscall_64+0xb6/0x230\n do_syscall_64+0xf3/0x230\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n...\n \u003c/TASK\u003e\n\nSince an invalid (without \u0027\\0\u0027 byte at all) byte sequence may be passed\nfrom userspace, add an extra check to ensure that such a sequence is\nrejected as possible ID and so never passed to \u0027kstrdup()\u0027 and further.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56650",
"url": "https://www.suse.com/security/cve/CVE-2024-56650"
},
{
"category": "external",
"summary": "SUSE Bug 1235430 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "external",
"summary": "SUSE Bug 1235431 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "important"
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix NULL deref in cleanup_bearer()\n\nsyzbot found [1] that after blamed commit, ub-\u003eubsock-\u003esk\nwas NULL when attempting the atomic_dec() :\n\natomic_dec(\u0026tipc_net(sock_net(ub-\u003eubsock-\u003esk))-\u003ewq_count);\n\nFix this by caching the tipc_net pointer.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\nCPU: 0 UID: 0 PID: 5896 Comm: kworker/0:3 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events cleanup_bearer\n RIP: 0010:read_pnet include/net/net_namespace.h:387 [inline]\n RIP: 0010:sock_net include/net/sock.h:655 [inline]\n RIP: 0010:cleanup_bearer+0x1f7/0x280 net/tipc/udp_media.c:820\nCode: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c f7 99 f6 48 8b 1b 48 83 c3 30 e8 f0 e4 60 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 80 3c 28 00 74 08 48 89 df e8 1a f7 99 f6 49 83 c7 e8 48 8b 1b\nRSP: 0018:ffffc9000410fb70 EFLAGS: 00010206\nRAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88802fe45a00\nRDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000410f900\nRBP: ffff88807e1f0908 R08: ffffc9000410f907 R09: 1ffff92000821f20\nR10: dffffc0000000000 R11: fffff52000821f21 R12: ffff888031d19980\nR13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e1f0918\nFS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556ca050b000 CR3: 0000000031c0c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56661",
"url": "https://www.suse.com/security/cve/CVE-2024-56661"
},
{
"category": "external",
"summary": "SUSE Bug 1234931 for CVE-2024-56661",
"url": "https://bugzilla.suse.com/1234931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl\n\nFix an issue detected by syzbot with KASAN:\n\nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/\ncore.c:416 [inline]\nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0\ndrivers/acpi/nfit/core.c:459\n\nThe issue occurs in cmd_to_func when the call_pkg-\u003end_reserved2\narray is accessed without verifying that call_pkg points to a buffer\nthat is appropriately sized as a struct nd_cmd_pkg. This can lead\nto out-of-bounds access and undefined behavior if the buffer does not\nhave sufficient space.\n\nTo address this, a check was added in acpi_nfit_ctl() to ensure that\nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)\nbefore accessing it. This ensures safe access to the members of\ncall_pkg, including the nd_reserved2 array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56662",
"url": "https://www.suse.com/security/cve/CVE-2024-56662"
},
{
"category": "external",
"summary": "SUSE Bug 1235533 for CVE-2024-56662",
"url": "https://bugzilla.suse.com/1235533"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: bcm - add error check in the ahash_hmac_init function\n\nThe ahash_init functions may return fails. The ahash_hmac_init should\nnot return ok when ahash_init returns error. For an example, ahash_init\nwill return -ENOMEM when allocation memory is error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56681",
"url": "https://www.suse.com/security/cve/CVE-2024-56681"
},
{
"category": "external",
"summary": "SUSE Bug 1235557 for CVE-2024-56681",
"url": "https://bugzilla.suse.com/1235557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56700"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: wl128x: Fix atomicity violation in fmc_send_cmd()\n\nAtomicity violation occurs when the fmc_send_cmd() function is executed\nsimultaneously with the modification of the fmdev-\u003eresp_skb value.\nConsider a scenario where, after passing the validity check within the\nfunction, a non-null fmdev-\u003eresp_skb variable is assigned a null value.\nThis results in an invalid fmdev-\u003eresp_skb variable passing the validity\ncheck. As seen in the later part of the function, skb = fmdev-\u003eresp_skb;\nwhen the invalid fmdev-\u003eresp_skb passes the check, a null pointer\ndereference error may occur at line 478, evt_hdr = (void *)skb-\u003edata;\n\nTo address this issue, it is recommended to include the validity check of\nfmdev-\u003eresp_skb within the locked section of the function. This\nmodification ensures that the value of fmdev-\u003eresp_skb does not change\nduring the validation process, thereby maintaining its validity.\n\nThis possible bug is found by an experimental static analysis tool\ndeveloped by our team. This tool analyzes the locking APIs\nto extract function pairs that can be concurrently executed, and then\nanalyzes the instructions in the paired functions to identify possible\nconcurrency bugs including data races and atomicity violations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56700",
"url": "https://www.suse.com/security/cve/CVE-2024-56700"
},
{
"category": "external",
"summary": "SUSE Bug 1235500 for CVE-2024-56700",
"url": "https://bugzilla.suse.com/1235500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix cpu stuck caused by printings during reset\n\nDuring reset, cmd to destroy resources such as qp, cq, and mr may fail,\nand error logs will be printed. When a large number of resources are\ndestroyed, there will be lots of printings, and it may lead to a cpu\nstuck.\n\nDelete some unnecessary printings and replace other printing functions\nin these paths with the ratelimited version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56722",
"url": "https://www.suse.com/security/cve/CVE-2024-56722"
},
{
"category": "external",
"summary": "SUSE Bug 1235570 for CVE-2024-56722",
"url": "https://bugzilla.suse.com/1235570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56722"
},
{
"cve": "CVE-2024-56739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: check if __rtc_read_time was successful in rtc_timer_do_work()\n\nIf the __rtc_read_time call fails,, the struct rtc_time tm; may contain\nuninitialized data, or an illegal date/time read from the RTC hardware.\n\nWhen calling rtc_tm_to_ktime later, the result may be a very large value\n(possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue,\nthey will continually expire, may causing kernel softlockup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56739",
"url": "https://www.suse.com/security/cve/CVE-2024-56739"
},
{
"category": "external",
"summary": "SUSE Bug 1235611 for CVE-2024-56739",
"url": "https://bugzilla.suse.com/1235611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()\n\nHook \"qedi_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56747",
"url": "https://www.suse.com/security/cve/CVE-2024-56747"
},
{
"category": "external",
"summary": "SUSE Bug 1234934 for CVE-2024-56747",
"url": "https://bugzilla.suse.com/1234934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "low"
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()\n\nHook \"qed_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56748",
"url": "https://www.suse.com/security/cve/CVE-2024-56748"
},
{
"category": "external",
"summary": "SUSE Bug 1235627 for CVE-2024-56748",
"url": "https://bugzilla.suse.com/1235627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free when COWing tree bock and tracing is enabled\n\nWhen a COWing a tree block, at btrfs_cow_block(), and we have the\ntracepoint trace_btrfs_cow_block() enabled and preemption is also enabled\n(CONFIG_PREEMPT=y), we can trigger a use-after-free in the COWed extent\nbuffer while inside the tracepoint code. This is because in some paths\nthat call btrfs_cow_block(), such as btrfs_search_slot(), we are holding\nthe last reference on the extent buffer @buf so btrfs_force_cow_block()\ndrops the last reference on the @buf extent buffer when it calls\nfree_extent_buffer_stale(buf), which schedules the release of the extent\nbuffer with RCU. This means that if we are on a kernel with preemption,\nthe current task may be preempted before calling trace_btrfs_cow_block()\nand the extent buffer already released by the time trace_btrfs_cow_block()\nis called, resulting in a use-after-free.\n\nFix this by moving the trace_btrfs_cow_block() from btrfs_cow_block() to\nbtrfs_force_cow_block() before the COWed extent buffer is freed.\nThis also has a side effect of invoking the tracepoint in the tree defrag\ncode, at defrag.c:btrfs_realloc_node(), since btrfs_force_cow_block() is\ncalled there, but this is fine and it was actually missing there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56759",
"url": "https://www.suse.com/security/cve/CVE-2024-56759"
},
{
"category": "external",
"summary": "SUSE Bug 1235645 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "external",
"summary": "SUSE Bug 1236569 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1236569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "important"
}
],
"title": "CVE-2024-56759"
},
{
"cve": "CVE-2024-56763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent bad count for tracing_cpumask_write\n\nIf a large count is provided, it will trigger a warning in bitmap_parse_user.\nAlso check zero for it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56763",
"url": "https://www.suse.com/security/cve/CVE-2024-56763"
},
{
"category": "external",
"summary": "SUSE Bug 1235638 for CVE-2024-56763",
"url": "https://bugzilla.suse.com/1235638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56763"
},
{
"cve": "CVE-2024-56769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg\n\nSyzbot reports [1] an uninitialized value issue found by KMSAN in\ndib3000_read_reg().\n\nLocal u8 rb[2] is used in i2c_transfer() as a read buffer; in case\nthat call fails, the buffer may end up with some undefined values.\n\nSince no elaborate error handling is expected in dib3000_write_reg(),\nsimply zero out rb buffer to mitigate the problem.\n\n[1] Syzkaller report\ndvb-usb: bulk message failed: -22 (6/0)\n=====================================================\nBUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31\n dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290\n dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline]\n dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]\n dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310\n dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110\n...\nLocal variable rb created at:\n dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54\n dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56769",
"url": "https://www.suse.com/security/cve/CVE-2024-56769"
},
{
"category": "external",
"summary": "SUSE Bug 1235155 for CVE-2024-56769",
"url": "https://bugzilla.suse.com/1235155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-56769"
},
{
"cve": "CVE-2024-57884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()\n\nThe task sometimes continues looping in throttle_direct_reclaim() because\nallow_direct_reclaim(pgdat) keeps returning false. \n\n #0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac\n #1 [ffff80002cb6f900] __schedule at ffff800008abbd1c\n #2 [ffff80002cb6f990] schedule at ffff800008abc50c\n #3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550\n #4 [ffff80002cb6fa20] try_to_free_pages at ffff800008277b68\n #5 [ffff80002cb6fae0] __alloc_pages_nodemask at ffff8000082c4660\n #6 [ffff80002cb6fc50] alloc_pages_vma at ffff8000082e4a98\n #7 [ffff80002cb6fca0] do_anonymous_page at ffff80000829f5a8\n #8 [ffff80002cb6fce0] __handle_mm_fault at ffff8000082a5974\n #9 [ffff80002cb6fd90] handle_mm_fault at ffff8000082a5bd4\n\nAt this point, the pgdat contains the following two zones:\n\n NODE: 4 ZONE: 0 ADDR: ffff00817fffe540 NAME: \"DMA32\"\n SIZE: 20480 MIN/LOW/HIGH: 11/28/45\n VM_STAT:\n NR_FREE_PAGES: 359\n NR_ZONE_INACTIVE_ANON: 18813\n NR_ZONE_ACTIVE_ANON: 0\n NR_ZONE_INACTIVE_FILE: 50\n NR_ZONE_ACTIVE_FILE: 0\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\n NODE: 4 ZONE: 1 ADDR: ffff00817fffec00 NAME: \"Normal\"\n SIZE: 8454144 PRESENT: 98304 MIN/LOW/HIGH: 68/166/264\n VM_STAT:\n NR_FREE_PAGES: 146\n NR_ZONE_INACTIVE_ANON: 94668\n NR_ZONE_ACTIVE_ANON: 3\n NR_ZONE_INACTIVE_FILE: 735\n NR_ZONE_ACTIVE_FILE: 78\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\nIn allow_direct_reclaim(), while processing ZONE_DMA32, the sum of\ninactive/active file-backed pages calculated in zone_reclaimable_pages()\nbased on the result of zone_page_state_snapshot() is zero. \n\nAdditionally, since this system lacks swap, the calculation of inactive/\nactive anonymous pages is skipped.\n\n crash\u003e p nr_swap_pages\n nr_swap_pages = $1937 = {\n counter = 0\n }\n\nAs a result, ZONE_DMA32 is deemed unreclaimable and skipped, moving on to\nthe processing of the next zone, ZONE_NORMAL, despite ZONE_DMA32 having\nfree pages significantly exceeding the high watermark.\n\nThe problem is that the pgdat-\u003ekswapd_failures hasn\u0027t been incremented.\n\n crash\u003e px ((struct pglist_data *) 0xffff00817fffe540)-\u003ekswapd_failures\n $1935 = 0x0\n\nThis is because the node deemed balanced. The node balancing logic in\nbalance_pgdat() evaluates all zones collectively. If one or more zones\n(e.g., ZONE_DMA32) have enough free pages to meet their watermarks, the\nentire node is deemed balanced. This causes balance_pgdat() to exit early\nbefore incrementing the kswapd_failures, as it considers the overall\nmemory state acceptable, even though some zones (like ZONE_NORMAL) remain\nunder significant pressure.\n\n\nThe patch ensures that zone_reclaimable_pages() includes free pages\n(NR_FREE_PAGES) in its calculation when no other reclaimable pages are\navailable (e.g., file-backed or anonymous pages). This change prevents\nzones like ZONE_DMA32, which have sufficient free pages, from being\nmistakenly deemed unreclaimable. By doing so, the patch ensures proper\nnode balancing, avoids masking pressure on other zones like ZONE_NORMAL,\nand prevents infinite loops in throttle_direct_reclaim() caused by\nallow_direct_reclaim(pgdat) repeatedly returning false.\n\n\nThe kernel hangs due to a task stuck in throttle_direct_reclaim(), caused\nby a node being incorrectly deemed balanced despite pressure in certain\nzones, such as ZONE_NORMAL. This issue arises from\nzone_reclaimable_pages\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57884",
"url": "https://www.suse.com/security/cve/CVE-2024-57884"
},
{
"category": "external",
"summary": "SUSE Bug 1235948 for CVE-2024-57884",
"url": "https://bugzilla.suse.com/1235948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57884"
},
{
"cve": "CVE-2024-57890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping. Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap. The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it\u0027s fine on\n64bit systems.\n\nThis patch does two things. First, I\u0027ve re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math. Then I\u0027ve modified\nall the callers to use size_mul() for the multiplications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57890",
"url": "https://www.suse.com/security/cve/CVE-2024-57890"
},
{
"category": "external",
"summary": "SUSE Bug 1235919 for CVE-2024-57890",
"url": "https://bugzilla.suse.com/1235919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57890"
},
{
"cve": "CVE-2024-57896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57896",
"url": "https://www.suse.com/security/cve/CVE-2024-57896"
},
{
"category": "external",
"summary": "SUSE Bug 1235965 for CVE-2024-57896",
"url": "https://bugzilla.suse.com/1235965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57896"
},
{
"cve": "CVE-2024-57899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, \u0026bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n ? show_regs+0x54/0x58\n ? __warn+0x6b/0xd4\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? report_bug+0x113/0x150\n ? exc_overflow+0x30/0x30\n ? handle_bug+0x27/0x44\n ? exc_invalid_op+0x18/0x50\n ? handle_exception+0xf6/0xf6\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n ? process_one_work+0xf1/0x1fc\n ? worker_thread+0x2c0/0x3b4\n ? kthread+0xc7/0xf0\n ? mod_delayed_work_on+0x4c/0x4c\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork+0x24/0x38\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork_asm+0xf/0x14\n ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57899",
"url": "https://www.suse.com/security/cve/CVE-2024-57899"
},
{
"category": "external",
"summary": "SUSE Bug 1235924 for CVE-2024-57899",
"url": "https://bugzilla.suse.com/1235924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57899"
},
{
"cve": "CVE-2024-57903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_REUSEPORT to inet sockets\n\nAfter blamed commit, crypto sockets could accidentally be destroyed\nfrom RCU call back, as spotted by zyzbot [1].\n\nTrying to acquire a mutex in RCU callback is not allowed.\n\nRestrict SO_REUSEPORT socket option to inet sockets.\n\nv1 of this patch supported TCP, UDP and SCTP sockets,\nbut fcnal-test.sh test needed RAW and ICMP support.\n\n[1]\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1\npreempt_count: 100, expected: 0\nRCU nest depth: 0, expected: 0\n1 lock held by ksoftirqd/1/24:\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823\nPreemption disabled at:\n [\u003cffffffff8161c8c8\u003e] softirq_handle_begin kernel/softirq.c:402 [inline]\n [\u003cffffffff8161c8c8\u003e] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537\nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n __might_resched+0x5d4/0x780 kernel/sched/core.c:8758\n __mutex_lock_common kernel/locking/mutex.c:562 [inline]\n __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735\n crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179\n aead_release+0x3d/0x50 crypto/algif_aead.c:489\n alg_do_release crypto/af_alg.c:118 [inline]\n alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502\n __sk_destruct+0x58/0x5f0 net/core/sock.c:2260\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:950\n smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57903",
"url": "https://www.suse.com/security/cve/CVE-2024-57903"
},
{
"category": "external",
"summary": "SUSE Bug 1235967 for CVE-2024-57903",
"url": "https://bugzilla.suse.com/1235967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57903"
},
{
"cve": "CVE-2024-57922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57922",
"url": "https://www.suse.com/security/cve/CVE-2024-57922"
},
{
"category": "external",
"summary": "SUSE Bug 1236080 for CVE-2024-57922",
"url": "https://bugzilla.suse.com/1236080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57922"
},
{
"cve": "CVE-2024-57929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: fix releasing a faulty array block twice in dm_array_cursor_end\n\nWhen dm_bm_read_lock() fails due to locking or checksum errors, it\nreleases the faulty block implicitly while leaving an invalid output\npointer behind. The caller of dm_bm_read_lock() should not operate on\nthis invalid dm_block pointer, or it will lead to undefined result.\nFor example, the dm_array_cursor incorrectly caches the invalid pointer\non reading a faulty array block, causing a double release in\ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().\n\nReproduce steps:\n\n1. initialize a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. wipe the second array block offline\n\ndmsteup remove cache cmeta cdata corig\nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock\n\n3. try reopen the cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10\ndevice-mapper: block manager: array validator check failed for block 10\ndevice-mapper: array: get_ablock failed\ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed\n------------[ cut here ]------------\nkernel BUG at drivers/md/dm-bufio.c:638!\n\nFix by setting the cached block pointer to NULL on errors.\n\nIn addition to the reproducer described above, this fix can be\nverified using the \"array_cursor/damaged\" test in dm-unit:\n dm-unit run /pdata/array_cursor/damaged --kernel-dir \u003cKERNEL_DIR\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57929",
"url": "https://www.suse.com/security/cve/CVE-2024-57929"
},
{
"category": "external",
"summary": "SUSE Bug 1236096 for CVE-2024-57929",
"url": "https://bugzilla.suse.com/1236096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57929"
},
{
"cve": "CVE-2024-57931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: ignore unknown extended permissions\n\nWhen evaluating extended permissions, ignore unknown permissions instead\nof calling BUG(). This commit ensures that future permissions can be\nadded without interfering with older kernels.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57931",
"url": "https://www.suse.com/security/cve/CVE-2024-57931"
},
{
"category": "external",
"summary": "SUSE Bug 1236192 for CVE-2024-57931",
"url": "https://bugzilla.suse.com/1236192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57931"
},
{
"cve": "CVE-2024-57932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv-\u003enum_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57932",
"url": "https://www.suse.com/security/cve/CVE-2024-57932"
},
{
"category": "external",
"summary": "SUSE Bug 1236190 for CVE-2024-57932",
"url": "https://bugzilla.suse.com/1236190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57932"
},
{
"cve": "CVE-2024-57938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()\n\nWhile by default max_autoclose equals to INT_MAX / HZ, one may set\nnet.sctp.max_autoclose to UINT_MAX. There is code in\nsctp_association_init() that can consequently trigger overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57938",
"url": "https://www.suse.com/security/cve/CVE-2024-57938"
},
{
"category": "external",
"summary": "SUSE Bug 1236182 for CVE-2024-57938",
"url": "https://bugzilla.suse.com/1236182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2024-57938"
},
{
"cve": "CVE-2025-21653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute\n\nsyzbot found that TCA_FLOW_RSHIFT attribute was not validated.\nRight shitfing a 32bit integer is undefined for large shift values.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_flow.c:329:23\nshift exponent 9445 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: ipv6_addrconf addrconf_dad_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468\n flow_classify+0x24d5/0x25b0 net/sched/cls_flow.c:329\n tc_classify include/net/tc_wrapper.h:197 [inline]\n __tcf_classify net/sched/cls_api.c:1771 [inline]\n tcf_classify+0x420/0x1160 net/sched/cls_api.c:1867\n sfb_classify net/sched/sch_sfb.c:260 [inline]\n sfb_enqueue+0x3ad/0x18b0 net/sched/sch_sfb.c:318\n dev_qdisc_enqueue+0x4b/0x290 net/core/dev.c:3793\n __dev_xmit_skb net/core/dev.c:3889 [inline]\n __dev_queue_xmit+0xf0e/0x3f50 net/core/dev.c:4400\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n neigh_hh_output include/net/neighbour.h:523 [inline]\n neigh_output include/net/neighbour.h:537 [inline]\n ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236\n iptunnel_xmit+0x55d/0x9b0 net/ipv4/ip_tunnel_core.c:82\n udp_tunnel_xmit_skb+0x262/0x3b0 net/ipv4/udp_tunnel_core.c:173\n geneve_xmit_skb drivers/net/geneve.c:916 [inline]\n geneve_xmit+0x21dc/0x2d00 drivers/net/geneve.c:1039\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606\n __dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4434",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21653",
"url": "https://www.suse.com/security/cve/CVE-2025-21653"
},
{
"category": "external",
"summary": "SUSE Bug 1236161 for CVE-2025-21653",
"url": "https://bugzilla.suse.com/1236161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2025-21653"
},
{
"cve": "CVE-2025-21664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm thin: make get_first_thin use rcu-safe list first function\n\nThe documentation in rculist.h explains the absence of list_empty_rcu()\nand cautions programmers against relying on a list_empty() -\u003e\nlist_first() sequence in RCU safe code. This is because each of these\nfunctions performs its own READ_ONCE() of the list head. This can lead\nto a situation where the list_empty() sees a valid list entry, but the\nsubsequent list_first() sees a different view of list head state after a\nmodification.\n\nIn the case of dm-thin, this author had a production box crash from a GP\nfault in the process_deferred_bios path. This function saw a valid list\nhead in get_first_thin() but when it subsequently dereferenced that and\nturned it into a thin_c, it got the inside of the struct pool, since the\nlist was now empty and referring to itself. The kernel on which this\noccurred printed both a warning about a refcount_t being saturated, and\na UBSAN error for an out-of-bounds cpuid access in the queued spinlock,\nprior to the fault itself. When the resulting kdump was examined, it\nwas possible to see another thread patiently waiting in thin_dtr\u0027s\nsynchronize_rcu.\n\nThe thin_dtr call managed to pull the thin_c out of the active thins\nlist (and have it be the last entry in the active_thins list) at just\nthe wrong moment which lead to this crash.\n\nFortunately, the fix here is straight forward. Switch get_first_thin()\nfunction to use list_first_or_null_rcu() which performs just a single\nREAD_ONCE() and returns NULL if the list is already empty.\n\nThis was run against the devicemapper test suite\u0027s thin-provisioning\nsuites for delete and suspend and no regressions were observed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21664",
"url": "https://www.suse.com/security/cve/CVE-2025-21664"
},
{
"category": "external",
"summary": "SUSE Bug 1236262 for CVE-2025-21664",
"url": "https://bugzilla.suse.com/1236262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2025-21664"
},
{
"cve": "CVE-2025-21678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: Destroy device along with udp socket\u0027s netns dismantle.\n\ngtp_newlink() links the device to a list in dev_net(dev) instead of\nsrc_net, where a udp tunnel socket is created.\n\nEven when src_net is removed, the device stays alive on dev_net(dev).\nThen, removing src_net triggers the splat below. [0]\n\nIn this example, gtp0 is created in ns2, and the udp socket is created\nin ns1.\n\n ip netns add ns1\n ip netns add ns2\n ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn\n ip netns del ns1\n\nLet\u0027s link the device to the socket\u0027s netns instead.\n\nNow, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove\nall gtp devices in the netns.\n\n[0]:\nref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at\n sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236)\n inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252)\n __sock_create (net/socket.c:1558)\n udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18)\n gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423)\n gtp_create_sockets (drivers/net/gtp.c:1447)\n gtp_newlink (drivers/net/gtp.c:1507)\n rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012)\n rtnetlink_rcv_msg (net/core/rtnetlink.c:6922)\n netlink_rcv_skb (net/netlink/af_netlink.c:2542)\n netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347)\n netlink_sendmsg (net/netlink/af_netlink.c:1891)\n ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583)\n ___sys_sendmsg (net/socket.c:2639)\n __sys_sendmsg (net/socket.c:2669)\n do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)\n\nWARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179)\nModules linked in:\nCPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nWorkqueue: netns cleanup_net\nRIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179)\nCode: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 \u003c0f\u003e 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89\nRSP: 0018:ff11000009a07b60 EFLAGS: 00010286\nRAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c\nRBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae\nR10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0\nR13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000\nFS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cTASK\u003e\n ? __warn (kernel/panic.c:748)\n ? ref_tracker_dir_exit (lib/ref_tracker.c:179)\n ? report_bug (lib/bug.c:201 lib/bug.c:219)\n ? handle_bug (arch/x86/kernel/traps.c:285)\n ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1))\n ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621)\n ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194)\n ? ref_tracker_dir_exit (lib/ref_tracker.c:179)\n ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158)\n ? kfree (mm/slub.c:4613 mm/slub.c:4761)\n net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467)\n cleanup_net (net/core/net_namespace.c:664 (discriminator 3))\n process_one_work (kernel/workqueue.c:3229)\n worker_thread (kernel/workqueue.c:3304 kernel/workqueue.c:3391\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21678",
"url": "https://www.suse.com/security/cve/CVE-2025-21678"
},
{
"category": "external",
"summary": "SUSE Bug 1236698 for CVE-2025-21678",
"url": "https://bugzilla.suse.com/1236698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2025-21678"
},
{
"cve": "CVE-2025-21682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21682"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: bnxt: always recalculate features after XDP clearing, fix null-deref\n\nRecalculate features when XDP is detached.\n\nBefore:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: off [requested on]\n\nAfter:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: on\n\nThe fact that HW-GRO doesn\u0027t get re-enabled automatically is just\na minor annoyance. The real issue is that the features will randomly\ncome back during another reconfiguration which just happens to invoke\nnetdev_update_features(). The driver doesn\u0027t handle reconfiguring\ntwo things at a time very robustly.\n\nStarting with commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") we only reconfigure the RSS hash table\nif the \"effective\" number of Rx rings has changed. If HW-GRO is\nenabled \"effective\" number of rings is 2x what user sees.\nSo if we are in the bad state, with HW-GRO re-enablement \"pending\"\nafter XDP off, and we lower the rings by / 2 - the HW-GRO rings\ndoing 2x and the ethtool -L doing / 2 may cancel each other out,\nand the:\n\n if (old_rx_rings != bp-\u003ehw_resc.resv_rx_rings \u0026\u0026\n\ncondition in __bnxt_reserve_rings() will be false.\nThe RSS map won\u0027t get updated, and we\u0027ll crash with:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000168\n RIP: 0010:__bnxt_hwrm_vnic_set_rss+0x13a/0x1a0\n bnxt_hwrm_vnic_rss_cfg_p5+0x47/0x180\n __bnxt_setup_vnic_p5+0x58/0x110\n bnxt_init_nic+0xb72/0xf50\n __bnxt_open_nic+0x40d/0xab0\n bnxt_open_nic+0x2b/0x60\n ethtool_set_channels+0x18c/0x1d0\n\nAs we try to access a freed ring.\n\nThe issue is present since XDP support was added, really, but\nprior to commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") it wasn\u0027t causing major issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21682",
"url": "https://www.suse.com/security/cve/CVE-2025-21682"
},
{
"category": "external",
"summary": "SUSE Bug 1236703 for CVE-2025-21682",
"url": "https://bugzilla.suse.com/1236703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.s390x",
"SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_247-default-1-8.3.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.247.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.247.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.247.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-17T13:28:23Z",
"details": "moderate"
}
],
"title": "CVE-2025-21682"
}
]
}
suse-su-2025:0557-1
Vulnerability from csaf_suse
Published
2025-02-14 15:26
Modified
2025-02-14 15:26
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).
- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).
- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
- CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
- CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
- CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
- CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
- CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
- CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
- CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
The following non-security bugs were fixed:
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).
- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).
- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).
- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).
- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).
- ALSA: ump: Use guard() for locking (stable-fixes).
- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).
- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).
- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).
- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).
- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).
- ASoC: samsung: Add missing depends on I2C (git-fixes).
- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).
- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).
- ASoC: wm8994: Add depends on MFD core (stable-fixes).
- Align git commit ID abbreviation guidelines and checks (git-fixes).
- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).
- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).
- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).
- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).
- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).
- uvcvideo: drop fix due to regression (bsc#1235894)
- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).
- HID: fix generic desktop D-Pad controls (git-fixes).
- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).
- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).
- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).
- Input: bbnsm_pwrkey - add remove hook (git-fixes).
- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).
- Input: davinci-keyscan - remove leftover header (git-fixes).
- Input: xpad - add QH Electronics VID/PID (stable-fixes).
- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).
- Input: xpad - add support for Nacon Pro Compact (stable-fixes).
- Input: xpad - add support for wooting two he (arm) (stable-fixes).
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).
- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).
- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).
- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).
- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).
- Move upstreamed DRM patch into sorted section
- Move upstreamed NFS patch into sorted section
- Move upstreamed TPM patch into sorted section
- Move upstreamed lpfc patches into sorted section
- Move upstreamed ppc patch into sorted section
- Move upstreamed sound patch into sorted section
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).
- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).
- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).
- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).
- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)
- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)
- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)
- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)
- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)
- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)
- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)
- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)
- RDMA/rxe: Fix the warning '__rxe_cleanup+0x12c/0x170 [rdma_rxe]' (git-fixes)
- RDMA/srp: Fix error handling in srp_add_port (git-fixes)
- USB: core: Disable LPM only for non-suspended ports (git-fixes).
- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).
- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
- USB: serial: option: add Neoway N723-EA support (stable-fixes).
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).
- USB: usblp: return error when setting unsupported protocol (git-fixes).
- Update patches.suse/nvme-tcp-Fix-I-O-queue-cpu-spreading-for-multiple-co.patch (git-fixes bsc#1224049).
- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
- VMCI: fix reference to ioctl-number.rst (git-fixes).
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).
- afs: Fix cleanup of immediately failed async calls (git-fixes).
- afs: Fix directory format encoding struct (git-fixes).
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).
- afs: Fix the maximum cell name length (git-fixes).
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (git-fixes)
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245).
- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).
- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)
- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)
- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).
- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).
- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
- cleanup: Add conditional guard support (stable-fixes).
- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).
- cleanup: Remove address space of returned pointer (git-fixes).
- cpufreq: ACPI: Fix max-frequency computation (git-fixes).
- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).
- cpufreq: amd-pstate: remove global header file (git-fixes).
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).
- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).
- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).
- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).
- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).
- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).
- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).
- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).
- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).
- cpupower: fix TSC MHz calculation (git-fixes).
- crypto: caam - use JobR's space to access page 0 regs (git-fixes).
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).
- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).
- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).
- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (git-fixes).
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).
- crypto: qce - fix goto jump in error path (git-fixes).
- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).
- crypto: qce - unregister previously registered algos in error path (git-fixes).
- devcoredump: cleanup some comments (git-fixes).
- dlm: fix possible lkb_resource null dereference (git-fixes).
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).
- doc/README.SUSE: Point to the updated version of LKMPG
- docs: media: update location of the media patches (stable-fixes).
- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).
- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).
- drm/amd/display: Fix DSC-re-computing (stable-fixes).
- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).
- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).
- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).
- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).
- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).
- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).
- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).
- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).
- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).
- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).
- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).
- drm/mediatek: Add return value check when reading DPCD (git-fixes).
- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).
- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).
- drm/mediatek: Fix mode valid issue for dp (git-fixes).
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (git-fixes).
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).
- drm/mediatek: stop selecting foreign drivers (git-fixes).
- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).
- drm/msm: Check return value of of_dma_configure() (git-fixes).
- drm/msm: do not clean up priv->kms prematurely (git-fixes).
- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).
- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).
- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).
- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).
- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).
- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).
- drm/vmwgfx: Add new keep_resv BO param (git-fixes).
- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).
- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).
- exfat: fix the infinite loop in exfat_readdir() (git-fixes).
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).
- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).
- genksyms: fix memory leak when the same symbol is added from source (git-fixes).
- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).
- gpio: mxc: remove dead code after switch to DT-only (git-fixes).
- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp() (git-fixes).
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).
- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).
- hwmon: (tmp513) Fix division of negative numbers (git-fixes).
- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).
- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).
- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
- i2c: i801: Add support for Intel Panther Lake (stable-fixes).
- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).
- i2c: rcar: fix NACK handling when being a target (git-fixes).
- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).
- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).
- iio: adc: ad7124: Disable all channels at probe time (git-fixes).
- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).
- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).
- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).
- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).
- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).
- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).
- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).
- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).
- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).
- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).
- intel_th: core: fix kernel-doc warnings (git-fixes).
- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).
- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).
- kABI workaround for struct auto_pin_cfg_item change (git-fixes).
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).
- kheaders: Ignore silly-rename files (stable-fixes).
- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).
- ktest.pl: Check kernelrelease return in get_version (git-fixes).
- ktest.pl: Fix typo 'accesing' (git-fixes).
- ktest.pl: Fix typo in comment (git-fixes).
- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).
- ktest: force $buildonly = 1 for 'make_warnings_file' test type (stable-fixes).
- landlock: Handle weird files (git-fixes).
- latencytop: use correct kernel-doc format for func params (git-fixes).
- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).
- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).
- lib/inflate.c: remove dead code (git-fixes).
- lib/stackdepot: print disabled message only if truly disabled (git-fixes).
- mac802154: check local interfaces before deleting sdata list (stable-fixes).
- mailbox: pcc: Add support for platform notification handling (stable-fixes).
- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).
- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).
- maple_tree: simplify split calculation (git-fixes).
- media: camif-core: Add check for clk_enable() (git-fixes).
- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).
- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).
- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).
- media: dvb: mb86a16: check the return value of mb86a16_read() (git-fixes).
- media: firewire: firedtv-avc.c: replace BUG with proper, error return (git-fixes).
- media: i2c: imx412: Add missing newline to prints (git-fixes).
- media: i2c: ov9282: Correct the exposure offset (git-fixes).
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).
- media: imx296: Add standby delay during probe (git-fixes).
- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).
- media: marvell: Add check for clk_enable() (git-fixes).
- media: mc: fix endpoint iteration (git-fixes).
- media: mipi-csis: Add check for clk_enable() (git-fixes).
- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).
- media: ov08x40: Fix hblank out of range issue (git-fixes).
- media: ov5640: fix get_light_freq on auto (git-fixes).
- media: rc: iguanair: handle timeouts (git-fixes).
- media: rkisp1: Fix unused value issue (git-fixes).
- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).
- media: uvcvideo: Fix double free in error path (git-fixes).
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).
- media: uvcvideo: Only save async fh if success (git-fixes).
- media: uvcvideo: Propagate buf->error to userspace (git-fixes).
- media: uvcvideo: Remove dangling pointers (git-fixes).
- media: uvcvideo: Remove redundant NULL assignment (git-fixes).
- media: uvcvideo: Support partial control reads (git-fixes).
- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).
- memory-failure: use a folio in me_huge_page() (git-fixes).
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).
- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).
- misc: fastrpc: Fix copy buffer page size (git-fixes).
- misc: fastrpc: Fix registered buffer page address (git-fixes).
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).
- mm/compaction: fix UBSAN shift-out-of-bounds warning (git fixes (mm/compaction)).
- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).
- mm/memory-failure: check the mapcount of the precise page (git-fixes).
- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).
- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).
- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).
- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).
- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).
- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).
- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).
- mm/migrate: putback split folios when numa hint migration fails (git-fixes).
- mm/migrate: split source folio if it is on deferred split list (git-fixes).
- mm/page_owner: remove free_ts from page_owner output (git-fixes).
- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).
- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).
- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).
- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).
- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).
- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).
- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).
- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).
- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).
- net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
- net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
- net: mana: Enable debugfs files for MANA device (bsc#1236758).
- net: netvsc: Update default VMBus channels (bsc#1236757).
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).
- net: rose: fix timer races against user threads (git-fixes).
- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).
- net: usb: rtl8150: enable basic endpoint checking (git-fixes).
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).
- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).
- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).
- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).
- nvmet: propagate npwg topology (git-fixes).
- padata: add pd get/put refcnt helper (git-fixes).
- padata: avoid UAF for reorder_work (git-fixes).
- padata: fix UAF in padata_reorder (git-fixes).
- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).
- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).
- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).
- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).
- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).
- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).
- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).
- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).
- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).
- pps: add an error check in parport_attach (git-fixes).
- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- printk: Add is_printk_legacy_deferred() (bsc#1236733).
- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).
- pwm: stm32-lp: Add check for clk_enable() (git-fixes).
- pwm: stm32: Add check for clk_enable() (git-fixes).
- r8169: enable SG/TSO on selected chip versions per default (bsc#1235874).
- rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (git-fixes)
- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)
- rcu: Dump memory object info if callback function is invalid (git-fixes)
- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)
- rcuscale: Move rcu_scale_writer() (git-fixes)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)
- regulator: core: Add missing newline character (git-fixes).
- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).
- remoteproc: core: Fix ida_free call while not allocated (git-fixes).
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).
- rtc: zynqmp: Fix optional clock name property (git-fixes).
- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)
- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).
- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).
- selftest: media_tests: fix trivial UAF typo (git-fixes).
- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).
- selftests/landlock: Fix error message (git-fixes).
- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).
- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).
- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).
- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).
- selftests: tc-testing: reduce rshift value (stable-fixes).
- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).
- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).
- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).
- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).
- ocfs2: temporarily disable upstream patch (bsc#1236138).
- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).
- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).
- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).
- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).
- spi: zynq-qspi: Add check for clk_enable() (git-fixes).
- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)
- srcu: Only accelerate on enqueue time (git-fixes)
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).
- staging: iio: ad9832: Correct phase range check (git-fixes).
- staging: iio: ad9834: Correct phase range check (git-fixes).
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).
- staging: media: max96712: fix kernel oops when removing module (git-fixes).
- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).
- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).
- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
- tools: Sync if_xdp.h uapi tooling header (git-fixes).
- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).
- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).
- tty: xilinx_uartps: split sysrq handling (git-fixes).
- ubifs: skip dumping tnc tree when zroot is null (git-fixes).
- uio: Fix return value of poll (git-fixes).
- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).
- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).
- usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (git-fixes).
- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).
- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
- usb: fix reference leak in usb_new_device() (git-fixes).
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).
- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).
- usb: gadget: f_tcm: Do not free command immediately (git-fixes).
- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).
- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).
- usb: gadget: f_tcm: Translate error to sense (git-fixes).
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).
- usb: host: xhci-plat: Assign shared_hcd->rsrc_start (git-fixes).
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)
- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).
- usbnet: ipheth: break up NCM header size computation (git-fixes).
- usbnet: ipheth: check that DPE points past NCM header (git-fixes).
- usbnet: ipheth: fix DPE OoB read (git-fixes).
- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).
- usbnet: ipheth: refactor NCM datagram loop (git-fixes).
- usbnet: ipheth: use static NDP16 location in URB (git-fixes).
- vfio/pci: Lock external INTx masking ops (bsc#1222803).
- virtio-mem: check if the config changed before fake offlining memory (git-fixes).
- virtio-mem: convert most offline_and_remove_memory() errors to -EBUSY (git-fixes).
- virtio-mem: keep retrying on offline_and_remove_memory() errors in Sub Block Mode (SBM) (git-fixes).
- virtio-mem: remove unsafe unplug in Big Block Mode (BBM) (git-fixes).
- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).
- vsock/virtio: cancel close work in the destructor (git-fixes)
- vsock: Keep the binding until socket destruction (git-fixes)
- vsock: reset socket state when de-assigning the transport (git-fixes)
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).
- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).
- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).
- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).
- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).
- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).
- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).
- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).
- wifi: mac80211: Add non-atomic station iterator (stable-fixes).
- wifi: mac80211: Fix common size calculation for ML element (git-fixes).
- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).
- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).
- wifi: mac80211: prohibit deactivating all links (git-fixes).
- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).
- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7915: fix register mapping (git-fixes).
- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).
- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).
- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).
- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).
- wifi: mt76: mt7996: fix ldpc setting (git-fixes).
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7996: fix register mapping (git-fixes).
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).
- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).
- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).
- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).
- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).
- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).
- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).
- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).
Patchnames
SUSE-2025-557,SUSE-SLE-Module-Live-Patching-15-SP6-2025-557,SUSE-SLE-Module-RT-15-SP6-2025-557,openSUSE-SLE-15.6-2025-557
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).\n- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).\n- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).\n- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).\n- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).\n- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).\n- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).\n- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).\n- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).\n- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).\n- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).\n- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).\n- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).\n- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).\n- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).\n- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).\n- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).\n- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).\n- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).\n- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).\n- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).\n- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).\n- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).\n- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).\n- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).\n- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).\n- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).\n- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).\n- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).\n- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).\n- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).\n- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).\n- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).\n- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).\n- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).\n- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).\n- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).\n- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).\n- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).\n- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027 (bsc#1235487).\n- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).\n- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).\n- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).\n- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).\n- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).\n- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).\n- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).\n- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).\n- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).\n- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).\n- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).\n- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).\n- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).\n- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).\n- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).\n- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).\n- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).\n- CVE-2024-56658: net: defer final \u0027struct net\u0027 free in netns dismantle (bsc#1235441).\n- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).\n- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).\n- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).\n- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).\n- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).\n- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).\n- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).\n- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).\n- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).\n- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).\n- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).\n- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).\n- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).\n- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).\n- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).\n- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).\n- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).\n- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).\n- CVE-2024-56729: smb: Initialize cfid-\u003etcon before performing network ops (bsc#1235503).\n- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).\n- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).\n- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).\n- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).\n- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).\n- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).\n- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).\n- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).\n- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).\n- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).\n- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).\n- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).\n- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).\n- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).\n- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).\n- CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).\n- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).\n- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).\n- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).\n- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).\n- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).\n- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).\n- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).\n- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).\n- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).\n- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).\n- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).\n- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before \u0027getting\u0027 registers (bsc#1236106).\n- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).\n- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).\n- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).\n- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).\n- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).\n- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).\n- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).\n- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).\n- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).\n- CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).\n- CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).\n- CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).\n- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).\n- CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).\n- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).\n- CVE-2025-21678: gtp: Destroy device along with udp socket\u0027s netns dismantle (bsc#1236698).\n- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).\n- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).\n- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).\n- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).\n- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).\n- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).\n- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).\n- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).\n- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).\n- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).\n- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).\n- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).\n- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).\n- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).\n- ALSA: ump: Use guard() for locking (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).\n- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).\n- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).\n- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).\n- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).\n- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).\n- ASoC: samsung: Add missing depends on I2C (git-fixes).\n- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).\n- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).\n- ASoC: wm8994: Add depends on MFD core (stable-fixes).\n- Align git commit ID abbreviation guidelines and checks (git-fixes).\n- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).\n- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).\n- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).\n- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).\n- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).\n- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).\n- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).\n- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).\n- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).\n- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).\n- uvcvideo: drop fix due to regression (bsc#1235894)\n- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).\n- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).\n- HID: fix generic desktop D-Pad controls (git-fixes).\n- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).\n- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).\n- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).\n- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).\n- Input: bbnsm_pwrkey - add remove hook (git-fixes).\n- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).\n- Input: davinci-keyscan - remove leftover header (git-fixes).\n- Input: xpad - add QH Electronics VID/PID (stable-fixes).\n- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).\n- Input: xpad - add support for Nacon Pro Compact (stable-fixes).\n- Input: xpad - add support for wooting two he (arm) (stable-fixes).\n- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).\n- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).\n- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).\n- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).\n- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).\n- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).\n- Move upstreamed DRM patch into sorted section\n- Move upstreamed NFS patch into sorted section\n- Move upstreamed TPM patch into sorted section\n- Move upstreamed lpfc patches into sorted section\n- Move upstreamed ppc patch into sorted section\n- Move upstreamed sound patch into sorted section\n- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).\n- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).\n- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).\n- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).\n- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).\n- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).\n- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).\n- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).\n- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).\n- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).\n- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).\n- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).\n- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).\n- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).\n- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).\n- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).\n- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)\n- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)\n- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)\n- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)\n- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)\n- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)\n- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)\n- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)\n- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)\n- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)\n- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)\n- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)\n- RDMA/rxe: Fix the warning \u0027__rxe_cleanup+0x12c/0x170 [rdma_rxe]\u0027 (git-fixes)\n- RDMA/srp: Fix error handling in srp_add_port (git-fixes)\n- USB: core: Disable LPM only for non-suspended ports (git-fixes).\n- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).\n- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).\n- USB: serial: option: add Neoway N723-EA support (stable-fixes).\n- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).\n- USB: usblp: return error when setting unsupported protocol (git-fixes).\n- Update patches.suse/nvme-tcp-Fix-I-O-queue-cpu-spreading-for-multiple-co.patch (git-fixes bsc#1224049).\n- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).\n- VMCI: fix reference to ioctl-number.rst (git-fixes).\n- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).\n- afs: Fix cleanup of immediately failed async calls (git-fixes).\n- afs: Fix directory format encoding struct (git-fixes).\n- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).\n- afs: Fix the maximum cell name length (git-fixes).\n- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)\n- arm64: Filter out SVE hwcaps when FEAT_SVE isn\u0027t implemented (git-fixes)\n- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245).\n- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)\n- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).\n- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)\n- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).\n- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)\n- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)\n- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)\n- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).\n- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)\n- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).\n- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).\n- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).\n- cleanup: Add conditional guard support (stable-fixes).\n- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).\n- cleanup: Remove address space of returned pointer (git-fixes).\n- cpufreq: ACPI: Fix max-frequency computation (git-fixes).\n- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).\n- cpufreq: amd-pstate: remove global header file (git-fixes).\n- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).\n- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).\n- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).\n- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).\n- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).\n- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).\n- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).\n- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).\n- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).\n- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).\n- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).\n- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).\n- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).\n- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).\n- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).\n- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).\n- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).\n- cpupower: fix TSC MHz calculation (git-fixes).\n- crypto: caam - use JobR\u0027s space to access page 0 regs (git-fixes).\n- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).\n- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).\n- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).\n- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).\n- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).\n- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to \u0027async\u0027 (git-fixes).\n- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).\n- crypto: qce - fix goto jump in error path (git-fixes).\n- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).\n- crypto: qce - unregister previously registered algos in error path (git-fixes).\n- devcoredump: cleanup some comments (git-fixes).\n- dlm: fix possible lkb_resource null dereference (git-fixes).\n- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).\n- doc/README.SUSE: Point to the updated version of LKMPG\n- docs: media: update location of the media patches (stable-fixes).\n- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).\n- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).\n- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).\n- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).\n- drm/amd/display: Fix DSC-re-computing (stable-fixes).\n- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).\n- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).\n- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).\n- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).\n- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).\n- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).\n- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).\n- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).\n- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).\n- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).\n- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).\n- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).\n- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).\n- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).\n- drm/mediatek: Add return value check when reading DPCD (git-fixes).\n- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).\n- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).\n- drm/mediatek: Fix mode valid issue for dp (git-fixes).\n- drm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err (git-fixes).\n- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).\n- drm/mediatek: stop selecting foreign drivers (git-fixes).\n- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).\n- drm/msm: Check return value of of_dma_configure() (git-fixes).\n- drm/msm: do not clean up priv-\u003ekms prematurely (git-fixes).\n- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).\n- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).\n- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).\n- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).\n- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).\n- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).\n- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).\n- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).\n- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).\n- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).\n- drm/vmwgfx: Add new keep_resv BO param (git-fixes).\n- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).\n- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).\n- exfat: fix the infinite loop in exfat_readdir() (git-fixes).\n- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).\n- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).\n- genksyms: fix memory leak when the same symbol is added from source (git-fixes).\n- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).\n- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).\n- gpio: mxc: remove dead code after switch to DT-only (git-fixes).\n- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).\n- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp() (git-fixes).\n- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).\n- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).\n- hwmon: (tmp513) Fix division of negative numbers (git-fixes).\n- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).\n- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).\n- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).\n- i2c: i801: Add support for Intel Panther Lake (stable-fixes).\n- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).\n- i2c: rcar: fix NACK handling when being a target (git-fixes).\n- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).\n- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).\n- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).\n- iio: adc: ad7124: Disable all channels at probe time (git-fixes).\n- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).\n- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).\n- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).\n- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).\n- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).\n- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).\n- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).\n- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).\n- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).\n- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).\n- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).\n- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).\n- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).\n- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).\n- intel_th: core: fix kernel-doc warnings (git-fixes).\n- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).\n- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).\n- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).\n- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).\n- kABI workaround for struct auto_pin_cfg_item change (git-fixes).\n- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).\n- kheaders: Ignore silly-rename files (stable-fixes).\n- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).\n- ktest.pl: Check kernelrelease return in get_version (git-fixes).\n- ktest.pl: Fix typo \u0027accesing\u0027 (git-fixes).\n- ktest.pl: Fix typo in comment (git-fixes).\n- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).\n- ktest: force $buildonly = 1 for \u0027make_warnings_file\u0027 test type (stable-fixes).\n- landlock: Handle weird files (git-fixes).\n- latencytop: use correct kernel-doc format for func params (git-fixes).\n- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).\n- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).\n- lib/inflate.c: remove dead code (git-fixes).\n- lib/stackdepot: print disabled message only if truly disabled (git-fixes).\n- mac802154: check local interfaces before deleting sdata list (stable-fixes).\n- mailbox: pcc: Add support for platform notification handling (stable-fixes).\n- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).\n- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).\n- maple_tree: simplify split calculation (git-fixes).\n- media: camif-core: Add check for clk_enable() (git-fixes).\n- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).\n- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).\n- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).\n- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).\n- media: dvb: mb86a16: check the return value of mb86a16_read() (git-fixes).\n- media: firewire: firedtv-avc.c: replace BUG with proper, error return (git-fixes).\n- media: i2c: imx412: Add missing newline to prints (git-fixes).\n- media: i2c: ov9282: Correct the exposure offset (git-fixes).\n- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).\n- media: imx296: Add standby delay during probe (git-fixes).\n- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).\n- media: marvell: Add check for clk_enable() (git-fixes).\n- media: mc: fix endpoint iteration (git-fixes).\n- media: mipi-csis: Add check for clk_enable() (git-fixes).\n- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).\n- media: ov08x40: Fix hblank out of range issue (git-fixes).\n- media: ov5640: fix get_light_freq on auto (git-fixes).\n- media: rc: iguanair: handle timeouts (git-fixes).\n- media: rkisp1: Fix unused value issue (git-fixes).\n- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).\n- media: uvcvideo: Fix double free in error path (git-fixes).\n- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).\n- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).\n- media: uvcvideo: Only save async fh if success (git-fixes).\n- media: uvcvideo: Propagate buf-\u003eerror to userspace (git-fixes).\n- media: uvcvideo: Remove dangling pointers (git-fixes).\n- media: uvcvideo: Remove redundant NULL assignment (git-fixes).\n- media: uvcvideo: Support partial control reads (git-fixes).\n- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).\n- memory-failure: use a folio in me_huge_page() (git-fixes).\n- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).\n- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).\n- misc: fastrpc: Fix copy buffer page size (git-fixes).\n- misc: fastrpc: Fix registered buffer page address (git-fixes).\n- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).\n- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).\n- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).\n- mm/compaction: fix UBSAN shift-out-of-bounds warning (git fixes (mm/compaction)).\n- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).\n- mm/memory-failure: check the mapcount of the precise page (git-fixes).\n- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).\n- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).\n- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).\n- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).\n- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).\n- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).\n- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).\n- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).\n- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).\n- mm/migrate: putback split folios when numa hint migration fails (git-fixes).\n- mm/migrate: split source folio if it is on deferred split list (git-fixes).\n- mm/page_owner: remove free_ts from page_owner output (git-fixes).\n- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).\n- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).\n- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).\n- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).\n- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).\n- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).\n- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).\n- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).\n- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).\n- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).\n- net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).\n- net: mana: Cleanup \u0027mana\u0027 debugfs dir after cleanup of all children (bsc#1236760).\n- net: mana: Enable debugfs files for MANA device (bsc#1236758).\n- net: netvsc: Update default VMBus channels (bsc#1236757).\n- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).\n- net: rose: fix timer races against user threads (git-fixes).\n- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).\n- net: usb: rtl8150: enable basic endpoint checking (git-fixes).\n- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).\n- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).\n- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).\n- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).\n- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).\n- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).\n- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).\n- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).\n- nvmet: propagate npwg topology (git-fixes).\n- padata: add pd get/put refcnt helper (git-fixes).\n- padata: avoid UAF for reorder_work (git-fixes).\n- padata: fix UAF in padata_reorder (git-fixes).\n- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).\n- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).\n- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).\n- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).\n- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).\n- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).\n- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).\n- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).\n- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).\n- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).\n- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).\n- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).\n- pps: add an error check in parport_attach (git-fixes).\n- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).\n- printk: Add is_printk_legacy_deferred() (bsc#1236733).\n- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).\n- pwm: stm32-lp: Add check for clk_enable() (git-fixes).\n- pwm: stm32: Add check for clk_enable() (git-fixes).\n- r8169: enable SG/TSO on selected chip versions per default (bsc#1235874).\n- rcu-tasks: Pull sampling of -\u003epercpu_dequeue_lim out of loop (git-fixes)\n- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)\n- rcu: Dump memory object info if callback function is invalid (git-fixes)\n- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)\n- rcuscale: Move rcu_scale_writer() (git-fixes)\n- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)\n- regulator: core: Add missing newline character (git-fixes).\n- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).\n- remoteproc: core: Fix ida_free call while not allocated (git-fixes).\n- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).\n- rtc: zynqmp: Fix optional clock name property (git-fixes).\n- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)\n- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).\n- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).\n- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).\n- selftest: media_tests: fix trivial UAF typo (git-fixes).\n- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).\n- selftests/landlock: Fix error message (git-fixes).\n- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).\n- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).\n- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).\n- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).\n- selftests: tc-testing: reduce rshift value (stable-fixes).\n- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).\n- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).\n- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).\n- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).\n- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).\n- ocfs2: temporarily disable upstream patch (bsc#1236138).\n- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).\n- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).\n- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).\n- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).\n- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).\n- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).\n- spi: zynq-qspi: Add check for clk_enable() (git-fixes).\n- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)\n- srcu: Only accelerate on enqueue time (git-fixes)\n- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).\n- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).\n- staging: iio: ad9832: Correct phase range check (git-fixes).\n- staging: iio: ad9834: Correct phase range check (git-fixes).\n- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).\n- staging: media: max96712: fix kernel oops when removing module (git-fixes).\n- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).\n- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).\n- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).\n- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).\n- tools: Sync if_xdp.h uapi tooling header (git-fixes).\n- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).\n- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).\n- tty: xilinx_uartps: split sysrq handling (git-fixes).\n- ubifs: skip dumping tnc tree when zroot is null (git-fixes).\n- uio: Fix return value of poll (git-fixes).\n- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).\n- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).\n- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).\n- usb: chipidea: ci_hdrc_imx: decrement device\u0027s refcount in .remove() and in the error path of .probe() (git-fixes).\n- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).\n- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).\n- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).\n- usb: fix reference leak in usb_new_device() (git-fixes).\n- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).\n- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).\n- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).\n- usb: gadget: f_tcm: Do not free command immediately (git-fixes).\n- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).\n- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).\n- usb: gadget: f_tcm: Translate error to sense (git-fixes).\n- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).\n- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).\n- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).\n- usb: host: xhci-plat: Assign shared_hcd-\u003ersrc_start (git-fixes).\n- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)\n- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).\n- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).\n- usbnet: ipheth: break up NCM header size computation (git-fixes).\n- usbnet: ipheth: check that DPE points past NCM header (git-fixes).\n- usbnet: ipheth: fix DPE OoB read (git-fixes).\n- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).\n- usbnet: ipheth: refactor NCM datagram loop (git-fixes).\n- usbnet: ipheth: use static NDP16 location in URB (git-fixes).\n- vfio/pci: Lock external INTx masking ops (bsc#1222803).\n- virtio-mem: check if the config changed before fake offlining memory (git-fixes).\n- virtio-mem: convert most offline_and_remove_memory() errors to -EBUSY (git-fixes).\n- virtio-mem: keep retrying on offline_and_remove_memory() errors in Sub Block Mode (SBM) (git-fixes).\n- virtio-mem: remove unsafe unplug in Big Block Mode (BBM) (git-fixes).\n- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).\n- vsock/virtio: cancel close work in the destructor (git-fixes)\n- vsock: Keep the binding until socket destruction (git-fixes)\n- vsock: reset socket state when de-assigning the transport (git-fixes)\n- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).\n- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).\n- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).\n- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).\n- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).\n- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).\n- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).\n- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).\n- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).\n- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).\n- wifi: mac80211: Add non-atomic station iterator (stable-fixes).\n- wifi: mac80211: Fix common size calculation for ML element (git-fixes).\n- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).\n- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).\n- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).\n- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).\n- wifi: mac80211: prohibit deactivating all links (git-fixes).\n- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).\n- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).\n- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).\n- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).\n- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).\n- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7915: fix register mapping (git-fixes).\n- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).\n- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).\n- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).\n- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).\n- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).\n- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).\n- wifi: mt76: mt7996: fix ldpc setting (git-fixes).\n- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7996: fix register mapping (git-fixes).\n- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).\n- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).\n- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).\n- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).\n- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).\n- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).\n- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).\n- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).\n- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).\n- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).\n- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).\n- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).\n- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).\n- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).\n- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).\n- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).\n- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).\n- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).\n- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-557,SUSE-SLE-Module-Live-Patching-15-SP6-2025-557,SUSE-SLE-Module-RT-15-SP6-2025-557,openSUSE-SLE-15.6-2025-557",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0557-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:0557-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20250557-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:0557-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-February/020350.html"
},
{
"category": "self",
"summary": "SUSE Bug 1012628",
"url": "https://bugzilla.suse.com/1012628"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1215199",
"url": "https://bugzilla.suse.com/1215199"
},
{
"category": "self",
"summary": "SUSE Bug 1216813",
"url": "https://bugzilla.suse.com/1216813"
},
{
"category": "self",
"summary": "SUSE Bug 1218470",
"url": "https://bugzilla.suse.com/1218470"
},
{
"category": "self",
"summary": "SUSE Bug 1220711",
"url": "https://bugzilla.suse.com/1220711"
},
{
"category": "self",
"summary": "SUSE Bug 1222803",
"url": "https://bugzilla.suse.com/1222803"
},
{
"category": "self",
"summary": "SUSE Bug 1224049",
"url": "https://bugzilla.suse.com/1224049"
},
{
"category": "self",
"summary": "SUSE Bug 1225897",
"url": "https://bugzilla.suse.com/1225897"
},
{
"category": "self",
"summary": "SUSE Bug 1226980",
"url": "https://bugzilla.suse.com/1226980"
},
{
"category": "self",
"summary": "SUSE Bug 1228592",
"url": "https://bugzilla.suse.com/1228592"
},
{
"category": "self",
"summary": "SUSE Bug 1229833",
"url": "https://bugzilla.suse.com/1229833"
},
{
"category": "self",
"summary": "SUSE Bug 1231016",
"url": "https://bugzilla.suse.com/1231016"
},
{
"category": "self",
"summary": "SUSE Bug 1231088",
"url": "https://bugzilla.suse.com/1231088"
},
{
"category": "self",
"summary": "SUSE Bug 1232087",
"url": "https://bugzilla.suse.com/1232087"
},
{
"category": "self",
"summary": "SUSE Bug 1232101",
"url": "https://bugzilla.suse.com/1232101"
},
{
"category": "self",
"summary": "SUSE Bug 1232158",
"url": "https://bugzilla.suse.com/1232158"
},
{
"category": "self",
"summary": "SUSE Bug 1232161",
"url": "https://bugzilla.suse.com/1232161"
},
{
"category": "self",
"summary": "SUSE Bug 1232421",
"url": "https://bugzilla.suse.com/1232421"
},
{
"category": "self",
"summary": "SUSE Bug 1232882",
"url": "https://bugzilla.suse.com/1232882"
},
{
"category": "self",
"summary": "SUSE Bug 1233055",
"url": "https://bugzilla.suse.com/1233055"
},
{
"category": "self",
"summary": "SUSE Bug 1233112",
"url": "https://bugzilla.suse.com/1233112"
},
{
"category": "self",
"summary": "SUSE Bug 1233221",
"url": "https://bugzilla.suse.com/1233221"
},
{
"category": "self",
"summary": "SUSE Bug 1233248",
"url": "https://bugzilla.suse.com/1233248"
},
{
"category": "self",
"summary": "SUSE Bug 1233259",
"url": "https://bugzilla.suse.com/1233259"
},
{
"category": "self",
"summary": "SUSE Bug 1233260",
"url": "https://bugzilla.suse.com/1233260"
},
{
"category": "self",
"summary": "SUSE Bug 1233488",
"url": "https://bugzilla.suse.com/1233488"
},
{
"category": "self",
"summary": "SUSE Bug 1233522",
"url": "https://bugzilla.suse.com/1233522"
},
{
"category": "self",
"summary": "SUSE Bug 1233638",
"url": "https://bugzilla.suse.com/1233638"
},
{
"category": "self",
"summary": "SUSE Bug 1233642",
"url": "https://bugzilla.suse.com/1233642"
},
{
"category": "self",
"summary": "SUSE Bug 1233778",
"url": "https://bugzilla.suse.com/1233778"
},
{
"category": "self",
"summary": "SUSE Bug 1234195",
"url": "https://bugzilla.suse.com/1234195"
},
{
"category": "self",
"summary": "SUSE Bug 1234619",
"url": "https://bugzilla.suse.com/1234619"
},
{
"category": "self",
"summary": "SUSE Bug 1234635",
"url": "https://bugzilla.suse.com/1234635"
},
{
"category": "self",
"summary": "SUSE Bug 1234683",
"url": "https://bugzilla.suse.com/1234683"
},
{
"category": "self",
"summary": "SUSE Bug 1234693",
"url": "https://bugzilla.suse.com/1234693"
},
{
"category": "self",
"summary": "SUSE Bug 1234726",
"url": "https://bugzilla.suse.com/1234726"
},
{
"category": "self",
"summary": "SUSE Bug 1234825",
"url": "https://bugzilla.suse.com/1234825"
},
{
"category": "self",
"summary": "SUSE Bug 1234863",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "self",
"summary": "SUSE Bug 1234887",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "self",
"summary": "SUSE Bug 1234888",
"url": "https://bugzilla.suse.com/1234888"
},
{
"category": "self",
"summary": "SUSE Bug 1234893",
"url": "https://bugzilla.suse.com/1234893"
},
{
"category": "self",
"summary": "SUSE Bug 1234898",
"url": "https://bugzilla.suse.com/1234898"
},
{
"category": "self",
"summary": "SUSE Bug 1234901",
"url": "https://bugzilla.suse.com/1234901"
},
{
"category": "self",
"summary": "SUSE Bug 1234906",
"url": "https://bugzilla.suse.com/1234906"
},
{
"category": "self",
"summary": "SUSE Bug 1234923",
"url": "https://bugzilla.suse.com/1234923"
},
{
"category": "self",
"summary": "SUSE Bug 1234931",
"url": "https://bugzilla.suse.com/1234931"
},
{
"category": "self",
"summary": "SUSE Bug 1234934",
"url": "https://bugzilla.suse.com/1234934"
},
{
"category": "self",
"summary": "SUSE Bug 1234947",
"url": "https://bugzilla.suse.com/1234947"
},
{
"category": "self",
"summary": "SUSE Bug 1234957",
"url": "https://bugzilla.suse.com/1234957"
},
{
"category": "self",
"summary": "SUSE Bug 1235000",
"url": "https://bugzilla.suse.com/1235000"
},
{
"category": "self",
"summary": "SUSE Bug 1235001",
"url": "https://bugzilla.suse.com/1235001"
},
{
"category": "self",
"summary": "SUSE Bug 1235011",
"url": "https://bugzilla.suse.com/1235011"
},
{
"category": "self",
"summary": "SUSE Bug 1235031",
"url": "https://bugzilla.suse.com/1235031"
},
{
"category": "self",
"summary": "SUSE Bug 1235032",
"url": "https://bugzilla.suse.com/1235032"
},
{
"category": "self",
"summary": "SUSE Bug 1235035",
"url": "https://bugzilla.suse.com/1235035"
},
{
"category": "self",
"summary": "SUSE Bug 1235037",
"url": "https://bugzilla.suse.com/1235037"
},
{
"category": "self",
"summary": "SUSE Bug 1235038",
"url": "https://bugzilla.suse.com/1235038"
},
{
"category": "self",
"summary": "SUSE Bug 1235039",
"url": "https://bugzilla.suse.com/1235039"
},
{
"category": "self",
"summary": "SUSE Bug 1235040",
"url": "https://bugzilla.suse.com/1235040"
},
{
"category": "self",
"summary": "SUSE Bug 1235042",
"url": "https://bugzilla.suse.com/1235042"
},
{
"category": "self",
"summary": "SUSE Bug 1235043",
"url": "https://bugzilla.suse.com/1235043"
},
{
"category": "self",
"summary": "SUSE Bug 1235046",
"url": "https://bugzilla.suse.com/1235046"
},
{
"category": "self",
"summary": "SUSE Bug 1235050",
"url": "https://bugzilla.suse.com/1235050"
},
{
"category": "self",
"summary": "SUSE Bug 1235051",
"url": "https://bugzilla.suse.com/1235051"
},
{
"category": "self",
"summary": "SUSE Bug 1235053",
"url": "https://bugzilla.suse.com/1235053"
},
{
"category": "self",
"summary": "SUSE Bug 1235054",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "self",
"summary": "SUSE Bug 1235057",
"url": "https://bugzilla.suse.com/1235057"
},
{
"category": "self",
"summary": "SUSE Bug 1235059",
"url": "https://bugzilla.suse.com/1235059"
},
{
"category": "self",
"summary": "SUSE Bug 1235065",
"url": "https://bugzilla.suse.com/1235065"
},
{
"category": "self",
"summary": "SUSE Bug 1235070",
"url": "https://bugzilla.suse.com/1235070"
},
{
"category": "self",
"summary": "SUSE Bug 1235073",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "self",
"summary": "SUSE Bug 1235100",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "self",
"summary": "SUSE Bug 1235112",
"url": "https://bugzilla.suse.com/1235112"
},
{
"category": "self",
"summary": "SUSE Bug 1235115",
"url": "https://bugzilla.suse.com/1235115"
},
{
"category": "self",
"summary": "SUSE Bug 1235117",
"url": "https://bugzilla.suse.com/1235117"
},
{
"category": "self",
"summary": "SUSE Bug 1235122",
"url": "https://bugzilla.suse.com/1235122"
},
{
"category": "self",
"summary": "SUSE Bug 1235123",
"url": "https://bugzilla.suse.com/1235123"
},
{
"category": "self",
"summary": "SUSE Bug 1235125",
"url": "https://bugzilla.suse.com/1235125"
},
{
"category": "self",
"summary": "SUSE Bug 1235132",
"url": "https://bugzilla.suse.com/1235132"
},
{
"category": "self",
"summary": "SUSE Bug 1235133",
"url": "https://bugzilla.suse.com/1235133"
},
{
"category": "self",
"summary": "SUSE Bug 1235155",
"url": "https://bugzilla.suse.com/1235155"
},
{
"category": "self",
"summary": "SUSE Bug 1235160",
"url": "https://bugzilla.suse.com/1235160"
},
{
"category": "self",
"summary": "SUSE Bug 1235217",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "self",
"summary": "SUSE Bug 1235219",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "self",
"summary": "SUSE Bug 1235220",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "self",
"summary": "SUSE Bug 1235222",
"url": "https://bugzilla.suse.com/1235222"
},
{
"category": "self",
"summary": "SUSE Bug 1235223",
"url": "https://bugzilla.suse.com/1235223"
},
{
"category": "self",
"summary": "SUSE Bug 1235224",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "self",
"summary": "SUSE Bug 1235227",
"url": "https://bugzilla.suse.com/1235227"
},
{
"category": "self",
"summary": "SUSE Bug 1235230",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "self",
"summary": "SUSE Bug 1235241",
"url": "https://bugzilla.suse.com/1235241"
},
{
"category": "self",
"summary": "SUSE Bug 1235244",
"url": "https://bugzilla.suse.com/1235244"
},
{
"category": "self",
"summary": "SUSE Bug 1235249",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "self",
"summary": "SUSE Bug 1235251",
"url": "https://bugzilla.suse.com/1235251"
},
{
"category": "self",
"summary": "SUSE Bug 1235252",
"url": "https://bugzilla.suse.com/1235252"
},
{
"category": "self",
"summary": "SUSE Bug 1235389",
"url": "https://bugzilla.suse.com/1235389"
},
{
"category": "self",
"summary": "SUSE Bug 1235390",
"url": "https://bugzilla.suse.com/1235390"
},
{
"category": "self",
"summary": "SUSE Bug 1235391",
"url": "https://bugzilla.suse.com/1235391"
},
{
"category": "self",
"summary": "SUSE Bug 1235406",
"url": "https://bugzilla.suse.com/1235406"
},
{
"category": "self",
"summary": "SUSE Bug 1235410",
"url": "https://bugzilla.suse.com/1235410"
},
{
"category": "self",
"summary": "SUSE Bug 1235412",
"url": "https://bugzilla.suse.com/1235412"
},
{
"category": "self",
"summary": "SUSE Bug 1235413",
"url": "https://bugzilla.suse.com/1235413"
},
{
"category": "self",
"summary": "SUSE Bug 1235415",
"url": "https://bugzilla.suse.com/1235415"
},
{
"category": "self",
"summary": "SUSE Bug 1235416",
"url": "https://bugzilla.suse.com/1235416"
},
{
"category": "self",
"summary": "SUSE Bug 1235417",
"url": "https://bugzilla.suse.com/1235417"
},
{
"category": "self",
"summary": "SUSE Bug 1235418",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "self",
"summary": "SUSE Bug 1235423",
"url": "https://bugzilla.suse.com/1235423"
},
{
"category": "self",
"summary": "SUSE Bug 1235424",
"url": "https://bugzilla.suse.com/1235424"
},
{
"category": "self",
"summary": "SUSE Bug 1235425",
"url": "https://bugzilla.suse.com/1235425"
},
{
"category": "self",
"summary": "SUSE Bug 1235426",
"url": "https://bugzilla.suse.com/1235426"
},
{
"category": "self",
"summary": "SUSE Bug 1235427",
"url": "https://bugzilla.suse.com/1235427"
},
{
"category": "self",
"summary": "SUSE Bug 1235428",
"url": "https://bugzilla.suse.com/1235428"
},
{
"category": "self",
"summary": "SUSE Bug 1235429",
"url": "https://bugzilla.suse.com/1235429"
},
{
"category": "self",
"summary": "SUSE Bug 1235430",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "self",
"summary": "SUSE Bug 1235433",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "self",
"summary": "SUSE Bug 1235437",
"url": "https://bugzilla.suse.com/1235437"
},
{
"category": "self",
"summary": "SUSE Bug 1235439",
"url": "https://bugzilla.suse.com/1235439"
},
{
"category": "self",
"summary": "SUSE Bug 1235441",
"url": "https://bugzilla.suse.com/1235441"
},
{
"category": "self",
"summary": "SUSE Bug 1235444",
"url": "https://bugzilla.suse.com/1235444"
},
{
"category": "self",
"summary": "SUSE Bug 1235445",
"url": "https://bugzilla.suse.com/1235445"
},
{
"category": "self",
"summary": "SUSE Bug 1235449",
"url": "https://bugzilla.suse.com/1235449"
},
{
"category": "self",
"summary": "SUSE Bug 1235451",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "self",
"summary": "SUSE Bug 1235454",
"url": "https://bugzilla.suse.com/1235454"
},
{
"category": "self",
"summary": "SUSE Bug 1235458",
"url": "https://bugzilla.suse.com/1235458"
},
{
"category": "self",
"summary": "SUSE Bug 1235459",
"url": "https://bugzilla.suse.com/1235459"
},
{
"category": "self",
"summary": "SUSE Bug 1235464",
"url": "https://bugzilla.suse.com/1235464"
},
{
"category": "self",
"summary": "SUSE Bug 1235466",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "self",
"summary": "SUSE Bug 1235473",
"url": "https://bugzilla.suse.com/1235473"
},
{
"category": "self",
"summary": "SUSE Bug 1235479",
"url": "https://bugzilla.suse.com/1235479"
},
{
"category": "self",
"summary": "SUSE Bug 1235480",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "self",
"summary": "SUSE Bug 1235483",
"url": "https://bugzilla.suse.com/1235483"
},
{
"category": "self",
"summary": "SUSE Bug 1235486",
"url": "https://bugzilla.suse.com/1235486"
},
{
"category": "self",
"summary": "SUSE Bug 1235487",
"url": "https://bugzilla.suse.com/1235487"
},
{
"category": "self",
"summary": "SUSE Bug 1235488",
"url": "https://bugzilla.suse.com/1235488"
},
{
"category": "self",
"summary": "SUSE Bug 1235489",
"url": "https://bugzilla.suse.com/1235489"
},
{
"category": "self",
"summary": "SUSE Bug 1235491",
"url": "https://bugzilla.suse.com/1235491"
},
{
"category": "self",
"summary": "SUSE Bug 1235494",
"url": "https://bugzilla.suse.com/1235494"
},
{
"category": "self",
"summary": "SUSE Bug 1235495",
"url": "https://bugzilla.suse.com/1235495"
},
{
"category": "self",
"summary": "SUSE Bug 1235496",
"url": "https://bugzilla.suse.com/1235496"
},
{
"category": "self",
"summary": "SUSE Bug 1235497",
"url": "https://bugzilla.suse.com/1235497"
},
{
"category": "self",
"summary": "SUSE Bug 1235498",
"url": "https://bugzilla.suse.com/1235498"
},
{
"category": "self",
"summary": "SUSE Bug 1235500",
"url": "https://bugzilla.suse.com/1235500"
},
{
"category": "self",
"summary": "SUSE Bug 1235502",
"url": "https://bugzilla.suse.com/1235502"
},
{
"category": "self",
"summary": "SUSE Bug 1235503",
"url": "https://bugzilla.suse.com/1235503"
},
{
"category": "self",
"summary": "SUSE Bug 1235519",
"url": "https://bugzilla.suse.com/1235519"
},
{
"category": "self",
"summary": "SUSE Bug 1235520",
"url": "https://bugzilla.suse.com/1235520"
},
{
"category": "self",
"summary": "SUSE Bug 1235521",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "self",
"summary": "SUSE Bug 1235523",
"url": "https://bugzilla.suse.com/1235523"
},
{
"category": "self",
"summary": "SUSE Bug 1235526",
"url": "https://bugzilla.suse.com/1235526"
},
{
"category": "self",
"summary": "SUSE Bug 1235528",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "self",
"summary": "SUSE Bug 1235532",
"url": "https://bugzilla.suse.com/1235532"
},
{
"category": "self",
"summary": "SUSE Bug 1235533",
"url": "https://bugzilla.suse.com/1235533"
},
{
"category": "self",
"summary": "SUSE Bug 1235534",
"url": "https://bugzilla.suse.com/1235534"
},
{
"category": "self",
"summary": "SUSE Bug 1235537",
"url": "https://bugzilla.suse.com/1235537"
},
{
"category": "self",
"summary": "SUSE Bug 1235538",
"url": "https://bugzilla.suse.com/1235538"
},
{
"category": "self",
"summary": "SUSE Bug 1235545",
"url": "https://bugzilla.suse.com/1235545"
},
{
"category": "self",
"summary": "SUSE Bug 1235552",
"url": "https://bugzilla.suse.com/1235552"
},
{
"category": "self",
"summary": "SUSE Bug 1235555",
"url": "https://bugzilla.suse.com/1235555"
},
{
"category": "self",
"summary": "SUSE Bug 1235557",
"url": "https://bugzilla.suse.com/1235557"
},
{
"category": "self",
"summary": "SUSE Bug 1235563",
"url": "https://bugzilla.suse.com/1235563"
},
{
"category": "self",
"summary": "SUSE Bug 1235564",
"url": "https://bugzilla.suse.com/1235564"
},
{
"category": "self",
"summary": "SUSE Bug 1235565",
"url": "https://bugzilla.suse.com/1235565"
},
{
"category": "self",
"summary": "SUSE Bug 1235568",
"url": "https://bugzilla.suse.com/1235568"
},
{
"category": "self",
"summary": "SUSE Bug 1235570",
"url": "https://bugzilla.suse.com/1235570"
},
{
"category": "self",
"summary": "SUSE Bug 1235571",
"url": "https://bugzilla.suse.com/1235571"
},
{
"category": "self",
"summary": "SUSE Bug 1235577",
"url": "https://bugzilla.suse.com/1235577"
},
{
"category": "self",
"summary": "SUSE Bug 1235578",
"url": "https://bugzilla.suse.com/1235578"
},
{
"category": "self",
"summary": "SUSE Bug 1235582",
"url": "https://bugzilla.suse.com/1235582"
},
{
"category": "self",
"summary": "SUSE Bug 1235583",
"url": "https://bugzilla.suse.com/1235583"
},
{
"category": "self",
"summary": "SUSE Bug 1235584",
"url": "https://bugzilla.suse.com/1235584"
},
{
"category": "self",
"summary": "SUSE Bug 1235587",
"url": "https://bugzilla.suse.com/1235587"
},
{
"category": "self",
"summary": "SUSE Bug 1235611",
"url": "https://bugzilla.suse.com/1235611"
},
{
"category": "self",
"summary": "SUSE Bug 1235612",
"url": "https://bugzilla.suse.com/1235612"
},
{
"category": "self",
"summary": "SUSE Bug 1235616",
"url": "https://bugzilla.suse.com/1235616"
},
{
"category": "self",
"summary": "SUSE Bug 1235622",
"url": "https://bugzilla.suse.com/1235622"
},
{
"category": "self",
"summary": "SUSE Bug 1235627",
"url": "https://bugzilla.suse.com/1235627"
},
{
"category": "self",
"summary": "SUSE Bug 1235632",
"url": "https://bugzilla.suse.com/1235632"
},
{
"category": "self",
"summary": "SUSE Bug 1235635",
"url": "https://bugzilla.suse.com/1235635"
},
{
"category": "self",
"summary": "SUSE Bug 1235638",
"url": "https://bugzilla.suse.com/1235638"
},
{
"category": "self",
"summary": "SUSE Bug 1235641",
"url": "https://bugzilla.suse.com/1235641"
},
{
"category": "self",
"summary": "SUSE Bug 1235643",
"url": "https://bugzilla.suse.com/1235643"
},
{
"category": "self",
"summary": "SUSE Bug 1235645",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "self",
"summary": "SUSE Bug 1235646",
"url": "https://bugzilla.suse.com/1235646"
},
{
"category": "self",
"summary": "SUSE Bug 1235647",
"url": "https://bugzilla.suse.com/1235647"
},
{
"category": "self",
"summary": "SUSE Bug 1235650",
"url": "https://bugzilla.suse.com/1235650"
},
{
"category": "self",
"summary": "SUSE Bug 1235653",
"url": "https://bugzilla.suse.com/1235653"
},
{
"category": "self",
"summary": "SUSE Bug 1235656",
"url": "https://bugzilla.suse.com/1235656"
},
{
"category": "self",
"summary": "SUSE Bug 1235657",
"url": "https://bugzilla.suse.com/1235657"
},
{
"category": "self",
"summary": "SUSE Bug 1235663",
"url": "https://bugzilla.suse.com/1235663"
},
{
"category": "self",
"summary": "SUSE Bug 1235686",
"url": "https://bugzilla.suse.com/1235686"
},
{
"category": "self",
"summary": "SUSE Bug 1235700",
"url": "https://bugzilla.suse.com/1235700"
},
{
"category": "self",
"summary": "SUSE Bug 1235705",
"url": "https://bugzilla.suse.com/1235705"
},
{
"category": "self",
"summary": "SUSE Bug 1235707",
"url": "https://bugzilla.suse.com/1235707"
},
{
"category": "self",
"summary": "SUSE Bug 1235708",
"url": "https://bugzilla.suse.com/1235708"
},
{
"category": "self",
"summary": "SUSE Bug 1235710",
"url": "https://bugzilla.suse.com/1235710"
},
{
"category": "self",
"summary": "SUSE Bug 1235714",
"url": "https://bugzilla.suse.com/1235714"
},
{
"category": "self",
"summary": "SUSE Bug 1235716",
"url": "https://bugzilla.suse.com/1235716"
},
{
"category": "self",
"summary": "SUSE Bug 1235720",
"url": "https://bugzilla.suse.com/1235720"
},
{
"category": "self",
"summary": "SUSE Bug 1235723",
"url": "https://bugzilla.suse.com/1235723"
},
{
"category": "self",
"summary": "SUSE Bug 1235727",
"url": "https://bugzilla.suse.com/1235727"
},
{
"category": "self",
"summary": "SUSE Bug 1235730",
"url": "https://bugzilla.suse.com/1235730"
},
{
"category": "self",
"summary": "SUSE Bug 1235737",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "self",
"summary": "SUSE Bug 1235739",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "self",
"summary": "SUSE Bug 1235745",
"url": "https://bugzilla.suse.com/1235745"
},
{
"category": "self",
"summary": "SUSE Bug 1235747",
"url": "https://bugzilla.suse.com/1235747"
},
{
"category": "self",
"summary": "SUSE Bug 1235750",
"url": "https://bugzilla.suse.com/1235750"
},
{
"category": "self",
"summary": "SUSE Bug 1235753",
"url": "https://bugzilla.suse.com/1235753"
},
{
"category": "self",
"summary": "SUSE Bug 1235759",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "self",
"summary": "SUSE Bug 1235764",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "self",
"summary": "SUSE Bug 1235768",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "self",
"summary": "SUSE Bug 1235776",
"url": "https://bugzilla.suse.com/1235776"
},
{
"category": "self",
"summary": "SUSE Bug 1235777",
"url": "https://bugzilla.suse.com/1235777"
},
{
"category": "self",
"summary": "SUSE Bug 1235778",
"url": "https://bugzilla.suse.com/1235778"
},
{
"category": "self",
"summary": "SUSE Bug 1235779",
"url": "https://bugzilla.suse.com/1235779"
},
{
"category": "self",
"summary": "SUSE Bug 1235793",
"url": "https://bugzilla.suse.com/1235793"
},
{
"category": "self",
"summary": "SUSE Bug 1235798",
"url": "https://bugzilla.suse.com/1235798"
},
{
"category": "self",
"summary": "SUSE Bug 1235806",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "self",
"summary": "SUSE Bug 1235808",
"url": "https://bugzilla.suse.com/1235808"
},
{
"category": "self",
"summary": "SUSE Bug 1235812",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "self",
"summary": "SUSE Bug 1235814",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "self",
"summary": "SUSE Bug 1235818",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "self",
"summary": "SUSE Bug 1235842",
"url": "https://bugzilla.suse.com/1235842"
},
{
"category": "self",
"summary": "SUSE Bug 1235865",
"url": "https://bugzilla.suse.com/1235865"
},
{
"category": "self",
"summary": "SUSE Bug 1235874",
"url": "https://bugzilla.suse.com/1235874"
},
{
"category": "self",
"summary": "SUSE Bug 1235894",
"url": "https://bugzilla.suse.com/1235894"
},
{
"category": "self",
"summary": "SUSE Bug 1235902",
"url": "https://bugzilla.suse.com/1235902"
},
{
"category": "self",
"summary": "SUSE Bug 1235903",
"url": "https://bugzilla.suse.com/1235903"
},
{
"category": "self",
"summary": "SUSE Bug 1235906",
"url": "https://bugzilla.suse.com/1235906"
},
{
"category": "self",
"summary": "SUSE Bug 1235914",
"url": "https://bugzilla.suse.com/1235914"
},
{
"category": "self",
"summary": "SUSE Bug 1235918",
"url": "https://bugzilla.suse.com/1235918"
},
{
"category": "self",
"summary": "SUSE Bug 1235919",
"url": "https://bugzilla.suse.com/1235919"
},
{
"category": "self",
"summary": "SUSE Bug 1235920",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "self",
"summary": "SUSE Bug 1235924",
"url": "https://bugzilla.suse.com/1235924"
},
{
"category": "self",
"summary": "SUSE Bug 1235940",
"url": "https://bugzilla.suse.com/1235940"
},
{
"category": "self",
"summary": "SUSE Bug 1235941",
"url": "https://bugzilla.suse.com/1235941"
},
{
"category": "self",
"summary": "SUSE Bug 1235946",
"url": "https://bugzilla.suse.com/1235946"
},
{
"category": "self",
"summary": "SUSE Bug 1235948",
"url": "https://bugzilla.suse.com/1235948"
},
{
"category": "self",
"summary": "SUSE Bug 1235952",
"url": "https://bugzilla.suse.com/1235952"
},
{
"category": "self",
"summary": "SUSE Bug 1235964",
"url": "https://bugzilla.suse.com/1235964"
},
{
"category": "self",
"summary": "SUSE Bug 1235965",
"url": "https://bugzilla.suse.com/1235965"
},
{
"category": "self",
"summary": "SUSE Bug 1235967",
"url": "https://bugzilla.suse.com/1235967"
},
{
"category": "self",
"summary": "SUSE Bug 1235969",
"url": "https://bugzilla.suse.com/1235969"
},
{
"category": "self",
"summary": "SUSE Bug 1235976",
"url": "https://bugzilla.suse.com/1235976"
},
{
"category": "self",
"summary": "SUSE Bug 1235977",
"url": "https://bugzilla.suse.com/1235977"
},
{
"category": "self",
"summary": "SUSE Bug 1236078",
"url": "https://bugzilla.suse.com/1236078"
},
{
"category": "self",
"summary": "SUSE Bug 1236080",
"url": "https://bugzilla.suse.com/1236080"
},
{
"category": "self",
"summary": "SUSE Bug 1236082",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "self",
"summary": "SUSE Bug 1236088",
"url": "https://bugzilla.suse.com/1236088"
},
{
"category": "self",
"summary": "SUSE Bug 1236090",
"url": "https://bugzilla.suse.com/1236090"
},
{
"category": "self",
"summary": "SUSE Bug 1236091",
"url": "https://bugzilla.suse.com/1236091"
},
{
"category": "self",
"summary": "SUSE Bug 1236096",
"url": "https://bugzilla.suse.com/1236096"
},
{
"category": "self",
"summary": "SUSE Bug 1236097",
"url": "https://bugzilla.suse.com/1236097"
},
{
"category": "self",
"summary": "SUSE Bug 1236098",
"url": "https://bugzilla.suse.com/1236098"
},
{
"category": "self",
"summary": "SUSE Bug 1236101",
"url": "https://bugzilla.suse.com/1236101"
},
{
"category": "self",
"summary": "SUSE Bug 1236102",
"url": "https://bugzilla.suse.com/1236102"
},
{
"category": "self",
"summary": "SUSE Bug 1236104",
"url": "https://bugzilla.suse.com/1236104"
},
{
"category": "self",
"summary": "SUSE Bug 1236106",
"url": "https://bugzilla.suse.com/1236106"
},
{
"category": "self",
"summary": "SUSE Bug 1236120",
"url": "https://bugzilla.suse.com/1236120"
},
{
"category": "self",
"summary": "SUSE Bug 1236125",
"url": "https://bugzilla.suse.com/1236125"
},
{
"category": "self",
"summary": "SUSE Bug 1236127",
"url": "https://bugzilla.suse.com/1236127"
},
{
"category": "self",
"summary": "SUSE Bug 1236131",
"url": "https://bugzilla.suse.com/1236131"
},
{
"category": "self",
"summary": "SUSE Bug 1236138",
"url": "https://bugzilla.suse.com/1236138"
},
{
"category": "self",
"summary": "SUSE Bug 1236143",
"url": "https://bugzilla.suse.com/1236143"
},
{
"category": "self",
"summary": "SUSE Bug 1236144",
"url": "https://bugzilla.suse.com/1236144"
},
{
"category": "self",
"summary": "SUSE Bug 1236145",
"url": "https://bugzilla.suse.com/1236145"
},
{
"category": "self",
"summary": "SUSE Bug 1236160",
"url": "https://bugzilla.suse.com/1236160"
},
{
"category": "self",
"summary": "SUSE Bug 1236161",
"url": "https://bugzilla.suse.com/1236161"
},
{
"category": "self",
"summary": "SUSE Bug 1236163",
"url": "https://bugzilla.suse.com/1236163"
},
{
"category": "self",
"summary": "SUSE Bug 1236168",
"url": "https://bugzilla.suse.com/1236168"
},
{
"category": "self",
"summary": "SUSE Bug 1236178",
"url": "https://bugzilla.suse.com/1236178"
},
{
"category": "self",
"summary": "SUSE Bug 1236180",
"url": "https://bugzilla.suse.com/1236180"
},
{
"category": "self",
"summary": "SUSE Bug 1236181",
"url": "https://bugzilla.suse.com/1236181"
},
{
"category": "self",
"summary": "SUSE Bug 1236182",
"url": "https://bugzilla.suse.com/1236182"
},
{
"category": "self",
"summary": "SUSE Bug 1236190",
"url": "https://bugzilla.suse.com/1236190"
},
{
"category": "self",
"summary": "SUSE Bug 1236192",
"url": "https://bugzilla.suse.com/1236192"
},
{
"category": "self",
"summary": "SUSE Bug 1236198",
"url": "https://bugzilla.suse.com/1236198"
},
{
"category": "self",
"summary": "SUSE Bug 1236227",
"url": "https://bugzilla.suse.com/1236227"
},
{
"category": "self",
"summary": "SUSE Bug 1236245",
"url": "https://bugzilla.suse.com/1236245"
},
{
"category": "self",
"summary": "SUSE Bug 1236247",
"url": "https://bugzilla.suse.com/1236247"
},
{
"category": "self",
"summary": "SUSE Bug 1236248",
"url": "https://bugzilla.suse.com/1236248"
},
{
"category": "self",
"summary": "SUSE Bug 1236260",
"url": "https://bugzilla.suse.com/1236260"
},
{
"category": "self",
"summary": "SUSE Bug 1236262",
"url": "https://bugzilla.suse.com/1236262"
},
{
"category": "self",
"summary": "SUSE Bug 1236628",
"url": "https://bugzilla.suse.com/1236628"
},
{
"category": "self",
"summary": "SUSE Bug 1236680",
"url": "https://bugzilla.suse.com/1236680"
},
{
"category": "self",
"summary": "SUSE Bug 1236683",
"url": "https://bugzilla.suse.com/1236683"
},
{
"category": "self",
"summary": "SUSE Bug 1236685",
"url": "https://bugzilla.suse.com/1236685"
},
{
"category": "self",
"summary": "SUSE Bug 1236688",
"url": "https://bugzilla.suse.com/1236688"
},
{
"category": "self",
"summary": "SUSE Bug 1236694",
"url": "https://bugzilla.suse.com/1236694"
},
{
"category": "self",
"summary": "SUSE Bug 1236696",
"url": "https://bugzilla.suse.com/1236696"
},
{
"category": "self",
"summary": "SUSE Bug 1236698",
"url": "https://bugzilla.suse.com/1236698"
},
{
"category": "self",
"summary": "SUSE Bug 1236703",
"url": "https://bugzilla.suse.com/1236703"
},
{
"category": "self",
"summary": "SUSE Bug 1236732",
"url": "https://bugzilla.suse.com/1236732"
},
{
"category": "self",
"summary": "SUSE Bug 1236733",
"url": "https://bugzilla.suse.com/1236733"
},
{
"category": "self",
"summary": "SUSE Bug 1236757",
"url": "https://bugzilla.suse.com/1236757"
},
{
"category": "self",
"summary": "SUSE Bug 1236758",
"url": "https://bugzilla.suse.com/1236758"
},
{
"category": "self",
"summary": "SUSE Bug 1236760",
"url": "https://bugzilla.suse.com/1236760"
},
{
"category": "self",
"summary": "SUSE Bug 1236761",
"url": "https://bugzilla.suse.com/1236761"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52923 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36476 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39282 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46858 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48873 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49948 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49978 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49998 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50051 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50106 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50251 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50251/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50258 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50258/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50299 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50304 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52332 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53091 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53095 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53164 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53168 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53170 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53172 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53175 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53187 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53194 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53195 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53196 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53197 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53198 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53230 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53231 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53232 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53233 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53236 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53239 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53685 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-54680 page",
"url": "https://www.suse.com/security/cve/CVE-2024-54680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55639 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56369 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56372 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56531 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56533 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56538 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56543 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56546 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56548 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56557 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56558 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56568 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56570 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56571 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56572 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56573 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56574 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56575 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56577 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56578 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56584 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56587 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56588 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56589 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56590 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56592 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56593 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56594 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56595 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56596 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56597 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56598 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56600 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56601 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56602 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56603 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56606 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56607 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56608 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56609 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56610 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56611 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56614 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56616 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56617 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56619 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56620 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56622 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56623 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56625 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56629 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56631 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56632 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56634 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56635 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56636 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56637 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56641 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56642 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56643 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56644 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56648 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56649 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56650 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56651 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56654 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56656 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56658 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56659 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56661 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56662 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56663 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56664 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56665 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56670 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56672 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56675 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56677 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56679 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56681 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56683 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56687 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56688 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56691 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56693 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56694 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56698 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56700 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56701 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56704 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56705 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56707 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56708 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56709 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56712 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56715 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56716 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56722 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56723 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56724 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56725 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56726 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56727 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56728 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56729 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56741 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56745 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56746 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56747 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56748 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56759 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56760 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56763 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56765 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56766 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56767 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56769 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56774 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56775 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56776 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56777 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56778 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56779 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56780 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56787 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57791 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57792 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57793 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57795 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57798 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57801 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57802 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57804 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57838 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57849 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57850 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57874 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57876 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57882 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57887 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57888 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57890 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57892 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57893 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57906 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57910 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57912 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57917 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57926 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57933 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57946 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21632 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21645 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21646 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21649 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21650 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21651 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21652 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21653 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21655 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21656 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21662 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21663 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21664 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21666 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21666/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21669 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21669/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21670 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21674 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21675 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21676 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21678 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21682 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21682/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2025-02-14T15:26:53Z",
"generator": {
"date": "2025-02-14T15:26:53Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:0557-1",
"initial_release_date": "2025-02-14T15:26:53Z",
"revision_history": [
{
"date": "2025-02-14T15:26:53Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"product": {
"name": "kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"product_id": "kernel-devel-rt-6.4.0-150600.10.26.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"product": {
"name": "kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"product_id": "kernel-source-rt-6.4.0-150600.10.26.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt-devel-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt-extra-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-livepatch-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt-livepatch-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt-livepatch-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt-optional-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt_debug-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "kernel-syms-rt-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product": {
"name": "reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"product_id": "reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP6",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Real Time Module 15 SP6",
"product": {
"name": "SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-rt:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-rt-6.4.0-150600.10.26.1.noarch as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch"
},
"product_reference": "kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_debug-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-rt-6.4.0-150600.10.26.1.noarch as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch"
},
"product_reference": "kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-rt-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of SUSE Real Time Module 15 SP6",
"product_id": "SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "SUSE Real Time Module 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-rt-6.4.0-150600.10.26.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch"
},
"product_reference": "kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-extra-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-optional-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_debug-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-rt-6.4.0-150600.10.26.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch"
},
"product_reference": "kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
},
"product_reference": "reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: adapt set backend to use GC transaction API\n\nUse the GC transaction API to replace the old and buggy gc API and the\nbusy mark approach.\n\nNo set elements are removed from async garbage collection anymore,\ninstead the _DEAD bit is set on so the set element is not visible from\nlookup path anymore. Async GC enqueues transaction work that might be\naborted and retried later.\n\nrbtree and pipapo set backends does not set on the _DEAD bit from the\nsync GC path since this runs in control plane path where mutex is held.\nIn this case, set elements are deactivated, removed and then released\nvia RCU callback, sync GC never fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52923",
"url": "https://www.suse.com/security/cve/CVE-2023-52923"
},
{
"category": "external",
"summary": "SUSE Bug 1236104 for CVE-2023-52923",
"url": "https://bugzilla.suse.com/1236104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2023-52923"
},
{
"cve": "CVE-2024-36476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36476"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible\n\nMove the declaration of the \u0027ib_sge list\u0027 variable outside the\n\u0027always_invalidate\u0027 block to ensure it remains accessible for use\nthroughout the function.\n\nPreviously, \u0027ib_sge list\u0027 was declared within the \u0027always_invalidate\u0027\nblock, limiting its accessibility, then caused a\n\u0027BUG: kernel NULL pointer dereference\u0027[1].\n ? __die_body.cold+0x19/0x27\n ? page_fault_oops+0x15a/0x2d0\n ? search_module_extables+0x19/0x60\n ? search_bpf_extables+0x5f/0x80\n ? exc_page_fault+0x7e/0x180\n ? asm_exc_page_fault+0x26/0x30\n ? memcpy_orig+0xd5/0x140\n rxe_mr_copy+0x1c3/0x200 [rdma_rxe]\n ? rxe_pool_get_index+0x4b/0x80 [rdma_rxe]\n copy_data+0xa5/0x230 [rdma_rxe]\n rxe_requester+0xd9b/0xf70 [rdma_rxe]\n ? finish_task_switch.isra.0+0x99/0x2e0\n rxe_sender+0x13/0x40 [rdma_rxe]\n do_task+0x68/0x1e0 [rdma_rxe]\n process_one_work+0x177/0x330\n worker_thread+0x252/0x390\n ? __pfx_worker_thread+0x10/0x10\n\nThis change ensures the variable is available for subsequent operations\nthat require it.\n\n[1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-bc69-a9b03ecfcda7@fujitsu.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36476",
"url": "https://www.suse.com/security/cve/CVE-2024-36476"
},
{
"category": "external",
"summary": "SUSE Bug 1235902 for CVE-2024-36476",
"url": "https://bugzilla.suse.com/1235902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-36476"
},
{
"cve": "CVE-2024-39282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39282"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: Fix FSM command timeout issue\n\nWhen driver processes the internal state change command, it use an\nasynchronous thread to process the command operation. If the main\nthread detects that the task has timed out, the asynchronous thread\nwill panic when executing the completion notification because the\nmain thread completion object has been released.\n\nBUG: unable to handle page fault for address: fffffffffffffff8\nPGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nRIP: 0010:complete_all+0x3e/0xa0\n[...]\nCall Trace:\n \u003cTASK\u003e\n ? __die_body+0x68/0xb0\n ? page_fault_oops+0x379/0x3e0\n ? exc_page_fault+0x69/0xa0\n ? asm_exc_page_fault+0x22/0x30\n ? complete_all+0x3e/0xa0\n fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_autoremove_wake_function+0x10/0x10\n kthread+0xd8/0x110\n ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x38/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n[...]\nCR2: fffffffffffffff8\n---[ end trace 0000000000000000 ]---\n\nUse the reference counter to ensure safe release as Sergey suggests:\nhttps://lore.kernel.org/all/da90f64c-260a-4329-87bf-1f9ff20a5951@gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39282",
"url": "https://www.suse.com/security/cve/CVE-2024-39282"
},
{
"category": "external",
"summary": "SUSE Bug 1235903 for CVE-2024-39282",
"url": "https://bugzilla.suse.com/1235903"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-39282"
},
{
"cve": "CVE-2024-43913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: apple: fix device reference counting\n\nDrivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl.\nSplit the allocation side out to make the error handling boundary easier\nto navigate. The apple driver had been doing this wrong, leaking the\ncontroller device memory on a tagset failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43913",
"url": "https://www.suse.com/security/cve/CVE-2024-43913"
},
{
"category": "external",
"summary": "SUSE Bug 1229833 for CVE-2024-43913",
"url": "https://bugzilla.suse.com/1229833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-43913"
},
{
"cve": "CVE-2024-45828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Mask ring interrupts before ring stop request\n\nBus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when\nthe ring is being stopped. Depending on timing between ring stop request\ncompletion, interrupt handler removal and code execution this may lead\nto a NULL pointer dereference in hci_dma_irq_handler() if it gets to run\nafter the io_data pointer is set to NULL in hci_dma_cleanup().\n\nPrevent this my masking the ring interrupts before ring stop request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45828",
"url": "https://www.suse.com/security/cve/CVE-2024-45828"
},
{
"category": "external",
"summary": "SUSE Bug 1235705 for CVE-2024-45828",
"url": "https://bugzilla.suse.com/1235705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-45828"
},
{
"cve": "CVE-2024-46858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46858"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: pm: Fix uaf in __timer_delete_sync\n\nThere are two paths to access mptcp_pm_del_add_timer, result in a race\ncondition:\n\n CPU1\t\t\t\tCPU2\n ==== ====\n net_rx_action\n napi_poll netlink_sendmsg\n __napi_poll netlink_unicast\n process_backlog netlink_unicast_kernel\n __netif_receive_skb genl_rcv\n __netif_receive_skb_one_core netlink_rcv_skb\n NF_HOOK genl_rcv_msg\n ip_local_deliver_finish genl_family_rcv_msg\n ip_protocol_deliver_rcu genl_family_rcv_msg_doit\n tcp_v4_rcv mptcp_pm_nl_flush_addrs_doit\n tcp_v4_do_rcv mptcp_nl_remove_addrs_list\n tcp_rcv_established mptcp_pm_remove_addrs_and_subflows\n tcp_data_queue remove_anno_list_by_saddr\n mptcp_incoming_options mptcp_pm_del_add_timer\n mptcp_pm_del_add_timer kfree(entry)\n\nIn remove_anno_list_by_saddr(running on CPU2), after leaving the critical\nzone protected by \"pm.lock\", the entry will be released, which leads to the\noccurrence of uaf in the mptcp_pm_del_add_timer(running on CPU1).\n\nKeeping a reference to add_timer inside the lock, and calling\nsk_stop_timer_sync() with this reference, instead of \"entry-\u003eadd_timer\".\n\nMove list_del(\u0026entry-\u003elist) to mptcp_pm_del_add_timer and inside the pm lock,\ndo not directly access any members of the entry outside the pm lock, which\ncan avoid similar \"entry-\u003ex\" uaf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46858",
"url": "https://www.suse.com/security/cve/CVE-2024-46858"
},
{
"category": "external",
"summary": "SUSE Bug 1231088 for CVE-2024-46858",
"url": "https://bugzilla.suse.com/1231088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-46858"
},
{
"cve": "CVE-2024-46896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: don\u0027t access invalid sched\n\nSince 2320c9e6a768 (\"drm/sched: memset() \u0027job\u0027 in drm_sched_job_init()\")\naccessing job-\u003ebase.sched can produce unexpected results as the initialisation\nof (*job)-\u003ebase.sched done in amdgpu_job_alloc is overwritten by the\nmemset.\n\nThis commit fixes an issue when a CS would fail validation and would\nbe rejected after job-\u003enum_ibs is incremented. In this case,\namdgpu_ib_free(ring-\u003eadev, ...) will be called, which would crash the\nmachine because the ring value is bogus.\n\nTo fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this\nbecause the device is actually not used in this function.\n\nThe next commit will remove the ring argument completely.\n\n(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46896",
"url": "https://www.suse.com/security/cve/CVE-2024-46896"
},
{
"category": "external",
"summary": "SUSE Bug 1235707 for CVE-2024-46896",
"url": "https://bugzilla.suse.com/1235707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-46896"
},
{
"cve": "CVE-2024-47141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinmux: Use sequential access to access desc-\u003epinmux data\n\nWhen two client of the same gpio call pinctrl_select_state() for the\nsame functionality, we are seeing NULL pointer issue while accessing\ndesc-\u003emux_owner.\n\nLet\u0027s say two processes A, B executing in pin_request() for the same pin\nand process A updates the desc-\u003emux_usecount but not yet updated the\ndesc-\u003emux_owner while process B see the desc-\u003emux_usecount which got\nupdated by A path and further executes strcmp and while accessing\ndesc-\u003emux_owner it crashes with NULL pointer.\n\nSerialize the access to mux related setting with a mutex lock.\n\n\tcpu0 (process A)\t\t\tcpu1(process B)\n\npinctrl_select_state() {\t\t pinctrl_select_state() {\n pin_request() {\t\t\t\tpin_request() {\n ...\n\t\t\t\t\t\t ....\n } else {\n desc-\u003emux_usecount++;\n \t\t\t\t\t\tdesc-\u003emux_usecount \u0026\u0026 strcmp(desc-\u003emux_owner, owner)) {\n\n if (desc-\u003emux_usecount \u003e 1)\n return 0;\n desc-\u003emux_owner = owner;\n\n }\t\t\t\t\t\t}",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47141",
"url": "https://www.suse.com/security/cve/CVE-2024-47141"
},
{
"category": "external",
"summary": "SUSE Bug 1235708 for CVE-2024-47141",
"url": "https://bugzilla.suse.com/1235708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-47141"
},
{
"cve": "CVE-2024-47143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-debug: fix a possible deadlock on radix_lock\n\nradix_lock() shouldn\u0027t be held while holding dma_hash_entry[idx].lock\notherwise, there\u0027s a possible deadlock scenario when\ndma debug API is called holding rq_lock():\n\nCPU0 CPU1 CPU2\ndma_free_attrs()\ncheck_unmap() add_dma_entry() __schedule() //out\n (A) rq_lock()\nget_hash_bucket()\n(A) dma_entry_hash\n check_sync()\n (A) radix_lock() (W) dma_entry_hash\ndma_entry_free()\n(W) radix_lock()\n // CPU2\u0027s one\n (W) rq_lock()\n\nCPU1 situation can happen when it extending radix tree and\nit tries to wake up kswapd via wake_all_kswapd().\n\nCPU2 situation can happen while perf_event_task_sched_out()\n(i.e. dma sync operation is called while deleting perf_event using\n etm and etr tmc which are Arm Coresight hwtracing driver backends).\n\nTo remove this possible situation, call dma_entry_free() after\nput_hash_bucket() in check_unmap().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47143",
"url": "https://www.suse.com/security/cve/CVE-2024-47143"
},
{
"category": "external",
"summary": "SUSE Bug 1235710 for CVE-2024-47143",
"url": "https://bugzilla.suse.com/1235710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-47143"
},
{
"cve": "CVE-2024-47809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix possible lkb_resource null dereference\n\nThis patch fixes a possible null pointer dereference when this function is\ncalled from request_lock() as lkb-\u003elkb_resource is not assigned yet,\nonly after validate_lock_args() by calling attach_lkb(). Another issue\nis that a resource name could be a non printable bytearray and we cannot\nassume to be ASCII coded.\n\nThe log functionality is probably never being hit when DLM is used in\nnormal way and no debug logging is enabled. The null pointer dereference\ncan only occur on a new created lkb that does not have the resource\nassigned yet, it probably never hits the null pointer dereference but we\nshould be sure that other changes might not change this behaviour and we\nactually can hit the mentioned null pointer dereference.\n\nIn this patch we just drop the printout of the resource name, the lkb id\nis enough to make a possible connection to a resource name if this\nexists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47809",
"url": "https://www.suse.com/security/cve/CVE-2024-47809"
},
{
"category": "external",
"summary": "SUSE Bug 1235714 for CVE-2024-47809",
"url": "https://bugzilla.suse.com/1235714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-47809"
},
{
"cve": "CVE-2024-48873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48873"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: check return value of ieee80211_probereq_get() for RNR\n\nThe return value of ieee80211_probereq_get() might be NULL, so check it\nbefore using to avoid NULL pointer access.\n\nAddresses-Coverity-ID: 1529805 (\"Dereference null return value\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48873",
"url": "https://www.suse.com/security/cve/CVE-2024-48873"
},
{
"category": "external",
"summary": "SUSE Bug 1235716 for CVE-2024-48873",
"url": "https://bugzilla.suse.com/1235716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-48873"
},
{
"cve": "CVE-2024-48881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721 if (!IS_ERR_OR_NULL(c-\u003eroot))\n1722 list_add(\u0026c-\u003eroot-\u003elist, \u0026c-\u003ebtree_cache);\n\n\u003eFrom the above code in cache_set_flush(), if previous registration code\nfails before allocating c-\u003eroot, it is possible c-\u003eroot is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc-\u003eroot is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48881",
"url": "https://www.suse.com/security/cve/CVE-2024-48881"
},
{
"category": "external",
"summary": "SUSE Bug 1235727 for CVE-2024-48881",
"url": "https://bugzilla.suse.com/1235727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-rdma: unquiesce admin_q before destroy it\n\nKernel will hang on destroy admin_q while we create ctrl failed, such\nas following calltrace:\n\nPID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: \"nvme\"\n #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15\n #1 [ff61d23de260fc08] schedule at ffffffff8323c014\n #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1\n #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a\n #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006\n #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce\n #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced\n #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b\n #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362\n #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25\n RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202\n RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574\n RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004\n RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90\n R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004\n R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500\n ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b\n\nThis due to we have quiesced admi_q before cancel requests, but forgot\nto unquiesce before destroy it, as a result we fail to drain the\npending requests, and hang on blk_mq_freeze_queue_wait() forever. Here\ntry to reuse nvme_rdma_teardown_admin_queue() to fix this issue and\nsimplify the code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49569",
"url": "https://www.suse.com/security/cve/CVE-2024-49569"
},
{
"category": "external",
"summary": "SUSE Bug 1235730 for CVE-2024-49569",
"url": "https://bugzilla.suse.com/1235730"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-49569"
},
{
"cve": "CVE-2024-49948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: add more sanity checks to qdisc_pkt_len_init()\n\nOne path takes care of SKB_GSO_DODGY, assuming\nskb-\u003elen is bigger than hdr_len.\n\nvirtio_net_hdr_to_skb() does not fully dissect TCP headers,\nit only make sure it is at least 20 bytes.\n\nIt is possible for an user to provide a malicious \u0027GSO\u0027 packet,\ntotal length of 80 bytes.\n\n- 20 bytes of IPv4 header\n- 60 bytes TCP header\n- a small gso_size like 8\n\nvirtio_net_hdr_to_skb() would declare this packet as a normal\nGSO packet, because it would see 40 bytes of payload,\nbigger than gso_size.\n\nWe need to make detect this case to not underflow\nqdisc_skb_cb(skb)-\u003epkt_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49948",
"url": "https://www.suse.com/security/cve/CVE-2024-49948"
},
{
"category": "external",
"summary": "SUSE Bug 1232161 for CVE-2024-49948",
"url": "https://bugzilla.suse.com/1232161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-49951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible crash on mgmt_index_removed\n\nIf mgmt_index_removed is called while there are commands queued on\ncmd_sync it could lead to crashes like the bellow trace:\n\n0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc\n0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth]\n0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth]\n0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth]\n\nSo while handling mgmt_index_removed this attempts to dequeue\ncommands passed as user_data to cmd_sync.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49951",
"url": "https://www.suse.com/security/cve/CVE-2024-49951"
},
{
"category": "external",
"summary": "SUSE Bug 1232158 for CVE-2024-49951",
"url": "https://bugzilla.suse.com/1232158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-49951"
},
{
"cve": "CVE-2024-49978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49978"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngso: fix udp gso fraglist segmentation after pull from frag_list\n\nDetect gso fraglist skbs with corrupted geometry (see below) and\npass these to skb_segment instead of skb_segment_list, as the first\ncan segment them correctly.\n\nValid SKB_GSO_FRAGLIST skbs\n- consist of two or more segments\n- the head_skb holds the protocol headers plus first gso_size\n- one or more frag_list skbs hold exactly one segment\n- all but the last must be gso_size\n\nOptional datapath hooks such as NAT and BPF (bpf_skb_pull_data) can\nmodify these skbs, breaking these invariants.\n\nIn extreme cases they pull all data into skb linear. For UDP, this\ncauses a NULL ptr deref in __udpv4_gso_segment_list_csum at\nudp_hdr(seg-\u003enext)-\u003edest.\n\nDetect invalid geometry due to pull, by checking head_skb size.\nDon\u0027t just drop, as this may blackhole a destination. Convert to be\nable to pass to regular skb_segment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49978",
"url": "https://www.suse.com/security/cve/CVE-2024-49978"
},
{
"category": "external",
"summary": "SUSE Bug 1232101 for CVE-2024-49978",
"url": "https://bugzilla.suse.com/1232101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-49978"
},
{
"cve": "CVE-2024-49998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: improve shutdown sequence\n\nAlexander Sverdlin presents 2 problems during shutdown with the\nlan9303 driver. One is specific to lan9303 and the other just happens\nto reproduce there.\n\nThe first problem is that lan9303 is unique among DSA drivers in that it\ncalls dev_get_drvdata() at \"arbitrary runtime\" (not probe, not shutdown,\nnot remove):\n\nphy_state_machine()\n-\u003e ...\n -\u003e dsa_user_phy_read()\n -\u003e ds-\u003eops-\u003ephy_read()\n -\u003e lan9303_phy_read()\n -\u003e chip-\u003eops-\u003ephy_read()\n -\u003e lan9303_mdio_phy_read()\n -\u003e dev_get_drvdata()\n\nBut we never stop the phy_state_machine(), so it may continue to run\nafter dsa_switch_shutdown(). Our common pattern in all DSA drivers is\nto set drvdata to NULL to suppress the remove() method that may come\nafterwards. But in this case it will result in an NPD.\n\nThe second problem is that the way in which we set\ndp-\u003econduit-\u003edsa_ptr = NULL; is concurrent with receive packet\nprocessing. dsa_switch_rcv() checks once whether dev-\u003edsa_ptr is NULL,\nbut afterwards, rather than continuing to use that non-NULL value,\ndev-\u003edsa_ptr is dereferenced again and again without NULL checks:\ndsa_conduit_find_user() and many other places. In between dereferences,\nthere is no locking to ensure that what was valid once continues to be\nvalid.\n\nBoth problems have the common aspect that closing the conduit interface\nsolves them.\n\nIn the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN\nevent in dsa_user_netdevice_event() which closes user ports as well.\ndsa_port_disable_rt() calls phylink_stop(), which synchronously stops\nthe phylink state machine, and ds-\u003eops-\u003ephy_read() will thus no longer\ncall into the driver after this point.\n\nIn the second case, dev_close(conduit) should do this, as per\nDocumentation/networking/driver.rst:\n\n| Quiescence\n| ----------\n|\n| After the ndo_stop routine has been called, the hardware must\n| not receive or transmit any data. All in flight packets must\n| be aborted. If necessary, poll or wait for completion of\n| any reset commands.\n\nSo it should be sufficient to ensure that later, when we zeroize\nconduit-\u003edsa_ptr, there will be no concurrent dsa_switch_rcv() call\non this conduit.\n\nThe addition of the netif_device_detach() function is to ensure that\nioctls, rtnetlinks and ethtool requests on the user ports no longer\npropagate down to the driver - we\u0027re no longer prepared to handle them.\n\nThe race condition actually did not exist when commit 0650bf52b31f\n(\"net: dsa: be compatible with masters which unregister on shutdown\")\nfirst introduced dsa_switch_shutdown(). It was created later, when we\nstopped unregistering the user interfaces from a bad spot, and we just\nreplaced that sequence with a racy zeroization of conduit-\u003edsa_ptr\n(one which doesn\u0027t ensure that the interfaces aren\u0027t up).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49998",
"url": "https://www.suse.com/security/cve/CVE-2024-49998"
},
{
"category": "external",
"summary": "SUSE Bug 1232087 for CVE-2024-49998",
"url": "https://bugzilla.suse.com/1232087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-49998"
},
{
"cve": "CVE-2024-50051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: Add cancel_work_sync before module remove\n\nIf we remove the module which will call mpc52xx_spi_remove\nit will free \u0027ms\u0027 through spi_unregister_controller.\nwhile the work ms-\u003ework will be used. The sequence of operations\nthat may lead to a UAF bug.\n\nFix it by ensuring that the work is canceled before proceeding with\nthe cleanup in mpc52xx_spi_remove.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50051",
"url": "https://www.suse.com/security/cve/CVE-2024-50051"
},
{
"category": "external",
"summary": "SUSE Bug 1235739 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "external",
"summary": "SUSE Bug 1239156 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1239156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-50051"
},
{
"cve": "CVE-2024-50106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix race between laundromat and free_stateid\n\nThere is a race between laundromat handling of revoked delegations\nand a client sending free_stateid operation. Laundromat thread\nfinds that delegation has expired and needs to be revoked so it\nmarks the delegation stid revoked and it puts it on a reaper list\nbut then it unlock the state lock and the actual delegation revocation\nhappens without the lock. Once the stid is marked revoked a racing\nfree_stateid processing thread does the following (1) it calls\nlist_del_init() which removes it from the reaper list and (2) frees\nthe delegation stid structure. The laundromat thread ends up not\ncalling the revoke_delegation() function for this particular delegation\nbut that means it will no release the lock lease that exists on\nthe file.\n\nNow, a new open for this file comes in and ends up finding that\nlease list isn\u0027t empty and calls nfsd_breaker_owns_lease() which ends\nup trying to derefence a freed delegation stateid. Leading to the\nfollowint use-after-free KASAN warning:\n\nkernel: ==================================================================\nkernel: BUG: KASAN: slab-use-after-free in nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: Read of size 8 at addr ffff0000e73cd0c8 by task nfsd/6205\nkernel:\nkernel: CPU: 2 UID: 0 PID: 6205 Comm: nfsd Kdump: loaded Not tainted 6.11.0-rc7+ #9\nkernel: Hardware name: Apple Inc. Apple Virtualization Generic Platform, BIOS 2069.0.0.0.0 08/03/2024\nkernel: Call trace:\nkernel: dump_backtrace+0x98/0x120\nkernel: show_stack+0x1c/0x30\nkernel: dump_stack_lvl+0x80/0xe8\nkernel: print_address_description.constprop.0+0x84/0x390\nkernel: print_report+0xa4/0x268\nkernel: kasan_report+0xb4/0xf8\nkernel: __asan_report_load8_noabort+0x1c/0x28\nkernel: nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: nfsd_file_do_acquire+0xb3c/0x11d0 [nfsd]\nkernel: nfsd_file_acquire_opened+0x84/0x110 [nfsd]\nkernel: nfs4_get_vfs_file+0x634/0x958 [nfsd]\nkernel: nfsd4_process_open2+0xa40/0x1a40 [nfsd]\nkernel: nfsd4_open+0xa08/0xe80 [nfsd]\nkernel: nfsd4_proc_compound+0xb8c/0x2130 [nfsd]\nkernel: nfsd_dispatch+0x22c/0x718 [nfsd]\nkernel: svc_process_common+0x8e8/0x1960 [sunrpc]\nkernel: svc_process+0x3d4/0x7e0 [sunrpc]\nkernel: svc_handle_xprt+0x828/0xe10 [sunrpc]\nkernel: svc_recv+0x2cc/0x6a8 [sunrpc]\nkernel: nfsd+0x270/0x400 [nfsd]\nkernel: kthread+0x288/0x310\nkernel: ret_from_fork+0x10/0x20\n\nThis patch proposes a fixed that\u0027s based on adding 2 new additional\nstid\u0027s sc_status values that help coordinate between the laundromat\nand other operations (nfsd4_free_stateid() and nfsd4_delegreturn()).\n\nFirst to make sure, that once the stid is marked revoked, it is not\nremoved by the nfsd4_free_stateid(), the laundromat take a reference\non the stateid. Then, coordinating whether the stid has been put\non the cl_revoked list or we are processing FREE_STATEID and need to\nmake sure to remove it from the list, each check that state and act\naccordingly. If laundromat has added to the cl_revoke list before\nthe arrival of FREE_STATEID, then nfsd4_free_stateid() knows to remove\nit from the list. If nfsd4_free_stateid() finds that operations arrived\nbefore laundromat has placed it on cl_revoke list, it marks the state\nfreed and then laundromat will no longer add it to the list.\n\nAlso, for nfsd4_delegreturn() when looking for the specified stid,\nwe need to access stid that are marked removed or freeable, it means\nthe laundromat has started processing it but hasn\u0027t finished and this\ndelegreturn needs to return nfserr_deleg_revoked and not\nnfserr_bad_stateid. The latter will not trigger a FREE_STATEID and the\nlack of it will leave this stid on the cl_revoked list indefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50106",
"url": "https://www.suse.com/security/cve/CVE-2024-50106"
},
{
"category": "external",
"summary": "SUSE Bug 1232882 for CVE-2024-50106",
"url": "https://bugzilla.suse.com/1232882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-50106"
},
{
"cve": "CVE-2024-50151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOBs when building SMB2_IOCTL request\n\nWhen using encryption, either enforced by the server or when using\n\u0027seal\u0027 mount option, the client will squash all compound request buffers\ndown for encryption into a single iov in smb2_set_next_command().\n\nSMB2_ioctl_init() allocates a small buffer (448 bytes) to hold the\nSMB2_IOCTL request in the first iov, and if the user passes an input\nbuffer that is greater than 328 bytes, smb2_set_next_command() will\nend up writing off the end of @rqst-\u003eiov[0].iov_base as shown below:\n\n mount.cifs //srv/share /mnt -o ...,seal\n ln -s $(perl -e \"print(\u0027a\u0027)for 1..1024\") /mnt/link\n\n BUG: KASAN: slab-out-of-bounds in\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n Write of size 4116 at addr ffff8881148fcab8 by task ln/859\n\n CPU: 1 UID: 0 PID: 859 Comm: ln Not tainted 6.12.0-rc3 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n 1.16.3-2.fc40 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n print_report+0x156/0x4d9\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n ? __virt_addr_valid+0x145/0x310\n ? __phys_addr+0x46/0x90\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_report+0xda/0x110\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_check_range+0x10f/0x1f0\n __asan_memcpy+0x3c/0x60\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n smb2_compound_op+0x238c/0x3840 [cifs]\n ? kasan_save_track+0x14/0x30\n ? kasan_save_free_info+0x3b/0x70\n ? vfs_symlink+0x1a1/0x2c0\n ? do_symlinkat+0x108/0x1c0\n ? __pfx_smb2_compound_op+0x10/0x10 [cifs]\n ? kmem_cache_free+0x118/0x3e0\n ? cifs_get_writable_path+0xeb/0x1a0 [cifs]\n smb2_get_reparse_inode+0x423/0x540 [cifs]\n ? __pfx_smb2_get_reparse_inode+0x10/0x10 [cifs]\n ? rcu_is_watching+0x20/0x50\n ? __kmalloc_noprof+0x37c/0x480\n ? smb2_create_reparse_symlink+0x257/0x490 [cifs]\n ? smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n ? __pfx_smb2_create_reparse_symlink+0x10/0x10 [cifs]\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? __build_path_from_dentry_optional_prefix+0x19d/0x2e0 [cifs]\n cifs_symlink+0x24f/0x960 [cifs]\n ? __pfx_make_vfsuid+0x10/0x10\n ? __pfx_cifs_symlink+0x10/0x10 [cifs]\n ? make_vfsgid+0x6b/0xc0\n ? generic_permission+0x96/0x2d0\n vfs_symlink+0x1a1/0x2c0\n do_symlinkat+0x108/0x1c0\n ? __pfx_do_symlinkat+0x10/0x10\n ? strncpy_from_user+0xaa/0x160\n __x64_sys_symlinkat+0xb9/0xf0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7f08d75c13bb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50151",
"url": "https://www.suse.com/security/cve/CVE-2024-50151"
},
{
"category": "external",
"summary": "SUSE Bug 1233055 for CVE-2024-50151",
"url": "https://bugzilla.suse.com/1233055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-50151"
},
{
"cve": "CVE-2024-50199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50199"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/swapfile: skip HugeTLB pages for unuse_vma\n\nI got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The\nproblem can be reproduced by the following steps:\n\n 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.\n 2. Swapout the above anonymous memory.\n 3. run swapoff and we will get a bad pud error in kernel message:\n\n mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)\n\nWe can tell that pud_clear_bad is called by pud_none_or_clear_bad in\nunuse_pud_range() by ftrace. And therefore the HugeTLB pages will never\nbe freed because we lost it from page table. We can skip HugeTLB pages\nfor unuse_vma to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50199",
"url": "https://www.suse.com/security/cve/CVE-2024-50199"
},
{
"category": "external",
"summary": "SUSE Bug 1233112 for CVE-2024-50199",
"url": "https://bugzilla.suse.com/1233112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-50199"
},
{
"cve": "CVE-2024-50251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50251"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_payload: sanitize offset and length before calling skb_checksum()\n\nIf access to offset + length is larger than the skbuff length, then\nskb_checksum() triggers BUG_ON().\n\nskb_checksum() internally subtracts the length parameter while iterating\nover skbuff, BUG_ON(len) at the end of it checks that the expected\nlength to be included in the checksum calculation is fully consumed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50251",
"url": "https://www.suse.com/security/cve/CVE-2024-50251"
},
{
"category": "external",
"summary": "SUSE Bug 1233248 for CVE-2024-50251",
"url": "https://bugzilla.suse.com/1233248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-50251"
},
{
"cve": "CVE-2024-50258",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50258"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix crash when config small gso_max_size/gso_ipv4_max_size\n\nConfig a small gso_max_size/gso_ipv4_max_size will lead to an underflow\nin sk_dst_gso_max_size(), which may trigger a BUG_ON crash,\nbecause sk-\u003esk_gso_max_size would be much bigger than device limits.\nCall Trace:\ntcp_write_xmit\n tso_segs = tcp_init_tso_segs(skb, mss_now);\n tcp_set_skb_tso_segs\n tcp_skb_pcount_set\n // skb-\u003elen = 524288, mss_now = 8\n // u16 tso_segs = 524288/8 = 65535 -\u003e 0\n tso_segs = DIV_ROUND_UP(skb-\u003elen, mss_now)\n BUG_ON(!tso_segs)\nAdd check for the minimum value of gso_max_size and gso_ipv4_max_size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50258",
"url": "https://www.suse.com/security/cve/CVE-2024-50258"
},
{
"category": "external",
"summary": "SUSE Bug 1233221 for CVE-2024-50258",
"url": "https://bugzilla.suse.com/1233221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-50258"
},
{
"cve": "CVE-2024-50299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50299"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: properly validate chunk size in sctp_sf_ootb()\n\nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add\nsize validation when walking chunks\") is also required in sctp_sf_ootb()\nto address a crash reported by syzbot:\n\n BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166\n sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407\n sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88\n sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243\n sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159\n ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50299",
"url": "https://www.suse.com/security/cve/CVE-2024-50299"
},
{
"category": "external",
"summary": "SUSE Bug 1233488 for CVE-2024-50299",
"url": "https://bugzilla.suse.com/1233488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-50304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50304"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()\n\nThe per-netns IP tunnel hash table is protected by the RTNL mutex and\nip_tunnel_find() is only called from the control path where the mutex is\ntaken.\n\nAdd a lockdep expression to hlist_for_each_entry_rcu() in\nip_tunnel_find() in order to validate that the mutex is held and to\nsilence the suspicious RCU usage warning [1].\n\n[1]\nWARNING: suspicious RCU usage\n6.12.0-rc3-custom-gd95d9a31aceb #139 Not tainted\n-----------------------------\nnet/ipv4/ip_tunnel.c:221 RCU-list traversed in non-reader section!!\n\nother info that might help us debug this:\n\nrcu_scheduler_active = 2, debug_locks = 1\n1 lock held by ip/362:\n #0: ffffffff86fc7cb0 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x377/0xf60\n\nstack backtrace:\nCPU: 12 UID: 0 PID: 362 Comm: ip Not tainted 6.12.0-rc3-custom-gd95d9a31aceb #139\nHardware name: Bochs Bochs, BIOS Bochs 01/01/2011\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xba/0x110\n lockdep_rcu_suspicious.cold+0x4f/0xd6\n ip_tunnel_find+0x435/0x4d0\n ip_tunnel_newlink+0x517/0x7a0\n ipgre_newlink+0x14c/0x170\n __rtnl_newlink+0x1173/0x19c0\n rtnl_newlink+0x6c/0xa0\n rtnetlink_rcv_msg+0x3cc/0xf60\n netlink_rcv_skb+0x171/0x450\n netlink_unicast+0x539/0x7f0\n netlink_sendmsg+0x8c1/0xd80\n ____sys_sendmsg+0x8f9/0xc20\n ___sys_sendmsg+0x197/0x1e0\n __sys_sendmsg+0x122/0x1f0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50304",
"url": "https://www.suse.com/security/cve/CVE-2024-50304"
},
{
"category": "external",
"summary": "SUSE Bug 1233522 for CVE-2024-50304",
"url": "https://bugzilla.suse.com/1233522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-50304"
},
{
"cve": "CVE-2024-52332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52332",
"url": "https://www.suse.com/security/cve/CVE-2024-52332"
},
{
"category": "external",
"summary": "SUSE Bug 1235700 for CVE-2024-52332",
"url": "https://bugzilla.suse.com/1235700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53091"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx\n\nAs the introduction of the support for vsock and unix sockets in sockmap,\ntls_sw_has_ctx_tx/rx cannot presume the socket passed in must be IS_ICSK.\nvsock and af_unix sockets have vsock_sock and unix_sock instead of\ninet_connection_sock. For these sockets, tls_get_ctx may return an invalid\npointer and cause page fault in function tls_sw_ctx_rx.\n\nBUG: unable to handle page fault for address: 0000000000040030\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:sk_psock_strp_data_ready+0x23/0x60\nCall Trace:\n ? __die+0x81/0xc3\n ? no_context+0x194/0x350\n ? do_page_fault+0x30/0x110\n ? async_page_fault+0x3e/0x50\n ? sk_psock_strp_data_ready+0x23/0x60\n virtio_transport_recv_pkt+0x750/0x800\n ? update_load_avg+0x7e/0x620\n vsock_loopback_work+0xd0/0x100\n process_one_work+0x1a7/0x360\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x112/0x130\n ? __kthread_cancel_work+0x40/0x40\n ret_from_fork+0x1f/0x40\n\nv2:\n - Add IS_ICSK check\nv3:\n - Update the commits in Fixes",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53091",
"url": "https://www.suse.com/security/cve/CVE-2024-53091"
},
{
"category": "external",
"summary": "SUSE Bug 1233638 for CVE-2024-53091",
"url": "https://bugzilla.suse.com/1233638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53091"
},
{
"cve": "CVE-2024-53095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53095"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix use-after-free of network namespace.\n\nRecently, we got a customer report that CIFS triggers oops while\nreconnecting to a server. [0]\n\nThe workload runs on Kubernetes, and some pods mount CIFS servers\nin non-root network namespaces. The problem rarely happened, but\nit was always while the pod was dying.\n\nThe root cause is wrong reference counting for network namespace.\n\nCIFS uses kernel sockets, which do not hold refcnt of the netns that\nthe socket belongs to. That means CIFS must ensure the socket is\nalways freed before its netns; otherwise, use-after-free happens.\n\nThe repro steps are roughly:\n\n 1. mount CIFS in a non-root netns\n 2. drop packets from the netns\n 3. destroy the netns\n 4. unmount CIFS\n\nWe can reproduce the issue quickly with the script [1] below and see\nthe splat [2] if CONFIG_NET_NS_REFCNT_TRACKER is enabled.\n\nWhen the socket is TCP, it is hard to guarantee the netns lifetime\nwithout holding refcnt due to async timers.\n\nLet\u0027s hold netns refcnt for each socket as done for SMC in commit\n9744d2bf1976 (\"smc: Fix use-after-free in tcp_write_timer_handler().\").\n\nNote that we need to move put_net() from cifs_put_tcp_session() to\nclean_demultiplex_info(); otherwise, __sock_create() still could touch a\nfreed netns while cifsd tries to reconnect from cifs_demultiplex_thread().\n\nAlso, maybe_get_net() cannot be put just before __sock_create() because\nthe code is not under RCU and there is a small chance that the same\naddress happened to be reallocated to another netns.\n\n[0]:\nCIFS: VFS: \\\\XXXXXXXXXXX has not responded in 15 seconds. Reconnecting...\nCIFS: Serverclose failed 4 times, giving up\nUnable to handle kernel paging request at virtual address 14de99e461f84a07\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\n[14de99e461f84a07] address between user and kernel address ranges\nInternal error: Oops: 0000000096000004 [#1] SMP\nModules linked in: cls_bpf sch_ingress nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver tcp_diag inet_diag veth xt_state xt_connmark nf_conntrack_netlink xt_nat xt_statistic xt_MASQUERADE xt_mark xt_addrtype ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nf_tables nfnetlink overlay nls_ascii nls_cp437 sunrpc vfat fat aes_ce_blk aes_ce_cipher ghash_ce sm4_ce_cipher sm4 sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 sha1_ce ena button sch_fq_codel loop fuse configfs dmi_sysfs sha2_ce sha256_arm64 dm_mirror dm_region_hash dm_log dm_mod dax efivarfs\nCPU: 5 PID: 2690970 Comm: cifsd Not tainted 6.1.103-109.184.amzn2023.aarch64 #1\nHardware name: Amazon EC2 r7g.4xlarge/, BIOS 1.0 11/1/2018\npstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : fib_rules_lookup+0x44/0x238\nlr : __fib_lookup+0x64/0xbc\nsp : ffff8000265db790\nx29: ffff8000265db790 x28: 0000000000000000 x27: 000000000000bd01\nx26: 0000000000000000 x25: ffff000b4baf8000 x24: ffff00047b5e4580\nx23: ffff8000265db7e0 x22: 0000000000000000 x21: ffff00047b5e4500\nx20: ffff0010e3f694f8 x19: 14de99e461f849f7 x18: 0000000000000000\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000000 x13: 0000000000000000 x12: 3f92800abd010002\nx11: 0000000000000001 x10: ffff0010e3f69420 x9 : ffff800008a6f294\nx8 : 0000000000000000 x7 : 0000000000000006 x6 : 0000000000000000\nx5 : 0000000000000001 x4 : ffff001924354280 x3 : ffff8000265db7e0\nx2 : 0000000000000000 x1 : ffff0010e3f694f8 x0 : ffff00047b5e4500\nCall trace:\n fib_rules_lookup+0x44/0x238\n __fib_lookup+0x64/0xbc\n ip_route_output_key_hash_rcu+0x2c4/0x398\n ip_route_output_key_hash+0x60/0x8c\n tcp_v4_connect+0x290/0x488\n __inet_stream_connect+0x108/0x3d0\n inet_stream_connect+0x50/0x78\n kernel_connect+0x6c/0xac\n generic_ip_conne\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53095",
"url": "https://www.suse.com/security/cve/CVE-2024-53095"
},
{
"category": "external",
"summary": "SUSE Bug 1233642 for CVE-2024-53095",
"url": "https://bugzilla.suse.com/1233642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53095"
},
{
"cve": "CVE-2024-53164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53164"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ordering of qlen adjustment\n\nChanges to sch-\u003eq.qlen around qdisc_tree_reduce_backlog() need to happen\n_before_ a call to said function because otherwise it may fail to notify\nparent qdiscs when the child is about to become empty.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53164",
"url": "https://www.suse.com/security/cve/CVE-2024-53164"
},
{
"category": "external",
"summary": "SUSE Bug 1234863 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "external",
"summary": "SUSE Bug 1246019 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1246019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-53164"
},
{
"cve": "CVE-2024-53168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 \u003cfa\u003e c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \u003c/TASK\u003e\n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp\u0027s timer handler function causes problems.\n\nTo fix this problem, let\u0027s hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53168",
"url": "https://www.suse.com/security/cve/CVE-2024-53168"
},
{
"category": "external",
"summary": "SUSE Bug 1234887 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "external",
"summary": "SUSE Bug 1243650 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1243650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-53168"
},
{
"cve": "CVE-2024-53170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix uaf for flush rq while iterating tags\n\nblk_mq_clear_flush_rq_mapping() is not called during scsi probe, by\nchecking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared\nin del_gendisk by commit aec89dc5d421 (\"block: keep q_usage_counter in\natomic mode after del_gendisk\"), hence for disk like scsi, following\nblk_mq_destroy_queue() will not clear flush rq from tags-\u003erqs[] as well,\ncause following uaf that is found by our syzkaller for v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in blk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nRead of size 4 at addr ffff88811c969c20 by task kworker/1:2H/224909\n\nCPU: 1 PID: 224909 Comm: kworker/1:2H Not tainted 6.6.0-ga836a5060850 #32\nWorkqueue: kblockd blk_mq_timeout_work\nCall Trace:\n\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106\nprint_address_description.constprop.0+0x66/0x300 mm/kasan/report.c:364\nprint_report+0x3e/0x70 mm/kasan/report.c:475\nkasan_report+0xb8/0xf0 mm/kasan/report.c:588\nblk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nbt_iter block/blk-mq-tag.c:288 [inline]\n__sbitmap_for_each_set include/linux/sbitmap.h:295 [inline]\nsbitmap_for_each_set include/linux/sbitmap.h:316 [inline]\nbt_for_each+0x455/0x790 block/blk-mq-tag.c:325\nblk_mq_queue_tag_busy_iter+0x320/0x740 block/blk-mq-tag.c:534\nblk_mq_timeout_work+0x1a3/0x7b0 block/blk-mq.c:1673\nprocess_one_work+0x7c4/0x1450 kernel/workqueue.c:2631\nprocess_scheduled_works kernel/workqueue.c:2704 [inline]\nworker_thread+0x804/0xe40 kernel/workqueue.c:2785\nkthread+0x346/0x450 kernel/kthread.c:388\nret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:293\n\nAllocated by task 942:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\n____kasan_kmalloc mm/kasan/common.c:374 [inline]\n__kasan_kmalloc mm/kasan/common.c:383 [inline]\n__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:380\nkasan_kmalloc include/linux/kasan.h:198 [inline]\n__do_kmalloc_node mm/slab_common.c:1007 [inline]\n__kmalloc_node+0x69/0x170 mm/slab_common.c:1014\nkmalloc_node include/linux/slab.h:620 [inline]\nkzalloc_node include/linux/slab.h:732 [inline]\nblk_alloc_flush_queue+0x144/0x2f0 block/blk-flush.c:499\nblk_mq_alloc_hctx+0x601/0x940 block/blk-mq.c:3788\nblk_mq_alloc_and_init_hctx+0x27f/0x330 block/blk-mq.c:4261\nblk_mq_realloc_hw_ctxs+0x488/0x5e0 block/blk-mq.c:4294\nblk_mq_init_allocated_queue+0x188/0x860 block/blk-mq.c:4350\nblk_mq_init_queue_data block/blk-mq.c:4166 [inline]\nblk_mq_init_queue+0x8d/0x100 block/blk-mq.c:4176\nscsi_alloc_sdev+0x843/0xd50 drivers/scsi/scsi_scan.c:335\nscsi_probe_and_add_lun+0x77c/0xde0 drivers/scsi/scsi_scan.c:1189\n__scsi_scan_target+0x1fc/0x5a0 drivers/scsi/scsi_scan.c:1727\nscsi_scan_channel drivers/scsi/scsi_scan.c:1815 [inline]\nscsi_scan_channel+0x14b/0x1e0 drivers/scsi/scsi_scan.c:1791\nscsi_scan_host_selected+0x2fe/0x400 drivers/scsi/scsi_scan.c:1844\nscsi_scan+0x3a0/0x3f0 drivers/scsi/scsi_sysfs.c:151\nstore_scan+0x2a/0x60 drivers/scsi/scsi_sysfs.c:191\ndev_attr_store+0x5c/0x90 drivers/base/core.c:2388\nsysfs_kf_write+0x11c/0x170 fs/sysfs/file.c:136\nkernfs_fop_write_iter+0x3fc/0x610 fs/kernfs/file.c:338\ncall_write_iter include/linux/fs.h:2083 [inline]\nnew_sync_write+0x1b4/0x2d0 fs/read_write.c:493\nvfs_write+0x76c/0xb00 fs/read_write.c:586\nksys_write+0x127/0x250 fs/read_write.c:639\ndo_syscall_x64 arch/x86/entry/common.c:51 [inline]\ndo_syscall_64+0x70/0x120 arch/x86/entry/common.c:81\nentry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nFreed by task 244687:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\nkasan_save_free_info+0x2b/0x50 mm/kasan/generic.c:522\n____kasan_slab_free mm/kasan/common.c:236 [inline]\n__kasan_slab_free+0x12a/0x1b0 mm/kasan/common.c:244\nkasan_slab_free include/linux/kasan.h:164 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53170",
"url": "https://www.suse.com/security/cve/CVE-2024-53170"
},
{
"category": "external",
"summary": "SUSE Bug 1234888 for CVE-2024-53170",
"url": "https://bugzilla.suse.com/1234888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53170"
},
{
"cve": "CVE-2024-53172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53172"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: fastmap: Fix duplicate slab cache names while attaching\n\nSince commit 4c39529663b9 (\"slab: Warn on duplicate cache names when\nDEBUG_VM=y\"), the duplicate slab cache names can be detected and a\nkernel WARNING is thrown out.\nIn UBI fast attaching process, alloc_ai() could be invoked twice\nwith the same slab cache name \u0027ubi_aeb_slab_cache\u0027, which will trigger\nfollowing warning messages:\n kmem_cache of name \u0027ubi_aeb_slab_cache\u0027 already exists\n WARNING: CPU: 0 PID: 7519 at mm/slab_common.c:107\n __kmem_cache_create_args+0x100/0x5f0\n Modules linked in: ubi(+) nandsim [last unloaded: nandsim]\n CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2\n RIP: 0010:__kmem_cache_create_args+0x100/0x5f0\n Call Trace:\n __kmem_cache_create_args+0x100/0x5f0\n alloc_ai+0x295/0x3f0 [ubi]\n ubi_attach+0x3c3/0xcc0 [ubi]\n ubi_attach_mtd_dev+0x17cf/0x3fa0 [ubi]\n ubi_init+0x3fb/0x800 [ubi]\n do_init_module+0x265/0x7d0\n __x64_sys_finit_module+0x7a/0xc0\n\nThe problem could be easily reproduced by loading UBI device by fastmap\nwith CONFIG_DEBUG_VM=y.\nFix it by using different slab names for alloc_ai() callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53172",
"url": "https://www.suse.com/security/cve/CVE-2024-53172"
},
{
"category": "external",
"summary": "SUSE Bug 1234898 for CVE-2024-53172",
"url": "https://bugzilla.suse.com/1234898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53172"
},
{
"cve": "CVE-2024-53175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53175"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: fix memleak if msg_init_ns failed in create_ipc_ns\n\nPercpu memory allocation may failed during create_ipc_ns however this\nfail is not handled properly since ipc sysctls and mq sysctls is not\nreleased properly. Fix this by release these two resource when failure.\n\nHere is the kmemleak stack when percpu failed:\n\nunreferenced object 0xffff88819de2a600 (size 512):\n comm \"shmem_2nstest\", pid 120711, jiffies 4300542254\n hex dump (first 32 bytes):\n 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H.....\n 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V.....\n backtrace (crc be7cba35):\n [\u003cffffffff81b43f83\u003e] __kmalloc_node_track_caller_noprof+0x333/0x420\n [\u003cffffffff81a52e56\u003e] kmemdup_noprof+0x26/0x50\n [\u003cffffffff821b2f37\u003e] setup_mq_sysctls+0x57/0x1d0\n [\u003cffffffff821b29cc\u003e] copy_ipcs+0x29c/0x3b0\n [\u003cffffffff815d6a10\u003e] create_new_namespaces+0x1d0/0x920\n [\u003cffffffff815d7449\u003e] copy_namespaces+0x2e9/0x3e0\n [\u003cffffffff815458f3\u003e] copy_process+0x29f3/0x7ff0\n [\u003cffffffff8154b080\u003e] kernel_clone+0xc0/0x650\n [\u003cffffffff8154b6b1\u003e] __do_sys_clone+0xa1/0xe0\n [\u003cffffffff843df8ff\u003e] do_syscall_64+0xbf/0x1c0\n [\u003cffffffff846000b0\u003e] entry_SYSCALL_64_after_hwframe+0x4b/0x53",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53175",
"url": "https://www.suse.com/security/cve/CVE-2024-53175"
},
{
"category": "external",
"summary": "SUSE Bug 1234893 for CVE-2024-53175",
"url": "https://bugzilla.suse.com/1234893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53175"
},
{
"cve": "CVE-2024-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix NULL ptr deref in crypto_aead_setkey()\n\nNeither SMB3.0 or SMB3.02 supports encryption negotiate context, so\nwhen SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response,\nthe client uses AES-128-CCM as the default cipher. See MS-SMB2\n3.3.5.4.\n\nCommit b0abcd65ec54 (\"smb: client: fix UAF in async decryption\") added\na @server-\u003ecipher_type check to conditionally call\nsmb3_crypto_aead_allocate(), but that check would always be false as\n@server-\u003ecipher_type is unset for SMB3.02.\n\nFix the following KASAN splat by setting @server-\u003ecipher_type for\nSMB3.02 as well.\n\nmount.cifs //srv/share /mnt -o vers=3.02,seal,...\n\nBUG: KASAN: null-ptr-deref in crypto_aead_setkey+0x2c/0x130\nRead of size 8 at addr 0000000000000020 by task mount.cifs/1095\nCPU: 1 UID: 0 PID: 1095 Comm: mount.cifs Not tainted 6.12.0 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? crypto_aead_setkey+0x2c/0x130\n kasan_report+0xda/0x110\n ? crypto_aead_setkey+0x2c/0x130\n crypto_aead_setkey+0x2c/0x130\n crypt_message+0x258/0xec0 [cifs]\n ? __asan_memset+0x23/0x50\n ? __pfx_crypt_message+0x10/0x10 [cifs]\n ? mark_lock+0xb0/0x6a0\n ? hlock_class+0x32/0xb0\n ? mark_lock+0xb0/0x6a0\n smb3_init_transform_rq+0x352/0x3f0 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n smb_send_rqst+0x144/0x230 [cifs]\n ? __pfx_smb_send_rqst+0x10/0x10 [cifs]\n ? hlock_class+0x32/0xb0\n ? smb2_setup_request+0x225/0x3a0 [cifs]\n ? __pfx_cifs_compound_last_callback+0x10/0x10 [cifs]\n compound_send_recv+0x59b/0x1140 [cifs]\n ? __pfx_compound_send_recv+0x10/0x10 [cifs]\n ? __create_object+0x5e/0x90\n ? hlock_class+0x32/0xb0\n ? do_raw_spin_unlock+0x9a/0xf0\n cifs_send_recv+0x23/0x30 [cifs]\n SMB2_tcon+0x3ec/0xb30 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? __pfx_lock_release+0x10/0x10\n ? do_raw_spin_trylock+0xc6/0x120\n ? lock_acquire+0x3f/0x90\n ? _get_xid+0x16/0xd0 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n ? __pfx_cifs_get_smb_ses+0x10/0x10 [cifs]\n ? cifs_get_tcp_session+0xaa0/0xca0 [cifs]\n cifs_mount_get_session+0x8a/0x210 [cifs]\n dfs_mount_share+0x1b0/0x11d0 [cifs]\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_dfs_mount_share+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? lock_release+0x203/0x5d0\n cifs_mount+0xb3/0x3d0 [cifs]\n ? do_raw_spin_trylock+0xc6/0x120\n ? __pfx_cifs_mount+0x10/0x10 [cifs]\n ? lock_acquire+0x3f/0x90\n ? find_nls+0x16/0xa0\n ? smb3_update_mnt_flags+0x372/0x3b0 [cifs]\n cifs_smb3_do_mount+0x1e2/0xc80 [cifs]\n ? __pfx_vfs_parse_fs_string+0x10/0x10\n ? __pfx_cifs_smb3_do_mount+0x10/0x10 [cifs]\n smb3_get_tree+0x1bf/0x330 [cifs]\n vfs_get_tree+0x4a/0x160\n path_mount+0x3c1/0xfb0\n ? kasan_quarantine_put+0xc7/0x1d0\n ? __pfx_path_mount+0x10/0x10\n ? kmem_cache_free+0x118/0x3e0\n ? user_path_at+0x74/0xa0\n __x64_sys_mount+0x1a6/0x1e0\n ? __pfx___x64_sys_mount+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53185",
"url": "https://www.suse.com/security/cve/CVE-2024-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1234901 for CVE-2024-53185",
"url": "https://bugzilla.suse.com/1234901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53185"
},
{
"cve": "CVE-2024-53187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53187"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check for overflows in io_pin_pages\n\nWARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144\nCPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0\nCall Trace:\n \u003cTASK\u003e\n __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183\n io_rings_map io_uring/io_uring.c:2611 [inline]\n io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470\n io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692\n io_uring_setup io_uring/io_uring.c:3781 [inline]\n ...\n \u003c/TASK\u003e\n\nio_pin_pages()\u0027s uaddr parameter came directly from the user and can be\ngarbage. Don\u0027t just add size to it as it can overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53187",
"url": "https://www.suse.com/security/cve/CVE-2024-53187"
},
{
"category": "external",
"summary": "SUSE Bug 1234947 for CVE-2024-53187",
"url": "https://bugzilla.suse.com/1234947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53187"
},
{
"cve": "CVE-2024-53194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53194"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix use-after-free of slot-\u003ebus on hot remove\n\nDennis reports a boot crash on recent Lenovo laptops with a USB4 dock.\n\nSince commit 0fc70886569c (\"thunderbolt: Reset USB4 v2 host router\") and\ncommit 59a54c5f3dbd (\"thunderbolt: Reset topology created by the boot\nfirmware\"), USB4 v2 and v1 Host Routers are reset on probe of the\nthunderbolt driver.\n\nThe reset clears the Presence Detect State and Data Link Layer Link Active\nbits at the USB4 Host Router\u0027s Root Port and thus causes hot removal of the\ndock.\n\nThe crash occurs when pciehp is unbound from one of the dock\u0027s Downstream\nPorts: pciehp creates a pci_slot on bind and destroys it on unbind. The\npci_slot contains a pointer to the pci_bus below the Downstream Port, but\na reference on that pci_bus is never acquired. The pci_bus is destroyed\nbefore the pci_slot, so a use-after-free ensues when pci_slot_release()\naccesses slot-\u003ebus.\n\nIn principle this should not happen because pci_stop_bus_device() unbinds\npciehp (and therefore destroys the pci_slot) before the pci_bus is\ndestroyed by pci_remove_bus_device().\n\nHowever the stacktrace provided by Dennis shows that pciehp is unbound from\npci_remove_bus_device() instead of pci_stop_bus_device(). To understand\nthe significance of this, one needs to know that the PCI core uses a two\nstep process to remove a portion of the hierarchy: It first unbinds all\ndrivers in the sub-hierarchy in pci_stop_bus_device() and then actually\nremoves the devices in pci_remove_bus_device(). There is no precaution to\nprevent driver binding in-between pci_stop_bus_device() and\npci_remove_bus_device().\n\nIn Dennis\u0027 case, it seems removal of the hierarchy by pciehp races with\ndriver binding by pci_bus_add_devices(). pciehp is bound to the\nDownstream Port after pci_stop_bus_device() has run, so it is unbound by\npci_remove_bus_device() instead of pci_stop_bus_device(). Because the\npci_bus has already been destroyed at that point, accesses to it result in\na use-after-free.\n\nOne might conclude that driver binding needs to be prevented after\npci_stop_bus_device() has run. However it seems risky that pci_slot points\nto pci_bus without holding a reference. Solely relying on correct ordering\nof driver unbind versus pci_bus destruction is certainly not defensive\nprogramming.\n\nIf pci_slot has a need to access data in pci_bus, it ought to acquire a\nreference. Amend pci_create_slot() accordingly. Dennis reports that the\ncrash is not reproducible with this change.\n\nAbridged stacktrace:\n\n pcieport 0000:00:07.0: PME: Signaling with IRQ 156\n pcieport 0000:00:07.0: pciehp: Slot #12 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ IbPresDis- LLActRep+\n pci_bus 0000:20: dev 00, created physical slot 12\n pcieport 0000:00:07.0: pciehp: Slot(12): Card not present\n ...\n pcieport 0000:21:02.0: pciehp: pcie_disable_notification: SLOTCTRL d8 write cmd 0\n Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b6b: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 13 UID: 0 PID: 134 Comm: irq/156-pciehp Not tainted 6.11.0-devel+ #1\n RIP: 0010:dev_driver_string+0x12/0x40\n pci_destroy_slot\n pciehp_remove\n pcie_port_remove_service\n device_release_driver_internal\n bus_remove_device\n device_del\n device_unregister\n remove_iter\n device_for_each_child\n pcie_portdrv_remove\n pci_device_remove\n device_release_driver_internal\n bus_remove_device\n device_del\n pci_remove_bus_device (recursive invocation)\n pci_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53194",
"url": "https://www.suse.com/security/cve/CVE-2024-53194"
},
{
"category": "external",
"summary": "SUSE Bug 1235459 for CVE-2024-53194",
"url": "https://bugzilla.suse.com/1235459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53194"
},
{
"cve": "CVE-2024-53195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Get rid of userspace_irqchip_in_use\n\nImproper use of userspace_irqchip_in_use led to syzbot hitting the\nfollowing WARN_ON() in kvm_timer_update_irq():\n\nWARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arch_timer.c:459\nkvm_timer_update_irq+0x21c/0x394\nCall trace:\n kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459\n kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968\n kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264\n kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline]\n kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline]\n kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695\n kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151\n el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe following sequence led to the scenario:\n - Userspace creates a VM and a vCPU.\n - The vCPU is initialized with KVM_ARM_VCPU_PMU_V3 during\n KVM_ARM_VCPU_INIT.\n - Without any other setup, such as vGIC or vPMU, userspace issues\n KVM_RUN on the vCPU. Since the vPMU is requested, but not setup,\n kvm_arm_pmu_v3_enable() fails in kvm_arch_vcpu_run_pid_change().\n As a result, KVM_RUN returns after enabling the timer, but before\n incrementing \u0027userspace_irqchip_in_use\u0027:\n kvm_arch_vcpu_run_pid_change()\n ret = kvm_arm_pmu_v3_enable()\n if (!vcpu-\u003earch.pmu.created)\n return -EINVAL;\n if (ret)\n return ret;\n [...]\n if (!irqchip_in_kernel(kvm))\n static_branch_inc(\u0026userspace_irqchip_in_use);\n - Userspace ignores the error and issues KVM_ARM_VCPU_INIT again.\n Since the timer is already enabled, control moves through the\n following flow, ultimately hitting the WARN_ON():\n kvm_timer_vcpu_reset()\n if (timer-\u003eenabled)\n kvm_timer_update_irq()\n if (!userspace_irqchip())\n ret = kvm_vgic_inject_irq()\n ret = vgic_lazy_init()\n if (unlikely(!vgic_initialized(kvm)))\n if (kvm-\u003earch.vgic.vgic_model !=\n KVM_DEV_TYPE_ARM_VGIC_V2)\n return -EBUSY;\n WARN_ON(ret);\n\nTheoretically, since userspace_irqchip_in_use\u0027s functionality can be\nsimply replaced by \u0027!irqchip_in_kernel()\u0027, get rid of the static key\nto avoid the mismanagement, which also helps with the syzbot issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53195",
"url": "https://www.suse.com/security/cve/CVE-2024-53195"
},
{
"category": "external",
"summary": "SUSE Bug 1234957 for CVE-2024-53195",
"url": "https://bugzilla.suse.com/1234957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53195"
},
{
"cve": "CVE-2024-53196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53196"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Don\u0027t retire aborted MMIO instruction\n\nReturning an abort to the guest for an unsupported MMIO access is a\ndocumented feature of the KVM UAPI. Nevertheless, it\u0027s clear that this\nplumbing has seen limited testing, since userspace can trivially cause a\nWARN in the MMIO return:\n\n WARNING: CPU: 0 PID: 30558 at arch/arm64/include/asm/kvm_emulate.h:536 kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n Call trace:\n kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n kvm_arch_vcpu_ioctl_run+0x98/0x15b4 arch/arm64/kvm/arm.c:1133\n kvm_vcpu_ioctl+0x75c/0xa78 virt/kvm/kvm_main.c:4487\n __do_sys_ioctl fs/ioctl.c:51 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x1e0/0x23c arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151\n el0_svc+0x38/0x68 arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x90/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe splat is complaining that KVM is advancing PC while an exception is\npending, i.e. that KVM is retiring the MMIO instruction despite a\npending synchronous external abort. Womp womp.\n\nFix the glaring UAPI bug by skipping over all the MMIO emulation in\ncase there is a pending synchronous exception. Note that while userspace\nis capable of pending an asynchronous exception (SError, IRQ, or FIQ),\nit is still safe to retire the MMIO instruction in this case as (1) they\nare by definition asynchronous, and (2) KVM relies on hardware support\nfor pending/delivering these exceptions instead of the software state\nmachine for advancing PC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53196",
"url": "https://www.suse.com/security/cve/CVE-2024-53196"
},
{
"category": "external",
"summary": "SUSE Bug 1234906 for CVE-2024-53196",
"url": "https://bugzilla.suse.com/1234906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53196"
},
{
"cve": "CVE-2024-53197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53197"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev-\u003econfig.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53197",
"url": "https://www.suse.com/security/cve/CVE-2024-53197"
},
{
"category": "external",
"summary": "SUSE Bug 1235464 for CVE-2024-53197",
"url": "https://bugzilla.suse.com/1235464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53198"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen: Fix the issue of resource not being properly released in xenbus_dev_probe()\n\nThis patch fixes an issue in the function xenbus_dev_probe(). In the\nxenbus_dev_probe() function, within the if (err) branch at line 313, the\nprogram incorrectly returns err directly without releasing the resources\nallocated by err = drv-\u003eprobe(dev, id). As the return value is non-zero,\nthe upper layers assume the processing logic has failed. However, the probe\noperation was performed earlier without a corresponding remove operation.\nSince the probe actually allocates resources, failing to perform the remove\noperation could lead to problems.\n\nTo fix this issue, we followed the resource release logic of the\nxenbus_dev_remove() function by adding a new block fail_remove before the\nfail_put block. After entering the branch if (err) at line 313, the\nfunction will use a goto statement to jump to the fail_remove block,\nensuring that the previously acquired resources are correctly released,\nthus preventing the reference count leak.\n\nThis bug was identified by an experimental static analysis tool developed\nby our team. The tool specializes in analyzing reference count operations\nand detecting potential issues where resources are not properly managed.\nIn this case, the tool flagged the missing release operation as a\npotential problem, which led to the development of this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53198",
"url": "https://www.suse.com/security/cve/CVE-2024-53198"
},
{
"category": "external",
"summary": "SUSE Bug 1234923 for CVE-2024-53198",
"url": "https://bugzilla.suse.com/1234923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53198"
},
{
"cve": "CVE-2024-53203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: fix potential array underflow in ucsi_ccg_sync_control()\n\nThe \"command\" variable can be controlled by the user via debugfs. The\nworry is that if con_index is zero then \"\u0026uc-\u003eucsi-\u003econnector[con_index\n- 1]\" would be an array underflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53203",
"url": "https://www.suse.com/security/cve/CVE-2024-53203"
},
{
"category": "external",
"summary": "SUSE Bug 1235001 for CVE-2024-53203",
"url": "https://bugzilla.suse.com/1235001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53203"
},
{
"cve": "CVE-2024-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n error = bfad_im_module_init()\n fc_release_transport(bfad_im_scsi_transport_template);\n if (error)\n goto ext;\n\next:\n bfad_im_module_exit();\n fc_release_transport(bfad_im_scsi_transport_template);\n --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53227",
"url": "https://www.suse.com/security/cve/CVE-2024-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1235011 for CVE-2024-53227",
"url": "https://bugzilla.suse.com/1235011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-53230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference,\nso check NULL for cppc_get_cpu_cost().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53230",
"url": "https://www.suse.com/security/cve/CVE-2024-53230"
},
{
"category": "external",
"summary": "SUSE Bug 1235976 for CVE-2024-53230",
"url": "https://bugzilla.suse.com/1235976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53230"
},
{
"cve": "CVE-2024-53231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53231",
"url": "https://www.suse.com/security/cve/CVE-2024-53231"
},
{
"category": "external",
"summary": "SUSE Bug 1235977 for CVE-2024-53231",
"url": "https://bugzilla.suse.com/1235977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53231"
},
{
"cve": "CVE-2024-53232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Implement blocking domain\n\nThis fixes a crash when surprise hot-unplugging a PCI device. This crash\nhappens because during hot-unplug __iommu_group_set_domain_nofail()\nattaching the default domain fails when the platform no longer\nrecognizes the device as it has already been removed and we end up with\na NULL domain pointer and UAF. This is exactly the case referred to in\nthe second comment in __iommu_device_set_domain() and just as stated\nthere if we can instead attach the blocking domain the UAF is prevented\nas this can handle the already removed device. Implement the blocking\ndomain to use this handling. With this change, the crash is fixed but\nwe still hit a warning attempting to change DMA ownership on a blocked\ndevice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53232",
"url": "https://www.suse.com/security/cve/CVE-2024-53232"
},
{
"category": "external",
"summary": "SUSE Bug 1235050 for CVE-2024-53232",
"url": "https://bugzilla.suse.com/1235050"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53232"
},
{
"cve": "CVE-2024-53233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nunicode: Fix utf8_load() error path\n\nutf8_load() requests the symbol \"utf8_data_table\" and then checks if the\nrequested UTF-8 version is supported. If it\u0027s unsupported, it tries to\nput the data table using symbol_put(). If an unsupported version is\nrequested, symbol_put() fails like this:\n\n kernel BUG at kernel/module/main.c:786!\n RIP: 0010:__symbol_put+0x93/0xb0\n Call Trace:\n \u003cTASK\u003e\n ? __die_body.cold+0x19/0x27\n ? die+0x2e/0x50\n ? do_trap+0xca/0x110\n ? do_error_trap+0x65/0x80\n ? __symbol_put+0x93/0xb0\n ? exc_invalid_op+0x51/0x70\n ? __symbol_put+0x93/0xb0\n ? asm_exc_invalid_op+0x1a/0x20\n ? __pfx_cmp_name+0x10/0x10\n ? __symbol_put+0x93/0xb0\n ? __symbol_put+0x62/0xb0\n utf8_load+0xf8/0x150\n\nThat happens because symbol_put() expects the unique string that\nidentify the symbol, instead of a pointer to the loaded symbol. Fix that\nby using such string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53233",
"url": "https://www.suse.com/security/cve/CVE-2024-53233"
},
{
"category": "external",
"summary": "SUSE Bug 1235046 for CVE-2024-53233",
"url": "https://bugzilla.suse.com/1235046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53233"
},
{
"cve": "CVE-2024-53236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Free skb when TX metadata options are invalid\n\nWhen a new skb is allocated for transmitting an xsk descriptor, i.e., for\nevery non-multibuf descriptor or the first frag of a multibuf descriptor,\nbut the descriptor is later found to have invalid options set for the TX\nmetadata, the new skb is never freed. This can leak skbs until the send\nbuffer is full which makes sending more packets impossible.\n\nFix this by freeing the skb in the error path if we are currently dealing\nwith the first frag, i.e., an skb allocated in this iteration of\nxsk_build_skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53236",
"url": "https://www.suse.com/security/cve/CVE-2024-53236"
},
{
"category": "external",
"summary": "SUSE Bug 1235000 for CVE-2024-53236",
"url": "https://bugzilla.suse.com/1235000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53236"
},
{
"cve": "CVE-2024-53239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: Release resources at card release\n\nThe current 6fire code tries to release the resources right after the\ncall of usb6fire_chip_abort(). But at this moment, the card object\nmight be still in use (as we\u0027re calling snd_card_free_when_closed()).\n\nFor avoid potential UAFs, move the release of resources to the card\u0027s\nprivate_free instead of the manual call of usb6fire_chip_destroy() at\nthe USB disconnect callback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53239",
"url": "https://www.suse.com/security/cve/CVE-2024-53239"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235054 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "external",
"summary": "SUSE Bug 1235055 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-53239"
},
{
"cve": "CVE-2024-53685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: give up on paths longer than PATH_MAX\n\nIf the full path to be built by ceph_mdsc_build_path() happens to be\nlonger than PATH_MAX, then this function will enter an endless (retry)\nloop, effectively blocking the whole task. Most of the machine\nbecomes unusable, making this a very simple and effective DoS\nvulnerability.\n\nI cannot imagine why this retry was ever implemented, but it seems\nrather useless and harmful to me. Let\u0027s remove it and fail with\nENAMETOOLONG instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53685",
"url": "https://www.suse.com/security/cve/CVE-2024-53685"
},
{
"category": "external",
"summary": "SUSE Bug 1235720 for CVE-2024-53685",
"url": "https://bugzilla.suse.com/1235720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53685"
},
{
"cve": "CVE-2024-53690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: prevent use of deleted inode\n\nsyzbot reported a WARNING in nilfs_rmdir. [1]\n\nBecause the inode bitmap is corrupted, an inode with an inode number that\nshould exist as a \".nilfs\" file was reassigned by nilfs_mkdir for \"file0\",\ncausing an inode duplication during execution. And this causes an\nunderflow of i_nlink in rmdir operations.\n\nThe inode is used twice by the same task to unmount and remove directories\n\".nilfs\" and \"file0\", it trigger warning in nilfs_rmdir.\n\nAvoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means\nthat this inode has been deleted, and iput is executed to reclaim it.\n\n[1]\nWARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407\n...\nCall Trace:\n \u003cTASK\u003e\n nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342\n vfs_rmdir+0x3a3/0x510 fs/namei.c:4394\n do_rmdir+0x3b5/0x580 fs/namei.c:4453\n __do_sys_rmdir fs/namei.c:4472 [inline]\n __se_sys_rmdir fs/namei.c:4470 [inline]\n __x64_sys_rmdir+0x47/0x50 fs/namei.c:4470\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53690",
"url": "https://www.suse.com/security/cve/CVE-2024-53690"
},
{
"category": "external",
"summary": "SUSE Bug 1235842 for CVE-2024-53690",
"url": "https://bugzilla.suse.com/1235842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-53690"
},
{
"cve": "CVE-2024-54680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-54680"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-54680",
"url": "https://www.suse.com/security/cve/CVE-2024-54680"
},
{
"category": "external",
"summary": "SUSE Bug 1235723 for CVE-2024-54680",
"url": "https://bugzilla.suse.com/1235723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-54680"
},
{
"cve": "CVE-2024-55639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55639"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: renesas: rswitch: avoid use-after-put for a device tree node\n\nThe device tree node saved in the rswitch_device structure is used at\nseveral driver locations. So passing this node to of_node_put() after\nthe first use is wrong.\n\nMove of_node_put() for this node to exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55639",
"url": "https://www.suse.com/security/cve/CVE-2024-55639"
},
{
"category": "external",
"summary": "SUSE Bug 1235737 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "external",
"summary": "SUSE Bug 1235738 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-55639"
},
{
"cve": "CVE-2024-55881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Play nice with protected guests in complete_hypercall_exit()\n\nUse is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit\nhypercall when completing said hypercall. For guests with protected state,\ne.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit\nmode as the vCPU state needed to detect 64-bit mode is unavailable.\n\nHacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE\nhypercall via VMGEXIT trips the WARN:\n\n ------------[ cut here ]------------\n WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm]\n Modules linked in: kvm_amd kvm ... [last unloaded: kvm]\n CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat #470\n Hardware name: Google Astoria/astoria, BIOS 0.20240617.0-0 06/17/2024\n RIP: 0010:complete_hypercall_exit+0x44/0xe0 [kvm]\n Call Trace:\n \u003cTASK\u003e\n kvm_arch_vcpu_ioctl_run+0x2400/0x2720 [kvm]\n kvm_vcpu_ioctl+0x54f/0x630 [kvm]\n __se_sys_ioctl+0x6b/0xc0\n do_syscall_64+0x83/0x160\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55881",
"url": "https://www.suse.com/security/cve/CVE-2024-55881"
},
{
"category": "external",
"summary": "SUSE Bug 1235745 for CVE-2024-55881",
"url": "https://bugzilla.suse.com/1235745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-55881"
},
{
"cve": "CVE-2024-55916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet\n\nIf the KVP (or VSS) daemon starts before the VMBus channel\u0027s ringbuffer is\nfully initialized, we can hit the panic below:\n\nhv_utils: Registering HyperV Utility Driver\nhv_vmbus: registering driver hv_utils\n...\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1\nRIP: 0010:hv_pkt_iter_first+0x12/0xd0\nCall Trace:\n...\n vmbus_recvpacket\n hv_kvp_onchannelcallback\n vmbus_on_event\n tasklet_action_common\n tasklet_action\n handle_softirqs\n irq_exit_rcu\n sysvec_hyperv_stimer0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_hyperv_stimer0\n...\n kvp_register_done\n hvt_op_read\n vfs_read\n ksys_read\n __x64_sys_read\n\nThis can happen because the KVP/VSS channel callback can be invoked\neven before the channel is fully opened:\n1) as soon as hv_kvp_init() -\u003e hvutil_transport_init() creates\n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and\nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the\nfile (which is handled by kvp_on_msg() -\u003ekvp_handle_handshake()) and\nreading the file for the driver\u0027s response, which is handled by\nhvt_op_read(), which calls hvt-\u003eon_read(), i.e. kvp_register_done().\n\n2) the problem with kvp_register_done() is that it can cause the\nchannel callback to be called even before the channel is fully opened,\nand when the channel callback is starting to run, util_probe()-\u003e\nvmbus_open() may have not initialized the ringbuffer yet, so the\ncallback can hit the panic of NULL pointer dereference.\n\nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in\n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we\nunload and reload the driver hv_utils, and run the daemon manually within\nthe 10 seconds.\n\nFix the panic by reordering the steps in util_probe() so the char dev\nentry used by the KVP or VSS daemon is not created until after\nvmbus_open() has completed. This reordering prevents the race condition\nfrom happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55916",
"url": "https://www.suse.com/security/cve/CVE-2024-55916"
},
{
"category": "external",
"summary": "SUSE Bug 1235747 for CVE-2024-55916",
"url": "https://bugzilla.suse.com/1235747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-55916"
},
{
"cve": "CVE-2024-56369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/modes: Avoid divide by zero harder in drm_mode_vrefresh()\n\ndrm_mode_vrefresh() is trying to avoid divide by zero\nby checking whether htotal or vtotal are zero. But we may\nstill end up with a div-by-zero of vtotal*htotal*...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56369",
"url": "https://www.suse.com/security/cve/CVE-2024-56369"
},
{
"category": "external",
"summary": "SUSE Bug 1235750 for CVE-2024-56369",
"url": "https://bugzilla.suse.com/1235750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56369"
},
{
"cve": "CVE-2024-56372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56372"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: fix tun_napi_alloc_frags()\n\nsyzbot reported the following crash [1]\n\nIssue came with the blamed commit. Instead of going through\nall the iov components, we keep using the first one\nand end up with a malformed skb.\n\n[1]\n\nkernel BUG at net/core/skbuff.c:2849 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6230 Comm: syz-executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\n RIP: 0010:__pskb_pull_tail+0x1568/0x1570 net/core/skbuff.c:2848\nCode: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 92 96 74 f8 e9 25 f1 ff ff e8 e8 ae 09 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 d9 ae 09 f8 90 \u003c0f\u003e 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90\nRSP: 0018:ffffc90004cbef30 EFLAGS: 00010293\nRAX: ffffffff8995c347 RBX: 00000000fffffff2 RCX: ffff88802cf45a00\nRDX: 0000000000000000 RSI: 00000000fffffff2 RDI: 0000000000000000\nRBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c\nR10: dffffc0000000000 R11: ffffed100fbe185d R12: ffff888076e85d50\nR13: ffff888076e85c80 R14: ffff888076e85cf4 R15: ffff888076e85c80\nFS: 00007f0dca6ea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f0dca6ead58 CR3: 00000000119da000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_cow_data+0x2da/0xcb0 net/core/skbuff.c:5284\n tipc_aead_decrypt net/tipc/crypto.c:894 [inline]\n tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.c:1844\n tipc_rcv+0x57e/0x12a0 net/tipc/node.c:2109\n tipc_l2_rcv_msg+0x2bd/0x450 net/tipc/bearer.c:668\n __netif_receive_skb_list_ptype net/core/dev.c:5720 [inline]\n __netif_receive_skb_list_core+0x8b7/0x980 net/core/dev.c:5762\n __netif_receive_skb_list net/core/dev.c:5814 [inline]\n netif_receive_skb_list_internal+0xa51/0xe30 net/core/dev.c:5905\n gro_normal_list include/net/gro.h:515 [inline]\n napi_complete_done+0x2b5/0x870 net/core/dev.c:6256\n napi_complete include/linux/netdevice.h:567 [inline]\n tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2057\n do_iter_readv_writev+0x600/0x880\n vfs_writev+0x376/0xba0 fs/read_write.c:1050\n do_writev+0x1b6/0x360 fs/read_write.c:1096\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56372",
"url": "https://www.suse.com/security/cve/CVE-2024-56372"
},
{
"category": "external",
"summary": "SUSE Bug 1235753 for CVE-2024-56372",
"url": "https://bugzilla.suse.com/1235753"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56372"
},
{
"cve": "CVE-2024-56531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56531"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThis patch also splits the code to the disconnect and the free phases;\nthe former is called immediately at the USB disconnect callback while\nthe latter is called from the card destructor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56531",
"url": "https://www.suse.com/security/cve/CVE-2024-56531"
},
{
"category": "external",
"summary": "SUSE Bug 1235057 for CVE-2024-56531",
"url": "https://bugzilla.suse.com/1235057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56531"
},
{
"cve": "CVE-2024-56532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: us122l: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThe loop of us122l-\u003emmap_count check is dropped as well. The check is\nuseless for the asynchronous operation with *_when_closed().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56532",
"url": "https://www.suse.com/security/cve/CVE-2024-56532"
},
{
"category": "external",
"summary": "SUSE Bug 1235059 for CVE-2024-56532",
"url": "https://bugzilla.suse.com/1235059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56533"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56533",
"url": "https://www.suse.com/security/cve/CVE-2024-56533"
},
{
"category": "external",
"summary": "SUSE Bug 1235053 for CVE-2024-56533",
"url": "https://bugzilla.suse.com/1235053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56538"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: zynqmp_kms: Unplug DRM device before removal\n\nPrevent userspace accesses to the DRM device from causing\nuse-after-frees by unplugging the device before we remove it. This\ncauses any further userspace accesses to result in an error without\nfurther calls into this driver\u0027s internals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56538",
"url": "https://www.suse.com/security/cve/CVE-2024-56538"
},
{
"category": "external",
"summary": "SUSE Bug 1235051 for CVE-2024-56538",
"url": "https://bugzilla.suse.com/1235051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56538"
},
{
"cve": "CVE-2024-56543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56543"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Skip Rx TID cleanup for self peer\n\nDuring peer create, dp setup for the peer is done where Rx TID is\nupdated for all the TIDs. Peer object for self peer will not go through\ndp setup.\n\nWhen core halts, dp cleanup is done for all the peers. While cleanup,\nrx_tid::ab is accessed which causes below stack trace for self peer.\n\nWARNING: CPU: 6 PID: 12297 at drivers/net/wireless/ath/ath12k/dp_rx.c:851\nCall Trace:\n__warn+0x7b/0x1a0\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nreport_bug+0x10b/0x200\nhandle_bug+0x3f/0x70\nexc_invalid_op+0x13/0x60\nasm_exc_invalid_op+0x16/0x20\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nath12k_dp_rx_frags_cleanup+0xca/0xe0 [ath12k]\nath12k_dp_rx_peer_tid_cleanup+0x39/0xa0 [ath12k]\nath12k_mac_peer_cleanup_all+0x61/0x100 [ath12k]\nath12k_core_halt+0x3b/0x100 [ath12k]\nath12k_core_reset+0x494/0x4c0 [ath12k]\n\nsta object in peer will be updated when remote peer is created. Hence\nuse peer::sta to detect the self peer and skip the cleanup.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56543",
"url": "https://www.suse.com/security/cve/CVE-2024-56543"
},
{
"category": "external",
"summary": "SUSE Bug 1235065 for CVE-2024-56543",
"url": "https://bugzilla.suse.com/1235065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56543"
},
{
"cve": "CVE-2024-56546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56546"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()\n\nIf we fail to allocate memory for cb_data by kmalloc, the memory\nallocation for eve_data is never freed, add the missing kfree()\nin the error handling path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56546",
"url": "https://www.suse.com/security/cve/CVE-2024-56546"
},
{
"category": "external",
"summary": "SUSE Bug 1235070 for CVE-2024-56546",
"url": "https://bugzilla.suse.com/1235070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56546"
},
{
"cve": "CVE-2024-56548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56548"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: don\u0027t query the device logical block size multiple times\n\nDevices block sizes may change. One of these cases is a loop device by\nusing ioctl LOOP_SET_BLOCK_SIZE.\n\nWhile this may cause other issues like IO being rejected, in the case of\nhfsplus, it will allocate a block by using that size and potentially write\nout-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the\nlatter function reads a different io_size.\n\nUsing a new min_io_size initally set to sb_min_blocksize works for the\npurposes of the original fix, since it will be set to the max between\nHFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the\nmax between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not\ninitialized.\n\nTested by mounting an hfsplus filesystem with loop block sizes 512, 1024\nand 4096.\n\nThe produced KASAN report before the fix looks like this:\n\n[ 419.944641] ==================================================================\n[ 419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a\n[ 419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678\n[ 419.947612]\n[ 419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84\n[ 419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[ 419.950035] Call Trace:\n[ 419.950384] \u003cTASK\u003e\n[ 419.950676] dump_stack_lvl+0x57/0x78\n[ 419.951212] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.951830] print_report+0x14c/0x49e\n[ 419.952361] ? __virt_addr_valid+0x267/0x278\n[ 419.952979] ? kmem_cache_debug_flags+0xc/0x1d\n[ 419.953561] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.954231] kasan_report+0x89/0xb0\n[ 419.954748] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955367] hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955948] ? __pfx_hfsplus_read_wrapper+0x10/0x10\n[ 419.956618] ? do_raw_spin_unlock+0x59/0x1a9\n[ 419.957214] ? _raw_spin_unlock+0x1a/0x2e\n[ 419.957772] hfsplus_fill_super+0x348/0x1590\n[ 419.958355] ? hlock_class+0x4c/0x109\n[ 419.958867] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.959499] ? __pfx_string+0x10/0x10\n[ 419.960006] ? lock_acquire+0x3e2/0x454\n[ 419.960532] ? bdev_name.constprop.0+0xce/0x243\n[ 419.961129] ? __pfx_bdev_name.constprop.0+0x10/0x10\n[ 419.961799] ? pointer+0x3f0/0x62f\n[ 419.962277] ? __pfx_pointer+0x10/0x10\n[ 419.962761] ? vsnprintf+0x6c4/0xfba\n[ 419.963178] ? __pfx_vsnprintf+0x10/0x10\n[ 419.963621] ? setup_bdev_super+0x376/0x3b3\n[ 419.964029] ? snprintf+0x9d/0xd2\n[ 419.964344] ? __pfx_snprintf+0x10/0x10\n[ 419.964675] ? lock_acquired+0x45c/0x5e9\n[ 419.965016] ? set_blocksize+0x139/0x1c1\n[ 419.965381] ? sb_set_blocksize+0x6d/0xae\n[ 419.965742] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.966179] mount_bdev+0x12f/0x1bf\n[ 419.966512] ? __pfx_mount_bdev+0x10/0x10\n[ 419.966886] ? vfs_parse_fs_string+0xce/0x111\n[ 419.967293] ? __pfx_vfs_parse_fs_string+0x10/0x10\n[ 419.967702] ? __pfx_hfsplus_mount+0x10/0x10\n[ 419.968073] legacy_get_tree+0x104/0x178\n[ 419.968414] vfs_get_tree+0x86/0x296\n[ 419.968751] path_mount+0xba3/0xd0b\n[ 419.969157] ? __pfx_path_mount+0x10/0x10\n[ 419.969594] ? kmem_cache_free+0x1e2/0x260\n[ 419.970311] do_mount+0x99/0xe0\n[ 419.970630] ? __pfx_do_mount+0x10/0x10\n[ 419.971008] __do_sys_mount+0x199/0x1c9\n[ 419.971397] do_syscall_64+0xd0/0x135\n[ 419.971761] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 419.972233] RIP: 0033:0x7c3cb812972e\n[ 419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48\n[ 419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5\n[ 419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e\n[ 419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56548",
"url": "https://www.suse.com/security/cve/CVE-2024-56548"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235073 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "external",
"summary": "SUSE Bug 1235074 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56548"
},
{
"cve": "CVE-2024-56557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56557"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer\n\nThe AD7923 was updated to support devices with 8 channels, but the size\nof tx_buf and ring_xfer was not increased accordingly, leading to a\npotential buffer overflow in ad7923_update_scan_mode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56557",
"url": "https://www.suse.com/security/cve/CVE-2024-56557"
},
{
"category": "external",
"summary": "SUSE Bug 1235122 for CVE-2024-56557",
"url": "https://bugzilla.suse.com/1235122"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56557"
},
{
"cve": "CVE-2024-56558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56558"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: make sure exp active before svc_export_show\n\nThe function `e_show` was called with protection from RCU. This only\nensures that `exp` will not be freed. Therefore, the reference count for\n`exp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `exp_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `exp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 3 PID: 819 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n...\nCall Trace:\n \u003cTASK\u003e\n e_show+0x20b/0x230 [nfsd]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56558",
"url": "https://www.suse.com/security/cve/CVE-2024-56558"
},
{
"category": "external",
"summary": "SUSE Bug 1235100 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "external",
"summary": "SUSE Bug 1243648 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1243648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56558"
},
{
"cve": "CVE-2024-56568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56568"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Defer probe of clients after smmu device bound\n\nNull pointer dereference occurs due to a race between smmu\ndriver probe and client driver probe, when of_dma_configure()\nfor client is called after the iommu_device_register() for smmu driver\nprobe has executed but before the driver_bound() for smmu driver\nhas been called.\n\nFollowing is how the race occurs:\n\nT1:Smmu device probe\t\tT2: Client device probe\n\nreally_probe()\narm_smmu_device_probe()\niommu_device_register()\n\t\t\t\t\treally_probe()\n\t\t\t\t\tplatform_dma_configure()\n\t\t\t\t\tof_dma_configure()\n\t\t\t\t\tof_dma_configure_id()\n\t\t\t\t\tof_iommu_configure()\n\t\t\t\t\tiommu_probe_device()\n\t\t\t\t\tiommu_init_device()\n\t\t\t\t\tarm_smmu_probe_device()\n\t\t\t\t\tarm_smmu_get_by_fwnode()\n\t\t\t\t\t\tdriver_find_device_by_fwnode()\n\t\t\t\t\t\tdriver_find_device()\n\t\t\t\t\t\tnext_device()\n\t\t\t\t\t\tklist_next()\n\t\t\t\t\t\t /* null ptr\n\t\t\t\t\t\t assigned to smmu */\n\t\t\t\t\t/* null ptr dereference\n\t\t\t\t\t while smmu-\u003estreamid_mask */\ndriver_bound()\n\tklist_add_tail()\n\nWhen this null smmu pointer is dereferenced later in\narm_smmu_probe_device, the device crashes.\n\nFix this by deferring the probe of the client device\nuntil the smmu device has bound to the arm smmu driver.\n\n[will: Add comment]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56568",
"url": "https://www.suse.com/security/cve/CVE-2024-56568"
},
{
"category": "external",
"summary": "SUSE Bug 1235032 for CVE-2024-56568",
"url": "https://bugzilla.suse.com/1235032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56568"
},
{
"cve": "CVE-2024-56569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix regression with module command in stack_trace_filter\n\nWhen executing the following command:\n\n # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter\n\nThe current mod command causes a null pointer dereference. While commit\n0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\")\nhas addressed part of the issue, it left a corner case unhandled, which still\nresults in a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56569",
"url": "https://www.suse.com/security/cve/CVE-2024-56569"
},
{
"category": "external",
"summary": "SUSE Bug 1235031 for CVE-2024-56569",
"url": "https://bugzilla.suse.com/1235031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: Filter invalid inodes with missing lookup function\n\nAdd a check to the ovl_dentry_weird() function to prevent the\nprocessing of directory inodes that lack the lookup function.\nThis is important because such inodes can cause errors in overlayfs\nwhen passed to the lowerstack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56570",
"url": "https://www.suse.com/security/cve/CVE-2024-56570"
},
{
"category": "external",
"summary": "SUSE Bug 1235035 for CVE-2024-56570",
"url": "https://bugzilla.suse.com/1235035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56571"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56571",
"url": "https://www.suse.com/security/cve/CVE-2024-56571"
},
{
"category": "external",
"summary": "SUSE Bug 1235037 for CVE-2024-56571",
"url": "https://bugzilla.suse.com/1235037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56571"
},
{
"cve": "CVE-2024-56572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56572"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()\n\nThe buffer in the loop should be released under the exception path,\notherwise there may be a memory leak here.\n\nTo mitigate this, free the buffer when allegro_alloc_buffer fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56572",
"url": "https://www.suse.com/security/cve/CVE-2024-56572"
},
{
"category": "external",
"summary": "SUSE Bug 1235043 for CVE-2024-56572",
"url": "https://bugzilla.suse.com/1235043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56572"
},
{
"cve": "CVE-2024-56573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56573"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/libstub: Free correct pointer on failure\n\ncmdline_ptr is an out parameter, which is not allocated by the function\nitself, and likely points into the caller\u0027s stack.\n\ncmdline refers to the pool allocation that should be freed when cleaning\nup after a failure, so pass this instead to free_pool().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56573",
"url": "https://www.suse.com/security/cve/CVE-2024-56573"
},
{
"category": "external",
"summary": "SUSE Bug 1235042 for CVE-2024-56573",
"url": "https://bugzilla.suse.com/1235042"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56573"
},
{
"cve": "CVE-2024-56574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56574"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ts2020: fix null-ptr-deref in ts2020_probe()\n\nKASAN reported a null-ptr-deref issue when executing the following\ncommand:\n\n # echo ts2020 0x20 \u003e /sys/bus/i2c/devices/i2c-0/new_device\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]\n RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809\n RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010\n RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6\n R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790\n R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001\n FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n ts2020_probe+0xad/0xe10 [ts2020]\n i2c_device_probe+0x421/0xb40\n really_probe+0x266/0x850\n ...\n\nThe cause of the problem is that when using sysfs to dynamically register\nan i2c device, there is no platform data, but the probe process of ts2020\nneeds to use platform data, resulting in a null pointer being accessed.\n\nSolve this problem by adding checks to platform data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56574",
"url": "https://www.suse.com/security/cve/CVE-2024-56574"
},
{
"category": "external",
"summary": "SUSE Bug 1235040 for CVE-2024-56574",
"url": "https://bugzilla.suse.com/1235040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56575"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Ensure power suppliers be suspended before detach them\n\nThe power suppliers are always requested to suspend asynchronously,\ndev_pm_domain_detach() requires the caller to ensure proper\nsynchronization of this function with power management callbacks.\notherwise the detach may led to kernel panic, like below:\n\n[ 1457.107934] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000040\n[ 1457.116777] Mem abort info:\n[ 1457.119589] ESR = 0x0000000096000004\n[ 1457.123358] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 1457.128692] SET = 0, FnV = 0\n[ 1457.131764] EA = 0, S1PTW = 0\n[ 1457.134920] FSC = 0x04: level 0 translation fault\n[ 1457.139812] Data abort info:\n[ 1457.142707] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 1457.148196] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 1457.153256] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 1457.158563] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001138b6000\n[ 1457.165000] [0000000000000040] pgd=0000000000000000, p4d=0000000000000000\n[ 1457.171792] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 1457.178045] Modules linked in: v4l2_jpeg wave6_vpu_ctrl(-) [last unloaded: mxc_jpeg_encdec]\n[ 1457.186383] CPU: 0 PID: 51938 Comm: kworker/0:3 Not tainted 6.6.36-gd23d64eea511 #66\n[ 1457.194112] Hardware name: NXP i.MX95 19X19 board (DT)\n[ 1457.199236] Workqueue: pm pm_runtime_work\n[ 1457.203247] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 1457.210188] pc : genpd_runtime_suspend+0x20/0x290\n[ 1457.214886] lr : __rpm_callback+0x48/0x1d8\n[ 1457.218968] sp : ffff80008250bc50\n[ 1457.222270] x29: ffff80008250bc50 x28: 0000000000000000 x27: 0000000000000000\n[ 1457.229394] x26: 0000000000000000 x25: 0000000000000008 x24: 00000000000f4240\n[ 1457.236518] x23: 0000000000000000 x22: ffff00008590f0e4 x21: 0000000000000008\n[ 1457.243642] x20: ffff80008099c434 x19: ffff00008590f000 x18: ffffffffffffffff\n[ 1457.250766] x17: 5300326563697665 x16: 645f676e696c6f6f x15: 63343a6d726f6674\n[ 1457.257890] x14: 0000000000000004 x13: 00000000000003a4 x12: 0000000000000002\n[ 1457.265014] x11: 0000000000000000 x10: 0000000000000a60 x9 : ffff80008250bbb0\n[ 1457.272138] x8 : ffff000092937200 x7 : ffff0003fdf6af80 x6 : 0000000000000000\n[ 1457.279262] x5 : 00000000410fd050 x4 : 0000000000200000 x3 : 0000000000000000\n[ 1457.286386] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008590f000\n[ 1457.293510] Call trace:\n[ 1457.295946] genpd_runtime_suspend+0x20/0x290\n[ 1457.300296] __rpm_callback+0x48/0x1d8\n[ 1457.304038] rpm_callback+0x6c/0x78\n[ 1457.307515] rpm_suspend+0x10c/0x570\n[ 1457.311077] pm_runtime_work+0xc4/0xc8\n[ 1457.314813] process_one_work+0x138/0x248\n[ 1457.318816] worker_thread+0x320/0x438\n[ 1457.322552] kthread+0x110/0x114\n[ 1457.325767] ret_from_fork+0x10/0x20",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56575",
"url": "https://www.suse.com/security/cve/CVE-2024-56575"
},
{
"category": "external",
"summary": "SUSE Bug 1235039 for CVE-2024-56575",
"url": "https://bugzilla.suse.com/1235039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56575"
},
{
"cve": "CVE-2024-56577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56577"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-jpeg: Fix null-ptr-deref during unload module\n\nThe workqueue should be destroyed in mtk_jpeg_core.c since commit\n09aea13ecf6f (\"media: mtk-jpeg: refactor some variables\"), otherwise\nthe below calltrace can be easily triggered.\n\n[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023\n[ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]\n...\n[ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17\n...\n[ 677.882838] pc : destroy_workqueue+0x3c/0x770\n[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.884314] sp : ffff80008ad974f0\n[ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070\n[ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690\n[ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff800000000000\n[ 677.887515] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800085397ac0\n[ 677.888438] x17: 0000000000000000 x16: ffff8000801b87c8 x15: 1ffff000115b2e10\n[ 677.889361] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d\n[ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90\n[ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001\n[ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000\n[ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118\n[ 677.893977] Call trace:\n[ 677.894297] destroy_workqueue+0x3c/0x770\n[ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.895677] devm_action_release+0x50/0x90\n[ 677.896211] release_nodes+0xe8/0x170\n[ 677.896688] devres_release_all+0xf8/0x178\n[ 677.897219] device_unbind_cleanup+0x24/0x170\n[ 677.897785] device_release_driver_internal+0x35c/0x480\n[ 677.898461] device_release_driver+0x20/0x38\n...\n[ 677.912665] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56577",
"url": "https://www.suse.com/security/cve/CVE-2024-56577"
},
{
"category": "external",
"summary": "SUSE Bug 1235112 for CVE-2024-56577",
"url": "https://bugzilla.suse.com/1235112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56577"
},
{
"cve": "CVE-2024-56578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Set video drvdata before register video device\n\nThe video drvdata should be set before the video device is registered,\notherwise video_drvdata() may return NULL in the open() file ops, and led\nto oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56578",
"url": "https://www.suse.com/security/cve/CVE-2024-56578"
},
{
"category": "external",
"summary": "SUSE Bug 1235115 for CVE-2024-56578",
"url": "https://bugzilla.suse.com/1235115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56578"
},
{
"cve": "CVE-2024-56584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56584"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/tctx: work around xa_store() allocation error issue\n\nsyzbot triggered the following WARN_ON:\n\nWARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51\n\nwhich is the\n\nWARN_ON_ONCE(!xa_empty(\u0026tctx-\u003exa));\n\nsanity check in __io_uring_free() when a io_uring_task is going through\nits final put. The syzbot test case includes injecting memory allocation\nfailures, and it very much looks like xa_store() can fail one of its\nmemory allocations and end up with -\u003ehead being non-NULL even though no\nentries exist in the xarray.\n\nUntil this issue gets sorted out, work around it by attempting to\niterate entries in our xarray, and WARN_ON_ONCE() if one is found.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56584",
"url": "https://www.suse.com/security/cve/CVE-2024-56584"
},
{
"category": "external",
"summary": "SUSE Bug 1235117 for CVE-2024-56584",
"url": "https://bugzilla.suse.com/1235117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56584"
},
{
"cve": "CVE-2024-56587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56587"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex\n\nThere is NULL pointer issue observed if from Process A where hid device\nbeing added which results in adding a led_cdev addition and later a\nanother call to access of led_cdev attribute from Process B can result\nin NULL pointer issue.\n\nUse mutex led_cdev-\u003eled_access to protect access to led-\u003ecdev and its\nattribute inside brightness_show() and max_brightness_show() and also\nupdate the comment for mutex that it should be used to protect the led\nclass device fields.\n\n\tProcess A \t\t\t\tProcess B\n\n kthread+0x114\n worker_thread+0x244\n process_scheduled_works+0x248\n uhid_device_add_worker+0x24\n hid_add_device+0x120\n device_add+0x268\n bus_probe_device+0x94\n device_initial_probe+0x14\n __device_attach+0xfc\n bus_for_each_drv+0x10c\n __device_attach_driver+0x14c\n driver_probe_device+0x3c\n __driver_probe_device+0xa0\n really_probe+0x190\n hid_device_probe+0x130\n ps_probe+0x990\n ps_led_register+0x94\n devm_led_classdev_register_ext+0x58\n led_classdev_register_ext+0x1f8\n device_create_with_groups+0x48\n device_create_groups_vargs+0xc8\n device_add+0x244\n kobject_uevent+0x14\n kobject_uevent_env[jt]+0x224\n mutex_unlock[jt]+0xc4\n __mutex_unlock_slowpath+0xd4\n wake_up_q+0x70\n try_to_wake_up[jt]+0x48c\n preempt_schedule_common+0x28\n __schedule+0x628\n __switch_to+0x174\n\t\t\t\t\t\tel0t_64_sync+0x1a8/0x1ac\n\t\t\t\t\t\tel0t_64_sync_handler+0x68/0xbc\n\t\t\t\t\t\tel0_svc+0x38/0x68\n\t\t\t\t\t\tdo_el0_svc+0x1c/0x28\n\t\t\t\t\t\tel0_svc_common+0x80/0xe0\n\t\t\t\t\t\tinvoke_syscall+0x58/0x114\n\t\t\t\t\t\t__arm64_sys_read+0x1c/0x2c\n\t\t\t\t\t\tksys_read+0x78/0xe8\n\t\t\t\t\t\tvfs_read+0x1e0/0x2c8\n\t\t\t\t\t\tkernfs_fop_read_iter+0x68/0x1b4\n\t\t\t\t\t\tseq_read_iter+0x158/0x4ec\n\t\t\t\t\t\tkernfs_seq_show+0x44/0x54\n\t\t\t\t\t\tsysfs_kf_seq_show+0xb4/0x130\n\t\t\t\t\t\tdev_attr_show+0x38/0x74\n\t\t\t\t\t\tbrightness_show+0x20/0x4c\n\t\t\t\t\t\tdualshock4_led_get_brightness+0xc/0x74\n\n[ 3313.874295][ T4013] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[ 3313.874301][ T4013] Mem abort info:\n[ 3313.874303][ T4013] ESR = 0x0000000096000006\n[ 3313.874305][ T4013] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 3313.874307][ T4013] SET = 0, FnV = 0\n[ 3313.874309][ T4013] EA = 0, S1PTW = 0\n[ 3313.874311][ T4013] FSC = 0x06: level 2 translation fault\n[ 3313.874313][ T4013] Data abort info:\n[ 3313.874314][ T4013] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000\n[ 3313.874316][ T4013] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 3313.874318][ T4013] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 3313.874320][ T4013] user pgtable: 4k pages, 39-bit VAs, pgdp=00000008f2b0a000\n..\n\n[ 3313.874332][ T4013] Dumping ftrace buffer:\n[ 3313.874334][ T4013] (ftrace buffer empty)\n..\n..\n[ dd3313.874639][ T4013] CPU: 6 PID: 4013 Comm: InputReader\n[ 3313.874648][ T4013] pc : dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874653][ T4013] lr : led_update_brightness+0x38/0x60\n[ 3313.874656][ T4013] sp : ffffffc0b910bbd0\n..\n..\n[ 3313.874685][ T4013] Call trace:\n[ 3313.874687][ T4013] dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874690][ T4013] brightness_show+0x20/0x4c\n[ 3313.874692][ T4013] dev_attr_show+0x38/0x74\n[ 3313.874696][ T4013] sysfs_kf_seq_show+0xb4/0x130\n[ 3313.874700][ T4013] kernfs_seq_show+0x44/0x54\n[ 3313.874703][ T4013] seq_read_iter+0x158/0x4ec\n[ 3313.874705][ T4013] kernfs_fop_read_iter+0x68/0x1b4\n[ 3313.874708][ T4013] vfs_read+0x1e0/0x2c8\n[ 3313.874711][ T4013] ksys_read+0x78/0xe8\n[ 3313.874714][ T4013] __arm64_sys_read+0x1c/0x2c\n[ 3313.874718][ T4013] invoke_syscall+0x58/0x114\n[ 3313.874721][ T4013] el0_svc_common+0x80/0xe0\n[ 3313.874724][ T4013] do_el0_svc+0x1c/0x28\n[ 3313.874727][ T4013] el0_svc+0x38/0x68\n[ 3313.874730][ T4013] el0t_64_sync_handler+0x68/0xbc\n[ 3313.874732][ T4013] el0t_64_sync+0x1a8/0x1ac",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56587",
"url": "https://www.suse.com/security/cve/CVE-2024-56587"
},
{
"category": "external",
"summary": "SUSE Bug 1235125 for CVE-2024-56587",
"url": "https://bugzilla.suse.com/1235125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56587"
},
{
"cve": "CVE-2024-56588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56588"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Create all dump files during debugfs initialization\n\nFor the current debugfs of hisi_sas, after user triggers dump, the\ndriver allocate memory space to save the register information and create\ndebugfs files to display the saved information. In this process, the\ndebugfs files created after each dump.\n\nTherefore, when the dump is triggered while the driver is unbind, the\nfollowing hang occurs:\n\n[67840.853907] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[67840.862947] Mem abort info:\n[67840.865855] ESR = 0x0000000096000004\n[67840.869713] EC = 0x25: DABT (current EL), IL = 32 bits\n[67840.875125] SET = 0, FnV = 0\n[67840.878291] EA = 0, S1PTW = 0\n[67840.881545] FSC = 0x04: level 0 translation fault\n[67840.886528] Data abort info:\n[67840.889524] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[67840.895117] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[67840.900284] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[67840.905709] user pgtable: 4k pages, 48-bit VAs, pgdp=0000002803a1f000\n[67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000\n[67840.919177] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[67840.996435] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[67841.003628] pc : down_write+0x30/0x98\n[67841.007546] lr : start_creating.part.0+0x60/0x198\n[67841.012495] sp : ffff8000b979ba20\n[67841.016046] x29: ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40\n[67841.023412] x26: 0000000000000012 x25: ffff20202b355ae8 x24: ffff20202b35a8c8\n[67841.030779] x23: ffffa36877928208 x22: ffffa368b4972240 x21: ffff8000b979bb18\n[67841.038147] x20: ffff00281dc1e3c0 x19: fffffffffffffffe x18: 0000000000000020\n[67841.045515] x17: 0000000000000000 x16: ffffa368b128a530 x15: ffffffffffffffff\n[67841.052888] x14: ffff8000b979bc18 x13: ffffffffffffffff x12: ffff8000b979bb18\n[67841.060263] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa368b1289b18\n[67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6 : 00000000000003a9\n[67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001\n[67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0\n[67841.089759] Call trace:\n[67841.092456] down_write+0x30/0x98\n[67841.096017] start_creating.part.0+0x60/0x198\n[67841.100613] debugfs_create_dir+0x48/0x1f8\n[67841.104950] debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw]\n[67841.111447] debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw]\n[67841.118111] debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw]\n[67841.125115] full_proxy_write+0x68/0xc8\n[67841.129175] vfs_write+0xd8/0x3f0\n[67841.132708] ksys_write+0x70/0x108\n[67841.136317] __arm64_sys_write+0x24/0x38\n[67841.140440] invoke_syscall+0x50/0x128\n[67841.144385] el0_svc_common.constprop.0+0xc8/0xf0\n[67841.149273] do_el0_svc+0x24/0x38\n[67841.152773] el0_svc+0x38/0xd8\n[67841.156009] el0t_64_sync_handler+0xc0/0xc8\n[67841.160361] el0t_64_sync+0x1a4/0x1a8\n[67841.164189] Code: b9000882 d2800002 d2800023 f9800011 (c85ffc05)\n[67841.170443] ---[ end trace 0000000000000000 ]---\n\nTo fix this issue, create all directories and files during debugfs\ninitialization. In this way, the driver only needs to allocate memory\nspace to save information each time the user triggers dumping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56588",
"url": "https://www.suse.com/security/cve/CVE-2024-56588"
},
{
"category": "external",
"summary": "SUSE Bug 1235123 for CVE-2024-56588",
"url": "https://bugzilla.suse.com/1235123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56588"
},
{
"cve": "CVE-2024-56589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56589"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Add cond_resched() for no forced preemption model\n\nFor no forced preemption model kernel, in the scenario where the\nexpander is connected to 12 high performance SAS SSDs, the following\ncall trace may occur:\n\n[ 214.409199][ C240] watchdog: BUG: soft lockup - CPU#240 stuck for 22s! [irq/149-hisi_sa:3211]\n[ 214.568533][ C240] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)\n[ 214.575224][ C240] pc : fput_many+0x8c/0xdc\n[ 214.579480][ C240] lr : fput+0x1c/0xf0\n[ 214.583302][ C240] sp : ffff80002de2b900\n[ 214.587298][ C240] x29: ffff80002de2b900 x28: ffff1082aa412000\n[ 214.593291][ C240] x27: ffff3062a0348c08 x26: ffff80003a9f6000\n[ 214.599284][ C240] x25: ffff1062bbac5c40 x24: 0000000000001000\n[ 214.605277][ C240] x23: 000000000000000a x22: 0000000000000001\n[ 214.611270][ C240] x21: 0000000000001000 x20: 0000000000000000\n[ 214.617262][ C240] x19: ffff3062a41ae580 x18: 0000000000010000\n[ 214.623255][ C240] x17: 0000000000000001 x16: ffffdb3a6efe5fc0\n[ 214.629248][ C240] x15: ffffffffffffffff x14: 0000000003ffffff\n[ 214.635241][ C240] x13: 000000000000ffff x12: 000000000000029c\n[ 214.641234][ C240] x11: 0000000000000006 x10: ffff80003a9f7fd0\n[ 214.647226][ C240] x9 : ffffdb3a6f0482fc x8 : 0000000000000001\n[ 214.653219][ C240] x7 : 0000000000000002 x6 : 0000000000000080\n[ 214.659212][ C240] x5 : ffff55480ee9b000 x4 : fffffde7f94c6554\n[ 214.665205][ C240] x3 : 0000000000000002 x2 : 0000000000000020\n[ 214.671198][ C240] x1 : 0000000000000021 x0 : ffff3062a41ae5b8\n[ 214.677191][ C240] Call trace:\n[ 214.680320][ C240] fput_many+0x8c/0xdc\n[ 214.684230][ C240] fput+0x1c/0xf0\n[ 214.687707][ C240] aio_complete_rw+0xd8/0x1fc\n[ 214.692225][ C240] blkdev_bio_end_io+0x98/0x140\n[ 214.696917][ C240] bio_endio+0x160/0x1bc\n[ 214.701001][ C240] blk_update_request+0x1c8/0x3bc\n[ 214.705867][ C240] scsi_end_request+0x3c/0x1f0\n[ 214.710471][ C240] scsi_io_completion+0x7c/0x1a0\n[ 214.715249][ C240] scsi_finish_command+0x104/0x140\n[ 214.720200][ C240] scsi_softirq_done+0x90/0x180\n[ 214.724892][ C240] blk_mq_complete_request+0x5c/0x70\n[ 214.730016][ C240] scsi_mq_done+0x48/0xac\n[ 214.734194][ C240] sas_scsi_task_done+0xbc/0x16c [libsas]\n[ 214.739758][ C240] slot_complete_v3_hw+0x260/0x760 [hisi_sas_v3_hw]\n[ 214.746185][ C240] cq_thread_v3_hw+0xbc/0x190 [hisi_sas_v3_hw]\n[ 214.752179][ C240] irq_thread_fn+0x34/0xa4\n[ 214.756435][ C240] irq_thread+0xc4/0x130\n[ 214.760520][ C240] kthread+0x108/0x13c\n[ 214.764430][ C240] ret_from_fork+0x10/0x18\n\nThis is because in the hisi_sas driver, both the hardware interrupt\nhandler and the interrupt thread are executed on the same CPU. In the\nperformance test scenario, function irq_wait_for_interrupt() will always\nreturn 0 if lots of interrupts occurs and the CPU will be continuously\nconsumed. As a result, the CPU cannot run the watchdog thread. When the\nwatchdog time exceeds the specified time, call trace occurs.\n\nTo fix it, add cond_resched() to execute the watchdog thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56589",
"url": "https://www.suse.com/security/cve/CVE-2024-56589"
},
{
"category": "external",
"summary": "SUSE Bug 1235241 for CVE-2024-56589",
"url": "https://bugzilla.suse.com/1235241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56589"
},
{
"cve": "CVE-2024-56590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56590"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix not checking skb length on hci_acldata_packet\n\nThis fixes not checking if skb really contains an ACL header otherwise\nthe code may attempt to access some uninitilized/invalid memory past the\nvalid skb-\u003edata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56590",
"url": "https://www.suse.com/security/cve/CVE-2024-56590"
},
{
"category": "external",
"summary": "SUSE Bug 1235038 for CVE-2024-56590",
"url": "https://bugzilla.suse.com/1235038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56590"
},
{
"cve": "CVE-2024-56592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56592"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Call free_htab_elem() after htab_unlock_bucket()\n\nFor htab of maps, when the map is removed from the htab, it may hold the\nlast reference of the map. bpf_map_fd_put_ptr() will invoke\nbpf_map_free_id() to free the id of the removed map element. However,\nbpf_map_fd_put_ptr() is invoked while holding a bucket lock\n(raw_spin_lock_t), and bpf_map_free_id() attempts to acquire map_idr_lock\n(spinlock_t), triggering the following lockdep warning:\n\n =============================\n [ BUG: Invalid wait context ]\n 6.11.0-rc4+ #49 Not tainted\n -----------------------------\n test_maps/4881 is trying to lock:\n ffffffff84884578 (map_idr_lock){+...}-{3:3}, at: bpf_map_free_id.part.0+0x21/0x70\n other info that might help us debug this:\n context-{5:5}\n 2 locks held by test_maps/4881:\n #0: ffffffff846caf60 (rcu_read_lock){....}-{1:3}, at: bpf_fd_htab_map_update_elem+0xf9/0x270\n #1: ffff888149ced148 (\u0026htab-\u003elockdep_key#2){....}-{2:2}, at: htab_map_update_elem+0x178/0xa80\n stack backtrace:\n CPU: 0 UID: 0 PID: 4881 Comm: test_maps Not tainted 6.11.0-rc4+ #49\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), ...\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x6e/0xb0\n dump_stack+0x10/0x20\n __lock_acquire+0x73e/0x36c0\n lock_acquire+0x182/0x450\n _raw_spin_lock_irqsave+0x43/0x70\n bpf_map_free_id.part.0+0x21/0x70\n bpf_map_put+0xcf/0x110\n bpf_map_fd_put_ptr+0x9a/0xb0\n free_htab_elem+0x69/0xe0\n htab_map_update_elem+0x50f/0xa80\n bpf_fd_htab_map_update_elem+0x131/0x270\n htab_map_update_elem+0x50f/0xa80\n bpf_fd_htab_map_update_elem+0x131/0x270\n bpf_map_update_value+0x266/0x380\n __sys_bpf+0x21bb/0x36b0\n __x64_sys_bpf+0x45/0x60\n x64_sys_call+0x1b2a/0x20d0\n do_syscall_64+0x5d/0x100\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nOne way to fix the lockdep warning is using raw_spinlock_t for\nmap_idr_lock as well. However, bpf_map_alloc_id() invokes\nidr_alloc_cyclic() after acquiring map_idr_lock, it will trigger a\nsimilar lockdep warning because the slab\u0027s lock (s-\u003ecpu_slab-\u003elock) is\nstill a spinlock.\n\nInstead of changing map_idr_lock\u0027s type, fix the issue by invoking\nhtab_put_fd_value() after htab_unlock_bucket(). However, only deferring\nthe invocation of htab_put_fd_value() is not enough, because the old map\npointers in htab of maps can not be saved during batched deletion.\nTherefore, also defer the invocation of free_htab_elem(), so these\nto-be-freed elements could be linked together similar to lru map.\n\nThere are four callers for -\u003emap_fd_put_ptr:\n\n(1) alloc_htab_elem() (through htab_put_fd_value())\nIt invokes -\u003emap_fd_put_ptr() under a raw_spinlock_t. The invocation of\nhtab_put_fd_value() can not simply move after htab_unlock_bucket(),\nbecause the old element has already been stashed in htab-\u003eextra_elems.\nIt may be reused immediately after htab_unlock_bucket() and the\ninvocation of htab_put_fd_value() after htab_unlock_bucket() may release\nthe newly-added element incorrectly. Therefore, saving the map pointer\nof the old element for htab of maps before unlocking the bucket and\nreleasing the map_ptr after unlock. Beside the map pointer in the old\nelement, should do the same thing for the special fields in the old\nelement as well.\n\n(2) free_htab_elem() (through htab_put_fd_value())\nIts caller includes __htab_map_lookup_and_delete_elem(),\nhtab_map_delete_elem() and __htab_map_lookup_and_delete_batch().\n\nFor htab_map_delete_elem(), simply invoke free_htab_elem() after\nhtab_unlock_bucket(). For __htab_map_lookup_and_delete_batch(), just\nlike lru map, linking the to-be-freed element into node_to_free list\nand invoking free_htab_elem() for these element after unlock. It is safe\nto reuse batch_flink as the link for node_to_free, because these\nelements have been removed from the hash llist.\n\nBecause htab of maps doesn\u0027t support lookup_and_delete operation,\n__htab_map_lookup_and_delete_elem() doesn\u0027t have the problem, so kept\nit as\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56592",
"url": "https://www.suse.com/security/cve/CVE-2024-56592"
},
{
"category": "external",
"summary": "SUSE Bug 1235244 for CVE-2024-56592",
"url": "https://bugzilla.suse.com/1235244"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56592"
},
{
"cve": "CVE-2024-56593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56593"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()\n\nThis patch fixes a NULL pointer dereference bug in brcmfmac that occurs\nwhen a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs\nare sent from the pkt queue.\n\nThe problem is the number of entries in the pre-allocated sgtable, it is\nnents = max(rxglom_size, txglom_size) + max(rxglom_size, txglom_size) \u003e\u003e 4 + 1.\nGiven the default [rt]xglom_size=32 it\u0027s actually 35 which is too small.\nWorst case, the pkt queue can end up with 64 SKBs. This occurs when a new SKB\nis added for each original SKB if tailroom isn\u0027t enough to hold tail_pad.\nAt least one sg entry is needed for each SKB. So, eventually the \"skb_queue_walk loop\"\nin brcmf_sdiod_sglist_rw may run out of sg entries. This makes sg_next return\nNULL and this causes the oops.\n\nThe patch sets nents to max(rxglom_size, txglom_size) * 2 to be able handle\nthe worst-case.\nBtw. this requires only 64-35=29 * 16 (or 20 if CONFIG_NEED_SG_DMA_LENGTH) = 464\nadditional bytes of memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56593",
"url": "https://www.suse.com/security/cve/CVE-2024-56593"
},
{
"category": "external",
"summary": "SUSE Bug 1235252 for CVE-2024-56593",
"url": "https://bugzilla.suse.com/1235252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56594"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: set the right AMDGPU sg segment limitation\n\nThe driver needs to set the correct max_segment_size;\notherwise debug_dma_map_sg() will complain about the\nover-mapping of the AMDGPU sg length as following:\n\nWARNING: CPU: 6 PID: 1964 at kernel/dma/debug.c:1178 debug_dma_map_sg+0x2dc/0x370\n[ 364.049444] Modules linked in: veth amdgpu(OE) amdxcp drm_exec gpu_sched drm_buddy drm_ttm_helper ttm(OE) drm_suballoc_helper drm_display_helper drm_kms_helper i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc amd_atl intel_rapl_msr intel_rapl_common sunrpc sch_fq_codel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd binfmt_misc snd_hda_codec snd_pci_acp6x snd_hda_core snd_acp_config snd_hwdep snd_soc_acpi kvm_amd snd_pcm kvm snd_seq_midi snd_seq_midi_event crct10dif_pclmul ghash_clmulni_intel sha512_ssse3 snd_rawmidi sha256_ssse3 sha1_ssse3 aesni_intel snd_seq nls_iso8859_1 crypto_simd snd_seq_device cryptd snd_timer rapl input_leds snd\n[ 364.049532] ipmi_devintf wmi_bmof ccp serio_raw k10temp sp5100_tco soundcore ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 364.049576] CPU: 6 PID: 1964 Comm: rocminfo Tainted: G OE 6.10.0-custom #492\n[ 364.049579] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 364.049582] RIP: 0010:debug_dma_map_sg+0x2dc/0x370\n[ 364.049585] Code: 89 4d b8 e8 36 b1 86 00 8b 4d b8 48 8b 55 b0 44 8b 45 a8 4c 8b 4d a0 48 89 c6 48 c7 c7 00 4b 74 bc 4c 89 4d b8 e8 b4 73 f3 ff \u003c0f\u003e 0b 4c 8b 4d b8 8b 15 c8 2c b8 01 85 d2 0f 85 ee fd ff ff 8b 05\n[ 364.049588] RSP: 0018:ffff9ca600b57ac0 EFLAGS: 00010286\n[ 364.049590] RAX: 0000000000000000 RBX: ffff88b7c132b0c8 RCX: 0000000000000027\n[ 364.049592] RDX: ffff88bb0f521688 RSI: 0000000000000001 RDI: ffff88bb0f521680\n[ 364.049594] RBP: ffff9ca600b57b20 R08: 000000000000006f R09: ffff9ca600b57930\n[ 364.049596] R10: ffff9ca600b57928 R11: ffffffffbcb46328 R12: 0000000000000000\n[ 364.049597] R13: 0000000000000001 R14: ffff88b7c19c0700 R15: ffff88b7c9059800\n[ 364.049599] FS: 00007fb2d3516e80(0000) GS:ffff88bb0f500000(0000) knlGS:0000000000000000\n[ 364.049601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 364.049603] CR2: 000055610bd03598 CR3: 00000001049f6000 CR4: 0000000000350ef0\n[ 364.049605] Call Trace:\n[ 364.049607] \u003cTASK\u003e\n[ 364.049609] ? show_regs+0x6d/0x80\n[ 364.049614] ? __warn+0x8c/0x140\n[ 364.049618] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049621] ? report_bug+0x193/0x1a0\n[ 364.049627] ? handle_bug+0x46/0x80\n[ 364.049631] ? exc_invalid_op+0x1d/0x80\n[ 364.049635] ? asm_exc_invalid_op+0x1f/0x30\n[ 364.049642] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049647] __dma_map_sg_attrs+0x90/0xe0\n[ 364.049651] dma_map_sgtable+0x25/0x40\n[ 364.049654] amdgpu_bo_move+0x59a/0x850 [amdgpu]\n[ 364.049935] ? srso_return_thunk+0x5/0x5f\n[ 364.049939] ? amdgpu_ttm_tt_populate+0x5d/0xc0 [amdgpu]\n[ 364.050095] ttm_bo_handle_move_mem+0xc3/0x180 [ttm]\n[ 364.050103] ttm_bo_validate+0xc1/0x160 [ttm]\n[ 364.050108] ? amdgpu_ttm_tt_get_user_pages+0xe5/0x1b0 [amdgpu]\n[ 364.050263] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0xa12/0xc90 [amdgpu]\n[ 364.050473] kfd_ioctl_alloc_memory_of_gpu+0x16b/0x3b0 [amdgpu]\n[ 364.050680] kfd_ioctl+0x3c2/0x530 [amdgpu]\n[ 364.050866] ? __pfx_kfd_ioctl_alloc_memory_of_gpu+0x10/0x10 [amdgpu]\n[ 364.05105\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56594",
"url": "https://www.suse.com/security/cve/CVE-2024-56594"
},
{
"category": "external",
"summary": "SUSE Bug 1235413 for CVE-2024-56594",
"url": "https://bugzilla.suse.com/1235413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56595"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add a check to prevent array-index-out-of-bounds in dbAdjTree\n\nWhen the value of lp is 0 at the beginning of the for loop, it will\nbecome negative in the next assignment and we should bail out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56595",
"url": "https://www.suse.com/security/cve/CVE-2024-56595"
},
{
"category": "external",
"summary": "SUSE Bug 1235410 for CVE-2024-56595",
"url": "https://bugzilla.suse.com/1235410"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56595"
},
{
"cve": "CVE-2024-56596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56596"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in jfs_readdir\n\nThe stbl might contain some invalid values. Added a check to\nreturn error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56596",
"url": "https://www.suse.com/security/cve/CVE-2024-56596"
},
{
"category": "external",
"summary": "SUSE Bug 1235458 for CVE-2024-56596",
"url": "https://bugzilla.suse.com/1235458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56596"
},
{
"cve": "CVE-2024-56597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56597"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix shift-out-of-bounds in dbSplit\n\nWhen dmt_budmin is less than zero, it causes errors\nin the later stages. Added a check to return an error beforehand\nin dbAllocCtl itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56597",
"url": "https://www.suse.com/security/cve/CVE-2024-56597"
},
{
"category": "external",
"summary": "SUSE Bug 1235222 for CVE-2024-56597",
"url": "https://bugzilla.suse.com/1235222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56597"
},
{
"cve": "CVE-2024-56598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: array-index-out-of-bounds fix in dtReadFirst\n\nThe value of stbl can be sometimes out of bounds due\nto a bad filesystem. Added a check with appopriate return\nof error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56598",
"url": "https://www.suse.com/security/cve/CVE-2024-56598"
},
{
"category": "external",
"summary": "SUSE Bug 1235220 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "external",
"summary": "SUSE Bug 1235221 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56598"
},
{
"cve": "CVE-2024-5660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5660"
}
],
"notes": [
{
"category": "general",
"text": "Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5660",
"url": "https://www.suse.com/security/cve/CVE-2024-5660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "critical"
}
],
"title": "CVE-2024-5660"
},
{
"cve": "CVE-2024-56600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet6: do not leave a dangling sk pointer in inet6_create()\n\nsock_init_data() attaches the allocated sk pointer to the provided sock\nobject. If inet6_create() fails later, the sk object is released, but the\nsock object retains the dangling sk pointer, which may cause use-after-free\nlater.\n\nClear the sock sk pointer on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56600",
"url": "https://www.suse.com/security/cve/CVE-2024-56600"
},
{
"category": "external",
"summary": "SUSE Bug 1235217 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "external",
"summary": "SUSE Bug 1235218 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56601"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet: do not leave a dangling sk pointer in inet_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If inet_create() fails later, the sk object is freed, but the\nsock object retains the dangling pointer, which may create use-after-free\nlater.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56601",
"url": "https://www.suse.com/security/cve/CVE-2024-56601"
},
{
"category": "external",
"summary": "SUSE Bug 1235230 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "external",
"summary": "SUSE Bug 1235231 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235231"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56602"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: do not leave a dangling sk pointer in ieee802154_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If ieee802154_create() fails later, the allocated sk object is\nfreed, but the dangling pointer remains in the provided sock object, which\nmay allow use-after-free.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56602",
"url": "https://www.suse.com/security/cve/CVE-2024-56602"
},
{
"category": "external",
"summary": "SUSE Bug 1235521 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "external",
"summary": "SUSE Bug 1235522 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2024-56603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56603"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: af_can: do not leave a dangling sk pointer in can_create()\n\nOn error can_create() frees the allocated sk object, but sock_init_data()\nhas already attached it to the provided sock object. This will leave a\ndangling sk pointer in the sock object and may cause use-after-free later.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56603",
"url": "https://www.suse.com/security/cve/CVE-2024-56603"
},
{
"category": "external",
"summary": "SUSE Bug 1235415 for CVE-2024-56603",
"url": "https://bugzilla.suse.com/1235415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56603"
},
{
"cve": "CVE-2024-56606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56606"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: avoid erroring out after sock_init_data() in packet_create()\n\nAfter sock_init_data() the allocated sk object is attached to the provided\nsock object. On error, packet_create() frees the sk object leaving the\ndangling pointer in the sock object on return. Some other code may try\nto use this pointer and cause use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56606",
"url": "https://www.suse.com/security/cve/CVE-2024-56606"
},
{
"category": "external",
"summary": "SUSE Bug 1235417 for CVE-2024-56606",
"url": "https://bugzilla.suse.com/1235417"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56607"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()\n\nWhen I try to manually set bitrates:\n\niw wlan0 set bitrates legacy-2.4 1\n\nI get sleeping from invalid context error, see below. Fix that by switching to\nuse recently introduced ieee80211_iterate_stations_mtx().\n\nDo note that WCN6855 firmware is still crashing, I\u0027m not sure if that firmware\neven supports bitrate WMI commands and should we consider disabling\nath12k_mac_op_set_bitrate_mask() for WCN6855? But that\u0027s for another patch.\n\nBUG: sleeping function called from invalid context at drivers/net/wireless/ath/ath12k/wmi.c:420\nin_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 2236, name: iw\npreempt_count: 0, expected: 0\nRCU nest depth: 1, expected: 0\n3 locks held by iw/2236:\n #0: ffffffffabc6f1d8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40\n #1: ffff888138410810 (\u0026rdev-\u003ewiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x54d/0x800 [cfg80211]\n #2: ffffffffab2cfaa0 (rcu_read_lock){....}-{1:2}, at: ieee80211_iterate_stations_atomic+0x2f/0x200 [mac80211]\nCPU: 3 UID: 0 PID: 2236 Comm: iw Not tainted 6.11.0-rc7-wt-ath+ #1772\nHardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xa4/0xe0\n dump_stack+0x10/0x20\n __might_resched+0x363/0x5a0\n ? __alloc_skb+0x165/0x340\n __might_sleep+0xad/0x160\n ath12k_wmi_cmd_send+0xb1/0x3d0 [ath12k]\n ? ath12k_wmi_init_wcn7850+0xa40/0xa40 [ath12k]\n ? __netdev_alloc_skb+0x45/0x7b0\n ? __asan_memset+0x39/0x40\n ? ath12k_wmi_alloc_skb+0xf0/0x150 [ath12k]\n ? reacquire_held_locks+0x4d0/0x4d0\n ath12k_wmi_set_peer_param+0x340/0x5b0 [ath12k]\n ath12k_mac_disable_peer_fixed_rate+0xa3/0x110 [ath12k]\n ? ath12k_mac_vdev_stop+0x4f0/0x4f0 [ath12k]\n ieee80211_iterate_stations_atomic+0xd4/0x200 [mac80211]\n ath12k_mac_op_set_bitrate_mask+0x5d2/0x1080 [ath12k]\n ? ath12k_mac_vif_chan+0x320/0x320 [ath12k]\n drv_set_bitrate_mask+0x267/0x470 [mac80211]\n ieee80211_set_bitrate_mask+0x4cc/0x8a0 [mac80211]\n ? __this_cpu_preempt_check+0x13/0x20\n nl80211_set_tx_bitrate_mask+0x2bc/0x530 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? trace_contention_end+0xef/0x140\n ? rtnl_unlock+0x9/0x10\n ? nl80211_pre_doit+0x557/0x800 [cfg80211]\n genl_family_rcv_msg_doit+0x1f0/0x2e0\n ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250\n ? ns_capable+0x57/0xd0\n genl_family_rcv_msg+0x34c/0x600\n ? genl_family_rcv_msg_dumpit+0x310/0x310\n ? __lock_acquire+0xc62/0x1de0\n ? he_set_mcs_mask.isra.0+0x8d0/0x8d0 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? cfg80211_external_auth_request+0x690/0x690 [cfg80211]\n genl_rcv_msg+0xa0/0x130\n netlink_rcv_skb+0x14c/0x400\n ? genl_family_rcv_msg+0x600/0x600\n ? netlink_ack+0xd70/0xd70\n ? rwsem_optimistic_spin+0x4f0/0x4f0\n ? genl_rcv+0x14/0x40\n ? down_read_killable+0x580/0x580\n ? netlink_deliver_tap+0x13e/0x350\n ? __this_cpu_preempt_check+0x13/0x20\n genl_rcv+0x23/0x40\n netlink_unicast+0x45e/0x790\n ? netlink_attachskb+0x7f0/0x7f0\n netlink_sendmsg+0x7eb/0xdb0\n ? netlink_unicast+0x790/0x790\n ? __this_cpu_preempt_check+0x13/0x20\n ? selinux_socket_sendmsg+0x31/0x40\n ? netlink_unicast+0x790/0x790\n __sock_sendmsg+0xc9/0x160\n ____sys_sendmsg+0x620/0x990\n ? kernel_sendmsg+0x30/0x30\n ? __copy_msghdr+0x410/0x410\n ? __kasan_check_read+0x11/0x20\n ? mark_lock+0xe6/0x1470\n ___sys_sendmsg+0xe9/0x170\n ? copy_msghdr_from_user+0x120/0x120\n ? __lock_acquire+0xc62/0x1de0\n ? do_fault_around+0x2c6/0x4e0\n ? do_user_addr_fault+0x8c1/0xde0\n ? reacquire_held_locks+0x220/0x4d0\n ? do_user_addr_fault+0x8c1/0xde0\n ? __kasan_check_read+0x11/0x20\n ? __fdget+0x4e/0x1d0\n ? sockfd_lookup_light+0x1a/0x170\n __sys_sendmsg+0xd2/0x180\n ? __sys_sendmsg_sock+0x20/0x20\n ? reacquire_held_locks+0x4d0/0x4d0\n ? debug_smp_processor_id+0x17/0x20\n __x64_sys_sendmsg+0x72/0xb0\n ? lockdep_hardirqs_on+0x7d/0x100\n x64_sys_call+0x894/0x9f0\n do_syscall_64+0x64/0x130\n entry_SYSCALL_64_after_\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56607",
"url": "https://www.suse.com/security/cve/CVE-2024-56607"
},
{
"category": "external",
"summary": "SUSE Bug 1235423 for CVE-2024-56607",
"url": "https://bugzilla.suse.com/1235423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56607"
},
{
"cve": "CVE-2024-56608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56608"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027\n\nAn issue was identified in the dcn21_link_encoder_create function where\nan out-of-bounds access could occur when the hpd_source index was used\nto reference the link_enc_hpd_regs array. This array has a fixed size\nand the index was not being checked against the array\u0027s bounds before\naccessing it.\n\nThis fix adds a conditional check to ensure that the hpd_source index is\nwithin the valid range of the link_enc_hpd_regs array. If the index is\nout of bounds, the function now returns NULL to prevent undefined\nbehavior.\n\nReferences:\n\n[ 65.920507] ------------[ cut here ]------------\n[ 65.920510] UBSAN: array-index-out-of-bounds in drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn21/dcn21_resource.c:1312:29\n[ 65.920519] index 7 is out of range for type \u0027dcn10_link_enc_hpd_registers [5]\u0027\n[ 65.920523] CPU: 3 PID: 1178 Comm: modprobe Tainted: G OE 6.8.0-cleanershaderfeatureresetasdntipmi200nv2132 #13\n[ 65.920525] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS WMJ0429N_Weekly_20_04_2 04/29/2020\n[ 65.920527] Call Trace:\n[ 65.920529] \u003cTASK\u003e\n[ 65.920532] dump_stack_lvl+0x48/0x70\n[ 65.920541] dump_stack+0x10/0x20\n[ 65.920543] __ubsan_handle_out_of_bounds+0xa2/0xe0\n[ 65.920549] dcn21_link_encoder_create+0xd9/0x140 [amdgpu]\n[ 65.921009] link_create+0x6d3/0xed0 [amdgpu]\n[ 65.921355] create_links+0x18a/0x4e0 [amdgpu]\n[ 65.921679] dc_create+0x360/0x720 [amdgpu]\n[ 65.921999] ? dmi_matches+0xa0/0x220\n[ 65.922004] amdgpu_dm_init+0x2b6/0x2c90 [amdgpu]\n[ 65.922342] ? console_unlock+0x77/0x120\n[ 65.922348] ? dev_printk_emit+0x86/0xb0\n[ 65.922354] dm_hw_init+0x15/0x40 [amdgpu]\n[ 65.922686] amdgpu_device_init+0x26a8/0x33a0 [amdgpu]\n[ 65.922921] amdgpu_driver_load_kms+0x1b/0xa0 [amdgpu]\n[ 65.923087] amdgpu_pci_probe+0x1b7/0x630 [amdgpu]\n[ 65.923087] local_pci_probe+0x4b/0xb0\n[ 65.923087] pci_device_probe+0xc8/0x280\n[ 65.923087] really_probe+0x187/0x300\n[ 65.923087] __driver_probe_device+0x85/0x130\n[ 65.923087] driver_probe_device+0x24/0x110\n[ 65.923087] __driver_attach+0xac/0x1d0\n[ 65.923087] ? __pfx___driver_attach+0x10/0x10\n[ 65.923087] bus_for_each_dev+0x7d/0xd0\n[ 65.923087] driver_attach+0x1e/0x30\n[ 65.923087] bus_add_driver+0xf2/0x200\n[ 65.923087] driver_register+0x64/0x130\n[ 65.923087] ? __pfx_amdgpu_init+0x10/0x10 [amdgpu]\n[ 65.923087] __pci_register_driver+0x61/0x70\n[ 65.923087] amdgpu_init+0x7d/0xff0 [amdgpu]\n[ 65.923087] do_one_initcall+0x49/0x310\n[ 65.923087] ? kmalloc_trace+0x136/0x360\n[ 65.923087] do_init_module+0x6a/0x270\n[ 65.923087] load_module+0x1fce/0x23a0\n[ 65.923087] init_module_from_file+0x9c/0xe0\n[ 65.923087] ? init_module_from_file+0x9c/0xe0\n[ 65.923087] idempotent_init_module+0x179/0x230\n[ 65.923087] __x64_sys_finit_module+0x5d/0xa0\n[ 65.923087] do_syscall_64+0x76/0x120\n[ 65.923087] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n[ 65.923087] RIP: 0033:0x7f2d80f1e88d\n[ 65.923087] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[ 65.923087] RSP: 002b:00007ffc7bc1aa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139\n[ 65.923087] RAX: ffffffffffffffda RBX: 0000564c9c1db130 RCX: 00007f2d80f1e88d\n[ 65.923087] RDX: 0000000000000000 RSI: 0000564c9c1e5480 RDI: 000000000000000f\n[ 65.923087] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000002\n[ 65.923087] R10: 000000000000000f R11: 0000000000000246 R12: 0000564c9c1e5480\n[ 65.923087] R13: 0000564c9c1db260 R14: 0000000000000000 R15: 0000564c9c1e54b0\n[ 65.923087] \u003c/TASK\u003e\n[ 65.923927] ---[ end trace ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56608",
"url": "https://www.suse.com/security/cve/CVE-2024-56608"
},
{
"category": "external",
"summary": "SUSE Bug 1235487 for CVE-2024-56608",
"url": "https://bugzilla.suse.com/1235487"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56608"
},
{
"cve": "CVE-2024-56609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56609"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb\n\nWhen removing kernel modules by:\n rmmod rtw88_8723cs rtw88_8703b rtw88_8723x rtw88_sdio rtw88_core\n\nDriver uses skb_queue_purge() to purge TX skb, but not report tx status\ncausing \"Have pending ack frames!\" warning. Use ieee80211_purge_tx_queue()\nto correct this.\n\nSince ieee80211_purge_tx_queue() doesn\u0027t take locks, to prevent racing\nbetween TX work and purge TX queue, flush and destroy TX work in advance.\n\n wlan0: deauthenticating from aa:f5:fd:60:4c:a8 by local\n choice (Reason: 3=DEAUTH_LEAVING)\n ------------[ cut here ]------------\n Have pending ack frames!\n WARNING: CPU: 3 PID: 9232 at net/mac80211/main.c:1691\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n CPU: 3 PID: 9232 Comm: rmmod Tainted: G C\n 6.10.1-200.fc40.aarch64 #1\n Hardware name: pine64 Pine64 PinePhone Braveheart\n (1.1)/Pine64 PinePhone Braveheart (1.1), BIOS 2024.01 01/01/2024\n pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n lr : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n sp : ffff80008c1b37b0\n x29: ffff80008c1b37b0 x28: ffff000003be8000 x27: 0000000000000000\n x26: 0000000000000000 x25: ffff000003dc14b8 x24: ffff80008c1b37d0\n x23: ffff000000ff9f80 x22: 0000000000000000 x21: 000000007fffffff\n x20: ffff80007c7e93d8 x19: ffff00006e66f400 x18: 0000000000000000\n x17: ffff7ffffd2b3000 x16: ffff800083fc0000 x15: 0000000000000000\n x14: 0000000000000000 x13: 2173656d61726620 x12: 6b636120676e6964\n x11: 0000000000000000 x10: 000000000000005d x9 : ffff8000802af2b0\n x8 : ffff80008c1b3430 x7 : 0000000000000001 x6 : 0000000000000001\n x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000003be8000\n Call trace:\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n idr_for_each+0x74/0x110\n ieee80211_free_hw+0x44/0xe8 [mac80211]\n rtw_sdio_remove+0x9c/0xc0 [rtw88_sdio]\n sdio_bus_remove+0x44/0x180\n device_remove+0x54/0x90\n device_release_driver_internal+0x1d4/0x238\n driver_detach+0x54/0xc0\n bus_remove_driver+0x78/0x108\n driver_unregister+0x38/0x78\n sdio_unregister_driver+0x2c/0x40\n rtw_8723cs_driver_exit+0x18/0x1000 [rtw88_8723cs]\n __do_sys_delete_module.isra.0+0x190/0x338\n __arm64_sys_delete_module+0x1c/0x30\n invoke_syscall+0x74/0x100\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x158\n el0t_64_sync_handler+0x120/0x138\n el0t_64_sync+0x194/0x198\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56609",
"url": "https://www.suse.com/security/cve/CVE-2024-56609"
},
{
"category": "external",
"summary": "SUSE Bug 1235389 for CVE-2024-56609",
"url": "https://bugzilla.suse.com/1235389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56609"
},
{
"cve": "CVE-2024-56610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56610"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcsan: Turn report_filterlist_lock into a raw_spinlock\n\nRan Xiaokai reports that with a KCSAN-enabled PREEMPT_RT kernel, we can see\nsplats like:\n\n| BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\n| in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/1\n| preempt_count: 10002, expected: 0\n| RCU nest depth: 0, expected: 0\n| no locks held by swapper/1/0.\n| irq event stamp: 156674\n| hardirqs last enabled at (156673): [\u003cffffffff81130bd9\u003e] do_idle+0x1f9/0x240\n| hardirqs last disabled at (156674): [\u003cffffffff82254f84\u003e] sysvec_apic_timer_interrupt+0x14/0xc0\n| softirqs last enabled at (0): [\u003cffffffff81099f47\u003e] copy_process+0xfc7/0x4b60\n| softirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n| Preemption disabled at:\n| [\u003cffffffff814a3e2a\u003e] paint_ptr+0x2a/0x90\n| CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0+ #3\n| Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-0-ga698c8995f-prebuilt.qemu.org 04/01/2014\n| Call Trace:\n| \u003cIRQ\u003e\n| dump_stack_lvl+0x7e/0xc0\n| dump_stack+0x1d/0x30\n| __might_resched+0x1a2/0x270\n| rt_spin_lock+0x68/0x170\n| kcsan_skip_report_debugfs+0x43/0xe0\n| print_report+0xb5/0x590\n| kcsan_report_known_origin+0x1b1/0x1d0\n| kcsan_setup_watchpoint+0x348/0x650\n| __tsan_unaligned_write1+0x16d/0x1d0\n| hrtimer_interrupt+0x3d6/0x430\n| __sysvec_apic_timer_interrupt+0xe8/0x3a0\n| sysvec_apic_timer_interrupt+0x97/0xc0\n| \u003c/IRQ\u003e\n\nOn a detected data race, KCSAN\u0027s reporting logic checks if it should\nfilter the report. That list is protected by the report_filterlist_lock\n*non-raw* spinlock which may sleep on RT kernels.\n\nSince KCSAN may report data races in any context, convert it to a\nraw_spinlock.\n\nThis requires being careful about when to allocate memory for the filter\nlist itself which can be done via KCSAN\u0027s debugfs interface. Concurrent\nmodification of the filter list via debugfs should be rare: the chosen\nstrategy is to optimistically pre-allocate memory before the critical\nsection and discard if unused.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56610",
"url": "https://www.suse.com/security/cve/CVE-2024-56610"
},
{
"category": "external",
"summary": "SUSE Bug 1235390 for CVE-2024-56610",
"url": "https://bugzilla.suse.com/1235390"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56610"
},
{
"cve": "CVE-2024-56611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM\n\nWe currently assume that there is at least one VMA in a MM, which isn\u0027t\ntrue.\n\nSo we might end up having find_vma() return NULL, to then de-reference\nNULL. So properly handle find_vma() returning NULL.\n\nThis fixes the report:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nCPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nRIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]\nRIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194\nCode: ...\nRSP: 0018:ffffc9000375fd08 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000\nRDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044\nRBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1\nR10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003\nR13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8\nFS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709\n __do_sys_migrate_pages mm/mempolicy.c:1727 [inline]\n __se_sys_migrate_pages mm/mempolicy.c:1723 [inline]\n __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n[akpm@linux-foundation.org: add unlikely()]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56611",
"url": "https://www.suse.com/security/cve/CVE-2024-56611"
},
{
"category": "external",
"summary": "SUSE Bug 1235391 for CVE-2024-56611",
"url": "https://bugzilla.suse.com/1235391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56611"
},
{
"cve": "CVE-2024-56614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56614"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix OOB map writes when deleting elements\n\nJordy says:\n\n\"\nIn the xsk_map_delete_elem function an unsigned integer\n(map-\u003emax_entries) is compared with a user-controlled signed integer\n(k). Due to implicit type conversion, a large unsigned value for\nmap-\u003emax_entries can bypass the intended bounds check:\n\n\tif (k \u003e= map-\u003emax_entries)\n\t\treturn -EINVAL;\n\nThis allows k to hold a negative value (between -2147483648 and -2),\nwhich is then used as an array index in m-\u003exsk_map[k], which results\nin an out-of-bounds access.\n\n\tspin_lock_bh(\u0026m-\u003elock);\n\tmap_entry = \u0026m-\u003exsk_map[k]; // Out-of-bounds map_entry\n\told_xs = unrcu_pointer(xchg(map_entry, NULL)); // Oob write\n\tif (old_xs)\n\t\txsk_map_sock_delete(old_xs, map_entry);\n\tspin_unlock_bh(\u0026m-\u003elock);\n\nThe xchg operation can then be used to cause an out-of-bounds write.\nMoreover, the invalid map_entry passed to xsk_map_sock_delete can lead\nto further memory corruption.\n\"\n\nIt indeed results in following splat:\n\n[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108\n[76612.904330] #PF: supervisor write access in kernel mode\n[76612.909639] #PF: error_code(0x0002) - not-present page\n[76612.914855] PGD 0 P4D 0\n[76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP\n[76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470\n[76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60\n[76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff \u003c48\u003e 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31\n[76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246\n[76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000\n[76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000\n[76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007\n[76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8\n[76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0\n[76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000\n[76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0\n[76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[76613.041086] PKRU: 55555554\n[76613.043842] Call Trace:\n[76613.046331] \u003cTASK\u003e\n[76613.048468] ? __die+0x20/0x60\n[76613.051581] ? page_fault_oops+0x15a/0x450\n[76613.055747] ? search_extable+0x22/0x30\n[76613.059649] ? search_bpf_extables+0x5f/0x80\n[76613.063988] ? exc_page_fault+0xa9/0x140\n[76613.067975] ? asm_exc_page_fault+0x22/0x30\n[76613.072229] ? xsk_map_delete_elem+0x2d/0x60\n[76613.076573] ? xsk_map_delete_elem+0x23/0x60\n[76613.080914] __sys_bpf+0x19b7/0x23c0\n[76613.084555] __x64_sys_bpf+0x1a/0x20\n[76613.088194] do_syscall_64+0x37/0xb0\n[76613.091832] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n[76613.096962] RIP: 0033:0x7f80b6d1e88d\n[76613.100592] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[76613.119631] RSP: 002b:00007ffd1ae0ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000141\n[76613.131330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80b6d1e88d\n[76613.142632] RDX: 0000000000000098 RSI: 00007ffd1ae0ad20 RDI: 0000000000000003\n[76613.153967] RBP: 00007ffd1ae0adc0 R08: 0000000000000000 R09: 0000000000000000\n[76613.166030] R10: 00007f80b6f77040 R11: 0000000000000206 R12: 00007ffd1ae0aed8\n[76613.177130] R13: 000055ddf42ce1e9 R14: 000055ddf42d0d98 R15: 00\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56614",
"url": "https://www.suse.com/security/cve/CVE-2024-56614"
},
{
"category": "external",
"summary": "SUSE Bug 1235424 for CVE-2024-56614",
"url": "https://bugzilla.suse.com/1235424"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56614"
},
{
"cve": "CVE-2024-56615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix OOB devmap writes when deleting elements\n\nJordy reported issue against XSKMAP which also applies to DEVMAP - the\nindex used for accessing map entry, due to being a signed integer,\ncauses the OOB writes. Fix is simple as changing the type from int to\nu32, however, when compared to XSKMAP case, one more thing needs to be\naddressed.\n\nWhen map is released from system via dev_map_free(), we iterate through\nall of the entries and an iterator variable is also an int, which\nimplies OOB accesses. Again, change it to be u32.\n\nExample splat below:\n\n[ 160.724676] BUG: unable to handle page fault for address: ffffc8fc2c001000\n[ 160.731662] #PF: supervisor read access in kernel mode\n[ 160.736876] #PF: error_code(0x0000) - not-present page\n[ 160.742095] PGD 0 P4D 0\n[ 160.744678] Oops: Oops: 0000 [#1] PREEMPT SMP\n[ 160.749106] CPU: 1 UID: 0 PID: 520 Comm: kworker/u145:12 Not tainted 6.12.0-rc1+ #487\n[ 160.757050] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[ 160.767642] Workqueue: events_unbound bpf_map_free_deferred\n[ 160.773308] RIP: 0010:dev_map_free+0x77/0x170\n[ 160.777735] Code: 00 e8 fd 91 ed ff e8 b8 73 ed ff 41 83 7d 18 19 74 6e 41 8b 45 24 49 8b bd f8 00 00 00 31 db 85 c0 74 48 48 63 c3 48 8d 04 c7 \u003c48\u003e 8b 28 48 85 ed 74 30 48 8b 7d 18 48 85 ff 74 05 e8 b3 52 fa ff\n[ 160.796777] RSP: 0018:ffffc9000ee1fe38 EFLAGS: 00010202\n[ 160.802086] RAX: ffffc8fc2c001000 RBX: 0000000080000000 RCX: 0000000000000024\n[ 160.809331] RDX: 0000000000000000 RSI: 0000000000000024 RDI: ffffc9002c001000\n[ 160.816576] RBP: 0000000000000000 R08: 0000000000000023 R09: 0000000000000001\n[ 160.823823] R10: 0000000000000001 R11: 00000000000ee6b2 R12: dead000000000122\n[ 160.831066] R13: ffff88810c928e00 R14: ffff8881002df405 R15: 0000000000000000\n[ 160.838310] FS: 0000000000000000(0000) GS:ffff8897e0c40000(0000) knlGS:0000000000000000\n[ 160.846528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 160.852357] CR2: ffffc8fc2c001000 CR3: 0000000005c32006 CR4: 00000000007726f0\n[ 160.859604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 160.866847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 160.874092] PKRU: 55555554\n[ 160.876847] Call Trace:\n[ 160.879338] \u003cTASK\u003e\n[ 160.881477] ? __die+0x20/0x60\n[ 160.884586] ? page_fault_oops+0x15a/0x450\n[ 160.888746] ? search_extable+0x22/0x30\n[ 160.892647] ? search_bpf_extables+0x5f/0x80\n[ 160.896988] ? exc_page_fault+0xa9/0x140\n[ 160.900973] ? asm_exc_page_fault+0x22/0x30\n[ 160.905232] ? dev_map_free+0x77/0x170\n[ 160.909043] ? dev_map_free+0x58/0x170\n[ 160.912857] bpf_map_free_deferred+0x51/0x90\n[ 160.917196] process_one_work+0x142/0x370\n[ 160.921272] worker_thread+0x29e/0x3b0\n[ 160.925082] ? rescuer_thread+0x4b0/0x4b0\n[ 160.929157] kthread+0xd4/0x110\n[ 160.932355] ? kthread_park+0x80/0x80\n[ 160.936079] ret_from_fork+0x2d/0x50\n[ 160.943396] ? kthread_park+0x80/0x80\n[ 160.950803] ret_from_fork_asm+0x11/0x20\n[ 160.958482] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56615",
"url": "https://www.suse.com/security/cve/CVE-2024-56615"
},
{
"category": "external",
"summary": "SUSE Bug 1235426 for CVE-2024-56615",
"url": "https://bugzilla.suse.com/1235426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56616"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix MST sideband message body length check\n\nFix the MST sideband message body length check, which must be at least 1\nbyte accounting for the message body CRC (aka message data CRC) at the\nend of the message.\n\nThis fixes a case where an MST branch device returns a header with a\ncorrect header CRC (indicating a correctly received body length), with\nthe body length being incorrectly set to 0. This will later lead to a\nmemory corruption in drm_dp_sideband_append_payload() and the following\nerrors in dmesg:\n\n UBSAN: array-index-out-of-bounds in drivers/gpu/drm/display/drm_dp_mst_topology.c:786:25\n index -1 is out of range for type \u0027u8 [48]\u0027\n Call Trace:\n drm_dp_sideband_append_payload+0x33d/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]\n\n memcpy: detected field-spanning write (size 18446744073709551615) of single field \"\u0026msg-\u003emsg[msg-\u003ecurlen]\" at drivers/gpu/drm/display/drm_dp_mst_topology.c:791 (size 256)\n Call Trace:\n drm_dp_sideband_append_payload+0x324/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56616",
"url": "https://www.suse.com/security/cve/CVE-2024-56616"
},
{
"category": "external",
"summary": "SUSE Bug 1235427 for CVE-2024-56616",
"url": "https://bugzilla.suse.com/1235427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56616"
},
{
"cve": "CVE-2024-56617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56617"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU\n\nCommit\n\n 5944ce092b97 (\"arch_topology: Build cacheinfo from primary CPU\")\n\nadds functionality that architectures can use to optionally allocate and\nbuild cacheinfo early during boot. Commit\n\n 6539cffa9495 (\"cacheinfo: Add arch specific early level initializer\")\n\nlets secondary CPUs correct (and reallocate memory) cacheinfo data if\nneeded.\n\nIf the early build functionality is not used and cacheinfo does not need\ncorrection, memory for cacheinfo is never allocated. x86 does not use\nthe early build functionality. Consequently, during the cacheinfo CPU\nhotplug callback, last_level_cache_is_valid() attempts to dereference\na NULL pointer:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000100\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEPMT SMP NOPTI\n CPU: 0 PID 19 Comm: cpuhp/0 Not tainted 6.4.0-rc2 #1\n RIP: 0010: last_level_cache_is_valid+0x95/0xe0a\n\nAllocate memory for cacheinfo during the cacheinfo CPU hotplug callback\nif not done earlier.\n\nMoreover, before determining the validity of the last-level cache info,\nensure that it has been allocated. Simply checking for non-zero\ncache_leaves() is not sufficient, as some architectures (e.g., Intel\nprocessors) have non-zero cache_leaves() before allocation.\n\nDereferencing NULL cacheinfo can occur in update_per_cpu_data_slice_size().\nThis function iterates over all online CPUs. However, a CPU may have come\nonline recently, but its cacheinfo may not have been allocated yet.\n\nWhile here, remove an unnecessary indentation in allocate_cache_info().\n\n [ bp: Massage. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56617",
"url": "https://www.suse.com/security/cve/CVE-2024-56617"
},
{
"category": "external",
"summary": "SUSE Bug 1235429 for CVE-2024-56617",
"url": "https://bugzilla.suse.com/1235429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56617"
},
{
"cve": "CVE-2024-56619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()\n\nSyzbot reported that when searching for records in a directory where the\ninode\u0027s i_size is corrupted and has a large value, memory access outside\nthe folio/page range may occur, or a use-after-free bug may be detected if\nKASAN is enabled.\n\nThis is because nilfs_last_byte(), which is called by nilfs_find_entry()\nand others to calculate the number of valid bytes of directory data in a\npage from i_size and the page index, loses the upper 32 bits of the 64-bit\nsize information due to an inappropriate type of local variable to which\nthe i_size value is assigned.\n\nThis caused a large byte offset value due to underflow in the end address\ncalculation in the calling nilfs_find_entry(), resulting in memory access\nthat exceeds the folio/page size.\n\nFix this issue by changing the type of the local variable causing the bit\nloss from \"unsigned int\" to \"u64\". The return value of nilfs_last_byte()\nis also of type \"unsigned int\", but it is truncated so as not to exceed\nPAGE_SIZE and no bit loss occurs, so no change is required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56619",
"url": "https://www.suse.com/security/cve/CVE-2024-56619"
},
{
"category": "external",
"summary": "SUSE Bug 1235224 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "external",
"summary": "SUSE Bug 1235225 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56619"
},
{
"cve": "CVE-2024-56620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56620"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: qcom: Only free platform MSIs when ESI is enabled\n\nOtherwise, it will result in a NULL pointer dereference as below:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000008\nCall trace:\n mutex_lock+0xc/0x54\n platform_device_msi_free_irqs_all+0x14/0x20\n ufs_qcom_remove+0x34/0x48 [ufs_qcom]\n platform_remove+0x28/0x44\n device_remove+0x4c/0x80\n device_release_driver_internal+0xd8/0x178\n driver_detach+0x50/0x9c\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n platform_driver_unregister+0x14/0x20\n ufs_qcom_pltform_exit+0x18/0xb94 [ufs_qcom]\n __arm64_sys_delete_module+0x180/0x260\n invoke_syscall+0x44/0x100\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0xdc\n el0t_64_sync_handler+0xc0/0xc4\n el0t_64_sync+0x190/0x194",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56620",
"url": "https://www.suse.com/security/cve/CVE-2024-56620"
},
{
"category": "external",
"summary": "SUSE Bug 1235227 for CVE-2024-56620",
"url": "https://bugzilla.suse.com/1235227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56620"
},
{
"cve": "CVE-2024-56622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56622"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: sysfs: Prevent div by zero\n\nPrevent a division by 0 when monitoring is not enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56622",
"url": "https://www.suse.com/security/cve/CVE-2024-56622"
},
{
"category": "external",
"summary": "SUSE Bug 1235251 for CVE-2024-56622",
"url": "https://bugzilla.suse.com/1235251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56622"
},
{
"cve": "CVE-2024-56623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread. Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022] ? __dentry_kill+0x121/0x170\n[596663.813030] ? _cond_resched+0x15/0x30\n[596663.813034] ? _cond_resched+0x15/0x30\n[596663.813039] ? wait_for_completion+0x35/0x190\n[596663.813048] ? try_to_wake_up+0x63/0x540\n[596663.813055] free_task+0x5a/0x60\n[596663.813061] kthread_stop+0xf3/0x100\n[596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56623",
"url": "https://www.suse.com/security/cve/CVE-2024-56623"
},
{
"category": "external",
"summary": "SUSE Bug 1235466 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "external",
"summary": "SUSE Bug 1235468 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56625"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: can_set_termination(): allow sleeping GPIOs\n\nIn commit 6e86a1543c37 (\"can: dev: provide optional GPIO based\ntermination support\") GPIO based termination support was added.\n\nFor no particular reason that patch uses gpiod_set_value() to set the\nGPIO. This leads to the following warning, if the systems uses a\nsleeping GPIO, i.e. behind an I2C port expander:\n\n| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c\n| CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c\n\nReplace gpiod_set_value() by gpiod_set_value_cansleep() to allow the\nuse of sleeping GPIOs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56625",
"url": "https://www.suse.com/security/cve/CVE-2024-56625"
},
{
"category": "external",
"summary": "SUSE Bug 1235223 for CVE-2024-56625",
"url": "https://bugzilla.suse.com/1235223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56625"
},
{
"cve": "CVE-2024-56629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56629"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix when get product name maybe null pointer\n\nDue to incorrect dev-\u003eproduct reporting by certain devices, null\npointer dereferences occur when dev-\u003eproduct is empty, leading to\npotential system crashes.\n\nThis issue was found on EXCELSIOR DL37-D05 device with\nLoongson-LS3A6000-7A2000-DL37 motherboard.\n\nKernel logs:\n[ 56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci\n[ 56.671638] usb 4-3: string descriptor 0 read error: -22\n[ 56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07\n[ 56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3\n[ 56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0\n[ 56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80\n[ 56.697732] Oops[#1]:\n[ 56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G OE 6.6.0-loong64-desktop #25.00.2000.015\n[ 56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00 10/11/2024\n[ 56.697739] pc 90000000066e35c8 ra ffff800004f98a80 tp 9000000125478000 sp 900000012547b8a0\n[ 56.697741] a0 0000000000000000 a1 ffff800004818b28 a2 0000000000000000 a3 0000000000000000\n[ 56.697743] a4 900000012547b8f0 a5 0000000000000000 a6 0000000000000000 a7 0000000000000000\n[ 56.697745] t0 ffff800004818b2d t1 0000000000000000 t2 0000000000000003 t3 0000000000000005\n[ 56.697747] t4 0000000000000000 t5 0000000000000000 t6 0000000000000000 t7 0000000000000000\n[ 56.697748] t8 0000000000000000 u0 0000000000000000 s9 0000000000000000 s0 900000011aa48028\n[ 56.697750] s1 0000000000000000 s2 0000000000000000 s3 ffff800004818e80 s4 ffff800004810000\n[ 56.697751] s5 90000001000b98d0 s6 ffff800004811f88 s7 ffff800005470440 s8 0000000000000000\n[ 56.697753] ra: ffff800004f98a80 wacom_update_name+0xe0/0x300 [wacom]\n[ 56.697802] ERA: 90000000066e35c8 strstr+0x28/0x120\n[ 56.697806] CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)\n[ 56.697816] PRMD: 0000000c (PPLV0 +PIE +PWE)\n[ 56.697821] EUEN: 00000000 (-FPE -SXE -ASXE -BTE)\n[ 56.697827] ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)\n[ 56.697831] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)\n[ 56.697835] BADV: 0000000000000000\n[ 56.697836] PRID: 0014d000 (Loongson-64bit, Loongson-3A6000)\n[ 56.697838] Modules linked in: wacom(+) bnep bluetooth rfkill qrtr nls_iso8859_1 nls_cp437 snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_timer snd soundcore input_leds mousedev led_class joydev deepin_netmonitor(OE) fuse nfnetlink dmi_sysfs ip_tables x_tables overlay amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_suballoc_helper i2c_algo_bit drm_ttm_helper r8169 ttm drm_display_helper spi_loongson_pci xhci_pci cec xhci_pci_renesas spi_loongson_core hid_generic realtek gpio_loongson_64bit\n[ 56.697887] Process (udev-worker) (pid: 2742, threadinfo=00000000aee0d8b4, task=00000000a9eff1f3)\n[ 56.697890] Stack : 0000000000000000 ffff800004817e00 0000000000000000 0000251c00000000\n[ 56.697896] 0000000000000000 00000011fffffffd 0000000000000000 0000000000000000\n[ 56.697901] 0000000000000000 1b67a968695184b9 0000000000000000 90000001000b98d0\n[ 56.697906] 90000001000bb8d0 900000011aa48028 0000000000000000 ffff800004f9d74c\n[ 56.697911] 90000001000ba000 ffff800004f9ce58 0000000000000000 ffff800005470440\n[ 56.697916] ffff800004811f88 90000001000b98d0 9000000100da2aa8 90000001000bb8d0\n[ 56.697921] 0000000000000000 90000001000ba000 900000011aa48028 ffff800004f9d74c\n[ 56.697926] ffff8000054704e8 90000001000bb8b8 90000001000ba000 0000000000000000\n[ 56.697931] 90000001000bb8d0 \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56629",
"url": "https://www.suse.com/security/cve/CVE-2024-56629"
},
{
"category": "external",
"summary": "SUSE Bug 1235473 for CVE-2024-56629",
"url": "https://bugzilla.suse.com/1235473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56629"
},
{
"cve": "CVE-2024-56630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: free inode when ocfs2_get_init_inode() fails\n\nsyzbot is reporting busy inodes after unmount, for commit 9c89fe0af826\n(\"ocfs2: Handle error from dquot_initialize()\") forgot to call iput() when\nnew_inode() succeeded and dquot_initialize() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56630",
"url": "https://www.suse.com/security/cve/CVE-2024-56630"
},
{
"category": "external",
"summary": "SUSE Bug 1235479 for CVE-2024-56630",
"url": "https://bugzilla.suse.com/1235479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56631"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Fix slab-use-after-free read in sg_release()\n\nFix a use-after-free bug in sg_release(), detected by syzbot with KASAN:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30\nkernel/locking/lockdep.c:5838\n__mutex_unlock_slowpath+0xe2/0x750 kernel/locking/mutex.c:912\nsg_release+0x1f4/0x2e0 drivers/scsi/sg.c:407\n\nIn sg_release(), the function kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) is\ncalled before releasing the open_rel_lock mutex. The kref_put() call may\ndecrement the reference count of sfp to zero, triggering its cleanup\nthrough sg_remove_sfp(). This cleanup includes scheduling deferred work\nvia sg_remove_sfp_usercontext(), which ultimately frees sfp.\n\nAfter kref_put(), sg_release() continues to unlock open_rel_lock and may\nreference sfp or sdp. If sfp has already been freed, this results in a\nslab-use-after-free error.\n\nMove the kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) call after unlocking the\nopen_rel_lock mutex. This ensures:\n\n - No references to sfp or sdp occur after the reference count is\n decremented.\n\n - Cleanup functions such as sg_remove_sfp() and\n sg_remove_sfp_usercontext() can safely execute without impacting the\n mutex handling in sg_release().\n\nThe fix has been tested and validated by syzbot. This patch closes the\nbug reported at the following syzkaller link and ensures proper\nsequencing of resource cleanup and mutex operations, eliminating the\nrisk of use-after-free errors in sg_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56631",
"url": "https://www.suse.com/security/cve/CVE-2024-56631"
},
{
"category": "external",
"summary": "SUSE Bug 1235480 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "external",
"summary": "SUSE Bug 1235482 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56631"
},
{
"cve": "CVE-2024-56632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix the memleak while create new ctrl failed\n\nNow while we create new ctrl failed, we have not free the\ntagset occupied by admin_q, here try to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56632",
"url": "https://www.suse.com/security/cve/CVE-2024-56632"
},
{
"category": "external",
"summary": "SUSE Bug 1235483 for CVE-2024-56632",
"url": "https://bugzilla.suse.com/1235483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56632"
},
{
"cve": "CVE-2024-56634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56634"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: grgpio: Add NULL check in grgpio_probe\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in grgpio_probe is not checked.\nAdd NULL check in grgpio_probe, to handle kernel NULL\npointer dereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56634",
"url": "https://www.suse.com/security/cve/CVE-2024-56634"
},
{
"category": "external",
"summary": "SUSE Bug 1235486 for CVE-2024-56634",
"url": "https://bugzilla.suse.com/1235486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56634"
},
{
"cve": "CVE-2024-56635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56635"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid potential UAF in default_operstate()\n\nsyzbot reported an UAF in default_operstate() [1]\n\nIssue is a race between device and netns dismantles.\n\nAfter calling __rtnl_unlock() from netdev_run_todo(),\nwe can not assume the netns of each device is still alive.\n\nMake sure the device is not in NETREG_UNREGISTERED state,\nand add an ASSERT_RTNL() before the call to\n__dev_get_by_index().\n\nWe might move this ASSERT_RTNL() in __dev_get_by_index()\nin the future.\n\n[1]\n\nBUG: KASAN: slab-use-after-free in __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\nRead of size 8 at addr ffff888043eba1b0 by task syz.0.0/5339\n\nCPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\n default_operstate net/core/link_watch.c:51 [inline]\n rfc2863_policy+0x224/0x300 net/core/link_watch.c:67\n linkwatch_do_dev+0x3e/0x170 net/core/link_watch.c:170\n netdev_run_todo+0x461/0x1000 net/core/dev.c:10894\n rtnl_unlock net/core/rtnetlink.c:152 [inline]\n rtnl_net_unlock include/linux/rtnetlink.h:133 [inline]\n rtnl_dellink+0x760/0x8d0 net/core/rtnetlink.c:3520\n rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:726\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583\n ___sys_sendmsg net/socket.c:2637 [inline]\n __sys_sendmsg+0x269/0x350 net/socket.c:2669\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f2a3cb80809\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f2a3d9cd058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f2a3cd45fa0 RCX: 00007f2a3cb80809\nRDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008\nRBP: 00007f2a3cbf393e R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007f2a3cd45fa0 R15: 00007ffd03bc65c8\n \u003c/TASK\u003e\n\nAllocated by task 5339:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4314\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kmalloc_array_noprof include/linux/slab.h:945 [inline]\n netdev_create_hash net/core/dev.c:11870 [inline]\n netdev_init+0x10c/0x250 net/core/dev.c:11890\n ops_init+0x31e/0x590 net/core/net_namespace.c:138\n setup_net+0x287/0x9e0 net/core/net_namespace.c:362\n copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500\n create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228\n ksys_unshare+0x57d/0xa70 kernel/fork.c:3314\n __do_sys_unshare kernel/fork.c:3385 [inline]\n __se_sys_unshare kernel/fork.c:3383 [inline]\n __x64_sys_unshare+0x38/0x40 kernel/fork.c:3383\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x8\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56635",
"url": "https://www.suse.com/security/cve/CVE-2024-56635"
},
{
"category": "external",
"summary": "SUSE Bug 1235519 for CVE-2024-56635",
"url": "https://bugzilla.suse.com/1235519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56635"
},
{
"cve": "CVE-2024-56636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56636"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: do not assume mac header is set in geneve_xmit_skb()\n\nWe should not assume mac header is set in output path.\n\nUse skb_eth_hdr() instead of eth_hdr() to fix the issue.\n\nsysbot reported the following :\n\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 skb_mac_header include/linux/skbuff.h:3052 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 eth_hdr include/linux/if_ether.h:24 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nModules linked in:\nCPU: 0 UID: 0 PID: 11635 Comm: syz.4.1423 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_mac_header include/linux/skbuff.h:3052 [inline]\n RIP: 0010:eth_hdr include/linux/if_ether.h:24 [inline]\n RIP: 0010:geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n RIP: 0010:geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nCode: 21 c6 02 e9 35 d4 ff ff e8 a5 48 4c fb 90 0f 0b 90 e9 fd f5 ff ff e8 97 48 4c fb 90 0f 0b 90 e9 d8 f5 ff ff e8 89 48 4c fb 90 \u003c0f\u003e 0b 90 e9 41 e4 ff ff e8 7b 48 4c fb 90 0f 0b 90 e9 cd e7 ff ff\nRSP: 0018:ffffc90003b2f870 EFLAGS: 00010283\nRAX: 000000000000037a RBX: 000000000000ffff RCX: ffffc9000dc3d000\nRDX: 0000000000080000 RSI: ffffffff86428417 RDI: 0000000000000003\nRBP: ffffc90003b2f9f0 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000002 R12: ffff88806603c000\nR13: 0000000000000000 R14: ffff8880685b2780 R15: 0000000000000e23\nFS: 00007fdc2deed6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b30a1dff8 CR3: 0000000056b8c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n __dev_direct_xmit+0x58a/0x720 net/core/dev.c:4490\n dev_direct_xmit include/linux/netdevice.h:3181 [inline]\n packet_xmit+0x1e4/0x360 net/packet/af_packet.c:285\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x2700/0x5660 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x488/0x4f0 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2200\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56636",
"url": "https://www.suse.com/security/cve/CVE-2024-56636"
},
{
"category": "external",
"summary": "SUSE Bug 1235520 for CVE-2024-56636",
"url": "https://bugzilla.suse.com/1235520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56636"
},
{
"cve": "CVE-2024-56637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56637"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: Hold module reference while requesting a module\n\nUser space may unload ip_set.ko while it is itself requesting a set type\nbackend module, leading to a kernel crash. The race condition may be\nprovoked by inserting an mdelay() right after the nfnl_unlock() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56637",
"url": "https://www.suse.com/security/cve/CVE-2024-56637"
},
{
"category": "external",
"summary": "SUSE Bug 1235523 for CVE-2024-56637",
"url": "https://bugzilla.suse.com/1235523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n Workqueue: events smc_lgr_terminate_work [smc]\n RIP: 0010:__flush_work+0x19e/0x1b0\n Call Trace:\n ? __wake_up_common+0x7a/0x190\n ? work_busy+0x80/0x80\n __cancel_work_timer+0xe3/0x160\n smc_close_cancel_work+0x1a/0x70 [smc]\n smc_close_active_abort+0x207/0x360 [smc]\n __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n process_one_work+0x19e/0x340\n worker_thread+0x30/0x370\n ? process_one_work+0x340/0x340\n kthread+0x117/0x130\n ? __kthread_cancel_work+0x50/0x50\n ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn-\u003eclose_work is\nflushed before initialization, resulting in WARN_ON(!work-\u003efunc).\n\n__smc_lgr_terminate | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr-\u003econns_all |\n\\- smc_conn_kill |\n \\- smc_close_active_abort |\n \\- smc_close_cancel_work |\n \\- cancel_work_sync |\n \\- __flush_work |\n\t (close_work) |\n\t | smc_close_init\n\t | \\- INIT_WORK(\u0026close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56641",
"url": "https://www.suse.com/security/cve/CVE-2024-56641"
},
{
"category": "external",
"summary": "SUSE Bug 1235526 for CVE-2024-56641",
"url": "https://bugzilla.suse.com/1235526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56641"
},
{
"cve": "CVE-2024-56642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56642"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free of kernel socket in cleanup_bearer().\n\nsyzkaller reported a use-after-free of UDP kernel socket\nin cleanup_bearer() without repro. [0][1]\n\nWhen bearer_disable() calls tipc_udp_disable(), cleanup\nof the UDP kernel socket is deferred by work calling\ncleanup_bearer().\n\ntipc_exit_net() waits for such works to finish by checking\ntipc_net(net)-\u003ewq_count. However, the work decrements the\ncount too early before releasing the kernel socket,\nunblocking cleanup_net() and resulting in use-after-free.\n\nLet\u0027s move the decrement after releasing the socket in\ncleanup_bearer().\n\n[0]:\nref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at\n sk_alloc+0x438/0x608\n inet_create+0x4c8/0xcb0\n __sock_create+0x350/0x6b8\n sock_create_kern+0x58/0x78\n udp_sock_create4+0x68/0x398\n udp_sock_create+0x88/0xc8\n tipc_udp_enable+0x5e8/0x848\n __tipc_nl_bearer_enable+0x84c/0xed8\n tipc_nl_bearer_enable+0x38/0x60\n genl_family_rcv_msg_doit+0x170/0x248\n genl_rcv_msg+0x400/0x5b0\n netlink_rcv_skb+0x1dc/0x398\n genl_rcv+0x44/0x68\n netlink_unicast+0x678/0x8b0\n netlink_sendmsg+0x5e4/0x898\n ____sys_sendmsg+0x500/0x830\n\n[1]:\nBUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline]\nBUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n udp_hashslot include/net/udp.h:85 [inline]\n udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n sk_common_release+0xaf/0x3f0 net/core/sock.c:3820\n inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437\n inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489\n __sock_release net/socket.c:658 [inline]\n sock_release+0xa0/0x210 net/socket.c:686\n cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\n slab_free_hook mm/slub.c:2269 [inline]\n slab_free mm/slub.c:4580 [inline]\n kmem_cache_free+0x207/0xc40 mm/slub.c:4682\n net_free net/core/net_namespace.c:454 [inline]\n cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: events cleanup_bearer",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56642",
"url": "https://www.suse.com/security/cve/CVE-2024-56642"
},
{
"category": "external",
"summary": "SUSE Bug 1235433 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "external",
"summary": "SUSE Bug 1235434 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56642"
},
{
"cve": "CVE-2024-56643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56643"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: Fix memory leak in dccp_feat_change_recv\n\nIf dccp_feat_push_confirm() fails after new value for SP feature was accepted\nwithout reconciliation (\u0027entry == NULL\u0027 branch), memory allocated for that value\nwith dccp_feat_clone_sp_val() is never freed.\n\nHere is the kmemleak stack for this:\n\nunreferenced object 0xffff88801d4ab488 (size 8):\n comm \"syz-executor310\", pid 1127, jiffies 4295085598 (age 41.666s)\n hex dump (first 8 bytes):\n 01 b4 4a 1d 80 88 ff ff ..J.....\n backtrace:\n [\u003c00000000db7cabfe\u003e] kmemdup+0x23/0x50 mm/util.c:128\n [\u003c0000000019b38405\u003e] kmemdup include/linux/string.h:465 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:371 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:367 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_change_recv net/dccp/feat.c:1145 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_parse_options+0x1196/0x2180 net/dccp/feat.c:1416\n [\u003c00000000b1f6d94a\u003e] dccp_parse_options+0xa2a/0x1260 net/dccp/options.c:125\n [\u003c0000000030d7b621\u003e] dccp_rcv_state_process+0x197/0x13d0 net/dccp/input.c:650\n [\u003c000000001f74c72e\u003e] dccp_v4_do_rcv+0xf9/0x1a0 net/dccp/ipv4.c:688\n [\u003c00000000a6c24128\u003e] sk_backlog_rcv include/net/sock.h:1041 [inline]\n [\u003c00000000a6c24128\u003e] __release_sock+0x139/0x3b0 net/core/sock.c:2570\n [\u003c00000000cf1f3a53\u003e] release_sock+0x54/0x1b0 net/core/sock.c:3111\n [\u003c000000008422fa23\u003e] inet_wait_for_connect net/ipv4/af_inet.c:603 [inline]\n [\u003c000000008422fa23\u003e] __inet_stream_connect+0x5d0/0xf70 net/ipv4/af_inet.c:696\n [\u003c0000000015b6f64d\u003e] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:735\n [\u003c0000000010122488\u003e] __sys_connect_file+0x15c/0x1a0 net/socket.c:1865\n [\u003c00000000b4b70023\u003e] __sys_connect+0x165/0x1a0 net/socket.c:1882\n [\u003c00000000f4cb3815\u003e] __do_sys_connect net/socket.c:1892 [inline]\n [\u003c00000000f4cb3815\u003e] __se_sys_connect net/socket.c:1889 [inline]\n [\u003c00000000f4cb3815\u003e] __x64_sys_connect+0x6e/0xb0 net/socket.c:1889\n [\u003c00000000e7b1e839\u003e] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46\n [\u003c0000000055e91434\u003e] entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nClean up the allocated memory in case of dccp_feat_push_confirm() failure\nand bail out with an error reset code.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56643",
"url": "https://www.suse.com/security/cve/CVE-2024-56643"
},
{
"category": "external",
"summary": "SUSE Bug 1235132 for CVE-2024-56643",
"url": "https://bugzilla.suse.com/1235132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56644"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: release expired exception dst cached in socket\n\nDst objects get leaked in ip6_negative_advice() when this function is\nexecuted for an expired IPv6 route located in the exception table. There\nare several conditions that must be fulfilled for the leak to occur:\n* an ICMPv6 packet indicating a change of the MTU for the path is received,\n resulting in an exception dst being created\n* a TCP connection that uses the exception dst for routing packets must\n start timing out so that TCP begins retransmissions\n* after the exception dst expires, the FIB6 garbage collector must not run\n before TCP executes ip6_negative_advice() for the expired exception dst\n\nWhen TCP executes ip6_negative_advice() for an exception dst that has\nexpired and if no other socket holds a reference to the exception dst, the\nrefcount of the exception dst is 2, which corresponds to the increment\nmade by dst_init() and the increment made by the TCP socket for which the\nconnection is timing out. The refcount made by the socket is never\nreleased. The refcount of the dst is decremented in sk_dst_reset() but\nthat decrement is counteracted by a dst_hold() intentionally placed just\nbefore the sk_dst_reset() in ip6_negative_advice(). After\nip6_negative_advice() has finished, there is no other object tied to the\ndst. The socket lost its reference stored in sk_dst_cache and the dst is\nno longer in the exception table. The exception dst becomes a leaked\nobject.\n\nAs a result of this dst leak, an unbalanced refcount is reported for the\nloopback device of a net namespace being destroyed under kernels that do\nnot contain e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"):\nunregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFix the dst leak by removing the dst_hold() in ip6_negative_advice(). The\npatch that introduced the dst_hold() in ip6_negative_advice() was\n92f1655aa2b22 (\"net: fix __dst_negative_advice() race\"). But 92f1655aa2b22\nmerely refactored the code with regards to the dst refcount so the issue\nwas present even before 92f1655aa2b22. The bug was introduced in\n54c1a859efd9f (\"ipv6: Don\u0027t drop cache route entry unless timer actually\nexpired.\") where the expired cached route is deleted and the sk_dst_cache\nmember of the socket is set to NULL by calling dst_negative_advice() but\nthe refcount belonging to the socket is left unbalanced.\n\nThe IPv4 version - ipv4_negative_advice() - is not affected by this bug.\nWhen the TCP connection times out ipv4_negative_advice() merely resets the\nsk_dst_cache of the socket while decrementing the refcount of the\nexception dst.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56644",
"url": "https://www.suse.com/security/cve/CVE-2024-56644"
},
{
"category": "external",
"summary": "SUSE Bug 1235133 for CVE-2024-56644",
"url": "https://bugzilla.suse.com/1235133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: avoid potential out-of-bound access in fill_frame_info()\n\nsyzbot is able to feed a packet with 14 bytes, pretending\nit is a vlan one.\n\nSince fill_frame_info() is relying on skb-\u003emac_len already,\nextend the check to cover this case.\n\nBUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606\n __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x91ae/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4091 [inline]\n slab_alloc_node mm/slub.c:4134 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1323 [inline]\n alloc_skb_with_frags+0xc8/0xd00 net/core/skbuff.c:6612\n sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2881\n packet_alloc_skb net/packet/af_packet.c:2995 [inline]\n packet_snd net/packet/af_packet.c:3089 [inline]\n packet_sendmsg+0x74c6/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56648",
"url": "https://www.suse.com/security/cve/CVE-2024-56648"
},
{
"category": "external",
"summary": "SUSE Bug 1235451 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "external",
"summary": "SUSE Bug 1235452 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56648"
},
{
"cve": "CVE-2024-56649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: enetc: Do not configure preemptible TCs if SIs do not support\n\nBoth ENETC PF and VF drivers share enetc_setup_tc_mqprio() to configure\nMQPRIO. And enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs()\nto configure preemptible TCs. However, only PF is able to configure\npreemptible TCs. Because only PF has related registers, while VF does not\nhave these registers. So for VF, its hw-\u003eport pointer is NULL. Therefore,\nVF will access an invalid pointer when accessing a non-existent register,\nwhich will cause a crash issue. The simplified log is as follows.\n\nroot@ls1028ardb:~# tc qdisc add dev eno0vf0 parent root handle 100: \\\nmqprio num_tc 4 map 0 0 1 1 2 2 3 3 queues 1@0 1@1 1@2 1@3 hw 1\n[ 187.290775] Unable to handle kernel paging request at virtual address 0000000000001f00\n[ 187.424831] pc : enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.430518] lr : enetc_mm_commit_preemptible_tcs+0x30c/0x400\n[ 187.511140] Call trace:\n[ 187.513588] enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.518918] enetc_setup_tc_mqprio+0x180/0x214\n[ 187.523374] enetc_vf_setup_tc+0x1c/0x30\n[ 187.527306] mqprio_enable_offload+0x144/0x178\n[ 187.531766] mqprio_init+0x3ec/0x668\n[ 187.535351] qdisc_create+0x15c/0x488\n[ 187.539023] tc_modify_qdisc+0x398/0x73c\n[ 187.542958] rtnetlink_rcv_msg+0x128/0x378\n[ 187.547064] netlink_rcv_skb+0x60/0x130\n[ 187.550910] rtnetlink_rcv+0x18/0x24\n[ 187.554492] netlink_unicast+0x300/0x36c\n[ 187.558425] netlink_sendmsg+0x1a8/0x420\n[ 187.606759] ---[ end trace 0000000000000000 ]---\n\nIn addition, some PFs also do not support configuring preemptible TCs,\nsuch as eno1 and eno3 on LS1028A. It won\u0027t crash like it does for VFs,\nbut we should prevent these PFs from accessing these unimplemented\nregisters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56649",
"url": "https://www.suse.com/security/cve/CVE-2024-56649"
},
{
"category": "external",
"summary": "SUSE Bug 1235449 for CVE-2024-56649",
"url": "https://bugzilla.suse.com/1235449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56649"
},
{
"cve": "CVE-2024-56650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix LED ID check in led_tg_check()\n\nSyzbot has reported the following BUG detected by KASAN:\n\nBUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70\nRead of size 1 at addr ffff8881022da0c8 by task repro/5879\n...\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x241/0x360\n ? __pfx_dump_stack_lvl+0x10/0x10\n ? __pfx__printk+0x10/0x10\n ? _printk+0xd5/0x120\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n print_report+0x169/0x550\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x45f/0x530\n ? __phys_addr+0xba/0x170\n ? strlen+0x58/0x70\n kasan_report+0x143/0x180\n ? strlen+0x58/0x70\n strlen+0x58/0x70\n kstrdup+0x20/0x80\n led_tg_check+0x18b/0x3c0\n xt_check_target+0x3bb/0xa40\n ? __pfx_xt_check_target+0x10/0x10\n ? stack_depot_save_flags+0x6e4/0x830\n ? nft_target_init+0x174/0xc30\n nft_target_init+0x82d/0xc30\n ? __pfx_nft_target_init+0x10/0x10\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? rcu_is_watching+0x15/0xb0\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? __kmalloc_noprof+0x21a/0x400\n nf_tables_newrule+0x1860/0x2980\n ? __pfx_nf_tables_newrule+0x10/0x10\n ? __nla_parse+0x40/0x60\n nfnetlink_rcv+0x14e5/0x2ab0\n ? __pfx_validate_chain+0x10/0x10\n ? __pfx_nfnetlink_rcv+0x10/0x10\n ? __lock_acquire+0x1384/0x2050\n ? netlink_deliver_tap+0x2e/0x1b0\n ? __pfx_lock_release+0x10/0x10\n ? netlink_deliver_tap+0x2e/0x1b0\n netlink_unicast+0x7f8/0x990\n ? __pfx_netlink_unicast+0x10/0x10\n ? __virt_addr_valid+0x183/0x530\n ? __check_object_size+0x48e/0x900\n netlink_sendmsg+0x8e4/0xcb0\n ? __pfx_netlink_sendmsg+0x10/0x10\n ? aa_sock_msg_perm+0x91/0x160\n ? __pfx_netlink_sendmsg+0x10/0x10\n __sock_sendmsg+0x223/0x270\n ____sys_sendmsg+0x52a/0x7e0\n ? __pfx_____sys_sendmsg+0x10/0x10\n __sys_sendmsg+0x292/0x380\n ? __pfx___sys_sendmsg+0x10/0x10\n ? lockdep_hardirqs_on_prepare+0x43d/0x780\n ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10\n ? exc_page_fault+0x590/0x8c0\n ? do_syscall_64+0xb6/0x230\n do_syscall_64+0xf3/0x230\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n...\n \u003c/TASK\u003e\n\nSince an invalid (without \u0027\\0\u0027 byte at all) byte sequence may be passed\nfrom userspace, add an extra check to ensure that such a sequence is\nrejected as possible ID and so never passed to \u0027kstrdup()\u0027 and further.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56650",
"url": "https://www.suse.com/security/cve/CVE-2024-56650"
},
{
"category": "external",
"summary": "SUSE Bug 1235430 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "external",
"summary": "SUSE Bug 1235431 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: hi311x: hi3110_can_ist(): fix potential use-after-free\n\nThe commit a22bd630cfff (\"can: hi311x: do not report txerr and rxerr\nduring bus-off\") removed the reporting of rxerr and txerr even in case\nof correct operation (i. e. not bus-off).\n\nThe error count information added to the CAN frame after netif_rx() is\na potential use after free, since there is no guarantee that the skb\nis in the same state. It might be freed or reused.\n\nFix the issue by postponing the netif_rx() call in case of txerr and\nrxerr reporting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56651",
"url": "https://www.suse.com/security/cve/CVE-2024-56651"
},
{
"category": "external",
"summary": "SUSE Bug 1235528 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "external",
"summary": "SUSE Bug 1236570 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1236570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56651"
},
{
"cve": "CVE-2024-56654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56654"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating\n\nThe usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is\nnot safe since for the most part entries fetched this way shall be\ntreated as rcu_dereference:\n\n\tNote that the value returned by rcu_dereference() is valid\n\tonly within the enclosing RCU read-side critical section [1]_.\n\tFor example, the following is **not** legal::\n\n\t\trcu_read_lock();\n\t\tp = rcu_dereference(head.next);\n\t\trcu_read_unlock();\n\t\tx = p-\u003eaddress;\t/* BUG!!! */\n\t\trcu_read_lock();\n\t\ty = p-\u003edata;\t/* BUG!!! */\n\t\trcu_read_unlock();",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56654",
"url": "https://www.suse.com/security/cve/CVE-2024-56654"
},
{
"category": "external",
"summary": "SUSE Bug 1235532 for CVE-2024-56654",
"url": "https://bugzilla.suse.com/1235532"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56654"
},
{
"cve": "CVE-2024-56656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips\n\nThe 5760X (P7) chip\u0027s HW GRO/LRO interface is very similar to that of\nthe previous generation (5750X or P5). However, the aggregation ID\nfields in the completion structures on P7 have been redefined from\n16 bits to 12 bits. The freed up 4 bits are redefined for part of the\nmetadata such as the VLAN ID. The aggregation ID mask was not modified\nwhen adding support for P7 chips. Including the extra 4 bits for the\naggregation ID can potentially cause the driver to store or fetch the\npacket header of GRO/LRO packets in the wrong TPA buffer. It may hit\nthe BUG() condition in __skb_pull() because the SKB contains no valid\npacket header:\n\nkernel BUG at include/linux/skbuff.h:2766!\nOops: invalid opcode: 0000 1 PREEMPT SMP NOPTI\nCPU: 4 UID: 0 PID: 0 Comm: swapper/4 Kdump: loaded Tainted: G OE 6.12.0-rc2+ #7\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: Dell Inc. PowerEdge R760/0VRV9X, BIOS 1.0.1 12/27/2022\nRIP: 0010:eth_type_trans+0xda/0x140\nCode: 80 00 00 00 eb c1 8b 47 70 2b 47 74 48 8b 97 d0 00 00 00 83 f8 01 7e 1b 48 85 d2 74 06 66 83 3a ff 74 09 b8 00 04 00 00 eb a5 \u003c0f\u003e 0b b8 00 01 00 00 eb 9c 48 85 ff 74 eb 31 f6 b9 02 00 00 00 48\nRSP: 0018:ff615003803fcc28 EFLAGS: 00010283\nRAX: 00000000000022d2 RBX: 0000000000000003 RCX: ff2e8c25da334040\nRDX: 0000000000000040 RSI: ff2e8c25c1ce8000 RDI: ff2e8c25869f9000\nRBP: ff2e8c258c31c000 R08: ff2e8c25da334000 R09: 0000000000000001\nR10: ff2e8c25da3342c0 R11: ff2e8c25c1ce89c0 R12: ff2e8c258e0990b0\nR13: ff2e8c25bb120000 R14: ff2e8c25c1ce89c0 R15: ff2e8c25869f9000\nFS: 0000000000000000(0000) GS:ff2e8c34be300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055f05317e4c8 CR3: 000000108bac6006 CR4: 0000000000773ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n ? die+0x33/0x90\n ? do_trap+0xd9/0x100\n ? eth_type_trans+0xda/0x140\n ? do_error_trap+0x65/0x80\n ? eth_type_trans+0xda/0x140\n ? exc_invalid_op+0x4e/0x70\n ? eth_type_trans+0xda/0x140\n ? asm_exc_invalid_op+0x16/0x20\n ? eth_type_trans+0xda/0x140\n bnxt_tpa_end+0x10b/0x6b0 [bnxt_en]\n ? bnxt_tpa_start+0x195/0x320 [bnxt_en]\n bnxt_rx_pkt+0x902/0xd90 [bnxt_en]\n ? __bnxt_tx_int.constprop.0+0x89/0x300 [bnxt_en]\n ? kmem_cache_free+0x343/0x440\n ? __bnxt_tx_int.constprop.0+0x24f/0x300 [bnxt_en]\n __bnxt_poll_work+0x193/0x370 [bnxt_en]\n bnxt_poll_p5+0x9a/0x300 [bnxt_en]\n ? try_to_wake_up+0x209/0x670\n __napi_poll+0x29/0x1b0\n\nFix it by redefining the aggregation ID mask for P5_PLUS chips to be\n12 bits. This will work because the maximum aggregation ID is less\nthan 4096 on all P5_PLUS chips.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56656",
"url": "https://www.suse.com/security/cve/CVE-2024-56656"
},
{
"category": "external",
"summary": "SUSE Bug 1235444 for CVE-2024-56656",
"url": "https://bugzilla.suse.com/1235444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56656"
},
{
"cve": "CVE-2024-56658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56658"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: defer final \u0027struct net\u0027 free in netns dismantle\n\nIlya reported a slab-use-after-free in dst_destroy [1]\n\nIssue is in xfrm6_net_init() and xfrm4_net_init() :\n\nThey copy xfrm[46]_dst_ops_template into net-\u003exfrm.xfrm[46]_dst_ops.\n\nBut net structure might be freed before all the dst callbacks are\ncalled. So when dst_destroy() calls later :\n\nif (dst-\u003eops-\u003edestroy)\n dst-\u003eops-\u003edestroy(dst);\n\ndst-\u003eops points to the old net-\u003exfrm.xfrm[46]_dst_ops, which has been freed.\n\nSee a relevant issue fixed in :\n\nac888d58869b (\"net: do not delay dst_entries_add() in dst_release()\")\n\nA fix is to queue the \u0027struct net\u0027 to be freed after one\nanother cleanup_net() round (and existing rcu_barrier())\n\n[1]\n\nBUG: KASAN: slab-use-after-free in dst_destroy (net/core/dst.c:112)\nRead of size 8 at addr ffff8882137ccab0 by task swapper/37/0\nDec 03 05:46:18 kernel:\nCPU: 37 UID: 0 PID: 0 Comm: swapper/37 Kdump: loaded Not tainted 6.12.0 #67\nHardware name: Red Hat KVM/RHEL, BIOS 1.16.1-1.el9 04/01/2014\nCall Trace:\n \u003cIRQ\u003e\ndump_stack_lvl (lib/dump_stack.c:124)\nprint_address_description.constprop.0 (mm/kasan/report.c:378)\n? dst_destroy (net/core/dst.c:112)\nprint_report (mm/kasan/report.c:489)\n? dst_destroy (net/core/dst.c:112)\n? kasan_addr_to_slab (mm/kasan/common.c:37)\nkasan_report (mm/kasan/report.c:603)\n? dst_destroy (net/core/dst.c:112)\n? rcu_do_batch (kernel/rcu/tree.c:2567)\ndst_destroy (net/core/dst.c:112)\nrcu_do_batch (kernel/rcu/tree.c:2567)\n? __pfx_rcu_do_batch (kernel/rcu/tree.c:2491)\n? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4339 kernel/locking/lockdep.c:4406)\nrcu_core (kernel/rcu/tree.c:2825)\nhandle_softirqs (kernel/softirq.c:554)\n__irq_exit_rcu (kernel/softirq.c:589 kernel/softirq.c:428 kernel/softirq.c:637)\nirq_exit_rcu (kernel/softirq.c:651)\nsysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1049 arch/x86/kernel/apic/apic.c:1049)\n \u003c/IRQ\u003e\n \u003cTASK\u003e\nasm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702)\nRIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/kernel/process.c:743)\nCode: 00 4d 29 c8 4c 01 c7 4c 29 c2 e9 6e ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 90 0f 00 2d c7 c9 27 00 fb f4 \u003cfa\u003e c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90\nRSP: 0018:ffff888100d2fe00 EFLAGS: 00000246\nRAX: 00000000001870ed RBX: 1ffff110201a5fc2 RCX: ffffffffb61a3e46\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffb3d4d123\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed11c7e1835d\nR10: ffff888e3f0c1aeb R11: 0000000000000000 R12: 0000000000000000\nR13: ffff888100d20000 R14: dffffc0000000000 R15: 0000000000000000\n? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:148)\n? cpuidle_idle_call (kernel/sched/idle.c:186)\ndefault_idle_call (./include/linux/cpuidle.h:143 kernel/sched/idle.c:118)\ncpuidle_idle_call (kernel/sched/idle.c:186)\n? __pfx_cpuidle_idle_call (kernel/sched/idle.c:168)\n? lock_release (kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5848)\n? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4347 kernel/locking/lockdep.c:4406)\n? tsc_verify_tsc_adjust (arch/x86/kernel/tsc_sync.c:59)\ndo_idle (kernel/sched/idle.c:326)\ncpu_startup_entry (kernel/sched/idle.c:423 (discriminator 1))\nstart_secondary (arch/x86/kernel/smpboot.c:202 arch/x86/kernel/smpboot.c:282)\n? __pfx_start_secondary (arch/x86/kernel/smpboot.c:232)\n? soft_restart_cpu (arch/x86/kernel/head_64.S:452)\ncommon_startup_64 (arch/x86/kernel/head_64.S:414)\n \u003c/TASK\u003e\nDec 03 05:46:18 kernel:\nAllocated by task 12184:\nkasan_save_stack (mm/kasan/common.c:48)\nkasan_save_track (./arch/x86/include/asm/current.h:49 mm/kasan/common.c:60 mm/kasan/common.c:69)\n__kasan_slab_alloc (mm/kasan/common.c:319 mm/kasan/common.c:345)\nkmem_cache_alloc_noprof (mm/slub.c:4085 mm/slub.c:4134 mm/slub.c:4141)\ncopy_net_ns (net/core/net_namespace.c:421 net/core/net_namespace.c:480)\ncreate_new_namespaces\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56658",
"url": "https://www.suse.com/security/cve/CVE-2024-56658"
},
{
"category": "external",
"summary": "SUSE Bug 1235441 for CVE-2024-56658",
"url": "https://bugzilla.suse.com/1235441"
},
{
"category": "external",
"summary": "SUSE Bug 1235442 for CVE-2024-56658",
"url": "https://bugzilla.suse.com/1235442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56658"
},
{
"cve": "CVE-2024-56659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56659"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lapb: increase LAPB_HEADER_LEN\n\nIt is unclear if net/lapb code is supposed to be ready for 8021q.\n\nWe can at least avoid crashes like the following :\n\nskbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2\n------------[ cut here ]------------\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc90002ddf638 EFLAGS: 00010282\nRAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600\nRDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000\nRBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60\nR10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140\nR13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016\nFS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n nr_header+0x36/0x320 net/netrom/nr_dev.c:69\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n vlan_dev_hard_header+0x359/0x480 net/8021q/vlan_dev.c:83\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n lapbeth_data_transmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257\n lapb_data_transmit+0x91/0xb0 net/lapb/lapb_iface.c:447\n lapb_transmit_buffer+0x168/0x1f0 net/lapb/lapb_out.c:149\n lapb_establish_data_link+0x84/0xd0\n lapb_device_event+0x4e0/0x670\n notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93\n __dev_notify_flags+0x207/0x400\n dev_change_flags+0xf0/0x1a0 net/core/dev.c:8922\n devinet_ioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188\n inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1003\n sock_do_ioctl+0x158/0x460 net/socket.c:1227\n sock_ioctl+0x626/0x8e0 net/socket.c:1346\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56659",
"url": "https://www.suse.com/security/cve/CVE-2024-56659"
},
{
"category": "external",
"summary": "SUSE Bug 1235439 for CVE-2024-56659",
"url": "https://bugzilla.suse.com/1235439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56659"
},
{
"cve": "CVE-2024-56660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: DR, prevent potential error pointer dereference\n\nThe dr_domain_add_vport_cap() function generally returns NULL on error\nbut sometimes we want it to return ERR_PTR(-EBUSY) so the caller can\nretry. The problem here is that \"ret\" can be either -EBUSY or -ENOMEM\nand if it\u0027s and -ENOMEM then the error pointer is propogated back and\neventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56660",
"url": "https://www.suse.com/security/cve/CVE-2024-56660"
},
{
"category": "external",
"summary": "SUSE Bug 1235437 for CVE-2024-56660",
"url": "https://bugzilla.suse.com/1235437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56660"
},
{
"cve": "CVE-2024-56661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix NULL deref in cleanup_bearer()\n\nsyzbot found [1] that after blamed commit, ub-\u003eubsock-\u003esk\nwas NULL when attempting the atomic_dec() :\n\natomic_dec(\u0026tipc_net(sock_net(ub-\u003eubsock-\u003esk))-\u003ewq_count);\n\nFix this by caching the tipc_net pointer.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\nCPU: 0 UID: 0 PID: 5896 Comm: kworker/0:3 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events cleanup_bearer\n RIP: 0010:read_pnet include/net/net_namespace.h:387 [inline]\n RIP: 0010:sock_net include/net/sock.h:655 [inline]\n RIP: 0010:cleanup_bearer+0x1f7/0x280 net/tipc/udp_media.c:820\nCode: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c f7 99 f6 48 8b 1b 48 83 c3 30 e8 f0 e4 60 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 80 3c 28 00 74 08 48 89 df e8 1a f7 99 f6 49 83 c7 e8 48 8b 1b\nRSP: 0018:ffffc9000410fb70 EFLAGS: 00010206\nRAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88802fe45a00\nRDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000410f900\nRBP: ffff88807e1f0908 R08: ffffc9000410f907 R09: 1ffff92000821f20\nR10: dffffc0000000000 R11: fffff52000821f21 R12: ffff888031d19980\nR13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e1f0918\nFS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556ca050b000 CR3: 0000000031c0c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56661",
"url": "https://www.suse.com/security/cve/CVE-2024-56661"
},
{
"category": "external",
"summary": "SUSE Bug 1234931 for CVE-2024-56661",
"url": "https://bugzilla.suse.com/1234931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl\n\nFix an issue detected by syzbot with KASAN:\n\nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/\ncore.c:416 [inline]\nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0\ndrivers/acpi/nfit/core.c:459\n\nThe issue occurs in cmd_to_func when the call_pkg-\u003end_reserved2\narray is accessed without verifying that call_pkg points to a buffer\nthat is appropriately sized as a struct nd_cmd_pkg. This can lead\nto out-of-bounds access and undefined behavior if the buffer does not\nhave sufficient space.\n\nTo address this, a check was added in acpi_nfit_ctl() to ensure that\nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)\nbefore accessing it. This ensures safe access to the members of\ncall_pkg, including the nd_reserved2 array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56662",
"url": "https://www.suse.com/security/cve/CVE-2024-56662"
},
{
"category": "external",
"summary": "SUSE Bug 1235533 for CVE-2024-56662",
"url": "https://bugzilla.suse.com/1235533"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one\n\nSince the netlink attribute range validation provides inclusive\nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be\nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.\n\nOne crash stack for demonstration:\n==================================================================\nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508\n\nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106\n print_report+0xe0/0x750 mm/kasan/report.c:398\n kasan_report+0x139/0x170 mm/kasan/report.c:495\n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189\n memcpy+0x25/0x60 mm/kasan/shadow.c:65\n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]\n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453\n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756\n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]\n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850\n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508\n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861\n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]\n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352\n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874\n sock_sendmsg_nosec net/socket.c:716 [inline]\n __sock_sendmsg net/socket.c:728 [inline]\n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499\n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553\n __sys_sendmsg net/socket.c:2582 [inline]\n __do_sys_sendmsg net/socket.c:2591 [inline]\n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUpdate the policy to ensure correct validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56663",
"url": "https://www.suse.com/security/cve/CVE-2024-56663"
},
{
"category": "external",
"summary": "SUSE Bug 1235454 for CVE-2024-56663",
"url": "https://bugzilla.suse.com/1235454"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56663"
},
{
"cve": "CVE-2024-56664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix race between element replace and close()\n\nElement replace (with a socket different from the one stored) may race\nwith socket\u0027s close() link popping \u0026 unlinking. __sock_map_delete()\nunconditionally unrefs the (wrong) element:\n\n// set map[0] = s0\nmap_update_elem(map, 0, s0)\n\n// drop fd of s0\nclose(s0)\n sock_map_close()\n lock_sock(sk) (s0!)\n sock_map_remove_links(sk)\n link = sk_psock_link_pop()\n sock_map_unlink(sk, link)\n sock_map_delete_from_link\n // replace map[0] with s1\n map_update_elem(map, 0, s1)\n sock_map_update_elem\n (s1!) lock_sock(sk)\n sock_map_update_common\n psock = sk_psock(sk)\n spin_lock(\u0026stab-\u003elock)\n osk = stab-\u003esks[idx]\n sock_map_add_link(..., \u0026stab-\u003esks[idx])\n sock_map_unref(osk, \u0026stab-\u003esks[idx])\n psock = sk_psock(osk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test(\u0026psock))\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n unlock_sock(sk)\n __sock_map_delete\n spin_lock(\u0026stab-\u003elock)\n sk = *psk // s1 replaced s0; sk == s1\n if (!sk_test || sk_test == sk) // sk_test (s0) != sk (s1); no branch\n sk = xchg(psk, NULL)\n if (sk)\n sock_map_unref(sk, psk) // unref s1; sks[idx] will dangle\n psock = sk_psock(sk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test())\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n release_sock(sk)\n\nThen close(map) enqueues bpf_map_free_deferred, which finally calls\nsock_map_free(). This results in some refcount_t warnings along with\na KASAN splat [1].\n\nFix __sock_map_delete(), do not allow sock_map_unref() on elements that\nmay have been replaced.\n\n[1]:\nBUG: KASAN: slab-use-after-free in sock_map_free+0x10e/0x330\nWrite of size 4 at addr ffff88811f5b9100 by task kworker/u64:12/1063\n\nCPU: 14 UID: 0 PID: 1063 Comm: kworker/u64:12 Not tainted 6.12.0+ #125\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014\nWorkqueue: events_unbound bpf_map_free_deferred\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x68/0x90\n print_report+0x174/0x4f6\n kasan_report+0xb9/0x190\n kasan_check_range+0x10f/0x1e0\n sock_map_free+0x10e/0x330\n bpf_map_free_deferred+0x173/0x320\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 1202:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n __kasan_slab_alloc+0x85/0x90\n kmem_cache_alloc_noprof+0x131/0x450\n sk_prot_alloc+0x5b/0x220\n sk_alloc+0x2c/0x870\n unix_create1+0x88/0x8a0\n unix_create+0xc5/0x180\n __sock_create+0x241/0x650\n __sys_socketpair+0x1ce/0x420\n __x64_sys_socketpair+0x92/0x100\n do_syscall_64+0x93/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 46:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x37/0x60\n __kasan_slab_free+0x4b/0x70\n kmem_cache_free+0x1a1/0x590\n __sk_destruct+0x388/0x5a0\n sk_psock_destroy+0x73e/0xa50\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nThe bu\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56664",
"url": "https://www.suse.com/security/cve/CVE-2024-56664"
},
{
"category": "external",
"summary": "SUSE Bug 1235249 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "external",
"summary": "SUSE Bug 1235250 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56664"
},
{
"cve": "CVE-2024-56665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56665"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog\n\nSyzbot reported [1] crash that happens for following tracing scenario:\n\n - create tracepoint perf event with attr.inherit=1, attach it to the\n process and set bpf program to it\n - attached process forks -\u003e chid creates inherited event\n\n the new child event shares the parent\u0027s bpf program and tp_event\n (hence prog_array) which is global for tracepoint\n\n - exit both process and its child -\u003e release both events\n - first perf_event_detach_bpf_prog call will release tp_event-\u003eprog_array\n and second perf_event_detach_bpf_prog will crash, because\n tp_event-\u003eprog_array is NULL\n\nThe fix makes sure the perf_event_detach_bpf_prog checks prog_array\nis valid before it tries to remove the bpf program from it.\n\n[1] https://lore.kernel.org/bpf/Z1MR6dCIKajNS6nU@krava/T/#m91dbf0688221ec7a7fc95e896a7ef9ff93b0b8ad",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56665",
"url": "https://www.suse.com/security/cve/CVE-2024-56665"
},
{
"category": "external",
"summary": "SUSE Bug 1235489 for CVE-2024-56665",
"url": "https://bugzilla.suse.com/1235489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56665"
},
{
"cve": "CVE-2024-56670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer\n\nConsidering that in some extreme cases,\nwhen u_serial driver is accessed by multiple threads,\nThread A is executing the open operation and calling the gs_open,\nThread B is executing the disconnect operation and calling the\ngserial_disconnect function,The port-\u003eport_usb pointer will be set to NULL.\n\nE.g.\n Thread A Thread B\n gs_open() gadget_unbind_driver()\n gs_start_io() composite_disconnect()\n gs_start_rx() gserial_disconnect()\n ... ...\n spin_unlock(\u0026port-\u003eport_lock)\n status = usb_ep_queue() spin_lock(\u0026port-\u003eport_lock)\n spin_lock(\u0026port-\u003eport_lock) port-\u003eport_usb = NULL\n gs_free_requests(port-\u003eport_usb-\u003ein) spin_unlock(\u0026port-\u003eport_lock)\n Crash\n\nThis causes thread A to access a null pointer (port-\u003eport_usb is null)\nwhen calling the gs_free_requests function, causing a crash.\n\nIf port_usb is NULL, the release request will be skipped as it\nwill be done by gserial_disconnect.\n\nSo add a null pointer check to gs_start_io before attempting\nto access the value of the pointer port-\u003eport_usb.\n\nCall trace:\n gs_start_io+0x164/0x25c\n gs_open+0x108/0x13c\n tty_open+0x314/0x638\n chrdev_open+0x1b8/0x258\n do_dentry_open+0x2c4/0x700\n vfs_open+0x2c/0x3c\n path_openat+0xa64/0xc60\n do_filp_open+0xb8/0x164\n do_sys_openat2+0x84/0xf0\n __arm64_sys_openat+0x70/0x9c\n invoke_syscall+0x58/0x114\n el0_svc_common+0x80/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x38/0x68",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56670",
"url": "https://www.suse.com/security/cve/CVE-2024-56670"
},
{
"category": "external",
"summary": "SUSE Bug 1235488 for CVE-2024-56670",
"url": "https://bugzilla.suse.com/1235488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56670"
},
{
"cve": "CVE-2024-56672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56672"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: Fix UAF in blkcg_unpin_online()\n\nblkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To\nwalk up, it uses blkcg_parent(blkcg) but it was calling that after\nblkcg_destroy_blkgs(blkcg) which could free the blkcg, leading to the\nfollowing UAF:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in blkcg_unpin_online+0x15a/0x270\n Read of size 8 at addr ffff8881057678c0 by task kworker/9:1/117\n\n CPU: 9 UID: 0 PID: 117 Comm: kworker/9:1 Not tainted 6.13.0-rc1-work-00182-gb8f52214c61a-dirty #48\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 02/02/2022\n Workqueue: cgwb_release cgwb_release_workfn\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x27/0x80\n print_report+0x151/0x710\n kasan_report+0xc0/0x100\n blkcg_unpin_online+0x15a/0x270\n cgwb_release_workfn+0x194/0x480\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n ...\n Freed by task 1944:\n kasan_save_track+0x2b/0x70\n kasan_save_free_info+0x3c/0x50\n __kasan_slab_free+0x33/0x50\n kfree+0x10c/0x330\n css_free_rwork_fn+0xe6/0xb30\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n\nNote that the UAF is not easy to trigger as the free path is indirected\nbehind a couple RCU grace periods and a work item execution. I could only\ntrigger it with artifical msleep() injected in blkcg_unpin_online().\n\nFix it by reading the parent pointer before destroying the blkcg\u0027s blkg\u0027s.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56672",
"url": "https://www.suse.com/security/cve/CVE-2024-56672"
},
{
"category": "external",
"summary": "SUSE Bug 1235534 for CVE-2024-56672",
"url": "https://bugzilla.suse.com/1235534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56672"
},
{
"cve": "CVE-2024-56675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors\n\nUprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU\nprotection. But it is possible to attach a non-sleepable BPF program to a\nuprobe, and non-sleepable BPF programs are freed via normal RCU (see\n__bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal\nRCU grace period does not imply a tasks-trace-RCU grace period.\n\nFix it by explicitly waiting for a tasks-trace-RCU grace period after\nremoving the attachment of a bpf_prog to a perf_event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56675",
"url": "https://www.suse.com/security/cve/CVE-2024-56675"
},
{
"category": "external",
"summary": "SUSE Bug 1235555 for CVE-2024-56675",
"url": "https://bugzilla.suse.com/1235555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56675"
},
{
"cve": "CVE-2024-56677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56677"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()\n\nDuring early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE,\nsince pageblock_order is still zero and it gets initialized\nlater during initmem_init() e.g.\nsetup_arch() -\u003e initmem_init() -\u003e sparse_init() -\u003e set_pageblock_order()\n\nOne such use case where this causes issue is -\nearly_setup() -\u003e early_init_devtree() -\u003e fadump_reserve_mem() -\u003e fadump_cma_init()\n\nThis causes CMA memory alignment check to be bypassed in\ncma_init_reserved_mem(). Then later cma_activate_area() can hit\na VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1)) if the reserved memory\narea was not pageblock_order aligned.\n\nFix it by moving the fadump_cma_init() after initmem_init(),\nwhere other such cma reservations also gets called.\n\n\u003cstack trace\u003e\n==============\npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10010\nflags: 0x13ffff800000000(node=1|zone=0|lastcpupid=0x7ffff) CMA\nraw: 013ffff800000000 5deadbeef0000100 5deadbeef0000122 0000000000000000\nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1))\n------------[ cut here ]------------\nkernel BUG at mm/page_alloc.c:778!\n\nCall Trace:\n__free_one_page+0x57c/0x7b0 (unreliable)\nfree_pcppages_bulk+0x1a8/0x2c8\nfree_unref_page_commit+0x3d4/0x4e4\nfree_unref_page+0x458/0x6d0\ninit_cma_reserved_pageblock+0x114/0x198\ncma_init_reserved_areas+0x270/0x3e0\ndo_one_initcall+0x80/0x2f8\nkernel_init_freeable+0x33c/0x530\nkernel_init+0x34/0x26c\nret_from_kernel_user_thread+0x14/0x1c",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56677",
"url": "https://www.suse.com/security/cve/CVE-2024-56677"
},
{
"category": "external",
"summary": "SUSE Bug 1235494 for CVE-2024-56677",
"url": "https://bugzilla.suse.com/1235494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56677"
},
{
"cve": "CVE-2024-56678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/mm/fault: Fix kfence page fault reporting\n\ncopy_from_kernel_nofault() can be called when doing read of /proc/kcore.\n/proc/kcore can have some unmapped kfence objects which when read via\ncopy_from_kernel_nofault() can cause page faults. Since *_nofault()\nfunctions define their own fixup table for handling fault, use that\ninstead of asking kfence to handle such faults.\n\nHence we search the exception tables for the nip which generated the\nfault. If there is an entry then we let the fixup table handler handle the\npage fault by returning an error from within ___do_page_fault().\n\nThis can be easily triggered if someone tries to do dd from /proc/kcore.\neg. dd if=/proc/kcore of=/dev/null bs=1M\n\nSome example false negatives:\n\n ===============================\n BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0\n Invalid read at 0xc0000000fdff0000:\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec\n\n BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0\n Use-after-free read at 0xc0000000fe050000 (in kfence-#2):\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56678",
"url": "https://www.suse.com/security/cve/CVE-2024-56678"
},
{
"category": "external",
"summary": "SUSE Bug 1235495 for CVE-2024-56678",
"url": "https://bugzilla.suse.com/1235495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56678"
},
{
"cve": "CVE-2024-56679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56679"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56679",
"url": "https://www.suse.com/security/cve/CVE-2024-56679"
},
{
"category": "external",
"summary": "SUSE Bug 1235498 for CVE-2024-56679",
"url": "https://bugzilla.suse.com/1235498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56679"
},
{
"cve": "CVE-2024-56681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: bcm - add error check in the ahash_hmac_init function\n\nThe ahash_init functions may return fails. The ahash_hmac_init should\nnot return ok when ahash_init returns error. For an example, ahash_init\nwill return -ENOMEM when allocation memory is error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56681",
"url": "https://www.suse.com/security/cve/CVE-2024-56681"
},
{
"category": "external",
"summary": "SUSE Bug 1235557 for CVE-2024-56681",
"url": "https://bugzilla.suse.com/1235557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56683"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hdmi: Avoid hang with debug registers when suspended\n\nTrying to read /sys/kernel/debug/dri/1/hdmi1_regs\nwhen the hdmi is disconnected results in a fatal system hang.\n\nThis is due to the pm suspend code disabling the dvp clock.\nThat is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG,\nwhich results in accesses hanging AXI bus.\n\nProtect against this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56683",
"url": "https://www.suse.com/security/cve/CVE-2024-56683"
},
{
"category": "external",
"summary": "SUSE Bug 1235497 for CVE-2024-56683",
"url": "https://bugzilla.suse.com/1235497"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56683"
},
{
"cve": "CVE-2024-56687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: musb: Fix hardware lockup on first Rx endpoint request\n\nThere is a possibility that a request\u0027s callback could be invoked from\nusb_ep_queue() (call trace below, supplemented with missing calls):\n\nreq-\u003ecomplete from usb_gadget_giveback_request\n\t(drivers/usb/gadget/udc/core.c:999)\nusb_gadget_giveback_request from musb_g_giveback\n\t(drivers/usb/musb/musb_gadget.c:147)\nmusb_g_giveback from rxstate\n\t(drivers/usb/musb/musb_gadget.c:784)\nrxstate from musb_ep_restart\n\t(drivers/usb/musb/musb_gadget.c:1169)\nmusb_ep_restart from musb_ep_restart_resume_work\n\t(drivers/usb/musb/musb_gadget.c:1176)\nmusb_ep_restart_resume_work from musb_queue_resume_work\n\t(drivers/usb/musb/musb_core.c:2279)\nmusb_queue_resume_work from musb_gadget_queue\n\t(drivers/usb/musb/musb_gadget.c:1241)\nmusb_gadget_queue from usb_ep_queue\n\t(drivers/usb/gadget/udc/core.c:300)\n\nAccording to the docstring of usb_ep_queue(), this should not happen:\n\n\"Note that @req\u0027s -\u003ecomplete() callback must never be called from within\nusb_ep_queue() as that can create deadlock situations.\"\n\nIn fact, a hardware lockup might occur in the following sequence:\n\n1. The gadget is initialized using musb_gadget_enable().\n2. Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an\n interrupt.\n3. If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an\n empty queue (next_request() returns NULL). The interrupt flag has\n already been cleared by the glue layer handler, but the RXPKTRDY flag\n remains set.\n4. The first request is enqueued using usb_ep_queue(), leading to the call\n of req-\u003ecomplete(), as shown in the call trace above.\n5. If the callback enables IRQs and another packet is waiting, step (3)\n repeats. The request queue is empty because usb_g_giveback() removes the\n request before invoking the callback.\n6. The endpoint remains locked up, as the interrupt triggered by hardware\n setting the RXPKTRDY flag has been handled, but the flag itself remains\n set.\n\nFor this scenario to occur, it is only necessary for IRQs to be enabled at\nsome point during the complete callback. This happens with the USB Ethernet\ngadget, whose rx_complete() callback calls netif_rx(). If called in the\ntask context, netif_rx() disables the bottom halves (BHs). When the BHs are\nre-enabled, IRQs are also enabled to allow soft IRQs to be processed. The\ngadget itself is initialized at module load (or at boot if built-in), but\nthe first request is enqueued when the network interface is brought up,\ntriggering rx_complete() in the task context via ioctl(). If a packet\narrives while the interface is down, it can prevent the interface from\nreceiving any further packets from the USB host.\n\nThe situation is quite complicated with many parties involved. This\nparticular issue can be resolved in several possible ways:\n\n1. Ensure that callbacks never enable IRQs. This would be difficult to\n enforce, as discovering how netif_rx() interacts with interrupts was\n already quite challenging and u_ether is not the only function driver.\n Similar \"bugs\" could be hidden in other drivers as well.\n2. Disable MUSB interrupts in musb_g_giveback() before calling the callback\n and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(),\n for example). This would ensure that MUSB interrupts are not handled\n during the callback, even if IRQs are enabled. In fact, it would allow\n IRQs to be enabled when releasing the lock. However, this feels like an\n inelegant hack.\n3. Modify the interrupt handler to clear the RXPKTRDY flag if the request\n queue is empty. While this approach also feels like a hack, it wastes\n CPU time by attempting to handle incoming packets when the software is\n not ready to process them.\n4. Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart().\n This ensures that the hardware can receive packets when there is at\n least one request in the queue. Once I\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56687",
"url": "https://www.suse.com/security/cve/CVE-2024-56687"
},
{
"category": "external",
"summary": "SUSE Bug 1235537 for CVE-2024-56687",
"url": "https://bugzilla.suse.com/1235537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56687"
},
{
"cve": "CVE-2024-56688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56688"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport\n\nSince transport-\u003esock has been set to NULL during reset transport,\nXPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the\nxs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request()\nto dereference the transport-\u003esock that has been set to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56688",
"url": "https://www.suse.com/security/cve/CVE-2024-56688"
},
{
"category": "external",
"summary": "SUSE Bug 1235538 for CVE-2024-56688",
"url": "https://bugzilla.suse.com/1235538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56688"
},
{
"cve": "CVE-2024-56690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY\n\nSince commit 8f4f68e788c3 (\"crypto: pcrypt - Fix hungtask for\nPADATA_RESET\"), the pcrypt encryption and decryption operations return\n-EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is\ngenerated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns\n-EAGAIN, the unnecessary panic will occur when panic_on_warn set 1.\nFix this issue by calling crypto layer directly without parallelization\nin that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56690",
"url": "https://www.suse.com/security/cve/CVE-2024-56690"
},
{
"category": "external",
"summary": "SUSE Bug 1235428 for CVE-2024-56690",
"url": "https://bugzilla.suse.com/1235428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56690"
},
{
"cve": "CVE-2024-56691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56691"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56691",
"url": "https://www.suse.com/security/cve/CVE-2024-56691"
},
{
"category": "external",
"summary": "SUSE Bug 1235425 for CVE-2024-56691",
"url": "https://bugzilla.suse.com/1235425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56691"
},
{
"cve": "CVE-2024-56693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56693"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbrd: defer automatic disk creation until module initialization succeeds\n\nMy colleague Wupeng found the following problems during fault injection:\n\nBUG: unable to handle page fault for address: fffffbfff809d073\nPGD 6e648067 P4D 123ec8067 PUD 123ec4067 PMD 100e38067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nCPU: 5 UID: 0 PID: 755 Comm: modprobe Not tainted 6.12.0-rc3+ #17\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:__asan_load8+0x4c/0xa0\n...\nCall Trace:\n \u003cTASK\u003e\n blkdev_put_whole+0x41/0x70\n bdev_release+0x1a3/0x250\n blkdev_release+0x11/0x20\n __fput+0x1d7/0x4a0\n task_work_run+0xfc/0x180\n syscall_exit_to_user_mode+0x1de/0x1f0\n do_syscall_64+0x6b/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nloop_init() is calling loop_add() after __register_blkdev() succeeds and\nis ignoring disk_add() failure from loop_add(), for loop_add() failure\nis not fatal and successfully created disks are already visible to\nbdev_open().\n\nbrd_init() is currently calling brd_alloc() before __register_blkdev()\nsucceeds and is releasing successfully created disks when brd_init()\nreturns an error. This can cause UAF for the latter two case:\n\ncase 1:\n T1:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n add_disk\n disk_scan_partitions\n bdev_file_open_by_dev // alloc file\n fput // won\u0027t free until back to userspace\n brd_alloc(1) // failed since mem alloc error inject\n // error path for modprobe will release code segment\n // back to userspace\n __fput\n blkdev_release\n bdev_release\n blkdev_put_whole\n bdev-\u003ebd_disk-\u003efops-\u003erelease // fops is freed now, UAF!\n\ncase 2:\n T1: T2:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n open(/dev/ram0)\n brd_alloc(1) // fail\n // error path for modprobe\n\n close(/dev/ram0)\n ...\n /* UAF! */\n bdev-\u003ebd_disk-\u003efops-\u003erelease\n\nFix this problem by following what loop_init() does. Besides,\nreintroduce brd_devices_mutex to help serialize modifications to\nbrd_list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56693",
"url": "https://www.suse.com/security/cve/CVE-2024-56693"
},
{
"category": "external",
"summary": "SUSE Bug 1235418 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "external",
"summary": "SUSE Bug 1235419 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56693"
},
{
"cve": "CVE-2024-56694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix recursive lock when verdict program return SK_PASS\n\nWhen the stream_verdict program returns SK_PASS, it places the received skb\ninto its own receive queue, but a recursive lock eventually occurs, leading\nto an operating system deadlock. This issue has been present since v6.9.\n\n\u0027\u0027\u0027\nsk_psock_strp_data_ready\n write_lock_bh(\u0026sk-\u003esk_callback_lock)\n strp_data_ready\n strp_read_sock\n read_sock -\u003e tcp_read_sock\n strp_recv\n cb.rcv_msg -\u003e sk_psock_strp_read\n # now stream_verdict return SK_PASS without peer sock assign\n __SK_PASS = sk_psock_map_verd(SK_PASS, NULL)\n sk_psock_verdict_apply\n sk_psock_skb_ingress_self\n sk_psock_skb_ingress_enqueue\n sk_psock_data_ready\n read_lock_bh(\u0026sk-\u003esk_callback_lock) \u003c= dead lock\n\n\u0027\u0027\u0027\n\nThis topic has been discussed before, but it has not been fixed.\nPrevious discussion:\nhttps://lore.kernel.org/all/6684a5864ec86_403d20898@john.notmuch",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56694",
"url": "https://www.suse.com/security/cve/CVE-2024-56694"
},
{
"category": "external",
"summary": "SUSE Bug 1235412 for CVE-2024-56694",
"url": "https://bugzilla.suse.com/1235412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56694"
},
{
"cve": "CVE-2024-56698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56698"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Fix looping of queued SG entries\n\nThe dwc3_request-\u003enum_queued_sgs is decremented on completion. If a\npartially completed request is handled, then the\ndwc3_request-\u003enum_queued_sgs no longer reflects the total number of\nnum_queued_sgs (it would be cleared).\n\nCorrectly check the number of request SG entries remained to be prepare\nand queued. Failure to do this may cause null pointer dereference when\naccessing non-existent SG entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56698",
"url": "https://www.suse.com/security/cve/CVE-2024-56698"
},
{
"category": "external",
"summary": "SUSE Bug 1235491 for CVE-2024-56698",
"url": "https://bugzilla.suse.com/1235491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56698"
},
{
"cve": "CVE-2024-56700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56700"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: wl128x: Fix atomicity violation in fmc_send_cmd()\n\nAtomicity violation occurs when the fmc_send_cmd() function is executed\nsimultaneously with the modification of the fmdev-\u003eresp_skb value.\nConsider a scenario where, after passing the validity check within the\nfunction, a non-null fmdev-\u003eresp_skb variable is assigned a null value.\nThis results in an invalid fmdev-\u003eresp_skb variable passing the validity\ncheck. As seen in the later part of the function, skb = fmdev-\u003eresp_skb;\nwhen the invalid fmdev-\u003eresp_skb passes the check, a null pointer\ndereference error may occur at line 478, evt_hdr = (void *)skb-\u003edata;\n\nTo address this issue, it is recommended to include the validity check of\nfmdev-\u003eresp_skb within the locked section of the function. This\nmodification ensures that the value of fmdev-\u003eresp_skb does not change\nduring the validation process, thereby maintaining its validity.\n\nThis possible bug is found by an experimental static analysis tool\ndeveloped by our team. This tool analyzes the locking APIs\nto extract function pairs that can be concurrently executed, and then\nanalyzes the instructions in the paired functions to identify possible\nconcurrency bugs including data races and atomicity violations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56700",
"url": "https://www.suse.com/security/cve/CVE-2024-56700"
},
{
"category": "external",
"summary": "SUSE Bug 1235500 for CVE-2024-56700",
"url": "https://bugzilla.suse.com/1235500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix dtl_access_lock to be a rw_semaphore\n\nThe dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because\nthe code calls kmalloc() while holding it, which can sleep:\n\n # echo 1 \u003e /proc/powerpc/vcpudispatch_stats\n BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 199, name: sh\n preempt_count: 1, expected: 0\n 3 locks held by sh/199:\n #0: c00000000a0743f8 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x324/0x438\n #1: c0000000028c7058 (dtl_enable_mutex){+.+.}-{3:3}, at: vcpudispatch_stats_write+0xd4/0x5f4\n #2: c0000000028c70b8 (dtl_access_lock){+.+.}-{2:2}, at: vcpudispatch_stats_write+0x220/0x5f4\n CPU: 0 PID: 199 Comm: sh Not tainted 6.10.0-rc4 #152\n Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1202 0xf000005 of:SLOF,HEAD hv:linux,kvm pSeries\n Call Trace:\n dump_stack_lvl+0x130/0x148 (unreliable)\n __might_resched+0x174/0x410\n kmem_cache_alloc_noprof+0x340/0x3d0\n alloc_dtl_buffers+0x124/0x1ac\n vcpudispatch_stats_write+0x2a8/0x5f4\n proc_reg_write+0xf4/0x150\n vfs_write+0xfc/0x438\n ksys_write+0x88/0x148\n system_call_exception+0x1c4/0x5a0\n system_call_common+0xf4/0x258",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56701",
"url": "https://www.suse.com/security/cve/CVE-2024-56701"
},
{
"category": "external",
"summary": "SUSE Bug 1235496 for CVE-2024-56701",
"url": "https://bugzilla.suse.com/1235496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56701"
},
{
"cve": "CVE-2024-56704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56704"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p/xen: fix release of IRQ\n\nKernel logs indicate an IRQ was double-freed.\n\nPass correct device ID during IRQ release.\n\n[Dominique: remove confusing variable reset to 0]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56704",
"url": "https://www.suse.com/security/cve/CVE-2024-56704"
},
{
"category": "external",
"summary": "SUSE Bug 1235584 for CVE-2024-56704",
"url": "https://bugzilla.suse.com/1235584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56704"
},
{
"cve": "CVE-2024-56705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56705"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Add check for rgby_data memory allocation failure\n\nIn ia_css_3a_statistics_allocate(), there is no check on the allocation\nresult of the rgby_data memory. If rgby_data is not successfully\nallocated, it may trigger the assert(host_stats-\u003ergby_data) assertion in\nia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56705",
"url": "https://www.suse.com/security/cve/CVE-2024-56705"
},
{
"category": "external",
"summary": "SUSE Bug 1235568 for CVE-2024-56705",
"url": "https://bugzilla.suse.com/1235568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56705"
},
{
"cve": "CVE-2024-56707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56707"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c\n\nAdd error pointer checks after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56707",
"url": "https://www.suse.com/security/cve/CVE-2024-56707"
},
{
"category": "external",
"summary": "SUSE Bug 1235545 for CVE-2024-56707",
"url": "https://bugzilla.suse.com/1235545"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56707"
},
{
"cve": "CVE-2024-56708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56708"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/igen6: Avoid segmentation fault on module unload\n\nThe segmentation fault happens because:\n\nDuring modprobe:\n1. In igen6_probe(), igen6_pvt will be allocated with kzalloc()\n2. In igen6_register_mci(), mci-\u003epvt_info will point to\n \u0026igen6_pvt-\u003eimc[mc]\n\nDuring rmmod:\n1. In mci_release() in edac_mc.c, it will kfree(mci-\u003epvt_info)\n2. In igen6_remove(), it will kfree(igen6_pvt);\n\nFix this issue by setting mci-\u003epvt_info to NULL to avoid the double\nkfree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56708",
"url": "https://www.suse.com/security/cve/CVE-2024-56708"
},
{
"category": "external",
"summary": "SUSE Bug 1235564 for CVE-2024-56708",
"url": "https://bugzilla.suse.com/1235564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56708"
},
{
"cve": "CVE-2024-56709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check if iowq is killed before queuing\n\ntask work can be executed after the task has gone through io_uring\ntermination, whether it\u0027s the final task_work run or the fallback path.\nIn this case, task work will find -\u003eio_wq being already killed and\nnull\u0027ed, which is a problem if it then tries to forward the request to\nio_queue_iowq(). Make io_queue_iowq() fail requests in this case.\n\nNote that it also checks PF_KTHREAD, because the user can first close\na DEFER_TASKRUN ring and shortly after kill the task, in which case\n-\u003eiowq check would race.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56709",
"url": "https://www.suse.com/security/cve/CVE-2024-56709"
},
{
"category": "external",
"summary": "SUSE Bug 1235552 for CVE-2024-56709",
"url": "https://bugzilla.suse.com/1235552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56709"
},
{
"cve": "CVE-2024-56712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56712"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: fix memory leak on last export_udmabuf() error path\n\nIn export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a\ndma_buf owning the udmabuf has already been created; but the error handling\nin udmabuf_create() will tear down the udmabuf without doing anything about\nthe containing dma_buf.\n\nThis leaves a dma_buf in memory that contains a dangling pointer; though\nthat doesn\u0027t seem to lead to anything bad except a memory leak.\n\nFix it by moving the dma_buf_fd() call out of export_udmabuf() so that we\ncan give it different error handling.\n\nNote that the shape of this code changed a lot in commit 5e72b2b41a21\n(\"udmabuf: convert udmabuf driver to use folios\"); but the memory leak\nseems to have existed since the introduction of udmabuf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56712",
"url": "https://www.suse.com/security/cve/CVE-2024-56712"
},
{
"category": "external",
"summary": "SUSE Bug 1235565 for CVE-2024-56712",
"url": "https://bugzilla.suse.com/1235565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56712"
},
{
"cve": "CVE-2024-56715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56715"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nionic: Fix netdev notifier unregister on failure\n\nIf register_netdev() fails, then the driver leaks the netdev notifier.\nFix this by calling ionic_lif_unregister() on register_netdev()\nfailure. This will also call ionic_lif_unregister_phc() if it has\nalready been registered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56715",
"url": "https://www.suse.com/security/cve/CVE-2024-56715"
},
{
"category": "external",
"summary": "SUSE Bug 1235612 for CVE-2024-56715",
"url": "https://bugzilla.suse.com/1235612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56715"
},
{
"cve": "CVE-2024-56716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56716"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: prevent bad user input in nsim_dev_health_break_write()\n\nIf either a zero count or a large one is provided, kernel can crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56716",
"url": "https://www.suse.com/security/cve/CVE-2024-56716"
},
{
"category": "external",
"summary": "SUSE Bug 1235587 for CVE-2024-56716",
"url": "https://bugzilla.suse.com/1235587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56716"
},
{
"cve": "CVE-2024-56722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix cpu stuck caused by printings during reset\n\nDuring reset, cmd to destroy resources such as qp, cq, and mr may fail,\nand error logs will be printed. When a large number of resources are\ndestroyed, there will be lots of printings, and it may lead to a cpu\nstuck.\n\nDelete some unnecessary printings and replace other printing functions\nin these paths with the ratelimited version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56722",
"url": "https://www.suse.com/security/cve/CVE-2024-56722"
},
{
"category": "external",
"summary": "SUSE Bug 1235570 for CVE-2024-56722",
"url": "https://bugzilla.suse.com/1235570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56722"
},
{
"cve": "CVE-2024-56723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56723"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56723",
"url": "https://www.suse.com/security/cve/CVE-2024-56723"
},
{
"category": "external",
"summary": "SUSE Bug 1235571 for CVE-2024-56723",
"url": "https://bugzilla.suse.com/1235571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56723"
},
{
"cve": "CVE-2024-56724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56724"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56724",
"url": "https://www.suse.com/security/cve/CVE-2024-56724"
},
{
"category": "external",
"summary": "SUSE Bug 1235577 for CVE-2024-56724",
"url": "https://bugzilla.suse.com/1235577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56724"
},
{
"cve": "CVE-2024-56725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56725"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56725",
"url": "https://www.suse.com/security/cve/CVE-2024-56725"
},
{
"category": "external",
"summary": "SUSE Bug 1235578 for CVE-2024-56725",
"url": "https://bugzilla.suse.com/1235578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56725"
},
{
"cve": "CVE-2024-56726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56726"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56726",
"url": "https://www.suse.com/security/cve/CVE-2024-56726"
},
{
"category": "external",
"summary": "SUSE Bug 1235582 for CVE-2024-56726",
"url": "https://bugzilla.suse.com/1235582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56726"
},
{
"cve": "CVE-2024-56727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56727"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c\n\nAdding error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56727",
"url": "https://www.suse.com/security/cve/CVE-2024-56727"
},
{
"category": "external",
"summary": "SUSE Bug 1235583 for CVE-2024-56727",
"url": "https://bugzilla.suse.com/1235583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56727"
},
{
"cve": "CVE-2024-56728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56728"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56728",
"url": "https://www.suse.com/security/cve/CVE-2024-56728"
},
{
"category": "external",
"summary": "SUSE Bug 1235656 for CVE-2024-56728",
"url": "https://bugzilla.suse.com/1235656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56728"
},
{
"cve": "CVE-2024-56729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56729"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: Initialize cfid-\u003etcon before performing network ops\n\nAvoid leaking a tcon ref when a lease break races with opening the\ncached directory. Processing the leak break might take a reference to\nthe tcon in cached_dir_lease_break() and then fail to release the ref in\ncached_dir_offload_close, since cfid-\u003etcon is still NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56729",
"url": "https://www.suse.com/security/cve/CVE-2024-56729"
},
{
"category": "external",
"summary": "SUSE Bug 1235503 for CVE-2024-56729",
"url": "https://bugzilla.suse.com/1235503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56729"
},
{
"cve": "CVE-2024-56739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: check if __rtc_read_time was successful in rtc_timer_do_work()\n\nIf the __rtc_read_time call fails,, the struct rtc_time tm; may contain\nuninitialized data, or an illegal date/time read from the RTC hardware.\n\nWhen calling rtc_tm_to_ktime later, the result may be a very large value\n(possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue,\nthey will continually expire, may causing kernel softlockup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56739",
"url": "https://www.suse.com/security/cve/CVE-2024-56739"
},
{
"category": "external",
"summary": "SUSE Bug 1235611 for CVE-2024-56739",
"url": "https://bugzilla.suse.com/1235611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56741"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56741",
"url": "https://www.suse.com/security/cve/CVE-2024-56741"
},
{
"category": "external",
"summary": "SUSE Bug 1235502 for CVE-2024-56741",
"url": "https://bugzilla.suse.com/1235502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56741"
},
{
"cve": "CVE-2024-56745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56745"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reset_method_store() memory leak\n\nIn reset_method_store(), a string is allocated via kstrndup() and assigned\nto the local \"options\". options is then used in with strsep() to find\nspaces:\n\n while ((name = strsep(\u0026options, \" \")) != NULL) {\n\nIf there are no remaining spaces, then options is set to NULL by strsep(),\nso the subsequent kfree(options) doesn\u0027t free the memory allocated via\nkstrndup().\n\nFix by using a separate tmp_options to iterate with strsep() so options is\npreserved.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56745",
"url": "https://www.suse.com/security/cve/CVE-2024-56745"
},
{
"category": "external",
"summary": "SUSE Bug 1235563 for CVE-2024-56745",
"url": "https://bugzilla.suse.com/1235563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56745"
},
{
"cve": "CVE-2024-56746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56746"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()\n\nWhen information such as info-\u003escreen_base is not ready, calling\nsh7760fb_free_mem() does not release memory correctly. Call\ndma_free_coherent() instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56746",
"url": "https://www.suse.com/security/cve/CVE-2024-56746"
},
{
"category": "external",
"summary": "SUSE Bug 1235622 for CVE-2024-56746",
"url": "https://bugzilla.suse.com/1235622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56746"
},
{
"cve": "CVE-2024-56747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()\n\nHook \"qedi_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56747",
"url": "https://www.suse.com/security/cve/CVE-2024-56747"
},
{
"category": "external",
"summary": "SUSE Bug 1234934 for CVE-2024-56747",
"url": "https://bugzilla.suse.com/1234934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()\n\nHook \"qed_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56748",
"url": "https://www.suse.com/security/cve/CVE-2024-56748"
},
{
"category": "external",
"summary": "SUSE Bug 1235627 for CVE-2024-56748",
"url": "https://bugzilla.suse.com/1235627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free when COWing tree bock and tracing is enabled\n\nWhen a COWing a tree block, at btrfs_cow_block(), and we have the\ntracepoint trace_btrfs_cow_block() enabled and preemption is also enabled\n(CONFIG_PREEMPT=y), we can trigger a use-after-free in the COWed extent\nbuffer while inside the tracepoint code. This is because in some paths\nthat call btrfs_cow_block(), such as btrfs_search_slot(), we are holding\nthe last reference on the extent buffer @buf so btrfs_force_cow_block()\ndrops the last reference on the @buf extent buffer when it calls\nfree_extent_buffer_stale(buf), which schedules the release of the extent\nbuffer with RCU. This means that if we are on a kernel with preemption,\nthe current task may be preempted before calling trace_btrfs_cow_block()\nand the extent buffer already released by the time trace_btrfs_cow_block()\nis called, resulting in a use-after-free.\n\nFix this by moving the trace_btrfs_cow_block() from btrfs_cow_block() to\nbtrfs_force_cow_block() before the COWed extent buffer is freed.\nThis also has a side effect of invoking the tracepoint in the tree defrag\ncode, at defrag.c:btrfs_realloc_node(), since btrfs_force_cow_block() is\ncalled there, but this is fine and it was actually missing there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56759",
"url": "https://www.suse.com/security/cve/CVE-2024-56759"
},
{
"category": "external",
"summary": "SUSE Bug 1235645 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "external",
"summary": "SUSE Bug 1236569 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1236569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56759"
},
{
"cve": "CVE-2024-56760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/MSI: Handle lack of irqdomain gracefully\n\nAlexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a\nRISCV platform which does not provide PCI/MSI support:\n\n WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32\n __pci_enable_msix_range+0x30c/0x596\n pci_msi_setup_msi_irqs+0x2c/0x32\n pci_alloc_irq_vectors_affinity+0xb8/0xe2\n\nRISCV uses hierarchical interrupt domains and correctly does not implement\nthe legacy fallback. The warning triggers from the legacy fallback stub.\n\nThat warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent\ndomain is associated with the device or not. There is a check for MSI-X,\nwhich has a legacy assumption. But that legacy fallback assumption is only\nvalid when legacy support is enabled, but otherwise the check should simply\nreturn -ENOTSUPP.\n\nLoongarch tripped over the same problem and blindly enabled legacy support\nwithout implementing the legacy fallbacks. There are weak implementations\nwhich return an error, so the problem was papered over.\n\nCorrect pci_msi_domain_supports() to evaluate the legacy mode and add\nthe missing supported check into the MSI enable path to complete it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56760",
"url": "https://www.suse.com/security/cve/CVE-2024-56760"
},
{
"category": "external",
"summary": "SUSE Bug 1235616 for CVE-2024-56760",
"url": "https://bugzilla.suse.com/1235616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56760"
},
{
"cve": "CVE-2024-56763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent bad count for tracing_cpumask_write\n\nIf a large count is provided, it will trigger a warning in bitmap_parse_user.\nAlso check zero for it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56763",
"url": "https://www.suse.com/security/cve/CVE-2024-56763"
},
{
"category": "external",
"summary": "SUSE Bug 1235638 for CVE-2024-56763",
"url": "https://bugzilla.suse.com/1235638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56763"
},
{
"cve": "CVE-2024-56765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/vas: Add close() callback in vas_vm_ops struct\n\nThe mapping VMA address is saved in VAS window struct when the\npaste address is mapped. This VMA address is used during migration\nto unmap the paste address if the window is active. The paste\naddress mapping will be removed when the window is closed or with\nthe munmap(). But the VMA address in the VAS window is not updated\nwith munmap() which is causing invalid access during migration.\n\nThe KASAN report shows:\n[16386.254991] BUG: KASAN: slab-use-after-free in reconfig_close_windows+0x1a0/0x4e8\n[16386.255043] Read of size 8 at addr c00000014a819670 by task drmgr/696928\n\n[16386.255096] CPU: 29 UID: 0 PID: 696928 Comm: drmgr Kdump: loaded Tainted: G B 6.11.0-rc5-nxgzip #2\n[16386.255128] Tainted: [B]=BAD_PAGE\n[16386.255148] Hardware name: IBM,9080-HEX Power11 (architected) 0x820200 0xf000007 of:IBM,FW1110.00 (NH1110_016) hv:phyp pSeries\n[16386.255181] Call Trace:\n[16386.255202] [c00000016b297660] [c0000000018ad0ac] dump_stack_lvl+0x84/0xe8 (unreliable)\n[16386.255246] [c00000016b297690] [c0000000006e8a90] print_report+0x19c/0x764\n[16386.255285] [c00000016b297760] [c0000000006e9490] kasan_report+0x128/0x1f8\n[16386.255309] [c00000016b297880] [c0000000006eb5c8] __asan_load8+0xac/0xe0\n[16386.255326] [c00000016b2978a0] [c00000000013f898] reconfig_close_windows+0x1a0/0x4e8\n[16386.255343] [c00000016b297990] [c000000000140e58] vas_migration_handler+0x3a4/0x3fc\n[16386.255368] [c00000016b297a90] [c000000000128848] pseries_migrate_partition+0x4c/0x4c4\n...\n\n[16386.256136] Allocated by task 696554 on cpu 31 at 16377.277618s:\n[16386.256149] kasan_save_stack+0x34/0x68\n[16386.256163] kasan_save_track+0x34/0x80\n[16386.256175] kasan_save_alloc_info+0x58/0x74\n[16386.256196] __kasan_slab_alloc+0xb8/0xdc\n[16386.256209] kmem_cache_alloc_noprof+0x200/0x3d0\n[16386.256225] vm_area_alloc+0x44/0x150\n[16386.256245] mmap_region+0x214/0x10c4\n[16386.256265] do_mmap+0x5fc/0x750\n[16386.256277] vm_mmap_pgoff+0x14c/0x24c\n[16386.256292] ksys_mmap_pgoff+0x20c/0x348\n[16386.256303] sys_mmap+0xd0/0x160\n...\n\n[16386.256350] Freed by task 0 on cpu 31 at 16386.204848s:\n[16386.256363] kasan_save_stack+0x34/0x68\n[16386.256374] kasan_save_track+0x34/0x80\n[16386.256384] kasan_save_free_info+0x64/0x10c\n[16386.256396] __kasan_slab_free+0x120/0x204\n[16386.256415] kmem_cache_free+0x128/0x450\n[16386.256428] vm_area_free_rcu_cb+0xa8/0xd8\n[16386.256441] rcu_do_batch+0x2c8/0xcf0\n[16386.256458] rcu_core+0x378/0x3c4\n[16386.256473] handle_softirqs+0x20c/0x60c\n[16386.256495] do_softirq_own_stack+0x6c/0x88\n[16386.256509] do_softirq_own_stack+0x58/0x88\n[16386.256521] __irq_exit_rcu+0x1a4/0x20c\n[16386.256533] irq_exit+0x20/0x38\n[16386.256544] interrupt_async_exit_prepare.constprop.0+0x18/0x2c\n...\n\n[16386.256717] Last potentially related work creation:\n[16386.256729] kasan_save_stack+0x34/0x68\n[16386.256741] __kasan_record_aux_stack+0xcc/0x12c\n[16386.256753] __call_rcu_common.constprop.0+0x94/0xd04\n[16386.256766] vm_area_free+0x28/0x3c\n[16386.256778] remove_vma+0xf4/0x114\n[16386.256797] do_vmi_align_munmap.constprop.0+0x684/0x870\n[16386.256811] __vm_munmap+0xe0/0x1f8\n[16386.256821] sys_munmap+0x54/0x6c\n[16386.256830] system_call_exception+0x1a0/0x4a0\n[16386.256841] system_call_vectored_common+0x15c/0x2ec\n\n[16386.256868] The buggy address belongs to the object at c00000014a819670\n which belongs to the cache vm_area_struct of size 168\n[16386.256887] The buggy address is located 0 bytes inside of\n freed 168-byte region [c00000014a819670, c00000014a819718)\n\n[16386.256915] The buggy address belongs to the physical page:\n[16386.256928] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a81\n[16386.256950] memcg:c0000000ba430001\n[16386.256961] anon flags: 0x43ffff800000000(node=4|zone=0|lastcpupid=0x7ffff)\n[16386.256975] page_type: 0xfdffffff(slab)\n[16386\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56765",
"url": "https://www.suse.com/security/cve/CVE-2024-56765"
},
{
"category": "external",
"summary": "SUSE Bug 1235643 for CVE-2024-56765",
"url": "https://bugzilla.suse.com/1235643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56765"
},
{
"cve": "CVE-2024-56766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56766"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc(). Calling kfree(user) will lead to a\ndouble free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56766",
"url": "https://www.suse.com/security/cve/CVE-2024-56766"
},
{
"category": "external",
"summary": "SUSE Bug 1235219 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "external",
"summary": "SUSE Bug 1240426 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1240426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-56766"
},
{
"cve": "CVE-2024-56767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56767"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset\n\nThe at_xdmac_memset_create_desc may return NULL, which will lead to a\nnull pointer dereference. For example, the len input is error, or the\natchan-\u003efree_descs_list is empty and memory is exhausted. Therefore, add\ncheck to avoid this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56767",
"url": "https://www.suse.com/security/cve/CVE-2024-56767"
},
{
"category": "external",
"summary": "SUSE Bug 1235160 for CVE-2024-56767",
"url": "https://bugzilla.suse.com/1235160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56767"
},
{
"cve": "CVE-2024-56769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg\n\nSyzbot reports [1] an uninitialized value issue found by KMSAN in\ndib3000_read_reg().\n\nLocal u8 rb[2] is used in i2c_transfer() as a read buffer; in case\nthat call fails, the buffer may end up with some undefined values.\n\nSince no elaborate error handling is expected in dib3000_write_reg(),\nsimply zero out rb buffer to mitigate the problem.\n\n[1] Syzkaller report\ndvb-usb: bulk message failed: -22 (6/0)\n=====================================================\nBUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31\n dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290\n dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline]\n dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]\n dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310\n dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110\n...\nLocal variable rb created at:\n dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54\n dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56769",
"url": "https://www.suse.com/security/cve/CVE-2024-56769"
},
{
"category": "external",
"summary": "SUSE Bug 1235155 for CVE-2024-56769",
"url": "https://bugzilla.suse.com/1235155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56769"
},
{
"cve": "CVE-2024-56774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56774"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: add a sanity check for btrfs root in btrfs_search_slot()\n\nSyzbot reports a null-ptr-deref in btrfs_search_slot().\n\nThe reproducer is using rescue=ibadroots, and the extent tree root is\ncorrupted thus the extent tree is NULL.\n\nWhen scrub tries to search the extent tree to gather the needed extent\ninfo, btrfs_search_slot() doesn\u0027t check if the target root is NULL or\nnot, resulting the null-ptr-deref.\n\nAdd sanity check for btrfs root before using it in btrfs_search_slot().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56774",
"url": "https://www.suse.com/security/cve/CVE-2024-56774"
},
{
"category": "external",
"summary": "SUSE Bug 1235653 for CVE-2024-56774",
"url": "https://bugzilla.suse.com/1235653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56774"
},
{
"cve": "CVE-2024-56775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56775"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix handling of plane refcount\n\n[Why]\nThe mechanism to backup and restore plane states doesn\u0027t maintain\nrefcount, which can cause issues if the refcount of the plane changes\nin between backup and restore operations, such as memory leaks if the\nrefcount was supposed to go down, or double frees / invalid memory\naccesses if the refcount was supposed to go up.\n\n[How]\nCache and re-apply current refcount when restoring plane states.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56775",
"url": "https://www.suse.com/security/cve/CVE-2024-56775"
},
{
"category": "external",
"summary": "SUSE Bug 1235657 for CVE-2024-56775",
"url": "https://bugzilla.suse.com/1235657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56775"
},
{
"cve": "CVE-2024-56776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56776"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56776",
"url": "https://www.suse.com/security/cve/CVE-2024-56776"
},
{
"category": "external",
"summary": "SUSE Bug 1235647 for CVE-2024-56776",
"url": "https://bugzilla.suse.com/1235647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56776"
},
{
"cve": "CVE-2024-56777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56777"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56777",
"url": "https://www.suse.com/security/cve/CVE-2024-56777"
},
{
"category": "external",
"summary": "SUSE Bug 1235641 for CVE-2024-56777",
"url": "https://bugzilla.suse.com/1235641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56777"
},
{
"cve": "CVE-2024-56778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56778",
"url": "https://www.suse.com/security/cve/CVE-2024-56778"
},
{
"category": "external",
"summary": "SUSE Bug 1235635 for CVE-2024-56778",
"url": "https://bugzilla.suse.com/1235635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56778"
},
{
"cve": "CVE-2024-56779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\n\nThe action force umount(umount -f) will attempt to kill all rpc_task even\numount operation may ultimately fail if some files remain open.\nConsequently, if an action attempts to open a file, it can potentially\nsend two rpc_task to nfs server.\n\n NFS CLIENT\nthread1 thread2\nopen(\"file\")\n...\nnfs4_do_open\n _nfs4_do_open\n _nfs4_open_and_get_state\n _nfs4_proc_open\n nfs4_run_open_task\n /* rpc_task1 */\n rpc_run_task\n rpc_wait_for_completion_task\n\n umount -f\n nfs_umount_begin\n rpc_killall_tasks\n rpc_signal_task\n rpc_task1 been wakeup\n and return -512\n _nfs4_do_open // while loop\n ...\n nfs4_run_open_task\n /* rpc_task2 */\n rpc_run_task\n rpc_wait_for_completion_task\n\nWhile processing an open request, nfsd will first attempt to find or\nallocate an nfs4_openowner. If it finds an nfs4_openowner that is not\nmarked as NFS4_OO_CONFIRMED, this nfs4_openowner will released. Since\ntwo rpc_task can attempt to open the same file simultaneously from the\nclient to server, and because two instances of nfsd can run\nconcurrently, this situation can lead to lots of memory leak.\nAdditionally, when we echo 0 to /proc/fs/nfsd/threads, warning will be\ntriggered.\n\n NFS SERVER\nnfsd1 nfsd2 echo 0 \u003e /proc/fs/nfsd/threads\n\nnfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // alloc oo1, stateid1\n nfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // find oo1, without NFS4_OO_CONFIRMED\n release_openowner\n unhash_openowner_locked\n list_del_init(\u0026oo-\u003eoo_perclient)\n // cannot find this oo\n // from client, LEAK!!!\n alloc_stateowner // alloc oo2\n\n nfsd4_process_open2\n init_open_stateid\n // associate oo1\n // with stateid1, stateid1 LEAK!!!\n nfs4_get_vfs_file\n // alloc nfsd_file1 and nfsd_file_mark1\n // all LEAK!!!\n\n nfsd4_process_open2\n ...\n\n write_threads\n ...\n nfsd_destroy_serv\n nfsd_shutdown_net\n nfs4_state_shutdown_net\n nfs4_state_destroy_net\n destroy_client\n __destroy_client\n // won\u0027t find oo1!!!\n nfsd_shutdown_generic\n nfsd_file_cache_shutdown\n kmem_cache_destroy\n for nfsd_file_slab\n and nfsd_file_mark_slab\n // bark since nfsd_file1\n // and nfsd_file_mark1\n // still alive\n\n=======================================================================\nBUG nfsd_file (Not tainted): Objects remaining in nfsd_file on\n__kmem_cache_shutdown()\n-----------------------------------------------------------------------\n\nSlab 0xffd4000004438a80 objects=34 used=1 fp=0xff11000110e2ad28\nflags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff)\nCPU: 4 UID: 0 PID: 757 Comm: sh Not tainted 6.12.0-rc6+ #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dum\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56779",
"url": "https://www.suse.com/security/cve/CVE-2024-56779"
},
{
"category": "external",
"summary": "SUSE Bug 1235632 for CVE-2024-56779",
"url": "https://bugzilla.suse.com/1235632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: flush quota_release_work upon quota writeback\n\nOne of the paths quota writeback is called from is:\n\nfreeze_super()\n sync_filesystem()\n ext4_sync_fs()\n dquot_writeback_dquots()\n\nSince we currently don\u0027t always flush the quota_release_work queue in\nthis path, we can end up with the following race:\n\n 1. dquot are added to releasing_dquots list during regular operations.\n 2. FS Freeze starts, however, this does not flush the quota_release_work queue.\n 3. Freeze completes.\n 4. Kernel eventually tries to flush the workqueue while FS is frozen which\n hits a WARN_ON since transaction gets started during frozen state:\n\n ext4_journal_check_start+0x28/0x110 [ext4] (unreliable)\n __ext4_journal_start_sb+0x64/0x1c0 [ext4]\n ext4_release_dquot+0x90/0x1d0 [ext4]\n quota_release_workfn+0x43c/0x4d0\n\nWhich is the following line:\n\n WARN_ON(sb-\u003es_writers.frozen == SB_FREEZE_COMPLETE);\n\nWhich ultimately results in generic/390 failing due to dmesg\nnoise. This was detected on powerpc machine 15 cores.\n\nTo avoid this, make sure to flush the workqueue during\ndquot_writeback_dquots() so we dont have any pending workitems after\nfreeze.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56780",
"url": "https://www.suse.com/security/cve/CVE-2024-56780"
},
{
"category": "external",
"summary": "SUSE Bug 1235650 for CVE-2024-56780",
"url": "https://bugzilla.suse.com/1235650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-56787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56787"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: imx8m: Probe the SoC driver as platform driver\n\nWith driver_async_probe=* on kernel command line, the following trace is\nproduced because on i.MX8M Plus hardware because the soc-imx8m.c driver\ncalls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock\ndriver is not yet probed. This was not detected during regular testing\nwithout driver_async_probe.\n\nConvert the SoC code to platform driver and instantiate a platform device\nin its current device_initcall() to probe the platform driver. Rework\n.soc_revision callback to always return valid error code and return SoC\nrevision via parameter. This way, if anything in the .soc_revision callback\nreturn -EPROBE_DEFER, it gets propagated to .probe and the .probe will get\nretried later.\n\n\"\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180\nCPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603\nHardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : imx8mm_soc_revision+0xdc/0x180\nlr : imx8mm_soc_revision+0xd0/0x180\nsp : ffff8000821fbcc0\nx29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120\nx26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311\nx23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb\nx20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff\nx17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8\nx14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801\nx11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c\nx8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3\nx5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000\nx2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb\nCall trace:\n imx8mm_soc_revision+0xdc/0x180\n imx8_soc_init+0xb0/0x1e0\n do_one_initcall+0x94/0x1a8\n kernel_init_freeable+0x240/0x2a8\n kernel_init+0x28/0x140\n ret_from_fork+0x10/0x20\n---[ end trace 0000000000000000 ]---\nSoC: i.MX8MP revision 1.1\n\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56787",
"url": "https://www.suse.com/security/cve/CVE-2024-56787"
},
{
"category": "external",
"summary": "SUSE Bug 1235663 for CVE-2024-56787",
"url": "https://bugzilla.suse.com/1235663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-56787"
},
{
"cve": "CVE-2024-57791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check return value of sock_recvmsg when draining clc data\n\nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the\nlength of msg should be received from network and the value should not be\nfully trusted as it is from the network. Once the value of length exceeds\nthe value of buflen in function smc_clc_wait_msg it may run into deadloop\nwhen trying to drain the remaining data exceeding buflen.\n\nThis patch checks the return value of sock_recvmsg when draining data in\ncase of deadloop in draining.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57791",
"url": "https://www.suse.com/security/cve/CVE-2024-57791"
},
{
"category": "external",
"summary": "SUSE Bug 1235759 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "external",
"summary": "SUSE Bug 1235760 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235760"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57791"
},
{
"cve": "CVE-2024-57792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57792"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57792",
"url": "https://www.suse.com/security/cve/CVE-2024-57792"
},
{
"category": "external",
"summary": "SUSE Bug 1235764 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "external",
"summary": "SUSE Bug 1236568 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1236568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57792"
},
{
"cve": "CVE-2024-57793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57793"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors\n\nIn CoCo VMs it is possible for the untrusted host to cause\nset_memory_decrypted() to fail such that an error is returned\nand the resulting memory is shared. Callers need to take care\nto handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional\nor security issues.\n\nLeak the decrypted memory when set_memory_decrypted() fails,\nand don\u0027t need to print an error since set_memory_decrypted()\nwill call WARN_ONCE().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57793",
"url": "https://www.suse.com/security/cve/CVE-2024-57793"
},
{
"category": "external",
"summary": "SUSE Bug 1235768 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "external",
"summary": "SUSE Bug 1235769 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57793"
},
{
"cve": "CVE-2024-57795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Remove the direct link to net_device\n\nThe similar patch in siw is in the link:\nhttps://git.kernel.org/rdma/rdma/c/16b87037b48889\n\nThis problem also occurred in RXE. The following analyze this problem.\nIn the following Call Traces:\n\"\nBUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\nRead of size 4 at addr ffff8880554640b0 by task kworker/1:4/5295\n\nCPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted\n6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0\nHardware name: Google Compute Engine/Google Compute Engine,\nBIOS Google 09/13/2024\nWorkqueue: infiniband ib_cache_event_task\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\n rxe_query_port+0x12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60\n __ib_query_port drivers/infiniband/core/device.c:2111 [inline]\n ib_query_port+0x168/0x7d0 drivers/infiniband/core/device.c:2143\n ib_cache_update+0x1a9/0xb80 drivers/infiniband/core/cache.c:1494\n ib_cache_event_task+0xf3/0x1e0 drivers/infiniband/core/cache.c:1568\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f2/0x390 kernel/kthread.c:389\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\"\n\n1). In the link [1],\n\n\"\n infiniband syz2: set down\n\"\n\nThis means that on 839.350575, the event ib_cache_event_task was sent andi\nqueued in ib_wq.\n\n2). In the link [1],\n\n\"\n team0 (unregistering): Port device team_slave_0 removed\n\"\n\nIt indicates that before 843.251853, the net device should be freed.\n\n3). In the link [1],\n\n\"\n BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0\n\"\n\nThis means that on 850.559070, this slab-use-after-free problem occurred.\n\nIn all, on 839.350575, the event ib_cache_event_task was sent and queued\nin ib_wq,\n\nbefore 843.251853, the net device veth was freed.\n\non 850.559070, this event was executed, and the mentioned freed net device\nwas called. Thus, the above call trace occurred.\n\n[1] https://syzkaller.appspot.com/x/log.txt?x=12e7025f980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57795",
"url": "https://www.suse.com/security/cve/CVE-2024-57795"
},
{
"category": "external",
"summary": "SUSE Bug 1235906 for CVE-2024-57795",
"url": "https://bugzilla.suse.com/1235906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57795"
},
{
"cve": "CVE-2024-57798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57798"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()\n\nWhile receiving an MST up request message from one thread in\ndrm_dp_mst_handle_up_req(), the MST topology could be removed from\nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing\nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.\nThis could lead to a NULL deref/use-after-free of mst_primary in\ndrm_dp_mst_handle_up_req().\n\nAvoid the above by holding a reference for mst_primary in\ndrm_dp_mst_handle_up_req() while it\u0027s used.\n\nv2: Fix kfreeing the request if getting an mst_primary reference fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57798",
"url": "https://www.suse.com/security/cve/CVE-2024-57798"
},
{
"category": "external",
"summary": "SUSE Bug 1235818 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "external",
"summary": "SUSE Bug 1235819 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57798"
},
{
"cve": "CVE-2024-57801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Skip restore TC rules for vport rep without loaded flag\n\nDuring driver unload, unregister_netdev is called after unloading\nvport rep. So, the mlx5e_rep_priv is already freed while trying to get\nrpriv-\u003enetdev, or walk rpriv-\u003etc_ht, which results in use-after-free.\nSo add the checking to make sure access the data of vport rep which is\nstill loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57801",
"url": "https://www.suse.com/security/cve/CVE-2024-57801"
},
{
"category": "external",
"summary": "SUSE Bug 1235940 for CVE-2024-57801",
"url": "https://bugzilla.suse.com/1235940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57801"
},
{
"cve": "CVE-2024-57802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: check buffer length before accessing it\n\nSyzkaller reports an uninit value read from ax25cmp when sending raw message\nthrough ieee802154 implementation.\n\n=====================================================\nBUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601\n nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774\n nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\n xmit_one net/core/dev.c:3548 [inline]\n dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564\n __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\n raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x318/0x740 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1286 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2780\n sock_alloc_send_skb include/net/sock.h:1884 [inline]\n raw_sendmsg+0x36d/0xc10 net/ieee802154/socket.c:282\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nCPU: 0 PID: 5037 Comm: syz-executor166 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\n=====================================================\n\nThis issue occurs because the skb buffer is too small, and it\u0027s actual\nallocation is aligned. This hides an actual issue, which is that nr_route_frame\ndoes not validate the buffer size before using it.\n\nFix this issue by checking skb-\u003elen before accessing any fields in skb-\u003edata.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57802",
"url": "https://www.suse.com/security/cve/CVE-2024-57802"
},
{
"category": "external",
"summary": "SUSE Bug 1235941 for CVE-2024-57802",
"url": "https://bugzilla.suse.com/1235941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57802"
},
{
"cve": "CVE-2024-57804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57804"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs\n\nThe driver, through the SAS transport, exposes a sysfs interface to\nenable/disable PHYs in a controller/expander setup. When multiple PHYs\nare disabled and enabled in rapid succession, the persistent and current\nconfig pages related to SAS IO unit/SAS Expander pages could get\ncorrupted.\n\nUse separate memory for each config request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57804",
"url": "https://www.suse.com/security/cve/CVE-2024-57804"
},
{
"category": "external",
"summary": "SUSE Bug 1235779 for CVE-2024-57804",
"url": "https://bugzilla.suse.com/1235779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57804"
},
{
"cve": "CVE-2024-57809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: imx6: Fix suspend/resume support on i.MX6QDL\n\nThe suspend/resume functionality is currently broken on the i.MX6QDL\nplatform, as documented in the NXP errata (ERR005723):\n\n https://www.nxp.com/docs/en/errata/IMX6DQCE.pdf\n\nThis patch addresses the issue by sharing most of the suspend/resume\nsequences used by other i.MX devices, while avoiding modifications to\ncritical registers that disrupt the PCIe functionality. It targets the\nsame problem as the following downstream commit:\n\n https://github.com/nxp-imx/linux-imx/commit/4e92355e1f79d225ea842511fcfd42b343b32995\n\nUnlike the downstream commit, this patch also resets the connected PCIe\ndevice if possible. Without this reset, certain drivers, such as ath10k\nor iwlwifi, will crash on resume. The device reset is also done by the\ndriver on other i.MX platforms, making this patch consistent with\nexisting practices.\n\nUpon resuming, the kernel will hang and display an error. Here\u0027s an\nexample of the error encountered with the ath10k driver:\n\n ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible\n Unhandled fault: imprecise external abort (0x1406) at 0x0106f944\n\nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a\nPCIe device is connected.\n\n[kwilczynski: commit log, added tag for stable releases]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57809",
"url": "https://www.suse.com/security/cve/CVE-2024-57809"
},
{
"category": "external",
"summary": "SUSE Bug 1235793 for CVE-2024-57809",
"url": "https://bugzilla.suse.com/1235793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57809"
},
{
"cve": "CVE-2024-57838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Mark IRQ entries to fix stack depot warnings\n\nThe stack depot filters out everything outside of the top interrupt\ncontext as an uninteresting or irrelevant part of the stack traces. This\nhelps with stack trace de-duplication, avoiding an explosion of saved\nstack traces that share the same IRQ context code path but originate\nfrom different randomly interrupted points, eventually exhausting the\nstack depot.\n\nFiltering uses in_irqentry_text() to identify functions within the\n.irqentry.text and .softirqentry.text sections, which then become the\nlast stack trace entries being saved.\n\nWhile __do_softirq() is placed into the .softirqentry.text section by\ncommon code, populating .irqentry.text is architecture-specific.\n\nCurrently, the .irqentry.text section on s390 is empty, which prevents\nstack depot filtering and de-duplication and could result in warnings\nlike:\n\nStack depot reached limit capacity\nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8\n\nwith PREEMPT and KASAN enabled.\n\nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into\nthe .irqentry.text section and updating the kprobes blacklist to include\nthe .irqentry.text section.\n\nThis is done only for asynchronous interrupts and explicitly not for\nprogram checks, which are synchronous and where the context beyond the\nprogram check is important to preserve. Despite machine checks being\nsomewhat in between, they are extremely rare, and preserving context\nwhen possible is also of value.\n\nSVCs and Restart Interrupts are not relevant, one being always at the\nboundary to user space and the other being a one-time thing.\n\nIRQ entries filtering is also optionally used in ftrace function graph,\nwhere the same logic applies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57838",
"url": "https://www.suse.com/security/cve/CVE-2024-57838"
},
{
"category": "external",
"summary": "SUSE Bug 1235798 for CVE-2024-57838",
"url": "https://bugzilla.suse.com/1235798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57838"
},
{
"cve": "CVE-2024-57849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_sf: Handle CPU hotplug remove during sampling\n\nCPU hotplug remove handling triggers the following function\ncall sequence:\n\n CPUHP_AP_PERF_S390_SF_ONLINE --\u003e s390_pmu_sf_offline_cpu()\n ...\n CPUHP_AP_PERF_ONLINE --\u003e perf_event_exit_cpu()\n\nThe s390 CPUMF sampling CPU hotplug handler invokes:\n\n s390_pmu_sf_offline_cpu()\n +--\u003e cpusf_pmu_setup()\n +--\u003e setup_pmc_cpu()\n +--\u003e deallocate_buffers()\n\nThis function de-allocates all sampling data buffers (SDBs) allocated\nfor that CPU at event initialization. It also clears the\nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.\n\nWith the event still being active on the removed CPU, the CPU event\nhotplug support in kernel performance subsystem triggers the\nfollowing function calls on the removed CPU:\n\n perf_event_exit_cpu()\n +--\u003e perf_event_exit_cpu_context()\n +--\u003e __perf_event_exit_context()\n\t +--\u003e __perf_remove_from_context()\n\t +--\u003e event_sched_out()\n\t +--\u003e cpumsf_pmu_del()\n\t +--\u003e cpumsf_pmu_stop()\n +--\u003e hw_perf_event_update()\n\nto stop and remove the event. During removal of the event, the\nsampling device driver tries to read out the remaining samples from\nthe sample data buffers (SDBs). But they have already been freed\n(and may have been re-assigned). This may lead to a use after free\nsituation in which case the samples are most likely invalid. In the\nbest case the memory has not been reassigned and still contains\nvalid data.\n\nRemedy this situation and check if the CPU is still in reserved\nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been\nreleased an contain valid data. This is always the case when\nthe event is removed (and no CPU hotplug off occured).\nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57849",
"url": "https://www.suse.com/security/cve/CVE-2024-57849"
},
{
"category": "external",
"summary": "SUSE Bug 1235814 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "external",
"summary": "SUSE Bug 1235815 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57849"
},
{
"cve": "CVE-2024-57850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: Prevent rtime decompress memory corruption\n\nThe rtime decompression routine does not fully check bounds during the\nentirety of the decompression pass and can corrupt memory outside the\ndecompression buffer if the compressed data is corrupted. This adds the\nrequired check to prevent this failure mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57850",
"url": "https://www.suse.com/security/cve/CVE-2024-57850"
},
{
"category": "external",
"summary": "SUSE Bug 1235812 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "external",
"summary": "SUSE Bug 1235813 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57850"
},
{
"cve": "CVE-2024-57857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Remove direct link to net_device\n\nDo not manage a per device direct link to net_device. Rely\non associated ib_devices net_device management, not doubling\nthe effort locally. A badly managed local link to net_device\nwas causing a \u0027KASAN: slab-use-after-free\u0027 exception during\nsiw_query_port() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57857",
"url": "https://www.suse.com/security/cve/CVE-2024-57857"
},
{
"category": "external",
"summary": "SUSE Bug 1235946 for CVE-2024-57857",
"url": "https://bugzilla.suse.com/1235946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57857"
},
{
"cve": "CVE-2024-57874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57874"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL\n\nCurrently tagged_addr_ctrl_set() doesn\u0027t initialize the temporary \u0027ctrl\u0027\nvariable, and a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently tagged_addr_ctrl_set() will consume an\narbitrary value, potentially leaking up to 64 bits of memory from the\nkernel stack. The read is limited to a specific slot on the stack, and\nthe issue does not provide a write mechanism.\n\nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and\nrejects other values, a partial SETREGSET attempt will randomly succeed\nor fail depending on the value of the uninitialized value, and the\nexposure is significantly limited.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\nvalue of the tagged address ctrl will be retained.\n\nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the\nuser_aarch64_view used by a native AArch64 task to manipulate another\nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error\nvalue when called for a compat task, tagged_addr_ctrl_get() and\ntagged_addr_ctrl_set() should never observe an error value from\nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that\nsuch an error would be unexpected, and error handlnig is not missing in\neither case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57874",
"url": "https://www.suse.com/security/cve/CVE-2024-57874"
},
{
"category": "external",
"summary": "SUSE Bug 1235808 for CVE-2024-57874",
"url": "https://bugzilla.suse.com/1235808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-57874"
},
{
"cve": "CVE-2024-57876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57876"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix resetting msg rx state after topology removal\n\nIf the MST topology is removed during the reception of an MST down reply\nor MST up request sideband message, the\ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset\nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with\nthe reading/parsing of the message from another thread via\ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is\npossible since the reader/parser doesn\u0027t hold any lock while accessing\nthe reception state. This in turn can lead to a memory corruption in the\nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST\nsideband message body length check\").\n\nFix the above by resetting the message reception state if needed before\nreading/parsing a message. Another solution would be to hold the\ndrm_dp_mst_topology_mgr::lock for the whole duration of the message\nreception/parsing in drm_dp_mst_handle_down_rep() and\ndrm_dp_mst_handle_up_req(), however this would require a bigger change.\nSince the fix is also needed for stable, opting for the simpler solution\nin this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57876",
"url": "https://www.suse.com/security/cve/CVE-2024-57876"
},
{
"category": "external",
"summary": "SUSE Bug 1235806 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "external",
"summary": "SUSE Bug 1235807 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57876"
},
{
"cve": "CVE-2024-57882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57882"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: fix TCP options overflow.\n\nSyzbot reported the following splat:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]\nCPU: 1 UID: 0 PID: 5836 Comm: sshd Not tainted 6.13.0-rc3-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\nRIP: 0010:_compound_head include/linux/page-flags.h:242 [inline]\nRIP: 0010:put_page+0x23/0x260 include/linux/mm.h:1552\nCode: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 f8 5e 12 f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 \u003c80\u003e 3c 28 00 74 08 48 89 df e8 8f c7 78 f8 48 8b 1b 48 89 de 48 83\nRSP: 0000:ffffc90003916c90 EFLAGS: 00010202\nRAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888030458000\nRDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000\nRBP: dffffc0000000000 R08: ffffffff898ca81d R09: 1ffff110054414ac\nR10: dffffc0000000000 R11: ffffed10054414ad R12: 0000000000000007\nR13: ffff88802a20a542 R14: 0000000000000000 R15: 0000000000000000\nFS: 00007f34f496e800(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f9d6ec9ec28 CR3: 000000004d260000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_page_unref include/linux/skbuff_ref.h:43 [inline]\n __skb_frag_unref include/linux/skbuff_ref.h:56 [inline]\n skb_release_data+0x483/0x8a0 net/core/skbuff.c:1119\n skb_release_all net/core/skbuff.c:1190 [inline]\n __kfree_skb+0x55/0x70 net/core/skbuff.c:1204\n tcp_clean_rtx_queue net/ipv4/tcp_input.c:3436 [inline]\n tcp_ack+0x2442/0x6bc0 net/ipv4/tcp_input.c:4032\n tcp_rcv_state_process+0x8eb/0x44e0 net/ipv4/tcp_input.c:6805\n tcp_v4_do_rcv+0x77d/0xc70 net/ipv4/tcp_ipv4.c:1939\n tcp_v4_rcv+0x2dc0/0x37f0 net/ipv4/tcp_ipv4.c:2351\n ip_protocol_deliver_rcu+0x22e/0x440 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x341/0x5f0 net/ipv4/ip_input.c:233\n NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314\n NF_HOOK+0x3a4/0x450 include/linux/netfilter.h:314\n __netif_receive_skb_one_core net/core/dev.c:5672 [inline]\n __netif_receive_skb+0x2bf/0x650 net/core/dev.c:5785\n process_backlog+0x662/0x15b0 net/core/dev.c:6117\n __napi_poll+0xcb/0x490 net/core/dev.c:6883\n napi_poll net/core/dev.c:6952 [inline]\n net_rx_action+0x89b/0x1240 net/core/dev.c:7074\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n __do_softirq kernel/softirq.c:595 [inline]\n invoke_softirq kernel/softirq.c:435 [inline]\n __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662\n irq_exit_rcu+0x9/0x30 kernel/softirq.c:678\n instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]\n sysvec_apic_timer_interrupt+0x57/0xc0 arch/x86/kernel/apic/apic.c:1049\n asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702\nRIP: 0033:0x7f34f4519ad5\nCode: 85 d2 74 0d 0f 10 02 48 8d 54 24 20 0f 11 44 24 20 64 8b 04 25 18 00 00 00 85 c0 75 27 41 b8 08 00 00 00 b8 0f 01 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 76 75 48 8b 15 24 73 0d 00 f7 d8 64 89 02 48 83\nRSP: 002b:00007ffec5b32ce0 EFLAGS: 00000246\nRAX: 0000000000000001 RBX: 00000000000668a0 RCX: 00007f34f4519ad5\nRDX: 00007ffec5b32d00 RSI: 0000000000000004 RDI: 0000564f4bc6cae0\nRBP: 0000564f4bc6b5a0 R08: 0000000000000008 R09: 0000000000000000\nR10: 00007ffec5b32de8 R11: 0000000000000246 R12: 0000564f48ea8aa4\nR13: 0000000000000001 R14: 0000564f48ea93e8 R15: 00007ffec5b32d68\n \u003c/TASK\u003e\n\nEric noted a probable shinfo-\u003enr_frags corruption, which indeed\noccurs.\n\nThe root cause is a buggy MPTCP option len computation in some\ncircumstances: the ADD_ADDR option should be mutually exclusive\nwith DSS since the blamed commit.\n\nStill, mptcp_established_options_add_addr() tries to set the\nrelevant info in mptcp_out_options, if \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57882",
"url": "https://www.suse.com/security/cve/CVE-2024-57882"
},
{
"category": "external",
"summary": "SUSE Bug 1235914 for CVE-2024-57882",
"url": "https://bugzilla.suse.com/1235914"
},
{
"category": "external",
"summary": "SUSE Bug 1235916 for CVE-2024-57882",
"url": "https://bugzilla.suse.com/1235916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57882"
},
{
"cve": "CVE-2024-57884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()\n\nThe task sometimes continues looping in throttle_direct_reclaim() because\nallow_direct_reclaim(pgdat) keeps returning false. \n\n #0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac\n #1 [ffff80002cb6f900] __schedule at ffff800008abbd1c\n #2 [ffff80002cb6f990] schedule at ffff800008abc50c\n #3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550\n #4 [ffff80002cb6fa20] try_to_free_pages at ffff800008277b68\n #5 [ffff80002cb6fae0] __alloc_pages_nodemask at ffff8000082c4660\n #6 [ffff80002cb6fc50] alloc_pages_vma at ffff8000082e4a98\n #7 [ffff80002cb6fca0] do_anonymous_page at ffff80000829f5a8\n #8 [ffff80002cb6fce0] __handle_mm_fault at ffff8000082a5974\n #9 [ffff80002cb6fd90] handle_mm_fault at ffff8000082a5bd4\n\nAt this point, the pgdat contains the following two zones:\n\n NODE: 4 ZONE: 0 ADDR: ffff00817fffe540 NAME: \"DMA32\"\n SIZE: 20480 MIN/LOW/HIGH: 11/28/45\n VM_STAT:\n NR_FREE_PAGES: 359\n NR_ZONE_INACTIVE_ANON: 18813\n NR_ZONE_ACTIVE_ANON: 0\n NR_ZONE_INACTIVE_FILE: 50\n NR_ZONE_ACTIVE_FILE: 0\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\n NODE: 4 ZONE: 1 ADDR: ffff00817fffec00 NAME: \"Normal\"\n SIZE: 8454144 PRESENT: 98304 MIN/LOW/HIGH: 68/166/264\n VM_STAT:\n NR_FREE_PAGES: 146\n NR_ZONE_INACTIVE_ANON: 94668\n NR_ZONE_ACTIVE_ANON: 3\n NR_ZONE_INACTIVE_FILE: 735\n NR_ZONE_ACTIVE_FILE: 78\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\nIn allow_direct_reclaim(), while processing ZONE_DMA32, the sum of\ninactive/active file-backed pages calculated in zone_reclaimable_pages()\nbased on the result of zone_page_state_snapshot() is zero. \n\nAdditionally, since this system lacks swap, the calculation of inactive/\nactive anonymous pages is skipped.\n\n crash\u003e p nr_swap_pages\n nr_swap_pages = $1937 = {\n counter = 0\n }\n\nAs a result, ZONE_DMA32 is deemed unreclaimable and skipped, moving on to\nthe processing of the next zone, ZONE_NORMAL, despite ZONE_DMA32 having\nfree pages significantly exceeding the high watermark.\n\nThe problem is that the pgdat-\u003ekswapd_failures hasn\u0027t been incremented.\n\n crash\u003e px ((struct pglist_data *) 0xffff00817fffe540)-\u003ekswapd_failures\n $1935 = 0x0\n\nThis is because the node deemed balanced. The node balancing logic in\nbalance_pgdat() evaluates all zones collectively. If one or more zones\n(e.g., ZONE_DMA32) have enough free pages to meet their watermarks, the\nentire node is deemed balanced. This causes balance_pgdat() to exit early\nbefore incrementing the kswapd_failures, as it considers the overall\nmemory state acceptable, even though some zones (like ZONE_NORMAL) remain\nunder significant pressure.\n\n\nThe patch ensures that zone_reclaimable_pages() includes free pages\n(NR_FREE_PAGES) in its calculation when no other reclaimable pages are\navailable (e.g., file-backed or anonymous pages). This change prevents\nzones like ZONE_DMA32, which have sufficient free pages, from being\nmistakenly deemed unreclaimable. By doing so, the patch ensures proper\nnode balancing, avoids masking pressure on other zones like ZONE_NORMAL,\nand prevents infinite loops in throttle_direct_reclaim() caused by\nallow_direct_reclaim(pgdat) repeatedly returning false.\n\n\nThe kernel hangs due to a task stuck in throttle_direct_reclaim(), caused\nby a node being incorrectly deemed balanced despite pressure in certain\nzones, such as ZONE_NORMAL. This issue arises from\nzone_reclaimable_pages\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57884",
"url": "https://www.suse.com/security/cve/CVE-2024-57884"
},
{
"category": "external",
"summary": "SUSE Bug 1235948 for CVE-2024-57884",
"url": "https://bugzilla.suse.com/1235948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57884"
},
{
"cve": "CVE-2024-57887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()\n\nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and\nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue\nby dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()\nin error path of probe() and also in the remove().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57887",
"url": "https://www.suse.com/security/cve/CVE-2024-57887"
},
{
"category": "external",
"summary": "SUSE Bug 1235952 for CVE-2024-57887",
"url": "https://bugzilla.suse.com/1235952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57887"
},
{
"cve": "CVE-2024-57888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57888"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker\n\nAfter commit\n746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")\namdgpu started seeing the following warning:\n\n [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu]\n...\n [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched]\n...\n [ ] Call Trace:\n [ ] \u003cTASK\u003e\n...\n [ ] ? check_flush_dependency+0xf5/0x110\n...\n [ ] cancel_delayed_work_sync+0x6e/0x80\n [ ] amdgpu_gfx_off_ctrl+0xab/0x140 [amdgpu]\n [ ] amdgpu_ring_alloc+0x40/0x50 [amdgpu]\n [ ] amdgpu_ib_schedule+0xf4/0x810 [amdgpu]\n [ ] ? drm_sched_run_job_work+0x22c/0x430 [gpu_sched]\n [ ] amdgpu_job_run+0xaa/0x1f0 [amdgpu]\n [ ] drm_sched_run_job_work+0x257/0x430 [gpu_sched]\n [ ] process_one_work+0x217/0x720\n...\n [ ] \u003c/TASK\u003e\n\nThe intent of the verifcation done in check_flush_depedency is to ensure\nforward progress during memory reclaim, by flagging cases when either a\nmemory reclaim process, or a memory reclaim work item is flushed from a\ncontext not marked as memory reclaim safe.\n\nThis is correct when flushing, but when called from the\ncancel(_delayed)_work_sync() paths it is a false positive because work is\neither already running, or will not be running at all. Therefore\ncancelling it is safe and we can relax the warning criteria by letting the\nhelper know of the calling context.\n\nReferences: 746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57888",
"url": "https://www.suse.com/security/cve/CVE-2024-57888"
},
{
"category": "external",
"summary": "SUSE Bug 1235918 for CVE-2024-57888",
"url": "https://bugzilla.suse.com/1235918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57888"
},
{
"cve": "CVE-2024-57890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping. Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap. The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it\u0027s fine on\n64bit systems.\n\nThis patch does two things. First, I\u0027ve re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math. Then I\u0027ve modified\nall the callers to use size_mul() for the multiplications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57890",
"url": "https://www.suse.com/security/cve/CVE-2024-57890"
},
{
"category": "external",
"summary": "SUSE Bug 1235919 for CVE-2024-57890",
"url": "https://bugzilla.suse.com/1235919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57890"
},
{
"cve": "CVE-2024-57892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57892"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv\n\nWhen mounting ocfs2 and then remounting it as read-only, a\nslab-use-after-free occurs after the user uses a syscall to\nquota_getnextquota. Specifically, sb_dqinfo(sb, type)-\u003edqi_priv is the\ndangling pointer.\n\nDuring the remounting process, the pointer dqi_priv is freed but is never\nset as null leaving it to be accessed. Additionally, the read-only option\nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the\nDQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the\nnext quota, the function ocfs2_get_next_id is called and only checks the\nquota usage flags and not the quota suspended flags.\n\nTo fix this, I set dqi_priv to null when it is freed after remounting with\nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.\n\n[akpm@linux-foundation.org: coding-style cleanups]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57892",
"url": "https://www.suse.com/security/cve/CVE-2024-57892"
},
{
"category": "external",
"summary": "SUSE Bug 1235964 for CVE-2024-57892",
"url": "https://bugzilla.suse.com/1235964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57892"
},
{
"cve": "CVE-2024-57893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix races at processing SysEx messages\n\nOSS sequencer handles the SysEx messages split in 6 bytes packets, and\nALSA sequencer OSS layer tries to combine those. It stores the data\nin the internal buffer and this access is racy as of now, which may\nlead to the out-of-bounds access.\n\nAs a temporary band-aid fix, introduce a mutex for serializing the\nprocess of the SysEx message packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57893",
"url": "https://www.suse.com/security/cve/CVE-2024-57893"
},
{
"category": "external",
"summary": "SUSE Bug 1235920 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "external",
"summary": "SUSE Bug 1235921 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57893"
},
{
"cve": "CVE-2024-57896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57896",
"url": "https://www.suse.com/security/cve/CVE-2024-57896"
},
{
"category": "external",
"summary": "SUSE Bug 1235965 for CVE-2024-57896",
"url": "https://bugzilla.suse.com/1235965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57896"
},
{
"cve": "CVE-2024-57897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Correct the migration DMA map direction\n\nThe SVM DMA device map direction should be set the same as\nthe DMA unmap setting, otherwise the DMA core will report\nthe following warning.\n\nBefore finialize this solution, there\u0027re some discussion on\nthe DMA mapping type(stream-based or coherent) in this KFD\nmigration case, followed by https://lore.kernel.org/all/04d4ab32\n-45a1-4b88-86ee-fb0f35a0ca40@amd.com/T/.\n\nAs there\u0027s no dma_sync_single_for_*() in the DMA buffer accessed\nthat because this migration operation should be sync properly and\nautomatically. Give that there\u0027s might not be a performance problem\nin various cache sync policy of DMA sync. Therefore, in order to\nsimplify the DMA direction setting alignment, let\u0027s set the DMA map\ndirection as BIDIRECTIONAL.\n\n[ 150.834218] WARNING: CPU: 8 PID: 1812 at kernel/dma/debug.c:1028 check_unmap+0x1cc/0x930\n[ 150.834225] Modules linked in: amdgpu(OE) amdxcp drm_exec(OE) gpu_sched drm_buddy(OE) drm_ttm_helper(OE) ttm(OE) drm_suballoc_helper(OE) drm_display_helper(OE) drm_kms_helper(OE) i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc sch_fq_codel intel_rapl_msr amd_atl intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd snd_pci_acp6x snd_hda_codec snd_acp_config snd_hda_core snd_hwdep snd_soc_acpi kvm_amd sunrpc snd_pcm kvm binfmt_misc snd_seq_midi crct10dif_pclmul snd_seq_midi_event ghash_clmulni_intel sha512_ssse3 snd_rawmidi nls_iso8859_1 sha256_ssse3 sha1_ssse3 snd_seq aesni_intel snd_seq_device crypto_simd snd_timer cryptd input_leds\n[ 150.834310] wmi_bmof serio_raw k10temp rapl snd sp5100_tco ipmi_devintf soundcore ccp ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport efi_pstore drm(OE) ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 150.834354] CPU: 8 PID: 1812 Comm: rocrtst64 Tainted: G OE 6.10.0-custom #492\n[ 150.834358] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 150.834360] RIP: 0010:check_unmap+0x1cc/0x930\n[ 150.834363] Code: c0 4c 89 4d c8 e8 34 bf 86 00 4c 8b 4d c8 4c 8b 45 c0 48 8b 4d b8 48 89 c6 41 57 4c 89 ea 48 c7 c7 80 49 b4 84 e8 b4 81 f3 ff \u003c0f\u003e 0b 48 c7 c7 04 83 ac 84 e8 76 ba fc ff 41 8b 76 4c 49 8d 7e 50\n[ 150.834365] RSP: 0018:ffffaac5023739e0 EFLAGS: 00010086\n[ 150.834368] RAX: 0000000000000000 RBX: ffffffff8566a2e0 RCX: 0000000000000027\n[ 150.834370] RDX: ffff8f6a8f621688 RSI: 0000000000000001 RDI: ffff8f6a8f621680\n[ 150.834372] RBP: ffffaac502373a30 R08: 00000000000000c9 R09: ffffaac502373850\n[ 150.834373] R10: ffffaac502373848 R11: ffffffff84f46328 R12: ffffaac502373a40\n[ 150.834375] R13: ffff8f6741045330 R14: ffff8f6741a77700 R15: ffffffff84ac831b\n[ 150.834377] FS: 00007faf0fc94c00(0000) GS:ffff8f6a8f600000(0000) knlGS:0000000000000000\n[ 150.834379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 150.834381] CR2: 00007faf0b600020 CR3: 000000010a52e000 CR4: 0000000000350ef0\n[ 150.834383] Call Trace:\n[ 150.834385] \u003cTASK\u003e\n[ 150.834387] ? show_regs+0x6d/0x80\n[ 150.834393] ? __warn+0x8c/0x140\n[ 150.834397] ? check_unmap+0x1cc/0x930\n[ 150.834400] ? report_bug+0x193/0x1a0\n[ 150.834406] ? handle_bug+0x46/0x80\n[ 150.834410] ? exc_invalid_op+0x1d/0x80\n[ 150.834413] ? asm_exc_invalid_op+0x1f/0x30\n[ 150.834420] ? check_unmap+0x1cc/0x930\n[ 150.834425] debug_dma_unmap_page+0x86/0x90\n[ 150.834431] ? srso_return_thunk+0x5/0x5f\n[ 150.834435] \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57897",
"url": "https://www.suse.com/security/cve/CVE-2024-57897"
},
{
"category": "external",
"summary": "SUSE Bug 1235969 for CVE-2024-57897",
"url": "https://bugzilla.suse.com/1235969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57897"
},
{
"cve": "CVE-2024-57899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, \u0026bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n ? show_regs+0x54/0x58\n ? __warn+0x6b/0xd4\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? report_bug+0x113/0x150\n ? exc_overflow+0x30/0x30\n ? handle_bug+0x27/0x44\n ? exc_invalid_op+0x18/0x50\n ? handle_exception+0xf6/0xf6\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n ? process_one_work+0xf1/0x1fc\n ? worker_thread+0x2c0/0x3b4\n ? kthread+0xc7/0xf0\n ? mod_delayed_work_on+0x4c/0x4c\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork+0x24/0x38\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork_asm+0xf/0x14\n ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57899",
"url": "https://www.suse.com/security/cve/CVE-2024-57899"
},
{
"category": "external",
"summary": "SUSE Bug 1235924 for CVE-2024-57899",
"url": "https://bugzilla.suse.com/1235924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57899"
},
{
"cve": "CVE-2024-57903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_REUSEPORT to inet sockets\n\nAfter blamed commit, crypto sockets could accidentally be destroyed\nfrom RCU call back, as spotted by zyzbot [1].\n\nTrying to acquire a mutex in RCU callback is not allowed.\n\nRestrict SO_REUSEPORT socket option to inet sockets.\n\nv1 of this patch supported TCP, UDP and SCTP sockets,\nbut fcnal-test.sh test needed RAW and ICMP support.\n\n[1]\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1\npreempt_count: 100, expected: 0\nRCU nest depth: 0, expected: 0\n1 lock held by ksoftirqd/1/24:\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823\nPreemption disabled at:\n [\u003cffffffff8161c8c8\u003e] softirq_handle_begin kernel/softirq.c:402 [inline]\n [\u003cffffffff8161c8c8\u003e] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537\nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n __might_resched+0x5d4/0x780 kernel/sched/core.c:8758\n __mutex_lock_common kernel/locking/mutex.c:562 [inline]\n __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735\n crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179\n aead_release+0x3d/0x50 crypto/algif_aead.c:489\n alg_do_release crypto/af_alg.c:118 [inline]\n alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502\n __sk_destruct+0x58/0x5f0 net/core/sock.c:2260\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:950\n smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57903",
"url": "https://www.suse.com/security/cve/CVE-2024-57903"
},
{
"category": "external",
"summary": "SUSE Bug 1235967 for CVE-2024-57903",
"url": "https://bugzilla.suse.com/1235967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57903"
},
{
"cve": "CVE-2024-57904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: at91: call input_free_device() on allocated iio_dev\n\nCurrent implementation of at91_ts_register() calls input_free_deivce()\non st-\u003ets_input, however, the err label can be reached before the\nallocated iio_dev is stored to st-\u003ets_input. Thus call\ninput_free_device() on input instead of st-\u003ets_input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57904",
"url": "https://www.suse.com/security/cve/CVE-2024-57904"
},
{
"category": "external",
"summary": "SUSE Bug 1236078 for CVE-2024-57904",
"url": "https://bugzilla.suse.com/1236078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57904"
},
{
"cve": "CVE-2024-57906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads8688: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57906",
"url": "https://www.suse.com/security/cve/CVE-2024-57906"
},
{
"category": "external",
"summary": "SUSE Bug 1236088 for CVE-2024-57906",
"url": "https://bugzilla.suse.com/1236088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-57906"
},
{
"cve": "CVE-2024-57907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe \u0027data\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57907",
"url": "https://www.suse.com/security/cve/CVE-2024-57907"
},
{
"category": "external",
"summary": "SUSE Bug 1236090 for CVE-2024-57907",
"url": "https://bugzilla.suse.com/1236090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2024-57907"
},
{
"cve": "CVE-2024-57908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57908",
"url": "https://www.suse.com/security/cve/CVE-2024-57908"
},
{
"category": "external",
"summary": "SUSE Bug 1236091 for CVE-2024-57908",
"url": "https://bugzilla.suse.com/1236091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57908"
},
{
"cve": "CVE-2024-57910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57910"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: vcnl4035: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to userspace from a\ntriggered buffer, but it does not set an initial value for the single\ndata element, which is an u16 aligned to 8 bytes. That leaves at least\n4 bytes uninitialized even after writing an integer value with\nregmap_read().\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57910",
"url": "https://www.suse.com/security/cve/CVE-2024-57910"
},
{
"category": "external",
"summary": "SUSE Bug 1236097 for CVE-2024-57910",
"url": "https://bugzilla.suse.com/1236097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57910"
},
{
"cve": "CVE-2024-57911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n\nThe \u0027data\u0027 array is allocated via kmalloc() and it is used to push data\nto user space from a triggered buffer, but it does not set values for\ninactive channels, as it only uses iio_for_each_active_channel()\nto assign new values.\n\nUse kzalloc for the memory allocation to avoid pushing uninitialized\ninformation to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57911",
"url": "https://www.suse.com/security/cve/CVE-2024-57911"
},
{
"category": "external",
"summary": "SUSE Bug 1236098 for CVE-2024-57911",
"url": "https://bugzilla.suse.com/1236098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57911"
},
{
"cve": "CVE-2024-57912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe \u0027sample\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57912",
"url": "https://www.suse.com/security/cve/CVE-2024-57912"
},
{
"category": "external",
"summary": "SUSE Bug 1236101 for CVE-2024-57912",
"url": "https://bugzilla.suse.com/1236101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57912"
},
{
"cve": "CVE-2024-57913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n\nThis commit addresses an issue related to below kernel panic where\npanic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON\nin functionsfs_bind, which easily leads to the following scenarios.\n\n1.adb_write in adbd 2. UDC write via configfs\n =================\t =====================\n\n-\u003eusb_ffs_open_thread() -\u003eUDC write\n -\u003eopen_functionfs() -\u003econfigfs_write_iter()\n -\u003eadb_open() -\u003egadget_dev_desc_UDC_store()\n -\u003eadb_write() -\u003eusb_gadget_register_driver_owner\n -\u003edriver_register()\n-\u003eStartMonitor() -\u003ebus_add_driver()\n -\u003eadb_read() -\u003egadget_bind_driver()\n\u003ctimes-out without BIND event\u003e -\u003econfigfs_composite_bind()\n -\u003eusb_add_function()\n-\u003eopen_functionfs() -\u003effs_func_bind()\n -\u003eadb_open() -\u003efunctionfs_bind()\n \u003cffs-\u003estate !=FFS_ACTIVE\u003e\n\nThe adb_open, adb_read, and adb_write operations are invoked from the\ndaemon, but trying to bind the function is a process that is invoked by\nUDC write through configfs, which opens up the possibility of a race\ncondition between the two paths. In this race scenario, the kernel panic\noccurs due to the WARN_ON from functionfs_bind when panic_on_warn is\nenabled. This commit fixes the kernel panic by removing the unnecessary\nWARN_ON.\n\nKernel panic - not syncing: kernel: panic_on_warn set ...\n[ 14.542395] Call trace:\n[ 14.542464] ffs_func_bind+0x1c8/0x14a8\n[ 14.542468] usb_add_function+0xcc/0x1f0\n[ 14.542473] configfs_composite_bind+0x468/0x588\n[ 14.542478] gadget_bind_driver+0x108/0x27c\n[ 14.542483] really_probe+0x190/0x374\n[ 14.542488] __driver_probe_device+0xa0/0x12c\n[ 14.542492] driver_probe_device+0x3c/0x220\n[ 14.542498] __driver_attach+0x11c/0x1fc\n[ 14.542502] bus_for_each_dev+0x104/0x160\n[ 14.542506] driver_attach+0x24/0x34\n[ 14.542510] bus_add_driver+0x154/0x270\n[ 14.542514] driver_register+0x68/0x104\n[ 14.542518] usb_gadget_register_driver_owner+0x48/0xf4\n[ 14.542523] gadget_dev_desc_UDC_store+0xf8/0x144\n[ 14.542526] configfs_write_iter+0xf0/0x138",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57913",
"url": "https://www.suse.com/security/cve/CVE-2024-57913"
},
{
"category": "external",
"summary": "SUSE Bug 1236102 for CVE-2024-57913",
"url": "https://bugzilla.suse.com/1236102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57913"
},
{
"cve": "CVE-2024-57915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57915"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57915",
"url": "https://www.suse.com/security/cve/CVE-2024-57915"
},
{
"category": "external",
"summary": "SUSE Bug 1236120 for CVE-2024-57915",
"url": "https://bugzilla.suse.com/1236120"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57915"
},
{
"cve": "CVE-2024-57916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n\nResolve kernel panic caused by improper handling of IRQs while\naccessing GPIO values. This is done by replacing generic_handle_irq with\nhandle_nested_irq.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57916",
"url": "https://www.suse.com/security/cve/CVE-2024-57916"
},
{
"category": "external",
"summary": "SUSE Bug 1236125 for CVE-2024-57916",
"url": "https://bugzilla.suse.com/1236125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57916"
},
{
"cve": "CVE-2024-57917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntopology: Keep the cpumask unchanged when printing cpumap\n\nDuring fuzz testing, the following warning was discovered:\n\n different return values (15 and 11) from vsnprintf(\"%*pbl\n \", ...)\n\n test:keyward is WARNING in kvasprintf\n WARNING: CPU: 55 PID: 1168477 at lib/kasprintf.c:30 kvasprintf+0x121/0x130\n Call Trace:\n kvasprintf+0x121/0x130\n kasprintf+0xa6/0xe0\n bitmap_print_to_buf+0x89/0x100\n core_siblings_list_read+0x7e/0xb0\n kernfs_file_read_iter+0x15b/0x270\n new_sync_read+0x153/0x260\n vfs_read+0x215/0x290\n ksys_read+0xb9/0x160\n do_syscall_64+0x56/0x100\n entry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nThe call trace shows that kvasprintf() reported this warning during the\nprinting of core_siblings_list. kvasprintf() has several steps:\n\n (1) First, calculate the length of the resulting formatted string.\n\n (2) Allocate a buffer based on the returned length.\n\n (3) Then, perform the actual string formatting.\n\n (4) Check whether the lengths of the formatted strings returned in\n steps (1) and (2) are consistent.\n\nIf the core_cpumask is modified between steps (1) and (3), the lengths\nobtained in these two steps may not match. Indeed our test includes cpu\nhotplugging, which should modify core_cpumask while printing.\n\nTo fix this issue, cache the cpumask into a temporary variable before\ncalling cpumap_print_{list, cpumask}_to_buf(), to keep it unchanged\nduring the printing process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57917",
"url": "https://www.suse.com/security/cve/CVE-2024-57917"
},
{
"category": "external",
"summary": "SUSE Bug 1236127 for CVE-2024-57917",
"url": "https://bugzilla.suse.com/1236127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57917"
},
{
"cve": "CVE-2024-57922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57922",
"url": "https://www.suse.com/security/cve/CVE-2024-57922"
},
{
"category": "external",
"summary": "SUSE Bug 1236080 for CVE-2024-57922",
"url": "https://bugzilla.suse.com/1236080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57922"
},
{
"cve": "CVE-2024-57926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57926"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err\n\nThe pointer need to be set to NULL, otherwise KASAN complains about\nuse-after-free. Because in mtk_drm_bind, all private\u0027s drm are set\nas follows.\n\nprivate-\u003eall_drm_private[i]-\u003edrm = drm;\n\nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns\nfailure. However, the shutdown path still accesses the previous allocated\nmemory in drm_atomic_helper_shutdown.\n\n[ 84.874820] watchdog: watchdog0: watchdog did not stop!\n[ 86.512054] ==================================================================\n[ 86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1\n[ 86.515213]\n[ 86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55\n[ 86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022\n[ 86.517960] Call trace:\n[ 86.518333] show_stack+0x20/0x38 (C)\n[ 86.518891] dump_stack_lvl+0x90/0xd0\n[ 86.519443] print_report+0xf8/0x5b0\n[ 86.519985] kasan_report+0xb4/0x100\n[ 86.520526] __asan_report_load8_noabort+0x20/0x30\n[ 86.521240] drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.521966] mtk_drm_shutdown+0x54/0x80\n[ 86.522546] platform_shutdown+0x64/0x90\n[ 86.523137] device_shutdown+0x260/0x5b8\n[ 86.523728] kernel_restart+0x78/0xf0\n[ 86.524282] __do_sys_reboot+0x258/0x2f0\n[ 86.524871] __arm64_sys_reboot+0x90/0xd8\n[ 86.525473] invoke_syscall+0x74/0x268\n[ 86.526041] el0_svc_common.constprop.0+0xb0/0x240\n[ 86.526751] do_el0_svc+0x4c/0x70\n[ 86.527251] el0_svc+0x4c/0xc0\n[ 86.527719] el0t_64_sync_handler+0x144/0x168\n[ 86.528367] el0t_64_sync+0x198/0x1a0\n[ 86.528920]\n[ 86.529157] The buggy address belongs to the physical page:\n[ 86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc\n[ 86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)\n[ 86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000\n[ 86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000\n[ 86.534511] page dumped because: kasan: bad access detected\n[ 86.535323]\n[ 86.535559] Memory state around the buggy address:\n[ 86.536265] ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.537314] ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.538363] \u003effff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.544733] ^\n[ 86.551057] ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.557510] ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.563928] ==================================================================\n[ 86.571093] Disabling lock debugging due to kernel taint\n[ 86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b\n[ 86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57926",
"url": "https://www.suse.com/security/cve/CVE-2024-57926"
},
{
"category": "external",
"summary": "SUSE Bug 1236082 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "external",
"summary": "SUSE Bug 1236084 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "important"
}
],
"title": "CVE-2024-57926"
},
{
"cve": "CVE-2024-57929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: fix releasing a faulty array block twice in dm_array_cursor_end\n\nWhen dm_bm_read_lock() fails due to locking or checksum errors, it\nreleases the faulty block implicitly while leaving an invalid output\npointer behind. The caller of dm_bm_read_lock() should not operate on\nthis invalid dm_block pointer, or it will lead to undefined result.\nFor example, the dm_array_cursor incorrectly caches the invalid pointer\non reading a faulty array block, causing a double release in\ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().\n\nReproduce steps:\n\n1. initialize a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. wipe the second array block offline\n\ndmsteup remove cache cmeta cdata corig\nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock\n\n3. try reopen the cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10\ndevice-mapper: block manager: array validator check failed for block 10\ndevice-mapper: array: get_ablock failed\ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed\n------------[ cut here ]------------\nkernel BUG at drivers/md/dm-bufio.c:638!\n\nFix by setting the cached block pointer to NULL on errors.\n\nIn addition to the reproducer described above, this fix can be\nverified using the \"array_cursor/damaged\" test in dm-unit:\n dm-unit run /pdata/array_cursor/damaged --kernel-dir \u003cKERNEL_DIR\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57929",
"url": "https://www.suse.com/security/cve/CVE-2024-57929"
},
{
"category": "external",
"summary": "SUSE Bug 1236096 for CVE-2024-57929",
"url": "https://bugzilla.suse.com/1236096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57929"
},
{
"cve": "CVE-2024-57931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: ignore unknown extended permissions\n\nWhen evaluating extended permissions, ignore unknown permissions instead\nof calling BUG(). This commit ensures that future permissions can be\nadded without interfering with older kernels.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57931",
"url": "https://www.suse.com/security/cve/CVE-2024-57931"
},
{
"category": "external",
"summary": "SUSE Bug 1236192 for CVE-2024-57931",
"url": "https://bugzilla.suse.com/1236192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57931"
},
{
"cve": "CVE-2024-57932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv-\u003enum_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57932",
"url": "https://www.suse.com/security/cve/CVE-2024-57932"
},
{
"category": "external",
"summary": "SUSE Bug 1236190 for CVE-2024-57932",
"url": "https://bugzilla.suse.com/1236190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57932"
},
{
"cve": "CVE-2024-57933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XSK operations on the existence of queues\n\nThis patch predicates the enabling and disabling of XSK pools on the\nexistence of queues. As it stands, if the interface is down, disabling\nor enabling XSK pools would result in a crash, as the RX queue pointer\nwould be NULL. XSK pool registration will occur as part of the next\ninterface up.\n\nSimilarly, xsk_wakeup needs be guarded against queues disappearing\nwhile the function is executing, so a check against the\nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the\ndisabling of the bit and the synchronize_net() in gve_turndown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57933",
"url": "https://www.suse.com/security/cve/CVE-2024-57933"
},
{
"category": "external",
"summary": "SUSE Bug 1236178 for CVE-2024-57933",
"url": "https://bugzilla.suse.com/1236178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57933"
},
{
"cve": "CVE-2024-57935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57935",
"url": "https://www.suse.com/security/cve/CVE-2024-57935"
},
{
"category": "external",
"summary": "SUSE Bug 1236180 for CVE-2024-57935",
"url": "https://bugzilla.suse.com/1236180"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57935"
},
{
"cve": "CVE-2024-57936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Fix max SGEs for the Work Request\n\nGen P7 supports up to 13 SGEs for now. WQE software structure\ncan hold only 6 now. Since the max send sge is reported as\n13, the stack can give requests up to 13 SGEs. This is causing\ntraffic failures and system crashes.\n\nUse the define for max SGE supported for variable size. This\nwill work for both static and variable WQEs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57936",
"url": "https://www.suse.com/security/cve/CVE-2024-57936"
},
{
"category": "external",
"summary": "SUSE Bug 1236181 for CVE-2024-57936",
"url": "https://bugzilla.suse.com/1236181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57936"
},
{
"cve": "CVE-2024-57938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()\n\nWhile by default max_autoclose equals to INT_MAX / HZ, one may set\nnet.sctp.max_autoclose to UINT_MAX. There is code in\nsctp_association_init() that can consequently trigger overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57938",
"url": "https://www.suse.com/security/cve/CVE-2024-57938"
},
{
"category": "external",
"summary": "SUSE Bug 1236182 for CVE-2024-57938",
"url": "https://bugzilla.suse.com/1236182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57938"
},
{
"cve": "CVE-2024-57940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix the infinite loop in exfat_readdir()\n\nIf the file system is corrupted so that a cluster is linked to\nitself in the cluster chain, and there is an unused directory\nentry in the cluster, \u0027dentry\u0027 will not be incremented, causing\ncondition \u0027dentry \u003c max_dentries\u0027 unable to prevent an infinite\nloop.\n\nThis infinite loop causes s_lock not to be released, and other\ntasks will hang, such as exfat_sync_fs().\n\nThis commit stops traversing the cluster chain when there is unused\ndirectory entry in the cluster to avoid this infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57940",
"url": "https://www.suse.com/security/cve/CVE-2024-57940"
},
{
"category": "external",
"summary": "SUSE Bug 1236227 for CVE-2024-57940",
"url": "https://bugzilla.suse.com/1236227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57940"
},
{
"cve": "CVE-2024-57946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: don\u0027t keep queue frozen during system suspend\n\nCommit 4ce6e2db00de (\"virtio-blk: Ensure no requests in virtqueues before\ndeleting vqs.\") replaces queue quiesce with queue freeze in virtio-blk\u0027s\nPM callbacks. And the motivation is to drain inflight IOs before suspending.\n\nblock layer\u0027s queue freeze looks very handy, but it is also easy to cause\ndeadlock, such as, any attempt to call into bio_queue_enter() may run into\ndeadlock if the queue is frozen in current context. There are all kinds\nof -\u003esuspend() called in suspend context, so keeping queue frozen in the\nwhole suspend context isn\u0027t one good idea. And Marek reported lockdep\nwarning[1] caused by virtio-blk\u0027s freeze queue in virtblk_freeze().\n\n[1] https://lore.kernel.org/linux-block/ca16370e-d646-4eee-b9cc-87277c89c43c@samsung.com/\n\nGiven the motivation is to drain in-flight IOs, it can be done by calling\nfreeze \u0026 unfreeze, meantime restore to previous behavior by keeping queue\nquiesced during suspend.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57946",
"url": "https://www.suse.com/security/cve/CVE-2024-57946"
},
{
"category": "external",
"summary": "SUSE Bug 1236247 for CVE-2024-57946",
"url": "https://bugzilla.suse.com/1236247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2024-57946"
},
{
"cve": "CVE-2025-21632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Ensure shadow stack is active before \"getting\" registers\n\nThe x86 shadow stack support has its own set of registers. Those registers\nare XSAVE-managed, but they are \"supervisor state components\" which means\nthat userspace can not touch them with XSAVE/XRSTOR. It also means that\nthey are not accessible from the existing ptrace ABI for XSAVE state.\nThus, there is a new ptrace get/set interface for it.\n\nThe regset code that ptrace uses provides an -\u003eactive() handler in\naddition to the get/set ones. For shadow stack this -\u003eactive() handler\nverifies that shadow stack is enabled via the ARCH_SHSTK_SHSTK bit in the\nthread struct. The -\u003eactive() handler is checked from some call sites of\nthe regset get/set handlers, but not the ptrace ones. This was not\nunderstood when shadow stack support was put in place.\n\nAs a result, both the set/get handlers can be called with\nXFEATURE_CET_USER in its init state, which would cause get_xsave_addr() to\nreturn NULL and trigger a WARN_ON(). The ssp_set() handler luckily has an\nssp_active() check to avoid surprising the kernel with shadow stack\nbehavior when the kernel is not ready for it (ARCH_SHSTK_SHSTK==0). That\ncheck just happened to avoid the warning.\n\nBut the -\u003eget() side wasn\u0027t so lucky. It can be called with shadow stacks\ndisabled, triggering the warning in practice, as reported by Christina\nSchimpe:\n\nWARNING: CPU: 5 PID: 1773 at arch/x86/kernel/fpu/regset.c:198 ssp_get+0x89/0xa0\n[...]\nCall Trace:\n\u003cTASK\u003e\n? show_regs+0x6e/0x80\n? ssp_get+0x89/0xa0\n? __warn+0x91/0x150\n? ssp_get+0x89/0xa0\n? report_bug+0x19d/0x1b0\n? handle_bug+0x46/0x80\n? exc_invalid_op+0x1d/0x80\n? asm_exc_invalid_op+0x1f/0x30\n? __pfx_ssp_get+0x10/0x10\n? ssp_get+0x89/0xa0\n? ssp_get+0x52/0xa0\n__regset_get+0xad/0xf0\ncopy_regset_to_user+0x52/0xc0\nptrace_regset+0x119/0x140\nptrace_request+0x13c/0x850\n? wait_task_inactive+0x142/0x1d0\n? do_syscall_64+0x6d/0x90\narch_ptrace+0x102/0x300\n[...]\n\nEnsure that shadow stacks are active in a thread before looking them up\nin the XSAVE buffer. Since ARCH_SHSTK_SHSTK and user_ssp[SHSTK_EN] are\nset at the same time, the active check ensures that there will be\nsomething to find in the XSAVE buffer.\n\n[ dhansen: changelog/subject tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21632",
"url": "https://www.suse.com/security/cve/CVE-2025-21632"
},
{
"category": "external",
"summary": "SUSE Bug 1236106 for CVE-2025-21632",
"url": "https://bugzilla.suse.com/1236106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21632"
},
{
"cve": "CVE-2025-21645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it\n\nWakeup for IRQ1 should be disabled only in cases where i8042 had\nactually enabled it, otherwise \"wake_depth\" for this IRQ will try to\ndrop below zero and there will be an unpleasant WARN() logged:\n\nkernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug\nkernel: ------------[ cut here ]------------\nkernel: Unbalanced IRQ 1 wake disable\nkernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0\n\nThe PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops\nwhich sets amd_pmc_suspend_handler() to the .suspend, .freeze, and\n.poweroff handlers. i8042_pm_suspend(), however, is only set as\nthe .suspend handler.\n\nFix the issue by call PMC suspend handler only from the same set of\ndev_pm_ops handlers as i8042_pm_suspend(), which currently means just\nthe .suspend handler.\n\nTo reproduce this issue try hibernating (S4) the machine after a fresh boot\nwithout putting it into s2idle first.\n\n[ij: edited the commit message.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21645",
"url": "https://www.suse.com/security/cve/CVE-2025-21645"
},
{
"category": "external",
"summary": "SUSE Bug 1236131 for CVE-2025-21645",
"url": "https://bugzilla.suse.com/1236131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21645"
},
{
"cve": "CVE-2025-21646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21646"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the maximum cell name length\n\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\nproblem occurs if someone actually does that: kafs tries to create a\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\nwith a warning:\n\n WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\n\nbecause procfs limits the maximum filename length to 255.\n\nHowever, the DNS limits the maximum lookup length and, by extension, the\nmaximum cell name, to 255 less two (length count and trailing NUL).\n\nFix this by limiting the maximum acceptable cellname length to 253. This\nalso allows us to be sure we can create the \"/afs/.\u003ccell\u003e/\" mountpoint too.\n\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\nexceeds 253.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21646",
"url": "https://www.suse.com/security/cve/CVE-2025-21646"
},
{
"category": "external",
"summary": "SUSE Bug 1236168 for CVE-2025-21646",
"url": "https://bugzilla.suse.com/1236168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21646"
},
{
"cve": "CVE-2025-21649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is sent on HIP08 devices\n\nCurrently, HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL. But the tx process would still try to set hardware time\nstamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.\n\n[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge]\n[ 128.292938] sp : ffff800059b93140\n[ 128.297200] x29: ffff800059b93140 x28: 0000000000003280\n[ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080\n[ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001\n[ 128.315969] x23: 0000000000000000 x22: 0000000000000194\n[ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000\n[ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000\n[ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24\n[ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000\n[ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368\n[ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02\n[ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0\n[ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000\n[ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff\n[ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294\n[ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080\n[ 128.390626] Call trace:\n[ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3]\n[ 128.405468] xmit_one.constprop.0+0xc4/0x200\n[ 128.410600] dev_hard_start_xmit+0x54/0xf0\n[ 128.415556] sch_direct_xmit+0xe8/0x634\n[ 128.420246] __dev_queue_xmit+0x224/0xc70\n[ 128.425101] dev_queue_xmit+0x1c/0x40\n[ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch]\n[ 128.435409] do_output+0x60/0x17c [openvswitch]\n[ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch]\n[ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch]\n[ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch]\n[ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch]\n[ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch]\n[ 128.471460] xmit_one.constprop.0+0xc4/0x200\n[ 128.476561] dev_hard_start_xmit+0x54/0xf0\n[ 128.481489] __dev_queue_xmit+0x968/0xc70\n[ 128.486330] dev_queue_xmit+0x1c/0x40\n[ 128.490856] ip_finish_output2+0x250/0x570\n[ 128.495810] __ip_finish_output+0x170/0x1e0\n[ 128.500832] ip_finish_output+0x3c/0xf0\n[ 128.505504] ip_output+0xbc/0x160\n[ 128.509654] ip_send_skb+0x58/0xd4\n[ 128.513892] udp_send_skb+0x12c/0x354\n[ 128.518387] udp_sendmsg+0x7a8/0x9c0\n[ 128.522793] inet_sendmsg+0x4c/0x8c\n[ 128.527116] __sock_sendmsg+0x48/0x80\n[ 128.531609] __sys_sendto+0x124/0x164\n[ 128.536099] __arm64_sys_sendto+0x30/0x5c\n[ 128.540935] invoke_syscall+0x50/0x130\n[ 128.545508] el0_svc_common.constprop.0+0x10c/0x124\n[ 128.551205] do_el0_svc+0x34/0xdc\n[ 128.555347] el0_svc+0x20/0x30\n[ 128.559227] el0_sync_handler+0xb8/0xc0\n[ 128.563883] el0_sync+0x160/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21649",
"url": "https://www.suse.com/security/cve/CVE-2025-21649"
},
{
"category": "external",
"summary": "SUSE Bug 1236143 for CVE-2025-21649",
"url": "https://bugzilla.suse.com/1236143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21649"
},
{
"cve": "CVE-2025-21650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue\n\nThe TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs\n1024-1279 are in different BAR space addresses. However,\nhclge_fetch_pf_reg does not distinguish the tqp space information when\nreading the tqp space information. When the number of TQPs is greater\nthan 1024, access bar space overwriting occurs.\nThe problem of different segments has been considered during the\ninitialization of tqp.io_base. Therefore, tqp.io_base is directly used\nwhen the queue is read in hclge_fetch_pf_reg.\n\nThe error message:\n\nUnable to handle kernel paging request at virtual address ffff800037200000\npc : hclge_fetch_pf_reg+0x138/0x250 [hclge]\nlr : hclge_get_regs+0x84/0x1d0 [hclge]\nCall trace:\n hclge_fetch_pf_reg+0x138/0x250 [hclge]\n hclge_get_regs+0x84/0x1d0 [hclge]\n hns3_get_regs+0x2c/0x50 [hns3]\n ethtool_get_regs+0xf4/0x270\n dev_ethtool+0x674/0x8a0\n dev_ioctl+0x270/0x36c\n sock_do_ioctl+0x110/0x2a0\n sock_ioctl+0x2ac/0x530\n __arm64_sys_ioctl+0xa8/0x100\n invoke_syscall+0x4c/0x124\n el0_svc_common.constprop.0+0x140/0x15c\n do_el0_svc+0x30/0xd0\n el0_svc+0x1c/0x2c\n el0_sync_handler+0xb0/0xb4\n el0_sync+0x168/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21650",
"url": "https://www.suse.com/security/cve/CVE-2025-21650"
},
{
"category": "external",
"summary": "SUSE Bug 1236144 for CVE-2025-21650",
"url": "https://bugzilla.suse.com/1236144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21650"
},
{
"cve": "CVE-2025-21651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: don\u0027t auto enable misc vector\n\nCurrently, there is a time window between misc irq enabled\nand service task inited. If an interrupte is reported at\nthis time, it will cause warning like below:\n\n[ 16.324639] Call trace:\n[ 16.324641] __queue_delayed_work+0xb8/0xe0\n[ 16.324643] mod_delayed_work_on+0x78/0xd0\n[ 16.324655] hclge_errhand_task_schedule+0x58/0x90 [hclge]\n[ 16.324662] hclge_misc_irq_handle+0x168/0x240 [hclge]\n[ 16.324666] __handle_irq_event_percpu+0x64/0x1e0\n[ 16.324667] handle_irq_event+0x80/0x170\n[ 16.324670] handle_fasteoi_edge_irq+0x110/0x2bc\n[ 16.324671] __handle_domain_irq+0x84/0xfc\n[ 16.324673] gic_handle_irq+0x88/0x2c0\n[ 16.324674] el1_irq+0xb8/0x140\n[ 16.324677] arch_cpu_idle+0x18/0x40\n[ 16.324679] default_idle_call+0x5c/0x1bc\n[ 16.324682] cpuidle_idle_call+0x18c/0x1c4\n[ 16.324684] do_idle+0x174/0x17c\n[ 16.324685] cpu_startup_entry+0x30/0x6c\n[ 16.324687] secondary_start_kernel+0x1a4/0x280\n[ 16.324688] ---[ end trace 6aa0bff672a964aa ]---\n\nSo don\u0027t auto enable misc vector when request irq..",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21651",
"url": "https://www.suse.com/security/cve/CVE-2025-21651"
},
{
"category": "external",
"summary": "SUSE Bug 1236145 for CVE-2025-21651",
"url": "https://bugzilla.suse.com/1236145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21651"
},
{
"cve": "CVE-2025-21652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21652"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Fix use-after-free in ipvlan_get_iflink().\n\nsyzbot presented an use-after-free report [0] regarding ipvlan and\nlinkwatch.\n\nipvlan does not hold a refcnt of the lower device unlike vlan and\nmacvlan.\n\nIf the linkwatch work is triggered for the ipvlan dev, the lower dev\nmight have already been freed, resulting in UAF of ipvlan-\u003ephy_dev in\nipvlan_get_iflink().\n\nWe can delay the lower dev unregistration like vlan and macvlan by\nholding the lower dev\u0027s refcnt in dev-\u003enetdev_ops-\u003endo_init() and\nreleasing it in dev-\u003epriv_destructor().\n\nJakub pointed out calling .ndo_XXX after unregister_netdevice() has\nreturned is error prone and suggested [1] addressing this UAF in the\ncore by taking commit 750e51603395 (\"net: avoid potential UAF in\ndefault_operstate()\") further.\n\nLet\u0027s assume unregistering devices DOWN and use RCU protection in\ndefault_operstate() not to race with the device unregistration.\n\n[0]:\nBUG: KASAN: slab-use-after-free in ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\nRead of size 4 at addr ffff0000d768c0e0 by task kworker/u8:35/6944\n\nCPU: 0 UID: 0 PID: 6944 Comm: kworker/u8:35 Not tainted 6.13.0-rc2-g9bc5c9515b48 #12 4c3cb9e8b4565456f6a355f312ff91f4f29b3c47\nHardware name: linux,dummy-virt (DT)\nWorkqueue: events_unbound linkwatch_event\nCall trace:\n show_stack+0x38/0x50 arch/arm64/kernel/stacktrace.c:484 (C)\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xbc/0x108 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x16c/0x6f0 mm/kasan/report.c:489\n kasan_report+0xc0/0x120 mm/kasan/report.c:602\n __asan_report_load4_noabort+0x20/0x30 mm/kasan/report_generic.c:380\n ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\n dev_get_iflink+0x7c/0xd8 net/core/dev.c:674\n default_operstate net/core/link_watch.c:45 [inline]\n rfc2863_policy+0x144/0x360 net/core/link_watch.c:72\n linkwatch_do_dev+0x60/0x228 net/core/link_watch.c:175\n __linkwatch_run_queue+0x2f4/0x5b8 net/core/link_watch.c:239\n linkwatch_event+0x64/0xa8 net/core/link_watch.c:282\n process_one_work+0x700/0x1398 kernel/workqueue.c:3229\n process_scheduled_works kernel/workqueue.c:3310 [inline]\n worker_thread+0x8c4/0xe10 kernel/workqueue.c:3391\n kthread+0x2b0/0x360 kernel/kthread.c:389\n ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862\n\nAllocated by task 9303:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x30/0x68 mm/kasan/common.c:68\n kasan_save_alloc_info+0x44/0x58 mm/kasan/generic.c:568\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x84/0xa0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4283 [inline]\n __kmalloc_node_noprof+0x2a0/0x560 mm/slub.c:4289\n __kvmalloc_node_noprof+0x9c/0x230 mm/util.c:650\n alloc_netdev_mqs+0xb4/0x1118 net/core/dev.c:11209\n rtnl_create_link+0x2b8/0xb60 net/core/rtnetlink.c:3595\n rtnl_newlink_create+0x19c/0x868 net/core/rtnetlink.c:3771\n __rtnl_newlink net/core/rtnetlink.c:3896 [inline]\n rtnl_newlink+0x122c/0x15c0 net/core/rtnetlink.c:4011\n rtnetlink_rcv_msg+0x61c/0x918 net/core/rtnetlink.c:6901\n netlink_rcv_skb+0x1dc/0x398 net/netlink/af_netlink.c:2542\n rtnetlink_rcv+0x34/0x50 net/core/rtnetlink.c:6928\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x618/0x838 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x5fc/0x8b0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x2ec/0x438 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __arm64_sys_sendto+0xe4/0x110 net/socket.c:2200\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x90/0x278 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x13c/0x250 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x54/0x70 arch/arm64/kernel/syscall.c:151\n el\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21652",
"url": "https://www.suse.com/security/cve/CVE-2025-21652"
},
{
"category": "external",
"summary": "SUSE Bug 1236160 for CVE-2025-21652",
"url": "https://bugzilla.suse.com/1236160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21652"
},
{
"cve": "CVE-2025-21653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute\n\nsyzbot found that TCA_FLOW_RSHIFT attribute was not validated.\nRight shitfing a 32bit integer is undefined for large shift values.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_flow.c:329:23\nshift exponent 9445 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: ipv6_addrconf addrconf_dad_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468\n flow_classify+0x24d5/0x25b0 net/sched/cls_flow.c:329\n tc_classify include/net/tc_wrapper.h:197 [inline]\n __tcf_classify net/sched/cls_api.c:1771 [inline]\n tcf_classify+0x420/0x1160 net/sched/cls_api.c:1867\n sfb_classify net/sched/sch_sfb.c:260 [inline]\n sfb_enqueue+0x3ad/0x18b0 net/sched/sch_sfb.c:318\n dev_qdisc_enqueue+0x4b/0x290 net/core/dev.c:3793\n __dev_xmit_skb net/core/dev.c:3889 [inline]\n __dev_queue_xmit+0xf0e/0x3f50 net/core/dev.c:4400\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n neigh_hh_output include/net/neighbour.h:523 [inline]\n neigh_output include/net/neighbour.h:537 [inline]\n ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236\n iptunnel_xmit+0x55d/0x9b0 net/ipv4/ip_tunnel_core.c:82\n udp_tunnel_xmit_skb+0x262/0x3b0 net/ipv4/udp_tunnel_core.c:173\n geneve_xmit_skb drivers/net/geneve.c:916 [inline]\n geneve_xmit+0x21dc/0x2d00 drivers/net/geneve.c:1039\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606\n __dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4434",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21653",
"url": "https://www.suse.com/security/cve/CVE-2025-21653"
},
{
"category": "external",
"summary": "SUSE Bug 1236161 for CVE-2025-21653",
"url": "https://bugzilla.suse.com/1236161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21653"
},
{
"cve": "CVE-2025-21655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21655"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/eventfd: ensure io_eventfd_signal() defers another RCU period\n\nio_eventfd_do_signal() is invoked from an RCU callback, but when\ndropping the reference to the io_ev_fd, it calls io_eventfd_free()\ndirectly if the refcount drops to zero. This isn\u0027t correct, as any\npotential freeing of the io_ev_fd should be deferred another RCU grace\nperiod.\n\nJust call io_eventfd_put() rather than open-code the dec-and-test and\nfree, which will correctly defer it another RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21655",
"url": "https://www.suse.com/security/cve/CVE-2025-21655"
},
{
"category": "external",
"summary": "SUSE Bug 1236163 for CVE-2025-21655",
"url": "https://bugzilla.suse.com/1236163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21655"
},
{
"cve": "CVE-2025-21656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur\n\nscsi_execute_cmd() function can return both negative (linux codes) and\npositive (scsi_cmnd result field) error codes.\n\nCurrently the driver just passes error codes of scsi_execute_cmd() to\nhwmon core, which is incorrect because hwmon only checks for negative\nerror codes. This leads to hwmon reporting uninitialized data to\nuserspace in case of SCSI errors (for example if the disk drive was\ndisconnected).\n\nThis patch checks scsi_execute_cmd() output and returns -EIO if it\u0027s\nerror code is positive.\n\n[groeck: Avoid inline variable declaration for portability]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21656",
"url": "https://www.suse.com/security/cve/CVE-2025-21656"
},
{
"category": "external",
"summary": "SUSE Bug 1236248 for CVE-2025-21656",
"url": "https://bugzilla.suse.com/1236248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "low"
}
],
"title": "CVE-2025-21656"
},
{
"cve": "CVE-2025-21662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix variable not being completed when function returns\n\nWhen cmd_alloc_index(), fails cmd_work_handler() needs\nto complete ent-\u003eslotted before returning early.\nOtherwise the task which issued the command may hang:\n\n mlx5_core 0000:01:00.0: cmd_work_handler:877:(pid 3880418): failed to allocate command entry\n INFO: task kworker/13:2:4055883 blocked for more than 120 seconds.\n Not tainted 4.19.90-25.44.v2101.ky10.aarch64 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n kworker/13:2 D 0 4055883 2 0x00000228\n Workqueue: events mlx5e_tx_dim_work [mlx5_core]\n Call trace:\n __switch_to+0xe8/0x150\n __schedule+0x2a8/0x9b8\n schedule+0x2c/0x88\n schedule_timeout+0x204/0x478\n wait_for_common+0x154/0x250\n wait_for_completion+0x28/0x38\n cmd_exec+0x7a0/0xa00 [mlx5_core]\n mlx5_cmd_exec+0x54/0x80 [mlx5_core]\n mlx5_core_modify_cq+0x6c/0x80 [mlx5_core]\n mlx5_core_modify_cq_moderation+0xa0/0xb8 [mlx5_core]\n mlx5e_tx_dim_work+0x54/0x68 [mlx5_core]\n process_one_work+0x1b0/0x448\n worker_thread+0x54/0x468\n kthread+0x134/0x138\n ret_from_fork+0x10/0x18",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21662",
"url": "https://www.suse.com/security/cve/CVE-2025-21662"
},
{
"category": "external",
"summary": "SUSE Bug 1236198 for CVE-2025-21662",
"url": "https://bugzilla.suse.com/1236198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21662"
},
{
"cve": "CVE-2025-21663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: dwmac-tegra: Read iommu stream id from device tree\n\nNvidia\u0027s Tegra MGBE controllers require the IOMMU \"Stream ID\" (SID) to be\nwritten to the MGBE_WRAP_AXI_ASID0_CTRL register.\n\nThe current driver is hard coded to use MGBE0\u0027s SID for all controllers.\nThis causes softirq time outs and kernel panics when using controllers\nother than MGBE0.\n\nExample dmesg errors when an ethernet cable is connected to MGBE1:\n\n[ 116.133290] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 121.851283] tegra-mgbe 6910000.ethernet eth1: NETDEV WATCHDOG: CPU: 5: transmit queue 0 timed out 5690 ms\n[ 121.851782] tegra-mgbe 6910000.ethernet eth1: Reset adapter.\n[ 121.892464] tegra-mgbe 6910000.ethernet eth1: Register MEM_TYPE_PAGE_POOL RxQ-0\n[ 121.905920] tegra-mgbe 6910000.ethernet eth1: PHY [stmmac-1:00] driver [Aquantia AQR113] (irq=171)\n[ 121.907356] tegra-mgbe 6910000.ethernet eth1: Enabling Safety Features\n[ 121.907578] tegra-mgbe 6910000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported\n[ 121.908399] tegra-mgbe 6910000.ethernet eth1: registered PTP clock\n[ 121.908582] tegra-mgbe 6910000.ethernet eth1: configuring for phy/10gbase-r link mode\n[ 125.961292] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 181.921198] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:\n[ 181.921404] rcu: \t7-....: (1 GPs behind) idle=540c/1/0x4000000000000002 softirq=1748/1749 fqs=2337\n[ 181.921684] rcu: \t(detected by 4, t=6002 jiffies, g=1357, q=1254 ncpus=8)\n[ 181.921878] Sending NMI from CPU 4 to CPUs 7:\n[ 181.921886] NMI backtrace for cpu 7\n[ 181.922131] CPU: 7 UID: 0 PID: 0 Comm: swapper/7 Kdump: loaded Not tainted 6.13.0-rc3+ #6\n[ 181.922390] Hardware name: NVIDIA CTI Forge + Orin AGX/Jetson, BIOS 202402.1-Unknown 10/28/2024\n[ 181.922658] pstate: 40400009 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 181.922847] pc : handle_softirqs+0x98/0x368\n[ 181.922978] lr : __do_softirq+0x18/0x20\n[ 181.923095] sp : ffff80008003bf50\n[ 181.923189] x29: ffff80008003bf50 x28: 0000000000000008 x27: 0000000000000000\n[ 181.923379] x26: ffffce78ea277000 x25: 0000000000000000 x24: 0000001c61befda0\n[ 181.924486] x23: 0000000060400009 x22: ffffce78e99918bc x21: ffff80008018bd70\n[ 181.925568] x20: ffffce78e8bb00d8 x19: ffff80008018bc20 x18: 0000000000000000\n[ 181.926655] x17: ffff318ebe7d3000 x16: ffff800080038000 x15: 0000000000000000\n[ 181.931455] x14: ffff000080816680 x13: ffff318ebe7d3000 x12: 000000003464d91d\n[ 181.938628] x11: 0000000000000040 x10: ffff000080165a70 x9 : ffffce78e8bb0160\n[ 181.945804] x8 : ffff8000827b3160 x7 : f9157b241586f343 x6 : eeb6502a01c81c74\n[ 181.953068] x5 : a4acfcdd2e8096bb x4 : ffffce78ea277340 x3 : 00000000ffffd1e1\n[ 181.960329] x2 : 0000000000000101 x1 : ffffce78ea277340 x0 : ffff318ebe7d3000\n[ 181.967591] Call trace:\n[ 181.970043] handle_softirqs+0x98/0x368 (P)\n[ 181.974240] __do_softirq+0x18/0x20\n[ 181.977743] ____do_softirq+0x14/0x28\n[ 181.981415] call_on_irq_stack+0x24/0x30\n[ 181.985180] do_softirq_own_stack+0x20/0x30\n[ 181.989379] __irq_exit_rcu+0x114/0x140\n[ 181.993142] irq_exit_rcu+0x14/0x28\n[ 181.996816] el1_interrupt+0x44/0xb8\n[ 182.000316] el1h_64_irq_handler+0x14/0x20\n[ 182.004343] el1h_64_irq+0x80/0x88\n[ 182.007755] cpuidle_enter_state+0xc4/0x4a8 (P)\n[ 182.012305] cpuidle_enter+0x3c/0x58\n[ 182.015980] cpuidle_idle_call+0x128/0x1c0\n[ 182.020005] do_idle+0xe0/0xf0\n[ 182.023155] cpu_startup_entry+0x3c/0x48\n[ 182.026917] secondary_start_kernel+0xdc/0x120\n[ 182.031379] __secondary_switched+0x74/0x78\n[ 212.971162] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 7-.... } 6103 jiffies s: 417 root: 0x80/.\n[ 212.985935] rcu: blocking rcu_node structures (internal RCU debug):\n[ 212.992758] Sending NMI from CPU 0 to CPUs 7:\n[ 212.998539] NMI backtrace for cpu 7\n[ 213.004304] CPU: 7 UID: 0 PI\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21663",
"url": "https://www.suse.com/security/cve/CVE-2025-21663"
},
{
"category": "external",
"summary": "SUSE Bug 1236260 for CVE-2025-21663",
"url": "https://bugzilla.suse.com/1236260"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21663"
},
{
"cve": "CVE-2025-21664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm thin: make get_first_thin use rcu-safe list first function\n\nThe documentation in rculist.h explains the absence of list_empty_rcu()\nand cautions programmers against relying on a list_empty() -\u003e\nlist_first() sequence in RCU safe code. This is because each of these\nfunctions performs its own READ_ONCE() of the list head. This can lead\nto a situation where the list_empty() sees a valid list entry, but the\nsubsequent list_first() sees a different view of list head state after a\nmodification.\n\nIn the case of dm-thin, this author had a production box crash from a GP\nfault in the process_deferred_bios path. This function saw a valid list\nhead in get_first_thin() but when it subsequently dereferenced that and\nturned it into a thin_c, it got the inside of the struct pool, since the\nlist was now empty and referring to itself. The kernel on which this\noccurred printed both a warning about a refcount_t being saturated, and\na UBSAN error for an out-of-bounds cpuid access in the queued spinlock,\nprior to the fault itself. When the resulting kdump was examined, it\nwas possible to see another thread patiently waiting in thin_dtr\u0027s\nsynchronize_rcu.\n\nThe thin_dtr call managed to pull the thin_c out of the active thins\nlist (and have it be the last entry in the active_thins list) at just\nthe wrong moment which lead to this crash.\n\nFortunately, the fix here is straight forward. Switch get_first_thin()\nfunction to use list_first_or_null_rcu() which performs just a single\nREAD_ONCE() and returns NULL if the list is already empty.\n\nThis was run against the devicemapper test suite\u0027s thin-provisioning\nsuites for delete and suspend and no regressions were observed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21664",
"url": "https://www.suse.com/security/cve/CVE-2025-21664"
},
{
"category": "external",
"summary": "SUSE Bug 1236262 for CVE-2025-21664",
"url": "https://bugzilla.suse.com/1236262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21664"
},
{
"cve": "CVE-2025-21666",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21666"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: prevent null-ptr-deref in vsock_*[has_data|has_space]\n\nRecent reports have shown how we sometimes call vsock_*_has_data()\nwhen a vsock socket has been de-assigned from a transport (see attached\nlinks), but we shouldn\u0027t.\n\nPrevious commits should have solved the real problems, but we may have\nmore in the future, so to avoid null-ptr-deref, we can return 0\n(no space, no data available) but with a warning.\n\nThis way the code should continue to run in a nearly consistent state\nand have a warning that allows us to debug future problems.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21666",
"url": "https://www.suse.com/security/cve/CVE-2025-21666"
},
{
"category": "external",
"summary": "SUSE Bug 1236680 for CVE-2025-21666",
"url": "https://bugzilla.suse.com/1236680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21666"
},
{
"cve": "CVE-2025-21669",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21669"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/virtio: discard packets if the transport changes\n\nIf the socket has been de-assigned or assigned to another transport,\nwe must discard any packets received because they are not expected\nand would cause issues when we access vsk-\u003etransport.\n\nA possible scenario is described by Hyunwoo Kim in the attached link,\nwhere after a first connect() interrupted by a signal, and a second\nconnect() failed, we can find `vsk-\u003etransport` at NULL, leading to a\nNULL pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21669",
"url": "https://www.suse.com/security/cve/CVE-2025-21669"
},
{
"category": "external",
"summary": "SUSE Bug 1236683 for CVE-2025-21669",
"url": "https://bugzilla.suse.com/1236683"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21669"
},
{
"cve": "CVE-2025-21670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/bpf: return early if transport is not assigned\n\nSome of the core functions can only be called if the transport\nhas been assigned.\n\nAs Michal reported, a socket might have the transport at NULL,\nfor example after a failed connect(), causing the following trace:\n\n BUG: kernel NULL pointer dereference, address: 00000000000000a0\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 12faf8067 P4D 12faf8067 PUD 113670067 PMD 0\n Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 15 UID: 0 PID: 1198 Comm: a.out Not tainted 6.13.0-rc2+\n RIP: 0010:vsock_connectible_has_data+0x1f/0x40\n Call Trace:\n vsock_bpf_recvmsg+0xca/0x5e0\n sock_recvmsg+0xb9/0xc0\n __sys_recvfrom+0xb3/0x130\n __x64_sys_recvfrom+0x20/0x30\n do_syscall_64+0x93/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nSo we need to check the `vsk-\u003etransport` in vsock_bpf_recvmsg(),\nespecially for connected sockets (stream/seqpacket) as we already\ndo in __vsock_connectible_recvmsg().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21670",
"url": "https://www.suse.com/security/cve/CVE-2025-21670"
},
{
"category": "external",
"summary": "SUSE Bug 1236685 for CVE-2025-21670",
"url": "https://bugzilla.suse.com/1236685"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21670"
},
{
"cve": "CVE-2025-21674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21674"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel\n\nAttempt to enable IPsec packet offload in tunnel mode in debug kernel\ngenerates the following kernel panic, which is happening due to two\nissues:\n1. In SA add section, the should be _bh() variant when marking SA mode.\n2. There is not needed flush_workqueue in SA delete routine. It is not\nneeded as at this stage as it is removed from SADB and the running work\nwill be canceled later in SA free.\n\n =====================================================\n WARNING: SOFTIRQ-safe -\u003e SOFTIRQ-unsafe lock order detected\n 6.12.0+ #4 Not tainted\n -----------------------------------------------------\n charon/1337 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:\n ffff88810f365020 (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}, at: mlx5e_xfrm_del_state+0xca/0x1e0 [mlx5_core]\n\n and this task is already holding:\n ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n which would create a new lock dependency:\n (\u0026x-\u003elock){+.-.}-{3:3} -\u003e (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n but this new dependency connects a SOFTIRQ-irq-safe lock:\n (\u0026x-\u003elock){+.-.}-{3:3}\n\n ... which became SOFTIRQ-irq-safe at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n hrtimer_run_softirq+0x146/0x2e0\n handle_softirqs+0x266/0x860\n irq_exit_rcu+0x115/0x1a0\n sysvec_apic_timer_interrupt+0x6e/0x90\n asm_sysvec_apic_timer_interrupt+0x16/0x20\n default_idle+0x13/0x20\n default_idle_call+0x67/0xa0\n do_idle+0x2da/0x320\n cpu_startup_entry+0x50/0x60\n start_secondary+0x213/0x2a0\n common_startup_64+0x129/0x138\n\n to a SOFTIRQ-irq-unsafe lock:\n (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n ... which became SOFTIRQ-irq-unsafe at:\n ...\n lock_acquire+0x1be/0x520\n _raw_spin_lock+0x2c/0x40\n xa_set_mark+0x70/0x110\n mlx5e_xfrm_add_state+0xe48/0x2290 [mlx5_core]\n xfrm_dev_state_add+0x3bb/0xd70\n xfrm_add_sa+0x2451/0x4a90\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n other info that might help us debug this:\n\n Possible interrupt unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026xa-\u003exa_lock#24);\n local_irq_disable();\n lock(\u0026x-\u003elock);\n lock(\u0026xa-\u003exa_lock#24);\n \u003cInterrupt\u003e\n lock(\u0026x-\u003elock);\n\n *** DEADLOCK ***\n\n 2 locks held by charon/1337:\n #0: ffffffff87f8f858 (\u0026net-\u003exfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x5e/0x90\n #1: ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n\n the dependencies between SOFTIRQ-irq-safe lock and the holding lock:\n -\u003e (\u0026x-\u003elock){+.-.}-{3:3} ops: 29 {\n HARDIRQ-ON-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_alloc_spi+0xc0/0xe60\n xfrm_alloc_userspi+0x5f6/0xbc0\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n IN-SOFTIRQ-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21674",
"url": "https://www.suse.com/security/cve/CVE-2025-21674"
},
{
"category": "external",
"summary": "SUSE Bug 1236688 for CVE-2025-21674",
"url": "https://bugzilla.suse.com/1236688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21674"
},
{
"cve": "CVE-2025-21675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Clear port select structure when fail to create\n\nClear the port select structure on error so no stale values left after\ndefiners are destroyed. That\u0027s because the mlx5_lag_destroy_definers()\nalways try to destroy all lag definers in the tt_map, so in the flow\nbelow lag definers get double-destroyed and cause kernel crash:\n\n mlx5_lag_port_sel_create()\n mlx5_lag_create_definers()\n mlx5_lag_create_definer() \u003c- Failed on tt 1\n mlx5_lag_destroy_definers() \u003c- definers[tt=0] gets destroyed\n mlx5_lag_port_sel_create()\n mlx5_lag_create_definers()\n mlx5_lag_create_definer() \u003c- Failed on tt 0\n mlx5_lag_destroy_definers() \u003c- definers[tt=0] gets double-destroyed\n\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008\n Mem abort info:\n ESR = 0x0000000096000005\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x05: level 1 translation fault\n Data abort info:\n ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000\n CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n user pgtable: 64k pages, 48-bit VAs, pgdp=0000000112ce2e00\n [0000000000000008] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000\n Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP\n Modules linked in: iptable_raw bonding ip_gre ip6_gre gre ip6_tunnel tunnel6 geneve ip6_udp_tunnel udp_tunnel ipip tunnel4 ip_tunnel rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) ib_uverbs(OE) mlx5_fwctl(OE) fwctl(OE) mlx5_core(OE) mlxdevm(OE) ib_core(OE) mlxfw(OE) memtrack(OE) mlx_compat(OE) openvswitch nsh nf_conncount psample xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 br_netfilter bridge stp llc netconsole overlay efi_pstore sch_fq_codel zram ip_tables crct10dif_ce qemu_fw_cfg fuse ipv6 crc_ccitt [last unloaded: mlx_compat(OE)]\n CPU: 3 UID: 0 PID: 217 Comm: kworker/u53:2 Tainted: G OE 6.11.0+ #2\n Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\n Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n Workqueue: mlx5_lag mlx5_do_bond_work [mlx5_core]\n pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : mlx5_del_flow_rules+0x24/0x2c0 [mlx5_core]\n lr : mlx5_lag_destroy_definer+0x54/0x100 [mlx5_core]\n sp : ffff800085fafb00\n x29: ffff800085fafb00 x28: ffff0000da0c8000 x27: 0000000000000000\n x26: ffff0000da0c8000 x25: ffff0000da0c8000 x24: ffff0000da0c8000\n x23: ffff0000c31f81a0 x22: 0400000000000000 x21: ffff0000da0c8000\n x20: 0000000000000000 x19: 0000000000000001 x18: 0000000000000000\n x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffff8b0c9350\n x14: 0000000000000000 x13: ffff800081390d18 x12: ffff800081dc3cc0\n x11: 0000000000000001 x10: 0000000000000b10 x9 : ffff80007ab7304c\n x8 : ffff0000d00711f0 x7 : 0000000000000004 x6 : 0000000000000190\n x5 : ffff00027edb3010 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : ffff0000d39b8000 x1 : ffff0000d39b8000 x0 : 0400000000000000\n Call trace:\n mlx5_del_flow_rules+0x24/0x2c0 [mlx5_core]\n mlx5_lag_destroy_definer+0x54/0x100 [mlx5_core]\n mlx5_lag_destroy_definers+0xa0/0x108 [mlx5_core]\n mlx5_lag_port_sel_create+0x2d4/0x6f8 [mlx5_core]\n mlx5_activate_lag+0x60c/0x6f8 [mlx5_core]\n mlx5_do_bond_work+0x284/0x5c8 [mlx5_core]\n process_one_work+0x170/0x3e0\n worker_thread+0x2d8/0x3e0\n kthread+0x11c/0x128\n ret_from_fork+0x10/0x20\n Code: a9025bf5 aa0003f6 a90363f7 f90023f9 (f9400400)\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21675",
"url": "https://www.suse.com/security/cve/CVE-2025-21675"
},
{
"category": "external",
"summary": "SUSE Bug 1236694 for CVE-2025-21675",
"url": "https://bugzilla.suse.com/1236694"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21675"
},
{
"cve": "CVE-2025-21676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21676"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: handle page_pool_dev_alloc_pages error\n\nThe fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did\nnot handle the case when it returned NULL. There was a WARN_ON(!new_page)\nbut it would still proceed to use the NULL pointer and then crash.\n\nThis case does seem somewhat rare but when the system is under memory\npressure it can happen. One case where I can duplicate this with some\nfrequency is when writing over a smbd share to a SATA HDD attached to an\nimx6q.\n\nSetting /proc/sys/vm/min_free_kbytes to higher values also seems to solve\nthe problem for my test case. But it still seems wrong that the fec driver\nignores the memory allocation error and can crash.\n\nThis commit handles the allocation error by dropping the current packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21676",
"url": "https://www.suse.com/security/cve/CVE-2025-21676"
},
{
"category": "external",
"summary": "SUSE Bug 1236696 for CVE-2025-21676",
"url": "https://bugzilla.suse.com/1236696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21676"
},
{
"cve": "CVE-2025-21678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: Destroy device along with udp socket\u0027s netns dismantle.\n\ngtp_newlink() links the device to a list in dev_net(dev) instead of\nsrc_net, where a udp tunnel socket is created.\n\nEven when src_net is removed, the device stays alive on dev_net(dev).\nThen, removing src_net triggers the splat below. [0]\n\nIn this example, gtp0 is created in ns2, and the udp socket is created\nin ns1.\n\n ip netns add ns1\n ip netns add ns2\n ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn\n ip netns del ns1\n\nLet\u0027s link the device to the socket\u0027s netns instead.\n\nNow, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove\nall gtp devices in the netns.\n\n[0]:\nref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at\n sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236)\n inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252)\n __sock_create (net/socket.c:1558)\n udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18)\n gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423)\n gtp_create_sockets (drivers/net/gtp.c:1447)\n gtp_newlink (drivers/net/gtp.c:1507)\n rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012)\n rtnetlink_rcv_msg (net/core/rtnetlink.c:6922)\n netlink_rcv_skb (net/netlink/af_netlink.c:2542)\n netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347)\n netlink_sendmsg (net/netlink/af_netlink.c:1891)\n ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583)\n ___sys_sendmsg (net/socket.c:2639)\n __sys_sendmsg (net/socket.c:2669)\n do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)\n\nWARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179)\nModules linked in:\nCPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nWorkqueue: netns cleanup_net\nRIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179)\nCode: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 \u003c0f\u003e 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89\nRSP: 0018:ff11000009a07b60 EFLAGS: 00010286\nRAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c\nRBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae\nR10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0\nR13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000\nFS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cTASK\u003e\n ? __warn (kernel/panic.c:748)\n ? ref_tracker_dir_exit (lib/ref_tracker.c:179)\n ? report_bug (lib/bug.c:201 lib/bug.c:219)\n ? handle_bug (arch/x86/kernel/traps.c:285)\n ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1))\n ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621)\n ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194)\n ? ref_tracker_dir_exit (lib/ref_tracker.c:179)\n ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158)\n ? kfree (mm/slub.c:4613 mm/slub.c:4761)\n net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467)\n cleanup_net (net/core/net_namespace.c:664 (discriminator 3))\n process_one_work (kernel/workqueue.c:3229)\n worker_thread (kernel/workqueue.c:3304 kernel/workqueue.c:3391\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21678",
"url": "https://www.suse.com/security/cve/CVE-2025-21678"
},
{
"category": "external",
"summary": "SUSE Bug 1236698 for CVE-2025-21678",
"url": "https://bugzilla.suse.com/1236698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21678"
},
{
"cve": "CVE-2025-21682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21682"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: bnxt: always recalculate features after XDP clearing, fix null-deref\n\nRecalculate features when XDP is detached.\n\nBefore:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: off [requested on]\n\nAfter:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: on\n\nThe fact that HW-GRO doesn\u0027t get re-enabled automatically is just\na minor annoyance. The real issue is that the features will randomly\ncome back during another reconfiguration which just happens to invoke\nnetdev_update_features(). The driver doesn\u0027t handle reconfiguring\ntwo things at a time very robustly.\n\nStarting with commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") we only reconfigure the RSS hash table\nif the \"effective\" number of Rx rings has changed. If HW-GRO is\nenabled \"effective\" number of rings is 2x what user sees.\nSo if we are in the bad state, with HW-GRO re-enablement \"pending\"\nafter XDP off, and we lower the rings by / 2 - the HW-GRO rings\ndoing 2x and the ethtool -L doing / 2 may cancel each other out,\nand the:\n\n if (old_rx_rings != bp-\u003ehw_resc.resv_rx_rings \u0026\u0026\n\ncondition in __bnxt_reserve_rings() will be false.\nThe RSS map won\u0027t get updated, and we\u0027ll crash with:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000168\n RIP: 0010:__bnxt_hwrm_vnic_set_rss+0x13a/0x1a0\n bnxt_hwrm_vnic_rss_cfg_p5+0x47/0x180\n __bnxt_setup_vnic_p5+0x58/0x110\n bnxt_init_nic+0xb72/0xf50\n __bnxt_open_nic+0x40d/0xab0\n bnxt_open_nic+0x2b/0x60\n ethtool_set_channels+0x18c/0x1d0\n\nAs we try to access a freed ring.\n\nThe issue is present since XDP support was added, really, but\nprior to commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") it wasn\u0027t causing major issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21682",
"url": "https://www.suse.com/security/cve/CVE-2025-21682"
},
{
"category": "external",
"summary": "SUSE Bug 1236703 for CVE-2025-21682",
"url": "https://bugzilla.suse.com/1236703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_26-rt-1-150600.1.3.1.x86_64",
"SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-14T15:26:53Z",
"details": "moderate"
}
],
"title": "CVE-2025-21682"
}
]
}
suse-su-2025:0428-1
Vulnerability from csaf_suse
Published
2025-02-11 10:40
Modified
2025-02-11 10:40
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
- CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).
- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).
- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
- CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
- CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
The following non-security bugs were fixed:
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).
- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).
- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).
- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).
- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).
- ALSA: ump: Use guard() for locking (stable-fixes).
- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).
- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).
- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).
- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).
- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).
- ASoC: samsung: Add missing depends on I2C (git-fixes).
- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).
- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).
- ASoC: wm8994: Add depends on MFD core (stable-fixes).
- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).
- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).
- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).
- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).
- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).
- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).
- HID: fix generic desktop D-Pad controls (git-fixes).
- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).
- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).
- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).
- Input: bbnsm_pwrkey - add remove hook (git-fixes).
- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).
- Input: davinci-keyscan - remove leftover header (git-fixes).
- Input: xpad - add QH Electronics VID/PID (stable-fixes).
- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).
- Input: xpad - add support for Nacon Pro Compact (stable-fixes).
- Input: xpad - add support for wooting two he (arm) (stable-fixes).
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).
- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).
- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).
- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).
- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).
- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).
- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).
- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).
- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)
- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)
- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)
- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)
- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)
- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)
- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)
- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)
- RDMA/rxe: Fix the warning '__rxe_cleanup+0x12c/0x170 [rdma_rxe]' (git-fixes)
- RDMA/srp: Fix error handling in srp_add_port (git-fixes)
- Disable 'ocfs2: fix UBSAN warning in ocfs2_verify_volume()' (bsc#1236138).
- Remove 'idpf: fix memory leaks and crashes while performing a soft reset' fix (bsc#1236628).
- Remove 'media: uvcvideo: Require entities to have a non-zero unique ID' fix (bsc#1235894).
- Revert 'HID: multitouch: Add support for lenovo Y9000P Touchpad' (stable-fixes).
- Revert 'drm/i915/dpt: Make DPT object unshrinkable' (stable-fixes).
- Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (git-fixes).
- Revert 'usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null' (stable-fixes).
- USB: core: Disable LPM only for non-suspended ports (git-fixes).
- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).
- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
- USB: serial: option: add Neoway N723-EA support (stable-fixes).
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).
- USB: usblp: return error when setting unsupported protocol (git-fixes).
- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
- VMCI: fix reference to ioctl-number.rst (git-fixes).
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).
- afs: Fix cleanup of immediately failed async calls (git-fixes).
- afs: Fix directory format encoding struct (git-fixes).
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).
- afs: Fix the maximum cell name length (git-fixes).
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (git-fixes)
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245).
- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).
- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)
- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)
- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).
- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).
- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
- cleanup: Add conditional guard support (stable-fixes).
- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).
- cleanup: Remove address space of returned pointer (git-fixes).
- cpufreq: ACPI: Fix max-frequency computation (git-fixes).
- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).
- cpufreq: amd-pstate: remove global header file (git-fixes).
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).
- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).
- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).
- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).
- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).
- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).
- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).
- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).
- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).
- cpupower: fix TSC MHz calculation (git-fixes).
- crypto: caam - use JobR's space to access page 0 regs (git-fixes).
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).
- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).
- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).
- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (git-fixes).
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).
- crypto: qce - fix goto jump in error path (git-fixes).
- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).
- crypto: qce - unregister previously registered algos in error path (git-fixes).
- devcoredump: cleanup some comments (git-fixes).
- dlm: fix possible lkb_resource null dereference (git-fixes).
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).
- docs: media: update location of the media patches (stable-fixes).
- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).
- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).
- drm/amd/display: Fix DSC-re-computing (stable-fixes).
- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).
- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).
- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).
- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).
- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).
- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).
- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).
- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).
- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).
- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).
- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).
- drm/mediatek: Add return value check when reading DPCD (git-fixes).
- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).
- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).
- drm/mediatek: Fix mode valid issue for dp (git-fixes).
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (git-fixes).
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).
- drm/mediatek: stop selecting foreign drivers (git-fixes).
- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).
- drm/msm: Check return value of of_dma_configure() (git-fixes).
- drm/msm: do not clean up priv->kms prematurely (git-fixes).
- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).
- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).
- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).
- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).
- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).
- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).
- drm/vmwgfx: Add new keep_resv BO param (git-fixes).
- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).
- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).
- exfat: fix the infinite loop in exfat_readdir() (git-fixes).
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).
- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).
- genksyms: fix memory leak when the same symbol is added from source (git-fixes).
- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).
- gpio: mxc: remove dead code after switch to DT-only (git-fixes).
- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp() (git-fixes).
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).
- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).
- hwmon: (tmp513) Fix division of negative numbers (git-fixes).
- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).
- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).
- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
- i2c: i801: Add support for Intel Panther Lake (stable-fixes).
- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).
- i2c: rcar: fix NACK handling when being a target (git-fixes).
- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).
- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).
- iio: adc: ad7124: Disable all channels at probe time (git-fixes).
- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).
- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).
- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).
- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).
- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).
- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).
- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).
- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).
- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).
- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).
- intel_th: core: fix kernel-doc warnings (git-fixes).
- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).
- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).
- kheaders: Ignore silly-rename files (stable-fixes).
- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).
- ktest.pl: Check kernelrelease return in get_version (git-fixes).
- ktest.pl: Fix typo 'accesing' (git-fixes).
- ktest.pl: Fix typo in comment (git-fixes).
- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).
- ktest: force $buildonly = 1 for 'make_warnings_file' test type (stable-fixes).
- landlock: Handle weird files (git-fixes).
- latencytop: use correct kernel-doc format for func params (git-fixes).
- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).
- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).
- lib/inflate.c: remove dead code (git-fixes).
- lib/stackdepot: print disabled message only if truly disabled (git-fixes).
- mac802154: check local interfaces before deleting sdata list (stable-fixes).
- mailbox: pcc: Add support for platform notification handling (stable-fixes).
- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).
- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).
- maple_tree: simplify split calculation (git-fixes).
- media: camif-core: Add check for clk_enable() (git-fixes).
- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).
- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).
- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).
- media: i2c: imx412: Add missing newline to prints (git-fixes).
- media: i2c: ov9282: Correct the exposure offset (git-fixes).
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).
- media: imx296: Add standby delay during probe (git-fixes).
- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).
- media: marvell: Add check for clk_enable() (git-fixes).
- media: mc: fix endpoint iteration (git-fixes).
- media: mipi-csis: Add check for clk_enable() (git-fixes).
- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).
- media: ov5640: fix get_light_freq on auto (git-fixes).
- media: rc: iguanair: handle timeouts (git-fixes).
- media: rkisp1: Fix unused value issue (git-fixes).
- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).
- media: uvcvideo: Fix double free in error path (git-fixes).
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).
- media: uvcvideo: Only save async fh if success (git-fixes).
- media: uvcvideo: Propagate buf->error to userspace (git-fixes).
- media: uvcvideo: Remove dangling pointers (git-fixes).
- media: uvcvideo: Remove redundant NULL assignment (git-fixes).
- media: uvcvideo: Support partial control reads (git-fixes).
- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).
- memory-failure: use a folio in me_huge_page() (git-fixes).
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).
- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).
- misc: fastrpc: Fix copy buffer page size (git-fixes).
- misc: fastrpc: Fix registered buffer page address (git-fixes).
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).
- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).
- mm/memory-failure: check the mapcount of the precise page (git-fixes).
- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).
- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).
- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).
- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).
- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).
- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).
- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).
- mm/migrate: putback split folios when numa hint migration fails (git-fixes).
- mm/migrate: split source folio if it is on deferred split list (git-fixes).
- mm/page_owner: remove free_ts from page_owner output (git-fixes).
- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).
- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).
- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).
- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).
- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).
- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).
- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).
- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).
- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).
- net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
- net: mana: Enable debugfs files for MANA device (bsc#1236758).
- net: netvsc: Update default VMBus channels (bsc#1236757).
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).
- net: rose: fix timer races against user threads (git-fixes).
- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).
- net: usb: rtl8150: enable basic endpoint checking (git-fixes).
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).
- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).
- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).
- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).
- nvmet: propagate npwg topology (git-fixes).
- padata: add pd get/put refcnt helper (git-fixes).
- padata: avoid UAF for reorder_work (git-fixes).
- padata: fix UAF in padata_reorder (git-fixes).
- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).
- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).
- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).
- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).
- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).
- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).
- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).
- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).
- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).
- pps: add an error check in parport_attach (git-fixes).
- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- printk: Add is_printk_legacy_deferred() (bsc#1236733).
- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).
- pwm: stm32-lp: Add check for clk_enable() (git-fixes).
- pwm: stm32: Add check for clk_enable() (git-fixes).
- r8169: enable SG/TSO on selected chip versions per default (bsc#1235874).
- rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (git-fixes)
- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)
- rcu: Dump memory object info if callback function is invalid (git-fixes)
- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)
- rcuscale: Move rcu_scale_writer() (git-fixes)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)
- regulator: core: Add missing newline character (git-fixes).
- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).
- remoteproc: core: Fix ida_free call while not allocated (git-fixes).
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).
- rtc: zynqmp: Fix optional clock name property (git-fixes).
- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)
- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).
- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).
- selftest: media_tests: fix trivial UAF typo (git-fixes).
- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).
- selftests/landlock: Fix error message (git-fixes).
- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).
- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).
- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).
- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).
- selftests: tc-testing: reduce rshift value (stable-fixes).
- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).
- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).
- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).
- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).
- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).
- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).
- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).
- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).
- spi: zynq-qspi: Add check for clk_enable() (git-fixes).
- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)
- srcu: Only accelerate on enqueue time (git-fixes)
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).
- staging: iio: ad9832: Correct phase range check (git-fixes).
- staging: iio: ad9834: Correct phase range check (git-fixes).
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).
- staging: media: max96712: fix kernel oops when removing module (git-fixes).
- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).
- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).
- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
- tools: Sync if_xdp.h uapi tooling header (git-fixes).
- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).
- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).
- ubifs: skip dumping tnc tree when zroot is null (git-fixes).
- uio: Fix return value of poll (git-fixes).
- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).
- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).
- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).
- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
- usb: fix reference leak in usb_new_device() (git-fixes).
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).
- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).
- usb: gadget: f_tcm: Do not free command immediately (git-fixes).
- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).
- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).
- usb: gadget: f_tcm: Translate error to sense (git-fixes).
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).
- usb: host: xhci-plat: Assign shared_hcd->rsrc_start (git-fixes).
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)
- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).
- usbnet: ipheth: break up NCM header size computation (git-fixes).
- usbnet: ipheth: check that DPE points past NCM header (git-fixes).
- usbnet: ipheth: fix DPE OoB read (git-fixes).
- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).
- usbnet: ipheth: refactor NCM datagram loop (git-fixes).
- usbnet: ipheth: use static NDP16 location in URB (git-fixes).
- vfio/pci: Lock external INTx masking ops (bsc#1222803).
- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).
- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).
- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).
- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).
- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).
- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).
- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).
- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).
- wifi: mac80211: Add non-atomic station iterator (stable-fixes).
- wifi: mac80211: Fix common size calculation for ML element (git-fixes).
- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).
- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).
- wifi: mac80211: prohibit deactivating all links (git-fixes).
- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).
- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7915: fix register mapping (git-fixes).
- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).
- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).
- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).
- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).
- wifi: mt76: mt7996: fix ldpc setting (git-fixes).
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7996: fix register mapping (git-fixes).
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).
- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).
- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).
- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).
- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).
- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).
- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).
- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).
Patchnames
SUSE-2025-428,SUSE-SLE-Module-Public-Cloud-15-SP6-2025-428,openSUSE-SLE-15.6-2025-428
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section-\u003eusage (bsc#1221326).\n- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).\n- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).\n- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).\n- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).\n- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).\n- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).\n- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).\n- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).\n- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).\n- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).\n- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).\n- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).\n- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).\n- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).\n- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).\n- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).\n- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).\n- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).\n- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).\n- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).\n- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).\n- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).\n- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).\n- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).\n- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).\n- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).\n- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).\n- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).\n- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).\n- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).\n- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).\n- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).\n- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).\n- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).\n- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).\n- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).\n- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).\n- CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).\n- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027 (bsc#1235487).\n- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).\n- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).\n- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).\n- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).\n- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).\n- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).\n- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).\n- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).\n- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).\n- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).\n- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).\n- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).\n- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).\n- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).\n- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).\n- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).\n- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).\n- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).\n- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).\n- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).\n- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).\n- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).\n- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).\n- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).\n- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).\n- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).\n- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).\n- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).\n- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).\n- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).\n- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).\n- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).\n- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).\n- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).\n- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).\n- CVE-2024-56729: smb: Initialize cfid-\u003etcon before performing network ops (bsc#1235503).\n- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).\n- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).\n- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).\n- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).\n- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).\n- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).\n- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).\n- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).\n- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).\n- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).\n- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).\n- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).\n- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).\n- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).\n- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).\n- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).\n- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).\n- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).\n- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).\n- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).\n- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).\n- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).\n- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).\n- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).\n- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).\n- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).\n- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before \u0027getting\u0027 registers (bsc#1236106).\n- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).\n- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).\n- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).\n- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).\n- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).\n- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).\n- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).\n- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).\n- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).\n- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).\n- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).\n- CVE-2025-21678: gtp: Destroy device along with udp socket\u0027s netns dismantle (bsc#1236698).\n- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).\n- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).\n- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).\n- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).\n- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).\n- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).\n- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).\n- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).\n- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).\n- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).\n- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).\n- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).\n- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).\n- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).\n- ALSA: ump: Use guard() for locking (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).\n- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).\n- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).\n- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).\n- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).\n- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).\n- ASoC: samsung: Add missing depends on I2C (git-fixes).\n- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).\n- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).\n- ASoC: wm8994: Add depends on MFD core (stable-fixes).\n- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).\n- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).\n- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).\n- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).\n- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).\n- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).\n- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).\n- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).\n- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).\n- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).\n- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).\n- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).\n- HID: fix generic desktop D-Pad controls (git-fixes).\n- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).\n- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).\n- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).\n- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).\n- Input: bbnsm_pwrkey - add remove hook (git-fixes).\n- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).\n- Input: davinci-keyscan - remove leftover header (git-fixes).\n- Input: xpad - add QH Electronics VID/PID (stable-fixes).\n- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).\n- Input: xpad - add support for Nacon Pro Compact (stable-fixes).\n- Input: xpad - add support for wooting two he (arm) (stable-fixes).\n- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).\n- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).\n- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).\n- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).\n- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).\n- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).\n- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).\n- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).\n- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).\n- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).\n- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).\n- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).\n- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).\n- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).\n- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).\n- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).\n- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).\n- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).\n- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).\n- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).\n- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).\n- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).\n- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)\n- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)\n- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)\n- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)\n- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)\n- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)\n- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)\n- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)\n- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)\n- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)\n- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)\n- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)\n- RDMA/rxe: Fix the warning \u0027__rxe_cleanup+0x12c/0x170 [rdma_rxe]\u0027 (git-fixes)\n- RDMA/srp: Fix error handling in srp_add_port (git-fixes)\n- Disable \u0027ocfs2: fix UBSAN warning in ocfs2_verify_volume()\u0027 (bsc#1236138).\n- Remove \u0027idpf: fix memory leaks and crashes while performing a soft reset\u0027 fix (bsc#1236628).\n- Remove \u0027media: uvcvideo: Require entities to have a non-zero unique ID\u0027 fix (bsc#1235894).\n- Revert \u0027HID: multitouch: Add support for lenovo Y9000P Touchpad\u0027 (stable-fixes).\n- Revert \u0027drm/i915/dpt: Make DPT object unshrinkable\u0027 (stable-fixes).\n- Revert \u0027mtd: spi-nor: core: replace dummy buswidth from addr to data\u0027 (git-fixes).\n- Revert \u0027usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null\u0027 (stable-fixes).\n- USB: core: Disable LPM only for non-suspended ports (git-fixes).\n- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).\n- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).\n- USB: serial: option: add Neoway N723-EA support (stable-fixes).\n- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).\n- USB: usblp: return error when setting unsupported protocol (git-fixes).\n- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).\n- VMCI: fix reference to ioctl-number.rst (git-fixes).\n- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).\n- afs: Fix cleanup of immediately failed async calls (git-fixes).\n- afs: Fix directory format encoding struct (git-fixes).\n- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).\n- afs: Fix the maximum cell name length (git-fixes).\n- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)\n- arm64: Filter out SVE hwcaps when FEAT_SVE isn\u0027t implemented (git-fixes)\n- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245).\n- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)\n- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).\n- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)\n- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).\n- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)\n- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)\n- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)\n- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).\n- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)\n- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).\n- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).\n- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).\n- cleanup: Add conditional guard support (stable-fixes).\n- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).\n- cleanup: Remove address space of returned pointer (git-fixes).\n- cpufreq: ACPI: Fix max-frequency computation (git-fixes).\n- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).\n- cpufreq: amd-pstate: remove global header file (git-fixes).\n- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).\n- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).\n- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).\n- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).\n- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).\n- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).\n- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).\n- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).\n- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).\n- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).\n- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).\n- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).\n- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).\n- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).\n- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).\n- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).\n- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).\n- cpupower: fix TSC MHz calculation (git-fixes).\n- crypto: caam - use JobR\u0027s space to access page 0 regs (git-fixes).\n- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).\n- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).\n- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).\n- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).\n- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).\n- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to \u0027async\u0027 (git-fixes).\n- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).\n- crypto: qce - fix goto jump in error path (git-fixes).\n- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).\n- crypto: qce - unregister previously registered algos in error path (git-fixes).\n- devcoredump: cleanup some comments (git-fixes).\n- dlm: fix possible lkb_resource null dereference (git-fixes).\n- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).\n- docs: media: update location of the media patches (stable-fixes).\n- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).\n- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).\n- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).\n- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).\n- drm/amd/display: Fix DSC-re-computing (stable-fixes).\n- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).\n- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).\n- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).\n- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).\n- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).\n- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).\n- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).\n- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).\n- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).\n- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).\n- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).\n- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).\n- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).\n- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).\n- drm/mediatek: Add return value check when reading DPCD (git-fixes).\n- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).\n- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).\n- drm/mediatek: Fix mode valid issue for dp (git-fixes).\n- drm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err (git-fixes).\n- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).\n- drm/mediatek: stop selecting foreign drivers (git-fixes).\n- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).\n- drm/msm: Check return value of of_dma_configure() (git-fixes).\n- drm/msm: do not clean up priv-\u003ekms prematurely (git-fixes).\n- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).\n- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).\n- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).\n- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).\n- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).\n- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).\n- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).\n- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).\n- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).\n- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).\n- drm/vmwgfx: Add new keep_resv BO param (git-fixes).\n- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).\n- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).\n- exfat: fix the infinite loop in exfat_readdir() (git-fixes).\n- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).\n- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).\n- genksyms: fix memory leak when the same symbol is added from source (git-fixes).\n- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).\n- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).\n- gpio: mxc: remove dead code after switch to DT-only (git-fixes).\n- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).\n- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp() (git-fixes).\n- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).\n- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).\n- hwmon: (tmp513) Fix division of negative numbers (git-fixes).\n- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).\n- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).\n- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).\n- i2c: i801: Add support for Intel Panther Lake (stable-fixes).\n- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).\n- i2c: rcar: fix NACK handling when being a target (git-fixes).\n- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).\n- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).\n- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).\n- iio: adc: ad7124: Disable all channels at probe time (git-fixes).\n- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).\n- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).\n- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).\n- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).\n- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).\n- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).\n- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).\n- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).\n- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).\n- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).\n- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).\n- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).\n- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).\n- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).\n- intel_th: core: fix kernel-doc warnings (git-fixes).\n- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).\n- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).\n- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).\n- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).\n- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).\n- kheaders: Ignore silly-rename files (stable-fixes).\n- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).\n- ktest.pl: Check kernelrelease return in get_version (git-fixes).\n- ktest.pl: Fix typo \u0027accesing\u0027 (git-fixes).\n- ktest.pl: Fix typo in comment (git-fixes).\n- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).\n- ktest: force $buildonly = 1 for \u0027make_warnings_file\u0027 test type (stable-fixes).\n- landlock: Handle weird files (git-fixes).\n- latencytop: use correct kernel-doc format for func params (git-fixes).\n- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).\n- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).\n- lib/inflate.c: remove dead code (git-fixes).\n- lib/stackdepot: print disabled message only if truly disabled (git-fixes).\n- mac802154: check local interfaces before deleting sdata list (stable-fixes).\n- mailbox: pcc: Add support for platform notification handling (stable-fixes).\n- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).\n- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).\n- maple_tree: simplify split calculation (git-fixes).\n- media: camif-core: Add check for clk_enable() (git-fixes).\n- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).\n- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).\n- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).\n- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).\n- media: i2c: imx412: Add missing newline to prints (git-fixes).\n- media: i2c: ov9282: Correct the exposure offset (git-fixes).\n- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).\n- media: imx296: Add standby delay during probe (git-fixes).\n- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).\n- media: marvell: Add check for clk_enable() (git-fixes).\n- media: mc: fix endpoint iteration (git-fixes).\n- media: mipi-csis: Add check for clk_enable() (git-fixes).\n- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).\n- media: ov5640: fix get_light_freq on auto (git-fixes).\n- media: rc: iguanair: handle timeouts (git-fixes).\n- media: rkisp1: Fix unused value issue (git-fixes).\n- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).\n- media: uvcvideo: Fix double free in error path (git-fixes).\n- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).\n- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).\n- media: uvcvideo: Only save async fh if success (git-fixes).\n- media: uvcvideo: Propagate buf-\u003eerror to userspace (git-fixes).\n- media: uvcvideo: Remove dangling pointers (git-fixes).\n- media: uvcvideo: Remove redundant NULL assignment (git-fixes).\n- media: uvcvideo: Support partial control reads (git-fixes).\n- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).\n- memory-failure: use a folio in me_huge_page() (git-fixes).\n- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).\n- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).\n- misc: fastrpc: Fix copy buffer page size (git-fixes).\n- misc: fastrpc: Fix registered buffer page address (git-fixes).\n- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).\n- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).\n- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).\n- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).\n- mm/memory-failure: check the mapcount of the precise page (git-fixes).\n- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).\n- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).\n- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).\n- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).\n- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).\n- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).\n- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).\n- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).\n- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).\n- mm/migrate: putback split folios when numa hint migration fails (git-fixes).\n- mm/migrate: split source folio if it is on deferred split list (git-fixes).\n- mm/page_owner: remove free_ts from page_owner output (git-fixes).\n- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).\n- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).\n- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).\n- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).\n- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).\n- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).\n- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).\n- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).\n- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).\n- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).\n- net: mana: Cleanup \u0027mana\u0027 debugfs dir after cleanup of all children (bsc#1236760).\n- net: mana: Enable debugfs files for MANA device (bsc#1236758).\n- net: netvsc: Update default VMBus channels (bsc#1236757).\n- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).\n- net: rose: fix timer races against user threads (git-fixes).\n- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).\n- net: usb: rtl8150: enable basic endpoint checking (git-fixes).\n- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).\n- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).\n- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).\n- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).\n- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).\n- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).\n- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).\n- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).\n- nvmet: propagate npwg topology (git-fixes).\n- padata: add pd get/put refcnt helper (git-fixes).\n- padata: avoid UAF for reorder_work (git-fixes).\n- padata: fix UAF in padata_reorder (git-fixes).\n- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).\n- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).\n- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).\n- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).\n- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).\n- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).\n- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).\n- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).\n- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).\n- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).\n- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).\n- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).\n- pps: add an error check in parport_attach (git-fixes).\n- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).\n- printk: Add is_printk_legacy_deferred() (bsc#1236733).\n- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).\n- pwm: stm32-lp: Add check for clk_enable() (git-fixes).\n- pwm: stm32: Add check for clk_enable() (git-fixes).\n- r8169: enable SG/TSO on selected chip versions per default (bsc#1235874).\n- rcu-tasks: Pull sampling of -\u003epercpu_dequeue_lim out of loop (git-fixes)\n- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)\n- rcu: Dump memory object info if callback function is invalid (git-fixes)\n- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)\n- rcuscale: Move rcu_scale_writer() (git-fixes)\n- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)\n- regulator: core: Add missing newline character (git-fixes).\n- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).\n- remoteproc: core: Fix ida_free call while not allocated (git-fixes).\n- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).\n- rtc: zynqmp: Fix optional clock name property (git-fixes).\n- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)\n- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).\n- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).\n- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).\n- selftest: media_tests: fix trivial UAF typo (git-fixes).\n- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).\n- selftests/landlock: Fix error message (git-fixes).\n- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).\n- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).\n- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).\n- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).\n- selftests: tc-testing: reduce rshift value (stable-fixes).\n- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).\n- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).\n- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).\n- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).\n- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).\n- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).\n- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).\n- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).\n- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).\n- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).\n- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).\n- spi: zynq-qspi: Add check for clk_enable() (git-fixes).\n- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)\n- srcu: Only accelerate on enqueue time (git-fixes)\n- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).\n- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).\n- staging: iio: ad9832: Correct phase range check (git-fixes).\n- staging: iio: ad9834: Correct phase range check (git-fixes).\n- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).\n- staging: media: max96712: fix kernel oops when removing module (git-fixes).\n- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).\n- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).\n- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).\n- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).\n- tools: Sync if_xdp.h uapi tooling header (git-fixes).\n- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).\n- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).\n- ubifs: skip dumping tnc tree when zroot is null (git-fixes).\n- uio: Fix return value of poll (git-fixes).\n- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).\n- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).\n- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).\n- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).\n- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).\n- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).\n- usb: fix reference leak in usb_new_device() (git-fixes).\n- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).\n- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).\n- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).\n- usb: gadget: f_tcm: Do not free command immediately (git-fixes).\n- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).\n- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).\n- usb: gadget: f_tcm: Translate error to sense (git-fixes).\n- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).\n- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).\n- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).\n- usb: host: xhci-plat: Assign shared_hcd-\u003ersrc_start (git-fixes).\n- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)\n- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).\n- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).\n- usbnet: ipheth: break up NCM header size computation (git-fixes).\n- usbnet: ipheth: check that DPE points past NCM header (git-fixes).\n- usbnet: ipheth: fix DPE OoB read (git-fixes).\n- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).\n- usbnet: ipheth: refactor NCM datagram loop (git-fixes).\n- usbnet: ipheth: use static NDP16 location in URB (git-fixes).\n- vfio/pci: Lock external INTx masking ops (bsc#1222803).\n- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).\n- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).\n- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).\n- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).\n- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).\n- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).\n- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).\n- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).\n- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).\n- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).\n- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).\n- wifi: mac80211: Add non-atomic station iterator (stable-fixes).\n- wifi: mac80211: Fix common size calculation for ML element (git-fixes).\n- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).\n- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).\n- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).\n- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).\n- wifi: mac80211: prohibit deactivating all links (git-fixes).\n- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).\n- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).\n- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).\n- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).\n- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).\n- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7915: fix register mapping (git-fixes).\n- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).\n- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).\n- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).\n- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).\n- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).\n- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).\n- wifi: mt76: mt7996: fix ldpc setting (git-fixes).\n- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7996: fix register mapping (git-fixes).\n- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).\n- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).\n- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).\n- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).\n- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).\n- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).\n- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).\n- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).\n- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).\n- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).\n- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).\n- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).\n- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).\n- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).\n- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).\n- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).\n- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).\n- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).\n- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-428,SUSE-SLE-Module-Public-Cloud-15-SP6-2025-428,openSUSE-SLE-15.6-2025-428",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0428-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:0428-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20250428-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:0428-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-February/020311.html"
},
{
"category": "self",
"summary": "SUSE Bug 1012628",
"url": "https://bugzilla.suse.com/1012628"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1215199",
"url": "https://bugzilla.suse.com/1215199"
},
{
"category": "self",
"summary": "SUSE Bug 1216813",
"url": "https://bugzilla.suse.com/1216813"
},
{
"category": "self",
"summary": "SUSE Bug 1218470",
"url": "https://bugzilla.suse.com/1218470"
},
{
"category": "self",
"summary": "SUSE Bug 1220711",
"url": "https://bugzilla.suse.com/1220711"
},
{
"category": "self",
"summary": "SUSE Bug 1221326",
"url": "https://bugzilla.suse.com/1221326"
},
{
"category": "self",
"summary": "SUSE Bug 1222803",
"url": "https://bugzilla.suse.com/1222803"
},
{
"category": "self",
"summary": "SUSE Bug 1224049",
"url": "https://bugzilla.suse.com/1224049"
},
{
"category": "self",
"summary": "SUSE Bug 1225897",
"url": "https://bugzilla.suse.com/1225897"
},
{
"category": "self",
"summary": "SUSE Bug 1226980",
"url": "https://bugzilla.suse.com/1226980"
},
{
"category": "self",
"summary": "SUSE Bug 1228592",
"url": "https://bugzilla.suse.com/1228592"
},
{
"category": "self",
"summary": "SUSE Bug 1229833",
"url": "https://bugzilla.suse.com/1229833"
},
{
"category": "self",
"summary": "SUSE Bug 1231016",
"url": "https://bugzilla.suse.com/1231016"
},
{
"category": "self",
"summary": "SUSE Bug 1232087",
"url": "https://bugzilla.suse.com/1232087"
},
{
"category": "self",
"summary": "SUSE Bug 1232101",
"url": "https://bugzilla.suse.com/1232101"
},
{
"category": "self",
"summary": "SUSE Bug 1232158",
"url": "https://bugzilla.suse.com/1232158"
},
{
"category": "self",
"summary": "SUSE Bug 1232161",
"url": "https://bugzilla.suse.com/1232161"
},
{
"category": "self",
"summary": "SUSE Bug 1232421",
"url": "https://bugzilla.suse.com/1232421"
},
{
"category": "self",
"summary": "SUSE Bug 1232882",
"url": "https://bugzilla.suse.com/1232882"
},
{
"category": "self",
"summary": "SUSE Bug 1233055",
"url": "https://bugzilla.suse.com/1233055"
},
{
"category": "self",
"summary": "SUSE Bug 1233112",
"url": "https://bugzilla.suse.com/1233112"
},
{
"category": "self",
"summary": "SUSE Bug 1233221",
"url": "https://bugzilla.suse.com/1233221"
},
{
"category": "self",
"summary": "SUSE Bug 1233248",
"url": "https://bugzilla.suse.com/1233248"
},
{
"category": "self",
"summary": "SUSE Bug 1233259",
"url": "https://bugzilla.suse.com/1233259"
},
{
"category": "self",
"summary": "SUSE Bug 1233260",
"url": "https://bugzilla.suse.com/1233260"
},
{
"category": "self",
"summary": "SUSE Bug 1233488",
"url": "https://bugzilla.suse.com/1233488"
},
{
"category": "self",
"summary": "SUSE Bug 1233522",
"url": "https://bugzilla.suse.com/1233522"
},
{
"category": "self",
"summary": "SUSE Bug 1233638",
"url": "https://bugzilla.suse.com/1233638"
},
{
"category": "self",
"summary": "SUSE Bug 1233642",
"url": "https://bugzilla.suse.com/1233642"
},
{
"category": "self",
"summary": "SUSE Bug 1233778",
"url": "https://bugzilla.suse.com/1233778"
},
{
"category": "self",
"summary": "SUSE Bug 1234195",
"url": "https://bugzilla.suse.com/1234195"
},
{
"category": "self",
"summary": "SUSE Bug 1234619",
"url": "https://bugzilla.suse.com/1234619"
},
{
"category": "self",
"summary": "SUSE Bug 1234635",
"url": "https://bugzilla.suse.com/1234635"
},
{
"category": "self",
"summary": "SUSE Bug 1234683",
"url": "https://bugzilla.suse.com/1234683"
},
{
"category": "self",
"summary": "SUSE Bug 1234693",
"url": "https://bugzilla.suse.com/1234693"
},
{
"category": "self",
"summary": "SUSE Bug 1234726",
"url": "https://bugzilla.suse.com/1234726"
},
{
"category": "self",
"summary": "SUSE Bug 1234825",
"url": "https://bugzilla.suse.com/1234825"
},
{
"category": "self",
"summary": "SUSE Bug 1234863",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "self",
"summary": "SUSE Bug 1234887",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "self",
"summary": "SUSE Bug 1234888",
"url": "https://bugzilla.suse.com/1234888"
},
{
"category": "self",
"summary": "SUSE Bug 1234893",
"url": "https://bugzilla.suse.com/1234893"
},
{
"category": "self",
"summary": "SUSE Bug 1234898",
"url": "https://bugzilla.suse.com/1234898"
},
{
"category": "self",
"summary": "SUSE Bug 1234901",
"url": "https://bugzilla.suse.com/1234901"
},
{
"category": "self",
"summary": "SUSE Bug 1234906",
"url": "https://bugzilla.suse.com/1234906"
},
{
"category": "self",
"summary": "SUSE Bug 1234923",
"url": "https://bugzilla.suse.com/1234923"
},
{
"category": "self",
"summary": "SUSE Bug 1234931",
"url": "https://bugzilla.suse.com/1234931"
},
{
"category": "self",
"summary": "SUSE Bug 1234934",
"url": "https://bugzilla.suse.com/1234934"
},
{
"category": "self",
"summary": "SUSE Bug 1234947",
"url": "https://bugzilla.suse.com/1234947"
},
{
"category": "self",
"summary": "SUSE Bug 1234957",
"url": "https://bugzilla.suse.com/1234957"
},
{
"category": "self",
"summary": "SUSE Bug 1235000",
"url": "https://bugzilla.suse.com/1235000"
},
{
"category": "self",
"summary": "SUSE Bug 1235001",
"url": "https://bugzilla.suse.com/1235001"
},
{
"category": "self",
"summary": "SUSE Bug 1235011",
"url": "https://bugzilla.suse.com/1235011"
},
{
"category": "self",
"summary": "SUSE Bug 1235031",
"url": "https://bugzilla.suse.com/1235031"
},
{
"category": "self",
"summary": "SUSE Bug 1235032",
"url": "https://bugzilla.suse.com/1235032"
},
{
"category": "self",
"summary": "SUSE Bug 1235035",
"url": "https://bugzilla.suse.com/1235035"
},
{
"category": "self",
"summary": "SUSE Bug 1235037",
"url": "https://bugzilla.suse.com/1235037"
},
{
"category": "self",
"summary": "SUSE Bug 1235038",
"url": "https://bugzilla.suse.com/1235038"
},
{
"category": "self",
"summary": "SUSE Bug 1235039",
"url": "https://bugzilla.suse.com/1235039"
},
{
"category": "self",
"summary": "SUSE Bug 1235040",
"url": "https://bugzilla.suse.com/1235040"
},
{
"category": "self",
"summary": "SUSE Bug 1235042",
"url": "https://bugzilla.suse.com/1235042"
},
{
"category": "self",
"summary": "SUSE Bug 1235043",
"url": "https://bugzilla.suse.com/1235043"
},
{
"category": "self",
"summary": "SUSE Bug 1235046",
"url": "https://bugzilla.suse.com/1235046"
},
{
"category": "self",
"summary": "SUSE Bug 1235050",
"url": "https://bugzilla.suse.com/1235050"
},
{
"category": "self",
"summary": "SUSE Bug 1235051",
"url": "https://bugzilla.suse.com/1235051"
},
{
"category": "self",
"summary": "SUSE Bug 1235053",
"url": "https://bugzilla.suse.com/1235053"
},
{
"category": "self",
"summary": "SUSE Bug 1235054",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "self",
"summary": "SUSE Bug 1235057",
"url": "https://bugzilla.suse.com/1235057"
},
{
"category": "self",
"summary": "SUSE Bug 1235059",
"url": "https://bugzilla.suse.com/1235059"
},
{
"category": "self",
"summary": "SUSE Bug 1235061",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "self",
"summary": "SUSE Bug 1235065",
"url": "https://bugzilla.suse.com/1235065"
},
{
"category": "self",
"summary": "SUSE Bug 1235070",
"url": "https://bugzilla.suse.com/1235070"
},
{
"category": "self",
"summary": "SUSE Bug 1235073",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "self",
"summary": "SUSE Bug 1235100",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "self",
"summary": "SUSE Bug 1235112",
"url": "https://bugzilla.suse.com/1235112"
},
{
"category": "self",
"summary": "SUSE Bug 1235115",
"url": "https://bugzilla.suse.com/1235115"
},
{
"category": "self",
"summary": "SUSE Bug 1235117",
"url": "https://bugzilla.suse.com/1235117"
},
{
"category": "self",
"summary": "SUSE Bug 1235122",
"url": "https://bugzilla.suse.com/1235122"
},
{
"category": "self",
"summary": "SUSE Bug 1235123",
"url": "https://bugzilla.suse.com/1235123"
},
{
"category": "self",
"summary": "SUSE Bug 1235125",
"url": "https://bugzilla.suse.com/1235125"
},
{
"category": "self",
"summary": "SUSE Bug 1235132",
"url": "https://bugzilla.suse.com/1235132"
},
{
"category": "self",
"summary": "SUSE Bug 1235133",
"url": "https://bugzilla.suse.com/1235133"
},
{
"category": "self",
"summary": "SUSE Bug 1235155",
"url": "https://bugzilla.suse.com/1235155"
},
{
"category": "self",
"summary": "SUSE Bug 1235160",
"url": "https://bugzilla.suse.com/1235160"
},
{
"category": "self",
"summary": "SUSE Bug 1235217",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "self",
"summary": "SUSE Bug 1235219",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "self",
"summary": "SUSE Bug 1235220",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "self",
"summary": "SUSE Bug 1235222",
"url": "https://bugzilla.suse.com/1235222"
},
{
"category": "self",
"summary": "SUSE Bug 1235223",
"url": "https://bugzilla.suse.com/1235223"
},
{
"category": "self",
"summary": "SUSE Bug 1235224",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "self",
"summary": "SUSE Bug 1235227",
"url": "https://bugzilla.suse.com/1235227"
},
{
"category": "self",
"summary": "SUSE Bug 1235230",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "self",
"summary": "SUSE Bug 1235241",
"url": "https://bugzilla.suse.com/1235241"
},
{
"category": "self",
"summary": "SUSE Bug 1235249",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "self",
"summary": "SUSE Bug 1235251",
"url": "https://bugzilla.suse.com/1235251"
},
{
"category": "self",
"summary": "SUSE Bug 1235252",
"url": "https://bugzilla.suse.com/1235252"
},
{
"category": "self",
"summary": "SUSE Bug 1235389",
"url": "https://bugzilla.suse.com/1235389"
},
{
"category": "self",
"summary": "SUSE Bug 1235390",
"url": "https://bugzilla.suse.com/1235390"
},
{
"category": "self",
"summary": "SUSE Bug 1235391",
"url": "https://bugzilla.suse.com/1235391"
},
{
"category": "self",
"summary": "SUSE Bug 1235406",
"url": "https://bugzilla.suse.com/1235406"
},
{
"category": "self",
"summary": "SUSE Bug 1235410",
"url": "https://bugzilla.suse.com/1235410"
},
{
"category": "self",
"summary": "SUSE Bug 1235412",
"url": "https://bugzilla.suse.com/1235412"
},
{
"category": "self",
"summary": "SUSE Bug 1235413",
"url": "https://bugzilla.suse.com/1235413"
},
{
"category": "self",
"summary": "SUSE Bug 1235415",
"url": "https://bugzilla.suse.com/1235415"
},
{
"category": "self",
"summary": "SUSE Bug 1235416",
"url": "https://bugzilla.suse.com/1235416"
},
{
"category": "self",
"summary": "SUSE Bug 1235417",
"url": "https://bugzilla.suse.com/1235417"
},
{
"category": "self",
"summary": "SUSE Bug 1235418",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "self",
"summary": "SUSE Bug 1235423",
"url": "https://bugzilla.suse.com/1235423"
},
{
"category": "self",
"summary": "SUSE Bug 1235424",
"url": "https://bugzilla.suse.com/1235424"
},
{
"category": "self",
"summary": "SUSE Bug 1235425",
"url": "https://bugzilla.suse.com/1235425"
},
{
"category": "self",
"summary": "SUSE Bug 1235426",
"url": "https://bugzilla.suse.com/1235426"
},
{
"category": "self",
"summary": "SUSE Bug 1235427",
"url": "https://bugzilla.suse.com/1235427"
},
{
"category": "self",
"summary": "SUSE Bug 1235428",
"url": "https://bugzilla.suse.com/1235428"
},
{
"category": "self",
"summary": "SUSE Bug 1235429",
"url": "https://bugzilla.suse.com/1235429"
},
{
"category": "self",
"summary": "SUSE Bug 1235430",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "self",
"summary": "SUSE Bug 1235433",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "self",
"summary": "SUSE Bug 1235437",
"url": "https://bugzilla.suse.com/1235437"
},
{
"category": "self",
"summary": "SUSE Bug 1235439",
"url": "https://bugzilla.suse.com/1235439"
},
{
"category": "self",
"summary": "SUSE Bug 1235444",
"url": "https://bugzilla.suse.com/1235444"
},
{
"category": "self",
"summary": "SUSE Bug 1235445",
"url": "https://bugzilla.suse.com/1235445"
},
{
"category": "self",
"summary": "SUSE Bug 1235449",
"url": "https://bugzilla.suse.com/1235449"
},
{
"category": "self",
"summary": "SUSE Bug 1235451",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "self",
"summary": "SUSE Bug 1235454",
"url": "https://bugzilla.suse.com/1235454"
},
{
"category": "self",
"summary": "SUSE Bug 1235458",
"url": "https://bugzilla.suse.com/1235458"
},
{
"category": "self",
"summary": "SUSE Bug 1235459",
"url": "https://bugzilla.suse.com/1235459"
},
{
"category": "self",
"summary": "SUSE Bug 1235464",
"url": "https://bugzilla.suse.com/1235464"
},
{
"category": "self",
"summary": "SUSE Bug 1235466",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "self",
"summary": "SUSE Bug 1235473",
"url": "https://bugzilla.suse.com/1235473"
},
{
"category": "self",
"summary": "SUSE Bug 1235479",
"url": "https://bugzilla.suse.com/1235479"
},
{
"category": "self",
"summary": "SUSE Bug 1235480",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "self",
"summary": "SUSE Bug 1235483",
"url": "https://bugzilla.suse.com/1235483"
},
{
"category": "self",
"summary": "SUSE Bug 1235486",
"url": "https://bugzilla.suse.com/1235486"
},
{
"category": "self",
"summary": "SUSE Bug 1235487",
"url": "https://bugzilla.suse.com/1235487"
},
{
"category": "self",
"summary": "SUSE Bug 1235488",
"url": "https://bugzilla.suse.com/1235488"
},
{
"category": "self",
"summary": "SUSE Bug 1235489",
"url": "https://bugzilla.suse.com/1235489"
},
{
"category": "self",
"summary": "SUSE Bug 1235491",
"url": "https://bugzilla.suse.com/1235491"
},
{
"category": "self",
"summary": "SUSE Bug 1235494",
"url": "https://bugzilla.suse.com/1235494"
},
{
"category": "self",
"summary": "SUSE Bug 1235495",
"url": "https://bugzilla.suse.com/1235495"
},
{
"category": "self",
"summary": "SUSE Bug 1235496",
"url": "https://bugzilla.suse.com/1235496"
},
{
"category": "self",
"summary": "SUSE Bug 1235497",
"url": "https://bugzilla.suse.com/1235497"
},
{
"category": "self",
"summary": "SUSE Bug 1235498",
"url": "https://bugzilla.suse.com/1235498"
},
{
"category": "self",
"summary": "SUSE Bug 1235500",
"url": "https://bugzilla.suse.com/1235500"
},
{
"category": "self",
"summary": "SUSE Bug 1235502",
"url": "https://bugzilla.suse.com/1235502"
},
{
"category": "self",
"summary": "SUSE Bug 1235503",
"url": "https://bugzilla.suse.com/1235503"
},
{
"category": "self",
"summary": "SUSE Bug 1235519",
"url": "https://bugzilla.suse.com/1235519"
},
{
"category": "self",
"summary": "SUSE Bug 1235520",
"url": "https://bugzilla.suse.com/1235520"
},
{
"category": "self",
"summary": "SUSE Bug 1235521",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "self",
"summary": "SUSE Bug 1235523",
"url": "https://bugzilla.suse.com/1235523"
},
{
"category": "self",
"summary": "SUSE Bug 1235526",
"url": "https://bugzilla.suse.com/1235526"
},
{
"category": "self",
"summary": "SUSE Bug 1235528",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "self",
"summary": "SUSE Bug 1235532",
"url": "https://bugzilla.suse.com/1235532"
},
{
"category": "self",
"summary": "SUSE Bug 1235533",
"url": "https://bugzilla.suse.com/1235533"
},
{
"category": "self",
"summary": "SUSE Bug 1235534",
"url": "https://bugzilla.suse.com/1235534"
},
{
"category": "self",
"summary": "SUSE Bug 1235537",
"url": "https://bugzilla.suse.com/1235537"
},
{
"category": "self",
"summary": "SUSE Bug 1235538",
"url": "https://bugzilla.suse.com/1235538"
},
{
"category": "self",
"summary": "SUSE Bug 1235545",
"url": "https://bugzilla.suse.com/1235545"
},
{
"category": "self",
"summary": "SUSE Bug 1235552",
"url": "https://bugzilla.suse.com/1235552"
},
{
"category": "self",
"summary": "SUSE Bug 1235555",
"url": "https://bugzilla.suse.com/1235555"
},
{
"category": "self",
"summary": "SUSE Bug 1235557",
"url": "https://bugzilla.suse.com/1235557"
},
{
"category": "self",
"summary": "SUSE Bug 1235563",
"url": "https://bugzilla.suse.com/1235563"
},
{
"category": "self",
"summary": "SUSE Bug 1235564",
"url": "https://bugzilla.suse.com/1235564"
},
{
"category": "self",
"summary": "SUSE Bug 1235565",
"url": "https://bugzilla.suse.com/1235565"
},
{
"category": "self",
"summary": "SUSE Bug 1235568",
"url": "https://bugzilla.suse.com/1235568"
},
{
"category": "self",
"summary": "SUSE Bug 1235570",
"url": "https://bugzilla.suse.com/1235570"
},
{
"category": "self",
"summary": "SUSE Bug 1235571",
"url": "https://bugzilla.suse.com/1235571"
},
{
"category": "self",
"summary": "SUSE Bug 1235577",
"url": "https://bugzilla.suse.com/1235577"
},
{
"category": "self",
"summary": "SUSE Bug 1235578",
"url": "https://bugzilla.suse.com/1235578"
},
{
"category": "self",
"summary": "SUSE Bug 1235582",
"url": "https://bugzilla.suse.com/1235582"
},
{
"category": "self",
"summary": "SUSE Bug 1235583",
"url": "https://bugzilla.suse.com/1235583"
},
{
"category": "self",
"summary": "SUSE Bug 1235584",
"url": "https://bugzilla.suse.com/1235584"
},
{
"category": "self",
"summary": "SUSE Bug 1235587",
"url": "https://bugzilla.suse.com/1235587"
},
{
"category": "self",
"summary": "SUSE Bug 1235611",
"url": "https://bugzilla.suse.com/1235611"
},
{
"category": "self",
"summary": "SUSE Bug 1235612",
"url": "https://bugzilla.suse.com/1235612"
},
{
"category": "self",
"summary": "SUSE Bug 1235616",
"url": "https://bugzilla.suse.com/1235616"
},
{
"category": "self",
"summary": "SUSE Bug 1235622",
"url": "https://bugzilla.suse.com/1235622"
},
{
"category": "self",
"summary": "SUSE Bug 1235627",
"url": "https://bugzilla.suse.com/1235627"
},
{
"category": "self",
"summary": "SUSE Bug 1235632",
"url": "https://bugzilla.suse.com/1235632"
},
{
"category": "self",
"summary": "SUSE Bug 1235635",
"url": "https://bugzilla.suse.com/1235635"
},
{
"category": "self",
"summary": "SUSE Bug 1235638",
"url": "https://bugzilla.suse.com/1235638"
},
{
"category": "self",
"summary": "SUSE Bug 1235641",
"url": "https://bugzilla.suse.com/1235641"
},
{
"category": "self",
"summary": "SUSE Bug 1235643",
"url": "https://bugzilla.suse.com/1235643"
},
{
"category": "self",
"summary": "SUSE Bug 1235645",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "self",
"summary": "SUSE Bug 1235646",
"url": "https://bugzilla.suse.com/1235646"
},
{
"category": "self",
"summary": "SUSE Bug 1235647",
"url": "https://bugzilla.suse.com/1235647"
},
{
"category": "self",
"summary": "SUSE Bug 1235650",
"url": "https://bugzilla.suse.com/1235650"
},
{
"category": "self",
"summary": "SUSE Bug 1235653",
"url": "https://bugzilla.suse.com/1235653"
},
{
"category": "self",
"summary": "SUSE Bug 1235656",
"url": "https://bugzilla.suse.com/1235656"
},
{
"category": "self",
"summary": "SUSE Bug 1235657",
"url": "https://bugzilla.suse.com/1235657"
},
{
"category": "self",
"summary": "SUSE Bug 1235663",
"url": "https://bugzilla.suse.com/1235663"
},
{
"category": "self",
"summary": "SUSE Bug 1235686",
"url": "https://bugzilla.suse.com/1235686"
},
{
"category": "self",
"summary": "SUSE Bug 1235700",
"url": "https://bugzilla.suse.com/1235700"
},
{
"category": "self",
"summary": "SUSE Bug 1235705",
"url": "https://bugzilla.suse.com/1235705"
},
{
"category": "self",
"summary": "SUSE Bug 1235707",
"url": "https://bugzilla.suse.com/1235707"
},
{
"category": "self",
"summary": "SUSE Bug 1235708",
"url": "https://bugzilla.suse.com/1235708"
},
{
"category": "self",
"summary": "SUSE Bug 1235710",
"url": "https://bugzilla.suse.com/1235710"
},
{
"category": "self",
"summary": "SUSE Bug 1235714",
"url": "https://bugzilla.suse.com/1235714"
},
{
"category": "self",
"summary": "SUSE Bug 1235716",
"url": "https://bugzilla.suse.com/1235716"
},
{
"category": "self",
"summary": "SUSE Bug 1235720",
"url": "https://bugzilla.suse.com/1235720"
},
{
"category": "self",
"summary": "SUSE Bug 1235723",
"url": "https://bugzilla.suse.com/1235723"
},
{
"category": "self",
"summary": "SUSE Bug 1235727",
"url": "https://bugzilla.suse.com/1235727"
},
{
"category": "self",
"summary": "SUSE Bug 1235730",
"url": "https://bugzilla.suse.com/1235730"
},
{
"category": "self",
"summary": "SUSE Bug 1235737",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "self",
"summary": "SUSE Bug 1235739",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "self",
"summary": "SUSE Bug 1235745",
"url": "https://bugzilla.suse.com/1235745"
},
{
"category": "self",
"summary": "SUSE Bug 1235747",
"url": "https://bugzilla.suse.com/1235747"
},
{
"category": "self",
"summary": "SUSE Bug 1235750",
"url": "https://bugzilla.suse.com/1235750"
},
{
"category": "self",
"summary": "SUSE Bug 1235753",
"url": "https://bugzilla.suse.com/1235753"
},
{
"category": "self",
"summary": "SUSE Bug 1235759",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "self",
"summary": "SUSE Bug 1235764",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "self",
"summary": "SUSE Bug 1235768",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "self",
"summary": "SUSE Bug 1235776",
"url": "https://bugzilla.suse.com/1235776"
},
{
"category": "self",
"summary": "SUSE Bug 1235777",
"url": "https://bugzilla.suse.com/1235777"
},
{
"category": "self",
"summary": "SUSE Bug 1235778",
"url": "https://bugzilla.suse.com/1235778"
},
{
"category": "self",
"summary": "SUSE Bug 1235779",
"url": "https://bugzilla.suse.com/1235779"
},
{
"category": "self",
"summary": "SUSE Bug 1235793",
"url": "https://bugzilla.suse.com/1235793"
},
{
"category": "self",
"summary": "SUSE Bug 1235798",
"url": "https://bugzilla.suse.com/1235798"
},
{
"category": "self",
"summary": "SUSE Bug 1235806",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "self",
"summary": "SUSE Bug 1235808",
"url": "https://bugzilla.suse.com/1235808"
},
{
"category": "self",
"summary": "SUSE Bug 1235812",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "self",
"summary": "SUSE Bug 1235814",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "self",
"summary": "SUSE Bug 1235818",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "self",
"summary": "SUSE Bug 1235842",
"url": "https://bugzilla.suse.com/1235842"
},
{
"category": "self",
"summary": "SUSE Bug 1235865",
"url": "https://bugzilla.suse.com/1235865"
},
{
"category": "self",
"summary": "SUSE Bug 1235874",
"url": "https://bugzilla.suse.com/1235874"
},
{
"category": "self",
"summary": "SUSE Bug 1235894",
"url": "https://bugzilla.suse.com/1235894"
},
{
"category": "self",
"summary": "SUSE Bug 1235902",
"url": "https://bugzilla.suse.com/1235902"
},
{
"category": "self",
"summary": "SUSE Bug 1235903",
"url": "https://bugzilla.suse.com/1235903"
},
{
"category": "self",
"summary": "SUSE Bug 1235906",
"url": "https://bugzilla.suse.com/1235906"
},
{
"category": "self",
"summary": "SUSE Bug 1235918",
"url": "https://bugzilla.suse.com/1235918"
},
{
"category": "self",
"summary": "SUSE Bug 1235919",
"url": "https://bugzilla.suse.com/1235919"
},
{
"category": "self",
"summary": "SUSE Bug 1235920",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "self",
"summary": "SUSE Bug 1235924",
"url": "https://bugzilla.suse.com/1235924"
},
{
"category": "self",
"summary": "SUSE Bug 1235940",
"url": "https://bugzilla.suse.com/1235940"
},
{
"category": "self",
"summary": "SUSE Bug 1235941",
"url": "https://bugzilla.suse.com/1235941"
},
{
"category": "self",
"summary": "SUSE Bug 1235946",
"url": "https://bugzilla.suse.com/1235946"
},
{
"category": "self",
"summary": "SUSE Bug 1235948",
"url": "https://bugzilla.suse.com/1235948"
},
{
"category": "self",
"summary": "SUSE Bug 1235952",
"url": "https://bugzilla.suse.com/1235952"
},
{
"category": "self",
"summary": "SUSE Bug 1235964",
"url": "https://bugzilla.suse.com/1235964"
},
{
"category": "self",
"summary": "SUSE Bug 1235965",
"url": "https://bugzilla.suse.com/1235965"
},
{
"category": "self",
"summary": "SUSE Bug 1235967",
"url": "https://bugzilla.suse.com/1235967"
},
{
"category": "self",
"summary": "SUSE Bug 1235969",
"url": "https://bugzilla.suse.com/1235969"
},
{
"category": "self",
"summary": "SUSE Bug 1235976",
"url": "https://bugzilla.suse.com/1235976"
},
{
"category": "self",
"summary": "SUSE Bug 1235977",
"url": "https://bugzilla.suse.com/1235977"
},
{
"category": "self",
"summary": "SUSE Bug 1236078",
"url": "https://bugzilla.suse.com/1236078"
},
{
"category": "self",
"summary": "SUSE Bug 1236080",
"url": "https://bugzilla.suse.com/1236080"
},
{
"category": "self",
"summary": "SUSE Bug 1236082",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "self",
"summary": "SUSE Bug 1236088",
"url": "https://bugzilla.suse.com/1236088"
},
{
"category": "self",
"summary": "SUSE Bug 1236090",
"url": "https://bugzilla.suse.com/1236090"
},
{
"category": "self",
"summary": "SUSE Bug 1236091",
"url": "https://bugzilla.suse.com/1236091"
},
{
"category": "self",
"summary": "SUSE Bug 1236096",
"url": "https://bugzilla.suse.com/1236096"
},
{
"category": "self",
"summary": "SUSE Bug 1236097",
"url": "https://bugzilla.suse.com/1236097"
},
{
"category": "self",
"summary": "SUSE Bug 1236098",
"url": "https://bugzilla.suse.com/1236098"
},
{
"category": "self",
"summary": "SUSE Bug 1236101",
"url": "https://bugzilla.suse.com/1236101"
},
{
"category": "self",
"summary": "SUSE Bug 1236102",
"url": "https://bugzilla.suse.com/1236102"
},
{
"category": "self",
"summary": "SUSE Bug 1236104",
"url": "https://bugzilla.suse.com/1236104"
},
{
"category": "self",
"summary": "SUSE Bug 1236106",
"url": "https://bugzilla.suse.com/1236106"
},
{
"category": "self",
"summary": "SUSE Bug 1236120",
"url": "https://bugzilla.suse.com/1236120"
},
{
"category": "self",
"summary": "SUSE Bug 1236125",
"url": "https://bugzilla.suse.com/1236125"
},
{
"category": "self",
"summary": "SUSE Bug 1236127",
"url": "https://bugzilla.suse.com/1236127"
},
{
"category": "self",
"summary": "SUSE Bug 1236131",
"url": "https://bugzilla.suse.com/1236131"
},
{
"category": "self",
"summary": "SUSE Bug 1236138",
"url": "https://bugzilla.suse.com/1236138"
},
{
"category": "self",
"summary": "SUSE Bug 1236143",
"url": "https://bugzilla.suse.com/1236143"
},
{
"category": "self",
"summary": "SUSE Bug 1236144",
"url": "https://bugzilla.suse.com/1236144"
},
{
"category": "self",
"summary": "SUSE Bug 1236145",
"url": "https://bugzilla.suse.com/1236145"
},
{
"category": "self",
"summary": "SUSE Bug 1236160",
"url": "https://bugzilla.suse.com/1236160"
},
{
"category": "self",
"summary": "SUSE Bug 1236161",
"url": "https://bugzilla.suse.com/1236161"
},
{
"category": "self",
"summary": "SUSE Bug 1236163",
"url": "https://bugzilla.suse.com/1236163"
},
{
"category": "self",
"summary": "SUSE Bug 1236168",
"url": "https://bugzilla.suse.com/1236168"
},
{
"category": "self",
"summary": "SUSE Bug 1236178",
"url": "https://bugzilla.suse.com/1236178"
},
{
"category": "self",
"summary": "SUSE Bug 1236180",
"url": "https://bugzilla.suse.com/1236180"
},
{
"category": "self",
"summary": "SUSE Bug 1236181",
"url": "https://bugzilla.suse.com/1236181"
},
{
"category": "self",
"summary": "SUSE Bug 1236182",
"url": "https://bugzilla.suse.com/1236182"
},
{
"category": "self",
"summary": "SUSE Bug 1236190",
"url": "https://bugzilla.suse.com/1236190"
},
{
"category": "self",
"summary": "SUSE Bug 1236192",
"url": "https://bugzilla.suse.com/1236192"
},
{
"category": "self",
"summary": "SUSE Bug 1236198",
"url": "https://bugzilla.suse.com/1236198"
},
{
"category": "self",
"summary": "SUSE Bug 1236227",
"url": "https://bugzilla.suse.com/1236227"
},
{
"category": "self",
"summary": "SUSE Bug 1236245",
"url": "https://bugzilla.suse.com/1236245"
},
{
"category": "self",
"summary": "SUSE Bug 1236247",
"url": "https://bugzilla.suse.com/1236247"
},
{
"category": "self",
"summary": "SUSE Bug 1236248",
"url": "https://bugzilla.suse.com/1236248"
},
{
"category": "self",
"summary": "SUSE Bug 1236260",
"url": "https://bugzilla.suse.com/1236260"
},
{
"category": "self",
"summary": "SUSE Bug 1236262",
"url": "https://bugzilla.suse.com/1236262"
},
{
"category": "self",
"summary": "SUSE Bug 1236628",
"url": "https://bugzilla.suse.com/1236628"
},
{
"category": "self",
"summary": "SUSE Bug 1236688",
"url": "https://bugzilla.suse.com/1236688"
},
{
"category": "self",
"summary": "SUSE Bug 1236696",
"url": "https://bugzilla.suse.com/1236696"
},
{
"category": "self",
"summary": "SUSE Bug 1236698",
"url": "https://bugzilla.suse.com/1236698"
},
{
"category": "self",
"summary": "SUSE Bug 1236703",
"url": "https://bugzilla.suse.com/1236703"
},
{
"category": "self",
"summary": "SUSE Bug 1236732",
"url": "https://bugzilla.suse.com/1236732"
},
{
"category": "self",
"summary": "SUSE Bug 1236733",
"url": "https://bugzilla.suse.com/1236733"
},
{
"category": "self",
"summary": "SUSE Bug 1236757",
"url": "https://bugzilla.suse.com/1236757"
},
{
"category": "self",
"summary": "SUSE Bug 1236758",
"url": "https://bugzilla.suse.com/1236758"
},
{
"category": "self",
"summary": "SUSE Bug 1236760",
"url": "https://bugzilla.suse.com/1236760"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52489 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52923 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36476 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39282 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48873 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49948 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49978 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49998 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50051 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50106 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50251 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50251/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50258 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50258/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50299 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50304 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50304/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52332 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53091 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53095 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53164 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53168 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53170 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53172 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53175 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53187 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53194 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53195 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53196 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53197 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53198 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53230 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53231 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53232 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53233 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53236 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53239 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53685 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-54680 page",
"url": "https://www.suse.com/security/cve/CVE-2024-54680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55639 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56369 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56372 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56531 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56533 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56538 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56543 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56546 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56548 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56557 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56558 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56568 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56570 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56571 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56572 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56573 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56574 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56575 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56577 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56578 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56584 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56587 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56588 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56589 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56590 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56593 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56594 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56595 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56596 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56597 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56598 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56600 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56601 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56602 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56603 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56606 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56607 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56608 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56609 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56610 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56611 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56614 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56616 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56617 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56619 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56620 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56622 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56623 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56625 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56629 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56631 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56632 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56634 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56635 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56636 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56637 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56641 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56642 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56643 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56644 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56648 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56649 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56650 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56651 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56654 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56656 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56659 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56661 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56662 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56663 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56664 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56665 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56670 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56672 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56675 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56677 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56679 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56681 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56683 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56687 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56688 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56691 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56693 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56694 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56698 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56700 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56701 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56704 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56705 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56707 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56708 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56709 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56712 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56715 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56716 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56722 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56723 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56724 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56725 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56726 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56727 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56728 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56729 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56741 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56745 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56746 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56747 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56748 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56759 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56760 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56763 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56765 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56766 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56767 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56769 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56774 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56775 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56776 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56777 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56778 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56779 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56780 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56787 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57791 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57792 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57793 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57795 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57798 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57801 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57802 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57804 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57838 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57849 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57850 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57874 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57876 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57887 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57888 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57890 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57892 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57893 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57906 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57910 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57912 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57917 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57926 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57933 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57946 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21632 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21645 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21646 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21649 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21650 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21651 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21652 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21653 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21655 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21656 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21662 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21663 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21664 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21674 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21676 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21678 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21682 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21682/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2025-02-11T10:40:10Z",
"generator": {
"date": "2025-02-11T10:40:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:0428-1",
"initial_release_date": "2025-02-11T10:40:10Z",
"revision_history": [
{
"date": "2025-02-11T10:40:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "kernel-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "kernel-azure-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"product_id": "kernel-azure-devel-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"product_id": "kernel-azure-extra-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"product_id": "kernel-azure-optional-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "kernel-syms-azure-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product": {
"name": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"product_id": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"product": {
"name": "kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"product_id": "kernel-devel-azure-6.4.0-150600.8.26.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"product": {
"name": "kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"product_id": "kernel-source-azure-6.4.0-150600.8.26.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "kernel-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "kernel-azure-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"product_id": "kernel-azure-devel-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"product_id": "kernel-azure-extra-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"product_id": "kernel-azure-optional-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"product_id": "kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "kernel-syms-azure-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product": {
"name": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"product_id": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-public-cloud:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-6.4.0-150600.8.26.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-6.4.0-150600.8.26.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-azure-6.4.0-150600.8.26.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch"
},
"product_reference": "kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-azure-6.4.0-150600.8.26.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch"
},
"product_reference": "kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-extra-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-extra-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-optional-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-optional-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-azure-6.4.0-150600.8.26.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch"
},
"product_reference": "kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-azure-6.4.0-150600.8.26.1.noarch as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch"
},
"product_reference": "kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64"
},
"product_reference": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
},
"product_reference": "reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52489"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/sparsemem: fix race in accessing memory_section-\u003eusage\n\nThe below race is observed on a PFN which falls into the device memory\nregion with the system memory configuration where PFN\u0027s are such that\n[ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL]. Since normal zone start and end\npfn contains the device memory PFN\u0027s as well, the compaction triggered\nwill try on the device memory PFN\u0027s too though they end up in NOP(because\npfn_to_online_page() returns NULL for ZONE_DEVICE memory sections). When\nfrom other core, the section mappings are being removed for the\nZONE_DEVICE region, that the PFN in question belongs to, on which\ncompaction is currently being operated is resulting into the kernel crash\nwith CONFIG_SPASEMEM_VMEMAP enabled. The crash logs can be seen at [1].\n\ncompact_zone()\t\t\tmemunmap_pages\n-------------\t\t\t---------------\n__pageblock_pfn_to_page\n ......\n (a)pfn_valid():\n valid_section()//return true\n\t\t\t (b)__remove_pages()-\u003e\n\t\t\t\t sparse_remove_section()-\u003e\n\t\t\t\t section_deactivate():\n\t\t\t\t [Free the array ms-\u003eusage and set\n\t\t\t\t ms-\u003eusage = NULL]\n pfn_section_valid()\n [Access ms-\u003eusage which\n is NULL]\n\nNOTE: From the above it can be said that the race is reduced to between\nthe pfn_valid()/pfn_section_valid() and the section deactivate with\nSPASEMEM_VMEMAP enabled.\n\nThe commit b943f045a9af(\"mm/sparse: fix kernel crash with\npfn_section_valid check\") tried to address the same problem by clearing\nthe SECTION_HAS_MEM_MAP with the expectation of valid_section() returns\nfalse thus ms-\u003eusage is not accessed.\n\nFix this issue by the below steps:\n\na) Clear SECTION_HAS_MEM_MAP before freeing the -\u003eusage.\n\nb) RCU protected read side critical section will either return NULL\n when SECTION_HAS_MEM_MAP is cleared or can successfully access -\u003eusage.\n\nc) Free the -\u003eusage with kfree_rcu() and set ms-\u003eusage = NULL. No\n attempt will be made to access -\u003eusage after this as the\n SECTION_HAS_MEM_MAP is cleared thus valid_section() return false.\n\nThanks to David/Pavan for their inputs on this patch.\n\n[1] https://lore.kernel.org/linux-mm/994410bb-89aa-d987-1f50-f514903c55aa@quicinc.com/\n\nOn Snapdragon SoC, with the mentioned memory configuration of PFN\u0027s as\n[ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL], we are able to see bunch of\nissues daily while testing on a device farm.\n\nFor this particular issue below is the log. Though the below log is\nnot directly pointing to the pfn_section_valid(){ ms-\u003eusage;}, when we\nloaded this dump on T32 lauterbach tool, it is pointing.\n\n[ 540.578056] Unable to handle kernel NULL pointer dereference at\nvirtual address 0000000000000000\n[ 540.578068] Mem abort info:\n[ 540.578070] ESR = 0x0000000096000005\n[ 540.578073] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 540.578077] SET = 0, FnV = 0\n[ 540.578080] EA = 0, S1PTW = 0\n[ 540.578082] FSC = 0x05: level 1 translation fault\n[ 540.578085] Data abort info:\n[ 540.578086] ISV = 0, ISS = 0x00000005\n[ 540.578088] CM = 0, WnR = 0\n[ 540.579431] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBSBTYPE=--)\n[ 540.579436] pc : __pageblock_pfn_to_page+0x6c/0x14c\n[ 540.579454] lr : compact_zone+0x994/0x1058\n[ 540.579460] sp : ffffffc03579b510\n[ 540.579463] x29: ffffffc03579b510 x28: 0000000000235800 x27:000000000000000c\n[ 540.579470] x26: 0000000000235c00 x25: 0000000000000068 x24:ffffffc03579b640\n[ 540.579477] x23: 0000000000000001 x22: ffffffc03579b660 x21:0000000000000000\n[ 540.579483] x20: 0000000000235bff x19: ffffffdebf7e3940 x18:ffffffdebf66d140\n[ 540.579489] x17: 00000000739ba063 x16: 00000000739ba063 x15:00000000009f4bff\n[ 540.579495] x14: 0000008000000000 x13: 0000000000000000 x12:0000000000000001\n[ 540.579501] x11: 0000000000000000 x10: 0000000000000000 x9 :ffffff897d2cd440\n[ 540.579507] x8 : 0000000000000000 x7 : 0000000000000000 x6 :ffffffc03579b5b4\n[ 540.579512] x5 : 0000000000027f25 x4 : ffffffc03579b5b8 x3 :0000000000000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52489",
"url": "https://www.suse.com/security/cve/CVE-2023-52489"
},
{
"category": "external",
"summary": "SUSE Bug 1221326 for CVE-2023-52489",
"url": "https://bugzilla.suse.com/1221326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2023-52489"
},
{
"cve": "CVE-2023-52923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: adapt set backend to use GC transaction API\n\nUse the GC transaction API to replace the old and buggy gc API and the\nbusy mark approach.\n\nNo set elements are removed from async garbage collection anymore,\ninstead the _DEAD bit is set on so the set element is not visible from\nlookup path anymore. Async GC enqueues transaction work that might be\naborted and retried later.\n\nrbtree and pipapo set backends does not set on the _DEAD bit from the\nsync GC path since this runs in control plane path where mutex is held.\nIn this case, set elements are deactivated, removed and then released\nvia RCU callback, sync GC never fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52923",
"url": "https://www.suse.com/security/cve/CVE-2023-52923"
},
{
"category": "external",
"summary": "SUSE Bug 1236104 for CVE-2023-52923",
"url": "https://bugzilla.suse.com/1236104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2023-52923"
},
{
"cve": "CVE-2024-36476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36476"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible\n\nMove the declaration of the \u0027ib_sge list\u0027 variable outside the\n\u0027always_invalidate\u0027 block to ensure it remains accessible for use\nthroughout the function.\n\nPreviously, \u0027ib_sge list\u0027 was declared within the \u0027always_invalidate\u0027\nblock, limiting its accessibility, then caused a\n\u0027BUG: kernel NULL pointer dereference\u0027[1].\n ? __die_body.cold+0x19/0x27\n ? page_fault_oops+0x15a/0x2d0\n ? search_module_extables+0x19/0x60\n ? search_bpf_extables+0x5f/0x80\n ? exc_page_fault+0x7e/0x180\n ? asm_exc_page_fault+0x26/0x30\n ? memcpy_orig+0xd5/0x140\n rxe_mr_copy+0x1c3/0x200 [rdma_rxe]\n ? rxe_pool_get_index+0x4b/0x80 [rdma_rxe]\n copy_data+0xa5/0x230 [rdma_rxe]\n rxe_requester+0xd9b/0xf70 [rdma_rxe]\n ? finish_task_switch.isra.0+0x99/0x2e0\n rxe_sender+0x13/0x40 [rdma_rxe]\n do_task+0x68/0x1e0 [rdma_rxe]\n process_one_work+0x177/0x330\n worker_thread+0x252/0x390\n ? __pfx_worker_thread+0x10/0x10\n\nThis change ensures the variable is available for subsequent operations\nthat require it.\n\n[1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-bc69-a9b03ecfcda7@fujitsu.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36476",
"url": "https://www.suse.com/security/cve/CVE-2024-36476"
},
{
"category": "external",
"summary": "SUSE Bug 1235902 for CVE-2024-36476",
"url": "https://bugzilla.suse.com/1235902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-36476"
},
{
"cve": "CVE-2024-39282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39282"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: Fix FSM command timeout issue\n\nWhen driver processes the internal state change command, it use an\nasynchronous thread to process the command operation. If the main\nthread detects that the task has timed out, the asynchronous thread\nwill panic when executing the completion notification because the\nmain thread completion object has been released.\n\nBUG: unable to handle page fault for address: fffffffffffffff8\nPGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nRIP: 0010:complete_all+0x3e/0xa0\n[...]\nCall Trace:\n \u003cTASK\u003e\n ? __die_body+0x68/0xb0\n ? page_fault_oops+0x379/0x3e0\n ? exc_page_fault+0x69/0xa0\n ? asm_exc_page_fault+0x22/0x30\n ? complete_all+0x3e/0xa0\n fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_autoremove_wake_function+0x10/0x10\n kthread+0xd8/0x110\n ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x38/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n[...]\nCR2: fffffffffffffff8\n---[ end trace 0000000000000000 ]---\n\nUse the reference counter to ensure safe release as Sergey suggests:\nhttps://lore.kernel.org/all/da90f64c-260a-4329-87bf-1f9ff20a5951@gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39282",
"url": "https://www.suse.com/security/cve/CVE-2024-39282"
},
{
"category": "external",
"summary": "SUSE Bug 1235903 for CVE-2024-39282",
"url": "https://bugzilla.suse.com/1235903"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-39282"
},
{
"cve": "CVE-2024-43913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: apple: fix device reference counting\n\nDrivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl.\nSplit the allocation side out to make the error handling boundary easier\nto navigate. The apple driver had been doing this wrong, leaking the\ncontroller device memory on a tagset failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43913",
"url": "https://www.suse.com/security/cve/CVE-2024-43913"
},
{
"category": "external",
"summary": "SUSE Bug 1229833 for CVE-2024-43913",
"url": "https://bugzilla.suse.com/1229833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-43913"
},
{
"cve": "CVE-2024-45828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Mask ring interrupts before ring stop request\n\nBus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when\nthe ring is being stopped. Depending on timing between ring stop request\ncompletion, interrupt handler removal and code execution this may lead\nto a NULL pointer dereference in hci_dma_irq_handler() if it gets to run\nafter the io_data pointer is set to NULL in hci_dma_cleanup().\n\nPrevent this my masking the ring interrupts before ring stop request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45828",
"url": "https://www.suse.com/security/cve/CVE-2024-45828"
},
{
"category": "external",
"summary": "SUSE Bug 1235705 for CVE-2024-45828",
"url": "https://bugzilla.suse.com/1235705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-45828"
},
{
"cve": "CVE-2024-46896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: don\u0027t access invalid sched\n\nSince 2320c9e6a768 (\"drm/sched: memset() \u0027job\u0027 in drm_sched_job_init()\")\naccessing job-\u003ebase.sched can produce unexpected results as the initialisation\nof (*job)-\u003ebase.sched done in amdgpu_job_alloc is overwritten by the\nmemset.\n\nThis commit fixes an issue when a CS would fail validation and would\nbe rejected after job-\u003enum_ibs is incremented. In this case,\namdgpu_ib_free(ring-\u003eadev, ...) will be called, which would crash the\nmachine because the ring value is bogus.\n\nTo fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this\nbecause the device is actually not used in this function.\n\nThe next commit will remove the ring argument completely.\n\n(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46896",
"url": "https://www.suse.com/security/cve/CVE-2024-46896"
},
{
"category": "external",
"summary": "SUSE Bug 1235707 for CVE-2024-46896",
"url": "https://bugzilla.suse.com/1235707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-46896"
},
{
"cve": "CVE-2024-47141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinmux: Use sequential access to access desc-\u003epinmux data\n\nWhen two client of the same gpio call pinctrl_select_state() for the\nsame functionality, we are seeing NULL pointer issue while accessing\ndesc-\u003emux_owner.\n\nLet\u0027s say two processes A, B executing in pin_request() for the same pin\nand process A updates the desc-\u003emux_usecount but not yet updated the\ndesc-\u003emux_owner while process B see the desc-\u003emux_usecount which got\nupdated by A path and further executes strcmp and while accessing\ndesc-\u003emux_owner it crashes with NULL pointer.\n\nSerialize the access to mux related setting with a mutex lock.\n\n\tcpu0 (process A)\t\t\tcpu1(process B)\n\npinctrl_select_state() {\t\t pinctrl_select_state() {\n pin_request() {\t\t\t\tpin_request() {\n ...\n\t\t\t\t\t\t ....\n } else {\n desc-\u003emux_usecount++;\n \t\t\t\t\t\tdesc-\u003emux_usecount \u0026\u0026 strcmp(desc-\u003emux_owner, owner)) {\n\n if (desc-\u003emux_usecount \u003e 1)\n return 0;\n desc-\u003emux_owner = owner;\n\n }\t\t\t\t\t\t}",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47141",
"url": "https://www.suse.com/security/cve/CVE-2024-47141"
},
{
"category": "external",
"summary": "SUSE Bug 1235708 for CVE-2024-47141",
"url": "https://bugzilla.suse.com/1235708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-47141"
},
{
"cve": "CVE-2024-47143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-debug: fix a possible deadlock on radix_lock\n\nradix_lock() shouldn\u0027t be held while holding dma_hash_entry[idx].lock\notherwise, there\u0027s a possible deadlock scenario when\ndma debug API is called holding rq_lock():\n\nCPU0 CPU1 CPU2\ndma_free_attrs()\ncheck_unmap() add_dma_entry() __schedule() //out\n (A) rq_lock()\nget_hash_bucket()\n(A) dma_entry_hash\n check_sync()\n (A) radix_lock() (W) dma_entry_hash\ndma_entry_free()\n(W) radix_lock()\n // CPU2\u0027s one\n (W) rq_lock()\n\nCPU1 situation can happen when it extending radix tree and\nit tries to wake up kswapd via wake_all_kswapd().\n\nCPU2 situation can happen while perf_event_task_sched_out()\n(i.e. dma sync operation is called while deleting perf_event using\n etm and etr tmc which are Arm Coresight hwtracing driver backends).\n\nTo remove this possible situation, call dma_entry_free() after\nput_hash_bucket() in check_unmap().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47143",
"url": "https://www.suse.com/security/cve/CVE-2024-47143"
},
{
"category": "external",
"summary": "SUSE Bug 1235710 for CVE-2024-47143",
"url": "https://bugzilla.suse.com/1235710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-47143"
},
{
"cve": "CVE-2024-47809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix possible lkb_resource null dereference\n\nThis patch fixes a possible null pointer dereference when this function is\ncalled from request_lock() as lkb-\u003elkb_resource is not assigned yet,\nonly after validate_lock_args() by calling attach_lkb(). Another issue\nis that a resource name could be a non printable bytearray and we cannot\nassume to be ASCII coded.\n\nThe log functionality is probably never being hit when DLM is used in\nnormal way and no debug logging is enabled. The null pointer dereference\ncan only occur on a new created lkb that does not have the resource\nassigned yet, it probably never hits the null pointer dereference but we\nshould be sure that other changes might not change this behaviour and we\nactually can hit the mentioned null pointer dereference.\n\nIn this patch we just drop the printout of the resource name, the lkb id\nis enough to make a possible connection to a resource name if this\nexists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47809",
"url": "https://www.suse.com/security/cve/CVE-2024-47809"
},
{
"category": "external",
"summary": "SUSE Bug 1235714 for CVE-2024-47809",
"url": "https://bugzilla.suse.com/1235714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-47809"
},
{
"cve": "CVE-2024-48873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48873"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: check return value of ieee80211_probereq_get() for RNR\n\nThe return value of ieee80211_probereq_get() might be NULL, so check it\nbefore using to avoid NULL pointer access.\n\nAddresses-Coverity-ID: 1529805 (\"Dereference null return value\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48873",
"url": "https://www.suse.com/security/cve/CVE-2024-48873"
},
{
"category": "external",
"summary": "SUSE Bug 1235716 for CVE-2024-48873",
"url": "https://bugzilla.suse.com/1235716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-48873"
},
{
"cve": "CVE-2024-48881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721 if (!IS_ERR_OR_NULL(c-\u003eroot))\n1722 list_add(\u0026c-\u003eroot-\u003elist, \u0026c-\u003ebtree_cache);\n\n\u003eFrom the above code in cache_set_flush(), if previous registration code\nfails before allocating c-\u003eroot, it is possible c-\u003eroot is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc-\u003eroot is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48881",
"url": "https://www.suse.com/security/cve/CVE-2024-48881"
},
{
"category": "external",
"summary": "SUSE Bug 1235727 for CVE-2024-48881",
"url": "https://bugzilla.suse.com/1235727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-rdma: unquiesce admin_q before destroy it\n\nKernel will hang on destroy admin_q while we create ctrl failed, such\nas following calltrace:\n\nPID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: \"nvme\"\n #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15\n #1 [ff61d23de260fc08] schedule at ffffffff8323c014\n #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1\n #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a\n #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006\n #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce\n #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced\n #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b\n #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362\n #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25\n RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202\n RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574\n RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004\n RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90\n R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004\n R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500\n ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b\n\nThis due to we have quiesced admi_q before cancel requests, but forgot\nto unquiesce before destroy it, as a result we fail to drain the\npending requests, and hang on blk_mq_freeze_queue_wait() forever. Here\ntry to reuse nvme_rdma_teardown_admin_queue() to fix this issue and\nsimplify the code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49569",
"url": "https://www.suse.com/security/cve/CVE-2024-49569"
},
{
"category": "external",
"summary": "SUSE Bug 1235730 for CVE-2024-49569",
"url": "https://bugzilla.suse.com/1235730"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-49569"
},
{
"cve": "CVE-2024-49948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: add more sanity checks to qdisc_pkt_len_init()\n\nOne path takes care of SKB_GSO_DODGY, assuming\nskb-\u003elen is bigger than hdr_len.\n\nvirtio_net_hdr_to_skb() does not fully dissect TCP headers,\nit only make sure it is at least 20 bytes.\n\nIt is possible for an user to provide a malicious \u0027GSO\u0027 packet,\ntotal length of 80 bytes.\n\n- 20 bytes of IPv4 header\n- 60 bytes TCP header\n- a small gso_size like 8\n\nvirtio_net_hdr_to_skb() would declare this packet as a normal\nGSO packet, because it would see 40 bytes of payload,\nbigger than gso_size.\n\nWe need to make detect this case to not underflow\nqdisc_skb_cb(skb)-\u003epkt_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49948",
"url": "https://www.suse.com/security/cve/CVE-2024-49948"
},
{
"category": "external",
"summary": "SUSE Bug 1232161 for CVE-2024-49948",
"url": "https://bugzilla.suse.com/1232161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-49951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible crash on mgmt_index_removed\n\nIf mgmt_index_removed is called while there are commands queued on\ncmd_sync it could lead to crashes like the bellow trace:\n\n0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc\n0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth]\n0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth]\n0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth]\n\nSo while handling mgmt_index_removed this attempts to dequeue\ncommands passed as user_data to cmd_sync.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49951",
"url": "https://www.suse.com/security/cve/CVE-2024-49951"
},
{
"category": "external",
"summary": "SUSE Bug 1232158 for CVE-2024-49951",
"url": "https://bugzilla.suse.com/1232158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-49951"
},
{
"cve": "CVE-2024-49978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49978"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngso: fix udp gso fraglist segmentation after pull from frag_list\n\nDetect gso fraglist skbs with corrupted geometry (see below) and\npass these to skb_segment instead of skb_segment_list, as the first\ncan segment them correctly.\n\nValid SKB_GSO_FRAGLIST skbs\n- consist of two or more segments\n- the head_skb holds the protocol headers plus first gso_size\n- one or more frag_list skbs hold exactly one segment\n- all but the last must be gso_size\n\nOptional datapath hooks such as NAT and BPF (bpf_skb_pull_data) can\nmodify these skbs, breaking these invariants.\n\nIn extreme cases they pull all data into skb linear. For UDP, this\ncauses a NULL ptr deref in __udpv4_gso_segment_list_csum at\nudp_hdr(seg-\u003enext)-\u003edest.\n\nDetect invalid geometry due to pull, by checking head_skb size.\nDon\u0027t just drop, as this may blackhole a destination. Convert to be\nable to pass to regular skb_segment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49978",
"url": "https://www.suse.com/security/cve/CVE-2024-49978"
},
{
"category": "external",
"summary": "SUSE Bug 1232101 for CVE-2024-49978",
"url": "https://bugzilla.suse.com/1232101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-49978"
},
{
"cve": "CVE-2024-49998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: improve shutdown sequence\n\nAlexander Sverdlin presents 2 problems during shutdown with the\nlan9303 driver. One is specific to lan9303 and the other just happens\nto reproduce there.\n\nThe first problem is that lan9303 is unique among DSA drivers in that it\ncalls dev_get_drvdata() at \"arbitrary runtime\" (not probe, not shutdown,\nnot remove):\n\nphy_state_machine()\n-\u003e ...\n -\u003e dsa_user_phy_read()\n -\u003e ds-\u003eops-\u003ephy_read()\n -\u003e lan9303_phy_read()\n -\u003e chip-\u003eops-\u003ephy_read()\n -\u003e lan9303_mdio_phy_read()\n -\u003e dev_get_drvdata()\n\nBut we never stop the phy_state_machine(), so it may continue to run\nafter dsa_switch_shutdown(). Our common pattern in all DSA drivers is\nto set drvdata to NULL to suppress the remove() method that may come\nafterwards. But in this case it will result in an NPD.\n\nThe second problem is that the way in which we set\ndp-\u003econduit-\u003edsa_ptr = NULL; is concurrent with receive packet\nprocessing. dsa_switch_rcv() checks once whether dev-\u003edsa_ptr is NULL,\nbut afterwards, rather than continuing to use that non-NULL value,\ndev-\u003edsa_ptr is dereferenced again and again without NULL checks:\ndsa_conduit_find_user() and many other places. In between dereferences,\nthere is no locking to ensure that what was valid once continues to be\nvalid.\n\nBoth problems have the common aspect that closing the conduit interface\nsolves them.\n\nIn the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN\nevent in dsa_user_netdevice_event() which closes user ports as well.\ndsa_port_disable_rt() calls phylink_stop(), which synchronously stops\nthe phylink state machine, and ds-\u003eops-\u003ephy_read() will thus no longer\ncall into the driver after this point.\n\nIn the second case, dev_close(conduit) should do this, as per\nDocumentation/networking/driver.rst:\n\n| Quiescence\n| ----------\n|\n| After the ndo_stop routine has been called, the hardware must\n| not receive or transmit any data. All in flight packets must\n| be aborted. If necessary, poll or wait for completion of\n| any reset commands.\n\nSo it should be sufficient to ensure that later, when we zeroize\nconduit-\u003edsa_ptr, there will be no concurrent dsa_switch_rcv() call\non this conduit.\n\nThe addition of the netif_device_detach() function is to ensure that\nioctls, rtnetlinks and ethtool requests on the user ports no longer\npropagate down to the driver - we\u0027re no longer prepared to handle them.\n\nThe race condition actually did not exist when commit 0650bf52b31f\n(\"net: dsa: be compatible with masters which unregister on shutdown\")\nfirst introduced dsa_switch_shutdown(). It was created later, when we\nstopped unregistering the user interfaces from a bad spot, and we just\nreplaced that sequence with a racy zeroization of conduit-\u003edsa_ptr\n(one which doesn\u0027t ensure that the interfaces aren\u0027t up).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49998",
"url": "https://www.suse.com/security/cve/CVE-2024-49998"
},
{
"category": "external",
"summary": "SUSE Bug 1232087 for CVE-2024-49998",
"url": "https://bugzilla.suse.com/1232087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-49998"
},
{
"cve": "CVE-2024-50051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: Add cancel_work_sync before module remove\n\nIf we remove the module which will call mpc52xx_spi_remove\nit will free \u0027ms\u0027 through spi_unregister_controller.\nwhile the work ms-\u003ework will be used. The sequence of operations\nthat may lead to a UAF bug.\n\nFix it by ensuring that the work is canceled before proceeding with\nthe cleanup in mpc52xx_spi_remove.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50051",
"url": "https://www.suse.com/security/cve/CVE-2024-50051"
},
{
"category": "external",
"summary": "SUSE Bug 1235739 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "external",
"summary": "SUSE Bug 1239156 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1239156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-50051"
},
{
"cve": "CVE-2024-50106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix race between laundromat and free_stateid\n\nThere is a race between laundromat handling of revoked delegations\nand a client sending free_stateid operation. Laundromat thread\nfinds that delegation has expired and needs to be revoked so it\nmarks the delegation stid revoked and it puts it on a reaper list\nbut then it unlock the state lock and the actual delegation revocation\nhappens without the lock. Once the stid is marked revoked a racing\nfree_stateid processing thread does the following (1) it calls\nlist_del_init() which removes it from the reaper list and (2) frees\nthe delegation stid structure. The laundromat thread ends up not\ncalling the revoke_delegation() function for this particular delegation\nbut that means it will no release the lock lease that exists on\nthe file.\n\nNow, a new open for this file comes in and ends up finding that\nlease list isn\u0027t empty and calls nfsd_breaker_owns_lease() which ends\nup trying to derefence a freed delegation stateid. Leading to the\nfollowint use-after-free KASAN warning:\n\nkernel: ==================================================================\nkernel: BUG: KASAN: slab-use-after-free in nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: Read of size 8 at addr ffff0000e73cd0c8 by task nfsd/6205\nkernel:\nkernel: CPU: 2 UID: 0 PID: 6205 Comm: nfsd Kdump: loaded Not tainted 6.11.0-rc7+ #9\nkernel: Hardware name: Apple Inc. Apple Virtualization Generic Platform, BIOS 2069.0.0.0.0 08/03/2024\nkernel: Call trace:\nkernel: dump_backtrace+0x98/0x120\nkernel: show_stack+0x1c/0x30\nkernel: dump_stack_lvl+0x80/0xe8\nkernel: print_address_description.constprop.0+0x84/0x390\nkernel: print_report+0xa4/0x268\nkernel: kasan_report+0xb4/0xf8\nkernel: __asan_report_load8_noabort+0x1c/0x28\nkernel: nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: nfsd_file_do_acquire+0xb3c/0x11d0 [nfsd]\nkernel: nfsd_file_acquire_opened+0x84/0x110 [nfsd]\nkernel: nfs4_get_vfs_file+0x634/0x958 [nfsd]\nkernel: nfsd4_process_open2+0xa40/0x1a40 [nfsd]\nkernel: nfsd4_open+0xa08/0xe80 [nfsd]\nkernel: nfsd4_proc_compound+0xb8c/0x2130 [nfsd]\nkernel: nfsd_dispatch+0x22c/0x718 [nfsd]\nkernel: svc_process_common+0x8e8/0x1960 [sunrpc]\nkernel: svc_process+0x3d4/0x7e0 [sunrpc]\nkernel: svc_handle_xprt+0x828/0xe10 [sunrpc]\nkernel: svc_recv+0x2cc/0x6a8 [sunrpc]\nkernel: nfsd+0x270/0x400 [nfsd]\nkernel: kthread+0x288/0x310\nkernel: ret_from_fork+0x10/0x20\n\nThis patch proposes a fixed that\u0027s based on adding 2 new additional\nstid\u0027s sc_status values that help coordinate between the laundromat\nand other operations (nfsd4_free_stateid() and nfsd4_delegreturn()).\n\nFirst to make sure, that once the stid is marked revoked, it is not\nremoved by the nfsd4_free_stateid(), the laundromat take a reference\non the stateid. Then, coordinating whether the stid has been put\non the cl_revoked list or we are processing FREE_STATEID and need to\nmake sure to remove it from the list, each check that state and act\naccordingly. If laundromat has added to the cl_revoke list before\nthe arrival of FREE_STATEID, then nfsd4_free_stateid() knows to remove\nit from the list. If nfsd4_free_stateid() finds that operations arrived\nbefore laundromat has placed it on cl_revoke list, it marks the state\nfreed and then laundromat will no longer add it to the list.\n\nAlso, for nfsd4_delegreturn() when looking for the specified stid,\nwe need to access stid that are marked removed or freeable, it means\nthe laundromat has started processing it but hasn\u0027t finished and this\ndelegreturn needs to return nfserr_deleg_revoked and not\nnfserr_bad_stateid. The latter will not trigger a FREE_STATEID and the\nlack of it will leave this stid on the cl_revoked list indefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50106",
"url": "https://www.suse.com/security/cve/CVE-2024-50106"
},
{
"category": "external",
"summary": "SUSE Bug 1232882 for CVE-2024-50106",
"url": "https://bugzilla.suse.com/1232882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-50106"
},
{
"cve": "CVE-2024-50151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOBs when building SMB2_IOCTL request\n\nWhen using encryption, either enforced by the server or when using\n\u0027seal\u0027 mount option, the client will squash all compound request buffers\ndown for encryption into a single iov in smb2_set_next_command().\n\nSMB2_ioctl_init() allocates a small buffer (448 bytes) to hold the\nSMB2_IOCTL request in the first iov, and if the user passes an input\nbuffer that is greater than 328 bytes, smb2_set_next_command() will\nend up writing off the end of @rqst-\u003eiov[0].iov_base as shown below:\n\n mount.cifs //srv/share /mnt -o ...,seal\n ln -s $(perl -e \"print(\u0027a\u0027)for 1..1024\") /mnt/link\n\n BUG: KASAN: slab-out-of-bounds in\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n Write of size 4116 at addr ffff8881148fcab8 by task ln/859\n\n CPU: 1 UID: 0 PID: 859 Comm: ln Not tainted 6.12.0-rc3 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n 1.16.3-2.fc40 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n print_report+0x156/0x4d9\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n ? __virt_addr_valid+0x145/0x310\n ? __phys_addr+0x46/0x90\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_report+0xda/0x110\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_check_range+0x10f/0x1f0\n __asan_memcpy+0x3c/0x60\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n smb2_compound_op+0x238c/0x3840 [cifs]\n ? kasan_save_track+0x14/0x30\n ? kasan_save_free_info+0x3b/0x70\n ? vfs_symlink+0x1a1/0x2c0\n ? do_symlinkat+0x108/0x1c0\n ? __pfx_smb2_compound_op+0x10/0x10 [cifs]\n ? kmem_cache_free+0x118/0x3e0\n ? cifs_get_writable_path+0xeb/0x1a0 [cifs]\n smb2_get_reparse_inode+0x423/0x540 [cifs]\n ? __pfx_smb2_get_reparse_inode+0x10/0x10 [cifs]\n ? rcu_is_watching+0x20/0x50\n ? __kmalloc_noprof+0x37c/0x480\n ? smb2_create_reparse_symlink+0x257/0x490 [cifs]\n ? smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n ? __pfx_smb2_create_reparse_symlink+0x10/0x10 [cifs]\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? __build_path_from_dentry_optional_prefix+0x19d/0x2e0 [cifs]\n cifs_symlink+0x24f/0x960 [cifs]\n ? __pfx_make_vfsuid+0x10/0x10\n ? __pfx_cifs_symlink+0x10/0x10 [cifs]\n ? make_vfsgid+0x6b/0xc0\n ? generic_permission+0x96/0x2d0\n vfs_symlink+0x1a1/0x2c0\n do_symlinkat+0x108/0x1c0\n ? __pfx_do_symlinkat+0x10/0x10\n ? strncpy_from_user+0xaa/0x160\n __x64_sys_symlinkat+0xb9/0xf0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7f08d75c13bb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50151",
"url": "https://www.suse.com/security/cve/CVE-2024-50151"
},
{
"category": "external",
"summary": "SUSE Bug 1233055 for CVE-2024-50151",
"url": "https://bugzilla.suse.com/1233055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-50151"
},
{
"cve": "CVE-2024-50199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50199"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/swapfile: skip HugeTLB pages for unuse_vma\n\nI got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The\nproblem can be reproduced by the following steps:\n\n 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.\n 2. Swapout the above anonymous memory.\n 3. run swapoff and we will get a bad pud error in kernel message:\n\n mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)\n\nWe can tell that pud_clear_bad is called by pud_none_or_clear_bad in\nunuse_pud_range() by ftrace. And therefore the HugeTLB pages will never\nbe freed because we lost it from page table. We can skip HugeTLB pages\nfor unuse_vma to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50199",
"url": "https://www.suse.com/security/cve/CVE-2024-50199"
},
{
"category": "external",
"summary": "SUSE Bug 1233112 for CVE-2024-50199",
"url": "https://bugzilla.suse.com/1233112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-50199"
},
{
"cve": "CVE-2024-50251",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50251"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_payload: sanitize offset and length before calling skb_checksum()\n\nIf access to offset + length is larger than the skbuff length, then\nskb_checksum() triggers BUG_ON().\n\nskb_checksum() internally subtracts the length parameter while iterating\nover skbuff, BUG_ON(len) at the end of it checks that the expected\nlength to be included in the checksum calculation is fully consumed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50251",
"url": "https://www.suse.com/security/cve/CVE-2024-50251"
},
{
"category": "external",
"summary": "SUSE Bug 1233248 for CVE-2024-50251",
"url": "https://bugzilla.suse.com/1233248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-50251"
},
{
"cve": "CVE-2024-50258",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50258"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix crash when config small gso_max_size/gso_ipv4_max_size\n\nConfig a small gso_max_size/gso_ipv4_max_size will lead to an underflow\nin sk_dst_gso_max_size(), which may trigger a BUG_ON crash,\nbecause sk-\u003esk_gso_max_size would be much bigger than device limits.\nCall Trace:\ntcp_write_xmit\n tso_segs = tcp_init_tso_segs(skb, mss_now);\n tcp_set_skb_tso_segs\n tcp_skb_pcount_set\n // skb-\u003elen = 524288, mss_now = 8\n // u16 tso_segs = 524288/8 = 65535 -\u003e 0\n tso_segs = DIV_ROUND_UP(skb-\u003elen, mss_now)\n BUG_ON(!tso_segs)\nAdd check for the minimum value of gso_max_size and gso_ipv4_max_size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50258",
"url": "https://www.suse.com/security/cve/CVE-2024-50258"
},
{
"category": "external",
"summary": "SUSE Bug 1233221 for CVE-2024-50258",
"url": "https://bugzilla.suse.com/1233221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-50258"
},
{
"cve": "CVE-2024-50299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50299"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: properly validate chunk size in sctp_sf_ootb()\n\nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add\nsize validation when walking chunks\") is also required in sctp_sf_ootb()\nto address a crash reported by syzbot:\n\n BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166\n sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407\n sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88\n sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243\n sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159\n ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50299",
"url": "https://www.suse.com/security/cve/CVE-2024-50299"
},
{
"category": "external",
"summary": "SUSE Bug 1233488 for CVE-2024-50299",
"url": "https://bugzilla.suse.com/1233488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-50304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50304"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()\n\nThe per-netns IP tunnel hash table is protected by the RTNL mutex and\nip_tunnel_find() is only called from the control path where the mutex is\ntaken.\n\nAdd a lockdep expression to hlist_for_each_entry_rcu() in\nip_tunnel_find() in order to validate that the mutex is held and to\nsilence the suspicious RCU usage warning [1].\n\n[1]\nWARNING: suspicious RCU usage\n6.12.0-rc3-custom-gd95d9a31aceb #139 Not tainted\n-----------------------------\nnet/ipv4/ip_tunnel.c:221 RCU-list traversed in non-reader section!!\n\nother info that might help us debug this:\n\nrcu_scheduler_active = 2, debug_locks = 1\n1 lock held by ip/362:\n #0: ffffffff86fc7cb0 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x377/0xf60\n\nstack backtrace:\nCPU: 12 UID: 0 PID: 362 Comm: ip Not tainted 6.12.0-rc3-custom-gd95d9a31aceb #139\nHardware name: Bochs Bochs, BIOS Bochs 01/01/2011\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xba/0x110\n lockdep_rcu_suspicious.cold+0x4f/0xd6\n ip_tunnel_find+0x435/0x4d0\n ip_tunnel_newlink+0x517/0x7a0\n ipgre_newlink+0x14c/0x170\n __rtnl_newlink+0x1173/0x19c0\n rtnl_newlink+0x6c/0xa0\n rtnetlink_rcv_msg+0x3cc/0xf60\n netlink_rcv_skb+0x171/0x450\n netlink_unicast+0x539/0x7f0\n netlink_sendmsg+0x8c1/0xd80\n ____sys_sendmsg+0x8f9/0xc20\n ___sys_sendmsg+0x197/0x1e0\n __sys_sendmsg+0x122/0x1f0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50304",
"url": "https://www.suse.com/security/cve/CVE-2024-50304"
},
{
"category": "external",
"summary": "SUSE Bug 1233522 for CVE-2024-50304",
"url": "https://bugzilla.suse.com/1233522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-50304"
},
{
"cve": "CVE-2024-52332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52332",
"url": "https://www.suse.com/security/cve/CVE-2024-52332"
},
{
"category": "external",
"summary": "SUSE Bug 1235700 for CVE-2024-52332",
"url": "https://bugzilla.suse.com/1235700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53091"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx\n\nAs the introduction of the support for vsock and unix sockets in sockmap,\ntls_sw_has_ctx_tx/rx cannot presume the socket passed in must be IS_ICSK.\nvsock and af_unix sockets have vsock_sock and unix_sock instead of\ninet_connection_sock. For these sockets, tls_get_ctx may return an invalid\npointer and cause page fault in function tls_sw_ctx_rx.\n\nBUG: unable to handle page fault for address: 0000000000040030\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:sk_psock_strp_data_ready+0x23/0x60\nCall Trace:\n ? __die+0x81/0xc3\n ? no_context+0x194/0x350\n ? do_page_fault+0x30/0x110\n ? async_page_fault+0x3e/0x50\n ? sk_psock_strp_data_ready+0x23/0x60\n virtio_transport_recv_pkt+0x750/0x800\n ? update_load_avg+0x7e/0x620\n vsock_loopback_work+0xd0/0x100\n process_one_work+0x1a7/0x360\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x112/0x130\n ? __kthread_cancel_work+0x40/0x40\n ret_from_fork+0x1f/0x40\n\nv2:\n - Add IS_ICSK check\nv3:\n - Update the commits in Fixes",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53091",
"url": "https://www.suse.com/security/cve/CVE-2024-53091"
},
{
"category": "external",
"summary": "SUSE Bug 1233638 for CVE-2024-53091",
"url": "https://bugzilla.suse.com/1233638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53091"
},
{
"cve": "CVE-2024-53095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53095"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix use-after-free of network namespace.\n\nRecently, we got a customer report that CIFS triggers oops while\nreconnecting to a server. [0]\n\nThe workload runs on Kubernetes, and some pods mount CIFS servers\nin non-root network namespaces. The problem rarely happened, but\nit was always while the pod was dying.\n\nThe root cause is wrong reference counting for network namespace.\n\nCIFS uses kernel sockets, which do not hold refcnt of the netns that\nthe socket belongs to. That means CIFS must ensure the socket is\nalways freed before its netns; otherwise, use-after-free happens.\n\nThe repro steps are roughly:\n\n 1. mount CIFS in a non-root netns\n 2. drop packets from the netns\n 3. destroy the netns\n 4. unmount CIFS\n\nWe can reproduce the issue quickly with the script [1] below and see\nthe splat [2] if CONFIG_NET_NS_REFCNT_TRACKER is enabled.\n\nWhen the socket is TCP, it is hard to guarantee the netns lifetime\nwithout holding refcnt due to async timers.\n\nLet\u0027s hold netns refcnt for each socket as done for SMC in commit\n9744d2bf1976 (\"smc: Fix use-after-free in tcp_write_timer_handler().\").\n\nNote that we need to move put_net() from cifs_put_tcp_session() to\nclean_demultiplex_info(); otherwise, __sock_create() still could touch a\nfreed netns while cifsd tries to reconnect from cifs_demultiplex_thread().\n\nAlso, maybe_get_net() cannot be put just before __sock_create() because\nthe code is not under RCU and there is a small chance that the same\naddress happened to be reallocated to another netns.\n\n[0]:\nCIFS: VFS: \\\\XXXXXXXXXXX has not responded in 15 seconds. Reconnecting...\nCIFS: Serverclose failed 4 times, giving up\nUnable to handle kernel paging request at virtual address 14de99e461f84a07\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\n[14de99e461f84a07] address between user and kernel address ranges\nInternal error: Oops: 0000000096000004 [#1] SMP\nModules linked in: cls_bpf sch_ingress nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver tcp_diag inet_diag veth xt_state xt_connmark nf_conntrack_netlink xt_nat xt_statistic xt_MASQUERADE xt_mark xt_addrtype ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nf_tables nfnetlink overlay nls_ascii nls_cp437 sunrpc vfat fat aes_ce_blk aes_ce_cipher ghash_ce sm4_ce_cipher sm4 sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 sha1_ce ena button sch_fq_codel loop fuse configfs dmi_sysfs sha2_ce sha256_arm64 dm_mirror dm_region_hash dm_log dm_mod dax efivarfs\nCPU: 5 PID: 2690970 Comm: cifsd Not tainted 6.1.103-109.184.amzn2023.aarch64 #1\nHardware name: Amazon EC2 r7g.4xlarge/, BIOS 1.0 11/1/2018\npstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : fib_rules_lookup+0x44/0x238\nlr : __fib_lookup+0x64/0xbc\nsp : ffff8000265db790\nx29: ffff8000265db790 x28: 0000000000000000 x27: 000000000000bd01\nx26: 0000000000000000 x25: ffff000b4baf8000 x24: ffff00047b5e4580\nx23: ffff8000265db7e0 x22: 0000000000000000 x21: ffff00047b5e4500\nx20: ffff0010e3f694f8 x19: 14de99e461f849f7 x18: 0000000000000000\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000000 x13: 0000000000000000 x12: 3f92800abd010002\nx11: 0000000000000001 x10: ffff0010e3f69420 x9 : ffff800008a6f294\nx8 : 0000000000000000 x7 : 0000000000000006 x6 : 0000000000000000\nx5 : 0000000000000001 x4 : ffff001924354280 x3 : ffff8000265db7e0\nx2 : 0000000000000000 x1 : ffff0010e3f694f8 x0 : ffff00047b5e4500\nCall trace:\n fib_rules_lookup+0x44/0x238\n __fib_lookup+0x64/0xbc\n ip_route_output_key_hash_rcu+0x2c4/0x398\n ip_route_output_key_hash+0x60/0x8c\n tcp_v4_connect+0x290/0x488\n __inet_stream_connect+0x108/0x3d0\n inet_stream_connect+0x50/0x78\n kernel_connect+0x6c/0xac\n generic_ip_conne\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53095",
"url": "https://www.suse.com/security/cve/CVE-2024-53095"
},
{
"category": "external",
"summary": "SUSE Bug 1233642 for CVE-2024-53095",
"url": "https://bugzilla.suse.com/1233642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53095"
},
{
"cve": "CVE-2024-53164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53164"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ordering of qlen adjustment\n\nChanges to sch-\u003eq.qlen around qdisc_tree_reduce_backlog() need to happen\n_before_ a call to said function because otherwise it may fail to notify\nparent qdiscs when the child is about to become empty.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53164",
"url": "https://www.suse.com/security/cve/CVE-2024-53164"
},
{
"category": "external",
"summary": "SUSE Bug 1234863 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "external",
"summary": "SUSE Bug 1246019 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1246019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-53164"
},
{
"cve": "CVE-2024-53168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 \u003cfa\u003e c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \u003c/TASK\u003e\n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp\u0027s timer handler function causes problems.\n\nTo fix this problem, let\u0027s hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53168",
"url": "https://www.suse.com/security/cve/CVE-2024-53168"
},
{
"category": "external",
"summary": "SUSE Bug 1234887 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "external",
"summary": "SUSE Bug 1243650 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1243650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-53168"
},
{
"cve": "CVE-2024-53170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix uaf for flush rq while iterating tags\n\nblk_mq_clear_flush_rq_mapping() is not called during scsi probe, by\nchecking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared\nin del_gendisk by commit aec89dc5d421 (\"block: keep q_usage_counter in\natomic mode after del_gendisk\"), hence for disk like scsi, following\nblk_mq_destroy_queue() will not clear flush rq from tags-\u003erqs[] as well,\ncause following uaf that is found by our syzkaller for v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in blk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nRead of size 4 at addr ffff88811c969c20 by task kworker/1:2H/224909\n\nCPU: 1 PID: 224909 Comm: kworker/1:2H Not tainted 6.6.0-ga836a5060850 #32\nWorkqueue: kblockd blk_mq_timeout_work\nCall Trace:\n\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106\nprint_address_description.constprop.0+0x66/0x300 mm/kasan/report.c:364\nprint_report+0x3e/0x70 mm/kasan/report.c:475\nkasan_report+0xb8/0xf0 mm/kasan/report.c:588\nblk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nbt_iter block/blk-mq-tag.c:288 [inline]\n__sbitmap_for_each_set include/linux/sbitmap.h:295 [inline]\nsbitmap_for_each_set include/linux/sbitmap.h:316 [inline]\nbt_for_each+0x455/0x790 block/blk-mq-tag.c:325\nblk_mq_queue_tag_busy_iter+0x320/0x740 block/blk-mq-tag.c:534\nblk_mq_timeout_work+0x1a3/0x7b0 block/blk-mq.c:1673\nprocess_one_work+0x7c4/0x1450 kernel/workqueue.c:2631\nprocess_scheduled_works kernel/workqueue.c:2704 [inline]\nworker_thread+0x804/0xe40 kernel/workqueue.c:2785\nkthread+0x346/0x450 kernel/kthread.c:388\nret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:293\n\nAllocated by task 942:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\n____kasan_kmalloc mm/kasan/common.c:374 [inline]\n__kasan_kmalloc mm/kasan/common.c:383 [inline]\n__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:380\nkasan_kmalloc include/linux/kasan.h:198 [inline]\n__do_kmalloc_node mm/slab_common.c:1007 [inline]\n__kmalloc_node+0x69/0x170 mm/slab_common.c:1014\nkmalloc_node include/linux/slab.h:620 [inline]\nkzalloc_node include/linux/slab.h:732 [inline]\nblk_alloc_flush_queue+0x144/0x2f0 block/blk-flush.c:499\nblk_mq_alloc_hctx+0x601/0x940 block/blk-mq.c:3788\nblk_mq_alloc_and_init_hctx+0x27f/0x330 block/blk-mq.c:4261\nblk_mq_realloc_hw_ctxs+0x488/0x5e0 block/blk-mq.c:4294\nblk_mq_init_allocated_queue+0x188/0x860 block/blk-mq.c:4350\nblk_mq_init_queue_data block/blk-mq.c:4166 [inline]\nblk_mq_init_queue+0x8d/0x100 block/blk-mq.c:4176\nscsi_alloc_sdev+0x843/0xd50 drivers/scsi/scsi_scan.c:335\nscsi_probe_and_add_lun+0x77c/0xde0 drivers/scsi/scsi_scan.c:1189\n__scsi_scan_target+0x1fc/0x5a0 drivers/scsi/scsi_scan.c:1727\nscsi_scan_channel drivers/scsi/scsi_scan.c:1815 [inline]\nscsi_scan_channel+0x14b/0x1e0 drivers/scsi/scsi_scan.c:1791\nscsi_scan_host_selected+0x2fe/0x400 drivers/scsi/scsi_scan.c:1844\nscsi_scan+0x3a0/0x3f0 drivers/scsi/scsi_sysfs.c:151\nstore_scan+0x2a/0x60 drivers/scsi/scsi_sysfs.c:191\ndev_attr_store+0x5c/0x90 drivers/base/core.c:2388\nsysfs_kf_write+0x11c/0x170 fs/sysfs/file.c:136\nkernfs_fop_write_iter+0x3fc/0x610 fs/kernfs/file.c:338\ncall_write_iter include/linux/fs.h:2083 [inline]\nnew_sync_write+0x1b4/0x2d0 fs/read_write.c:493\nvfs_write+0x76c/0xb00 fs/read_write.c:586\nksys_write+0x127/0x250 fs/read_write.c:639\ndo_syscall_x64 arch/x86/entry/common.c:51 [inline]\ndo_syscall_64+0x70/0x120 arch/x86/entry/common.c:81\nentry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nFreed by task 244687:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\nkasan_save_free_info+0x2b/0x50 mm/kasan/generic.c:522\n____kasan_slab_free mm/kasan/common.c:236 [inline]\n__kasan_slab_free+0x12a/0x1b0 mm/kasan/common.c:244\nkasan_slab_free include/linux/kasan.h:164 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53170",
"url": "https://www.suse.com/security/cve/CVE-2024-53170"
},
{
"category": "external",
"summary": "SUSE Bug 1234888 for CVE-2024-53170",
"url": "https://bugzilla.suse.com/1234888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53170"
},
{
"cve": "CVE-2024-53172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53172"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: fastmap: Fix duplicate slab cache names while attaching\n\nSince commit 4c39529663b9 (\"slab: Warn on duplicate cache names when\nDEBUG_VM=y\"), the duplicate slab cache names can be detected and a\nkernel WARNING is thrown out.\nIn UBI fast attaching process, alloc_ai() could be invoked twice\nwith the same slab cache name \u0027ubi_aeb_slab_cache\u0027, which will trigger\nfollowing warning messages:\n kmem_cache of name \u0027ubi_aeb_slab_cache\u0027 already exists\n WARNING: CPU: 0 PID: 7519 at mm/slab_common.c:107\n __kmem_cache_create_args+0x100/0x5f0\n Modules linked in: ubi(+) nandsim [last unloaded: nandsim]\n CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2\n RIP: 0010:__kmem_cache_create_args+0x100/0x5f0\n Call Trace:\n __kmem_cache_create_args+0x100/0x5f0\n alloc_ai+0x295/0x3f0 [ubi]\n ubi_attach+0x3c3/0xcc0 [ubi]\n ubi_attach_mtd_dev+0x17cf/0x3fa0 [ubi]\n ubi_init+0x3fb/0x800 [ubi]\n do_init_module+0x265/0x7d0\n __x64_sys_finit_module+0x7a/0xc0\n\nThe problem could be easily reproduced by loading UBI device by fastmap\nwith CONFIG_DEBUG_VM=y.\nFix it by using different slab names for alloc_ai() callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53172",
"url": "https://www.suse.com/security/cve/CVE-2024-53172"
},
{
"category": "external",
"summary": "SUSE Bug 1234898 for CVE-2024-53172",
"url": "https://bugzilla.suse.com/1234898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53172"
},
{
"cve": "CVE-2024-53175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53175"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: fix memleak if msg_init_ns failed in create_ipc_ns\n\nPercpu memory allocation may failed during create_ipc_ns however this\nfail is not handled properly since ipc sysctls and mq sysctls is not\nreleased properly. Fix this by release these two resource when failure.\n\nHere is the kmemleak stack when percpu failed:\n\nunreferenced object 0xffff88819de2a600 (size 512):\n comm \"shmem_2nstest\", pid 120711, jiffies 4300542254\n hex dump (first 32 bytes):\n 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H.....\n 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V.....\n backtrace (crc be7cba35):\n [\u003cffffffff81b43f83\u003e] __kmalloc_node_track_caller_noprof+0x333/0x420\n [\u003cffffffff81a52e56\u003e] kmemdup_noprof+0x26/0x50\n [\u003cffffffff821b2f37\u003e] setup_mq_sysctls+0x57/0x1d0\n [\u003cffffffff821b29cc\u003e] copy_ipcs+0x29c/0x3b0\n [\u003cffffffff815d6a10\u003e] create_new_namespaces+0x1d0/0x920\n [\u003cffffffff815d7449\u003e] copy_namespaces+0x2e9/0x3e0\n [\u003cffffffff815458f3\u003e] copy_process+0x29f3/0x7ff0\n [\u003cffffffff8154b080\u003e] kernel_clone+0xc0/0x650\n [\u003cffffffff8154b6b1\u003e] __do_sys_clone+0xa1/0xe0\n [\u003cffffffff843df8ff\u003e] do_syscall_64+0xbf/0x1c0\n [\u003cffffffff846000b0\u003e] entry_SYSCALL_64_after_hwframe+0x4b/0x53",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53175",
"url": "https://www.suse.com/security/cve/CVE-2024-53175"
},
{
"category": "external",
"summary": "SUSE Bug 1234893 for CVE-2024-53175",
"url": "https://bugzilla.suse.com/1234893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53175"
},
{
"cve": "CVE-2024-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix NULL ptr deref in crypto_aead_setkey()\n\nNeither SMB3.0 or SMB3.02 supports encryption negotiate context, so\nwhen SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response,\nthe client uses AES-128-CCM as the default cipher. See MS-SMB2\n3.3.5.4.\n\nCommit b0abcd65ec54 (\"smb: client: fix UAF in async decryption\") added\na @server-\u003ecipher_type check to conditionally call\nsmb3_crypto_aead_allocate(), but that check would always be false as\n@server-\u003ecipher_type is unset for SMB3.02.\n\nFix the following KASAN splat by setting @server-\u003ecipher_type for\nSMB3.02 as well.\n\nmount.cifs //srv/share /mnt -o vers=3.02,seal,...\n\nBUG: KASAN: null-ptr-deref in crypto_aead_setkey+0x2c/0x130\nRead of size 8 at addr 0000000000000020 by task mount.cifs/1095\nCPU: 1 UID: 0 PID: 1095 Comm: mount.cifs Not tainted 6.12.0 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? crypto_aead_setkey+0x2c/0x130\n kasan_report+0xda/0x110\n ? crypto_aead_setkey+0x2c/0x130\n crypto_aead_setkey+0x2c/0x130\n crypt_message+0x258/0xec0 [cifs]\n ? __asan_memset+0x23/0x50\n ? __pfx_crypt_message+0x10/0x10 [cifs]\n ? mark_lock+0xb0/0x6a0\n ? hlock_class+0x32/0xb0\n ? mark_lock+0xb0/0x6a0\n smb3_init_transform_rq+0x352/0x3f0 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n smb_send_rqst+0x144/0x230 [cifs]\n ? __pfx_smb_send_rqst+0x10/0x10 [cifs]\n ? hlock_class+0x32/0xb0\n ? smb2_setup_request+0x225/0x3a0 [cifs]\n ? __pfx_cifs_compound_last_callback+0x10/0x10 [cifs]\n compound_send_recv+0x59b/0x1140 [cifs]\n ? __pfx_compound_send_recv+0x10/0x10 [cifs]\n ? __create_object+0x5e/0x90\n ? hlock_class+0x32/0xb0\n ? do_raw_spin_unlock+0x9a/0xf0\n cifs_send_recv+0x23/0x30 [cifs]\n SMB2_tcon+0x3ec/0xb30 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? __pfx_lock_release+0x10/0x10\n ? do_raw_spin_trylock+0xc6/0x120\n ? lock_acquire+0x3f/0x90\n ? _get_xid+0x16/0xd0 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n ? __pfx_cifs_get_smb_ses+0x10/0x10 [cifs]\n ? cifs_get_tcp_session+0xaa0/0xca0 [cifs]\n cifs_mount_get_session+0x8a/0x210 [cifs]\n dfs_mount_share+0x1b0/0x11d0 [cifs]\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_dfs_mount_share+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? lock_release+0x203/0x5d0\n cifs_mount+0xb3/0x3d0 [cifs]\n ? do_raw_spin_trylock+0xc6/0x120\n ? __pfx_cifs_mount+0x10/0x10 [cifs]\n ? lock_acquire+0x3f/0x90\n ? find_nls+0x16/0xa0\n ? smb3_update_mnt_flags+0x372/0x3b0 [cifs]\n cifs_smb3_do_mount+0x1e2/0xc80 [cifs]\n ? __pfx_vfs_parse_fs_string+0x10/0x10\n ? __pfx_cifs_smb3_do_mount+0x10/0x10 [cifs]\n smb3_get_tree+0x1bf/0x330 [cifs]\n vfs_get_tree+0x4a/0x160\n path_mount+0x3c1/0xfb0\n ? kasan_quarantine_put+0xc7/0x1d0\n ? __pfx_path_mount+0x10/0x10\n ? kmem_cache_free+0x118/0x3e0\n ? user_path_at+0x74/0xa0\n __x64_sys_mount+0x1a6/0x1e0\n ? __pfx___x64_sys_mount+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53185",
"url": "https://www.suse.com/security/cve/CVE-2024-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1234901 for CVE-2024-53185",
"url": "https://bugzilla.suse.com/1234901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53185"
},
{
"cve": "CVE-2024-53187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53187"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check for overflows in io_pin_pages\n\nWARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144\nCPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0\nCall Trace:\n \u003cTASK\u003e\n __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183\n io_rings_map io_uring/io_uring.c:2611 [inline]\n io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470\n io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692\n io_uring_setup io_uring/io_uring.c:3781 [inline]\n ...\n \u003c/TASK\u003e\n\nio_pin_pages()\u0027s uaddr parameter came directly from the user and can be\ngarbage. Don\u0027t just add size to it as it can overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53187",
"url": "https://www.suse.com/security/cve/CVE-2024-53187"
},
{
"category": "external",
"summary": "SUSE Bug 1234947 for CVE-2024-53187",
"url": "https://bugzilla.suse.com/1234947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53187"
},
{
"cve": "CVE-2024-53194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53194"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix use-after-free of slot-\u003ebus on hot remove\n\nDennis reports a boot crash on recent Lenovo laptops with a USB4 dock.\n\nSince commit 0fc70886569c (\"thunderbolt: Reset USB4 v2 host router\") and\ncommit 59a54c5f3dbd (\"thunderbolt: Reset topology created by the boot\nfirmware\"), USB4 v2 and v1 Host Routers are reset on probe of the\nthunderbolt driver.\n\nThe reset clears the Presence Detect State and Data Link Layer Link Active\nbits at the USB4 Host Router\u0027s Root Port and thus causes hot removal of the\ndock.\n\nThe crash occurs when pciehp is unbound from one of the dock\u0027s Downstream\nPorts: pciehp creates a pci_slot on bind and destroys it on unbind. The\npci_slot contains a pointer to the pci_bus below the Downstream Port, but\na reference on that pci_bus is never acquired. The pci_bus is destroyed\nbefore the pci_slot, so a use-after-free ensues when pci_slot_release()\naccesses slot-\u003ebus.\n\nIn principle this should not happen because pci_stop_bus_device() unbinds\npciehp (and therefore destroys the pci_slot) before the pci_bus is\ndestroyed by pci_remove_bus_device().\n\nHowever the stacktrace provided by Dennis shows that pciehp is unbound from\npci_remove_bus_device() instead of pci_stop_bus_device(). To understand\nthe significance of this, one needs to know that the PCI core uses a two\nstep process to remove a portion of the hierarchy: It first unbinds all\ndrivers in the sub-hierarchy in pci_stop_bus_device() and then actually\nremoves the devices in pci_remove_bus_device(). There is no precaution to\nprevent driver binding in-between pci_stop_bus_device() and\npci_remove_bus_device().\n\nIn Dennis\u0027 case, it seems removal of the hierarchy by pciehp races with\ndriver binding by pci_bus_add_devices(). pciehp is bound to the\nDownstream Port after pci_stop_bus_device() has run, so it is unbound by\npci_remove_bus_device() instead of pci_stop_bus_device(). Because the\npci_bus has already been destroyed at that point, accesses to it result in\na use-after-free.\n\nOne might conclude that driver binding needs to be prevented after\npci_stop_bus_device() has run. However it seems risky that pci_slot points\nto pci_bus without holding a reference. Solely relying on correct ordering\nof driver unbind versus pci_bus destruction is certainly not defensive\nprogramming.\n\nIf pci_slot has a need to access data in pci_bus, it ought to acquire a\nreference. Amend pci_create_slot() accordingly. Dennis reports that the\ncrash is not reproducible with this change.\n\nAbridged stacktrace:\n\n pcieport 0000:00:07.0: PME: Signaling with IRQ 156\n pcieport 0000:00:07.0: pciehp: Slot #12 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ IbPresDis- LLActRep+\n pci_bus 0000:20: dev 00, created physical slot 12\n pcieport 0000:00:07.0: pciehp: Slot(12): Card not present\n ...\n pcieport 0000:21:02.0: pciehp: pcie_disable_notification: SLOTCTRL d8 write cmd 0\n Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b6b: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 13 UID: 0 PID: 134 Comm: irq/156-pciehp Not tainted 6.11.0-devel+ #1\n RIP: 0010:dev_driver_string+0x12/0x40\n pci_destroy_slot\n pciehp_remove\n pcie_port_remove_service\n device_release_driver_internal\n bus_remove_device\n device_del\n device_unregister\n remove_iter\n device_for_each_child\n pcie_portdrv_remove\n pci_device_remove\n device_release_driver_internal\n bus_remove_device\n device_del\n pci_remove_bus_device (recursive invocation)\n pci_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53194",
"url": "https://www.suse.com/security/cve/CVE-2024-53194"
},
{
"category": "external",
"summary": "SUSE Bug 1235459 for CVE-2024-53194",
"url": "https://bugzilla.suse.com/1235459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53194"
},
{
"cve": "CVE-2024-53195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Get rid of userspace_irqchip_in_use\n\nImproper use of userspace_irqchip_in_use led to syzbot hitting the\nfollowing WARN_ON() in kvm_timer_update_irq():\n\nWARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arch_timer.c:459\nkvm_timer_update_irq+0x21c/0x394\nCall trace:\n kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459\n kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968\n kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264\n kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline]\n kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline]\n kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695\n kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151\n el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe following sequence led to the scenario:\n - Userspace creates a VM and a vCPU.\n - The vCPU is initialized with KVM_ARM_VCPU_PMU_V3 during\n KVM_ARM_VCPU_INIT.\n - Without any other setup, such as vGIC or vPMU, userspace issues\n KVM_RUN on the vCPU. Since the vPMU is requested, but not setup,\n kvm_arm_pmu_v3_enable() fails in kvm_arch_vcpu_run_pid_change().\n As a result, KVM_RUN returns after enabling the timer, but before\n incrementing \u0027userspace_irqchip_in_use\u0027:\n kvm_arch_vcpu_run_pid_change()\n ret = kvm_arm_pmu_v3_enable()\n if (!vcpu-\u003earch.pmu.created)\n return -EINVAL;\n if (ret)\n return ret;\n [...]\n if (!irqchip_in_kernel(kvm))\n static_branch_inc(\u0026userspace_irqchip_in_use);\n - Userspace ignores the error and issues KVM_ARM_VCPU_INIT again.\n Since the timer is already enabled, control moves through the\n following flow, ultimately hitting the WARN_ON():\n kvm_timer_vcpu_reset()\n if (timer-\u003eenabled)\n kvm_timer_update_irq()\n if (!userspace_irqchip())\n ret = kvm_vgic_inject_irq()\n ret = vgic_lazy_init()\n if (unlikely(!vgic_initialized(kvm)))\n if (kvm-\u003earch.vgic.vgic_model !=\n KVM_DEV_TYPE_ARM_VGIC_V2)\n return -EBUSY;\n WARN_ON(ret);\n\nTheoretically, since userspace_irqchip_in_use\u0027s functionality can be\nsimply replaced by \u0027!irqchip_in_kernel()\u0027, get rid of the static key\nto avoid the mismanagement, which also helps with the syzbot issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53195",
"url": "https://www.suse.com/security/cve/CVE-2024-53195"
},
{
"category": "external",
"summary": "SUSE Bug 1234957 for CVE-2024-53195",
"url": "https://bugzilla.suse.com/1234957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53195"
},
{
"cve": "CVE-2024-53196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53196"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Don\u0027t retire aborted MMIO instruction\n\nReturning an abort to the guest for an unsupported MMIO access is a\ndocumented feature of the KVM UAPI. Nevertheless, it\u0027s clear that this\nplumbing has seen limited testing, since userspace can trivially cause a\nWARN in the MMIO return:\n\n WARNING: CPU: 0 PID: 30558 at arch/arm64/include/asm/kvm_emulate.h:536 kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n Call trace:\n kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n kvm_arch_vcpu_ioctl_run+0x98/0x15b4 arch/arm64/kvm/arm.c:1133\n kvm_vcpu_ioctl+0x75c/0xa78 virt/kvm/kvm_main.c:4487\n __do_sys_ioctl fs/ioctl.c:51 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x1e0/0x23c arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151\n el0_svc+0x38/0x68 arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x90/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe splat is complaining that KVM is advancing PC while an exception is\npending, i.e. that KVM is retiring the MMIO instruction despite a\npending synchronous external abort. Womp womp.\n\nFix the glaring UAPI bug by skipping over all the MMIO emulation in\ncase there is a pending synchronous exception. Note that while userspace\nis capable of pending an asynchronous exception (SError, IRQ, or FIQ),\nit is still safe to retire the MMIO instruction in this case as (1) they\nare by definition asynchronous, and (2) KVM relies on hardware support\nfor pending/delivering these exceptions instead of the software state\nmachine for advancing PC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53196",
"url": "https://www.suse.com/security/cve/CVE-2024-53196"
},
{
"category": "external",
"summary": "SUSE Bug 1234906 for CVE-2024-53196",
"url": "https://bugzilla.suse.com/1234906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53196"
},
{
"cve": "CVE-2024-53197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53197"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev-\u003econfig.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53197",
"url": "https://www.suse.com/security/cve/CVE-2024-53197"
},
{
"category": "external",
"summary": "SUSE Bug 1235464 for CVE-2024-53197",
"url": "https://bugzilla.suse.com/1235464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53198"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen: Fix the issue of resource not being properly released in xenbus_dev_probe()\n\nThis patch fixes an issue in the function xenbus_dev_probe(). In the\nxenbus_dev_probe() function, within the if (err) branch at line 313, the\nprogram incorrectly returns err directly without releasing the resources\nallocated by err = drv-\u003eprobe(dev, id). As the return value is non-zero,\nthe upper layers assume the processing logic has failed. However, the probe\noperation was performed earlier without a corresponding remove operation.\nSince the probe actually allocates resources, failing to perform the remove\noperation could lead to problems.\n\nTo fix this issue, we followed the resource release logic of the\nxenbus_dev_remove() function by adding a new block fail_remove before the\nfail_put block. After entering the branch if (err) at line 313, the\nfunction will use a goto statement to jump to the fail_remove block,\nensuring that the previously acquired resources are correctly released,\nthus preventing the reference count leak.\n\nThis bug was identified by an experimental static analysis tool developed\nby our team. The tool specializes in analyzing reference count operations\nand detecting potential issues where resources are not properly managed.\nIn this case, the tool flagged the missing release operation as a\npotential problem, which led to the development of this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53198",
"url": "https://www.suse.com/security/cve/CVE-2024-53198"
},
{
"category": "external",
"summary": "SUSE Bug 1234923 for CVE-2024-53198",
"url": "https://bugzilla.suse.com/1234923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53198"
},
{
"cve": "CVE-2024-53203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: fix potential array underflow in ucsi_ccg_sync_control()\n\nThe \"command\" variable can be controlled by the user via debugfs. The\nworry is that if con_index is zero then \"\u0026uc-\u003eucsi-\u003econnector[con_index\n- 1]\" would be an array underflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53203",
"url": "https://www.suse.com/security/cve/CVE-2024-53203"
},
{
"category": "external",
"summary": "SUSE Bug 1235001 for CVE-2024-53203",
"url": "https://bugzilla.suse.com/1235001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53203"
},
{
"cve": "CVE-2024-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n error = bfad_im_module_init()\n fc_release_transport(bfad_im_scsi_transport_template);\n if (error)\n goto ext;\n\next:\n bfad_im_module_exit();\n fc_release_transport(bfad_im_scsi_transport_template);\n --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53227",
"url": "https://www.suse.com/security/cve/CVE-2024-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1235011 for CVE-2024-53227",
"url": "https://bugzilla.suse.com/1235011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-53230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference,\nso check NULL for cppc_get_cpu_cost().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53230",
"url": "https://www.suse.com/security/cve/CVE-2024-53230"
},
{
"category": "external",
"summary": "SUSE Bug 1235976 for CVE-2024-53230",
"url": "https://bugzilla.suse.com/1235976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53230"
},
{
"cve": "CVE-2024-53231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53231",
"url": "https://www.suse.com/security/cve/CVE-2024-53231"
},
{
"category": "external",
"summary": "SUSE Bug 1235977 for CVE-2024-53231",
"url": "https://bugzilla.suse.com/1235977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53231"
},
{
"cve": "CVE-2024-53232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Implement blocking domain\n\nThis fixes a crash when surprise hot-unplugging a PCI device. This crash\nhappens because during hot-unplug __iommu_group_set_domain_nofail()\nattaching the default domain fails when the platform no longer\nrecognizes the device as it has already been removed and we end up with\na NULL domain pointer and UAF. This is exactly the case referred to in\nthe second comment in __iommu_device_set_domain() and just as stated\nthere if we can instead attach the blocking domain the UAF is prevented\nas this can handle the already removed device. Implement the blocking\ndomain to use this handling. With this change, the crash is fixed but\nwe still hit a warning attempting to change DMA ownership on a blocked\ndevice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53232",
"url": "https://www.suse.com/security/cve/CVE-2024-53232"
},
{
"category": "external",
"summary": "SUSE Bug 1235050 for CVE-2024-53232",
"url": "https://bugzilla.suse.com/1235050"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53232"
},
{
"cve": "CVE-2024-53233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nunicode: Fix utf8_load() error path\n\nutf8_load() requests the symbol \"utf8_data_table\" and then checks if the\nrequested UTF-8 version is supported. If it\u0027s unsupported, it tries to\nput the data table using symbol_put(). If an unsupported version is\nrequested, symbol_put() fails like this:\n\n kernel BUG at kernel/module/main.c:786!\n RIP: 0010:__symbol_put+0x93/0xb0\n Call Trace:\n \u003cTASK\u003e\n ? __die_body.cold+0x19/0x27\n ? die+0x2e/0x50\n ? do_trap+0xca/0x110\n ? do_error_trap+0x65/0x80\n ? __symbol_put+0x93/0xb0\n ? exc_invalid_op+0x51/0x70\n ? __symbol_put+0x93/0xb0\n ? asm_exc_invalid_op+0x1a/0x20\n ? __pfx_cmp_name+0x10/0x10\n ? __symbol_put+0x93/0xb0\n ? __symbol_put+0x62/0xb0\n utf8_load+0xf8/0x150\n\nThat happens because symbol_put() expects the unique string that\nidentify the symbol, instead of a pointer to the loaded symbol. Fix that\nby using such string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53233",
"url": "https://www.suse.com/security/cve/CVE-2024-53233"
},
{
"category": "external",
"summary": "SUSE Bug 1235046 for CVE-2024-53233",
"url": "https://bugzilla.suse.com/1235046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53233"
},
{
"cve": "CVE-2024-53236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Free skb when TX metadata options are invalid\n\nWhen a new skb is allocated for transmitting an xsk descriptor, i.e., for\nevery non-multibuf descriptor or the first frag of a multibuf descriptor,\nbut the descriptor is later found to have invalid options set for the TX\nmetadata, the new skb is never freed. This can leak skbs until the send\nbuffer is full which makes sending more packets impossible.\n\nFix this by freeing the skb in the error path if we are currently dealing\nwith the first frag, i.e., an skb allocated in this iteration of\nxsk_build_skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53236",
"url": "https://www.suse.com/security/cve/CVE-2024-53236"
},
{
"category": "external",
"summary": "SUSE Bug 1235000 for CVE-2024-53236",
"url": "https://bugzilla.suse.com/1235000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53236"
},
{
"cve": "CVE-2024-53239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: Release resources at card release\n\nThe current 6fire code tries to release the resources right after the\ncall of usb6fire_chip_abort(). But at this moment, the card object\nmight be still in use (as we\u0027re calling snd_card_free_when_closed()).\n\nFor avoid potential UAFs, move the release of resources to the card\u0027s\nprivate_free instead of the manual call of usb6fire_chip_destroy() at\nthe USB disconnect callback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53239",
"url": "https://www.suse.com/security/cve/CVE-2024-53239"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235054 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "external",
"summary": "SUSE Bug 1235055 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-53239"
},
{
"cve": "CVE-2024-53685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: give up on paths longer than PATH_MAX\n\nIf the full path to be built by ceph_mdsc_build_path() happens to be\nlonger than PATH_MAX, then this function will enter an endless (retry)\nloop, effectively blocking the whole task. Most of the machine\nbecomes unusable, making this a very simple and effective DoS\nvulnerability.\n\nI cannot imagine why this retry was ever implemented, but it seems\nrather useless and harmful to me. Let\u0027s remove it and fail with\nENAMETOOLONG instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53685",
"url": "https://www.suse.com/security/cve/CVE-2024-53685"
},
{
"category": "external",
"summary": "SUSE Bug 1235720 for CVE-2024-53685",
"url": "https://bugzilla.suse.com/1235720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53685"
},
{
"cve": "CVE-2024-53690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: prevent use of deleted inode\n\nsyzbot reported a WARNING in nilfs_rmdir. [1]\n\nBecause the inode bitmap is corrupted, an inode with an inode number that\nshould exist as a \".nilfs\" file was reassigned by nilfs_mkdir for \"file0\",\ncausing an inode duplication during execution. And this causes an\nunderflow of i_nlink in rmdir operations.\n\nThe inode is used twice by the same task to unmount and remove directories\n\".nilfs\" and \"file0\", it trigger warning in nilfs_rmdir.\n\nAvoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means\nthat this inode has been deleted, and iput is executed to reclaim it.\n\n[1]\nWARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407\n...\nCall Trace:\n \u003cTASK\u003e\n nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342\n vfs_rmdir+0x3a3/0x510 fs/namei.c:4394\n do_rmdir+0x3b5/0x580 fs/namei.c:4453\n __do_sys_rmdir fs/namei.c:4472 [inline]\n __se_sys_rmdir fs/namei.c:4470 [inline]\n __x64_sys_rmdir+0x47/0x50 fs/namei.c:4470\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53690",
"url": "https://www.suse.com/security/cve/CVE-2024-53690"
},
{
"category": "external",
"summary": "SUSE Bug 1235842 for CVE-2024-53690",
"url": "https://bugzilla.suse.com/1235842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-53690"
},
{
"cve": "CVE-2024-54680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-54680"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-54680",
"url": "https://www.suse.com/security/cve/CVE-2024-54680"
},
{
"category": "external",
"summary": "SUSE Bug 1235723 for CVE-2024-54680",
"url": "https://bugzilla.suse.com/1235723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-54680"
},
{
"cve": "CVE-2024-55639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55639"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: renesas: rswitch: avoid use-after-put for a device tree node\n\nThe device tree node saved in the rswitch_device structure is used at\nseveral driver locations. So passing this node to of_node_put() after\nthe first use is wrong.\n\nMove of_node_put() for this node to exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55639",
"url": "https://www.suse.com/security/cve/CVE-2024-55639"
},
{
"category": "external",
"summary": "SUSE Bug 1235737 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "external",
"summary": "SUSE Bug 1235738 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-55639"
},
{
"cve": "CVE-2024-55881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Play nice with protected guests in complete_hypercall_exit()\n\nUse is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit\nhypercall when completing said hypercall. For guests with protected state,\ne.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit\nmode as the vCPU state needed to detect 64-bit mode is unavailable.\n\nHacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE\nhypercall via VMGEXIT trips the WARN:\n\n ------------[ cut here ]------------\n WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm]\n Modules linked in: kvm_amd kvm ... [last unloaded: kvm]\n CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat #470\n Hardware name: Google Astoria/astoria, BIOS 0.20240617.0-0 06/17/2024\n RIP: 0010:complete_hypercall_exit+0x44/0xe0 [kvm]\n Call Trace:\n \u003cTASK\u003e\n kvm_arch_vcpu_ioctl_run+0x2400/0x2720 [kvm]\n kvm_vcpu_ioctl+0x54f/0x630 [kvm]\n __se_sys_ioctl+0x6b/0xc0\n do_syscall_64+0x83/0x160\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55881",
"url": "https://www.suse.com/security/cve/CVE-2024-55881"
},
{
"category": "external",
"summary": "SUSE Bug 1235745 for CVE-2024-55881",
"url": "https://bugzilla.suse.com/1235745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-55881"
},
{
"cve": "CVE-2024-55916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet\n\nIf the KVP (or VSS) daemon starts before the VMBus channel\u0027s ringbuffer is\nfully initialized, we can hit the panic below:\n\nhv_utils: Registering HyperV Utility Driver\nhv_vmbus: registering driver hv_utils\n...\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1\nRIP: 0010:hv_pkt_iter_first+0x12/0xd0\nCall Trace:\n...\n vmbus_recvpacket\n hv_kvp_onchannelcallback\n vmbus_on_event\n tasklet_action_common\n tasklet_action\n handle_softirqs\n irq_exit_rcu\n sysvec_hyperv_stimer0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_hyperv_stimer0\n...\n kvp_register_done\n hvt_op_read\n vfs_read\n ksys_read\n __x64_sys_read\n\nThis can happen because the KVP/VSS channel callback can be invoked\neven before the channel is fully opened:\n1) as soon as hv_kvp_init() -\u003e hvutil_transport_init() creates\n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and\nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the\nfile (which is handled by kvp_on_msg() -\u003ekvp_handle_handshake()) and\nreading the file for the driver\u0027s response, which is handled by\nhvt_op_read(), which calls hvt-\u003eon_read(), i.e. kvp_register_done().\n\n2) the problem with kvp_register_done() is that it can cause the\nchannel callback to be called even before the channel is fully opened,\nand when the channel callback is starting to run, util_probe()-\u003e\nvmbus_open() may have not initialized the ringbuffer yet, so the\ncallback can hit the panic of NULL pointer dereference.\n\nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in\n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we\nunload and reload the driver hv_utils, and run the daemon manually within\nthe 10 seconds.\n\nFix the panic by reordering the steps in util_probe() so the char dev\nentry used by the KVP or VSS daemon is not created until after\nvmbus_open() has completed. This reordering prevents the race condition\nfrom happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55916",
"url": "https://www.suse.com/security/cve/CVE-2024-55916"
},
{
"category": "external",
"summary": "SUSE Bug 1235747 for CVE-2024-55916",
"url": "https://bugzilla.suse.com/1235747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-55916"
},
{
"cve": "CVE-2024-56369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/modes: Avoid divide by zero harder in drm_mode_vrefresh()\n\ndrm_mode_vrefresh() is trying to avoid divide by zero\nby checking whether htotal or vtotal are zero. But we may\nstill end up with a div-by-zero of vtotal*htotal*...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56369",
"url": "https://www.suse.com/security/cve/CVE-2024-56369"
},
{
"category": "external",
"summary": "SUSE Bug 1235750 for CVE-2024-56369",
"url": "https://bugzilla.suse.com/1235750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56369"
},
{
"cve": "CVE-2024-56372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56372"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: fix tun_napi_alloc_frags()\n\nsyzbot reported the following crash [1]\n\nIssue came with the blamed commit. Instead of going through\nall the iov components, we keep using the first one\nand end up with a malformed skb.\n\n[1]\n\nkernel BUG at net/core/skbuff.c:2849 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6230 Comm: syz-executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\n RIP: 0010:__pskb_pull_tail+0x1568/0x1570 net/core/skbuff.c:2848\nCode: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 92 96 74 f8 e9 25 f1 ff ff e8 e8 ae 09 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 d9 ae 09 f8 90 \u003c0f\u003e 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90\nRSP: 0018:ffffc90004cbef30 EFLAGS: 00010293\nRAX: ffffffff8995c347 RBX: 00000000fffffff2 RCX: ffff88802cf45a00\nRDX: 0000000000000000 RSI: 00000000fffffff2 RDI: 0000000000000000\nRBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c\nR10: dffffc0000000000 R11: ffffed100fbe185d R12: ffff888076e85d50\nR13: ffff888076e85c80 R14: ffff888076e85cf4 R15: ffff888076e85c80\nFS: 00007f0dca6ea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f0dca6ead58 CR3: 00000000119da000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_cow_data+0x2da/0xcb0 net/core/skbuff.c:5284\n tipc_aead_decrypt net/tipc/crypto.c:894 [inline]\n tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.c:1844\n tipc_rcv+0x57e/0x12a0 net/tipc/node.c:2109\n tipc_l2_rcv_msg+0x2bd/0x450 net/tipc/bearer.c:668\n __netif_receive_skb_list_ptype net/core/dev.c:5720 [inline]\n __netif_receive_skb_list_core+0x8b7/0x980 net/core/dev.c:5762\n __netif_receive_skb_list net/core/dev.c:5814 [inline]\n netif_receive_skb_list_internal+0xa51/0xe30 net/core/dev.c:5905\n gro_normal_list include/net/gro.h:515 [inline]\n napi_complete_done+0x2b5/0x870 net/core/dev.c:6256\n napi_complete include/linux/netdevice.h:567 [inline]\n tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2057\n do_iter_readv_writev+0x600/0x880\n vfs_writev+0x376/0xba0 fs/read_write.c:1050\n do_writev+0x1b6/0x360 fs/read_write.c:1096\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56372",
"url": "https://www.suse.com/security/cve/CVE-2024-56372"
},
{
"category": "external",
"summary": "SUSE Bug 1235753 for CVE-2024-56372",
"url": "https://bugzilla.suse.com/1235753"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56372"
},
{
"cve": "CVE-2024-56531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56531"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThis patch also splits the code to the disconnect and the free phases;\nthe former is called immediately at the USB disconnect callback while\nthe latter is called from the card destructor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56531",
"url": "https://www.suse.com/security/cve/CVE-2024-56531"
},
{
"category": "external",
"summary": "SUSE Bug 1235057 for CVE-2024-56531",
"url": "https://bugzilla.suse.com/1235057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56531"
},
{
"cve": "CVE-2024-56532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: us122l: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThe loop of us122l-\u003emmap_count check is dropped as well. The check is\nuseless for the asynchronous operation with *_when_closed().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56532",
"url": "https://www.suse.com/security/cve/CVE-2024-56532"
},
{
"category": "external",
"summary": "SUSE Bug 1235059 for CVE-2024-56532",
"url": "https://bugzilla.suse.com/1235059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56533"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56533",
"url": "https://www.suse.com/security/cve/CVE-2024-56533"
},
{
"category": "external",
"summary": "SUSE Bug 1235053 for CVE-2024-56533",
"url": "https://bugzilla.suse.com/1235053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56538"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: zynqmp_kms: Unplug DRM device before removal\n\nPrevent userspace accesses to the DRM device from causing\nuse-after-frees by unplugging the device before we remove it. This\ncauses any further userspace accesses to result in an error without\nfurther calls into this driver\u0027s internals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56538",
"url": "https://www.suse.com/security/cve/CVE-2024-56538"
},
{
"category": "external",
"summary": "SUSE Bug 1235051 for CVE-2024-56538",
"url": "https://bugzilla.suse.com/1235051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56538"
},
{
"cve": "CVE-2024-56543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56543"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Skip Rx TID cleanup for self peer\n\nDuring peer create, dp setup for the peer is done where Rx TID is\nupdated for all the TIDs. Peer object for self peer will not go through\ndp setup.\n\nWhen core halts, dp cleanup is done for all the peers. While cleanup,\nrx_tid::ab is accessed which causes below stack trace for self peer.\n\nWARNING: CPU: 6 PID: 12297 at drivers/net/wireless/ath/ath12k/dp_rx.c:851\nCall Trace:\n__warn+0x7b/0x1a0\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nreport_bug+0x10b/0x200\nhandle_bug+0x3f/0x70\nexc_invalid_op+0x13/0x60\nasm_exc_invalid_op+0x16/0x20\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nath12k_dp_rx_frags_cleanup+0xca/0xe0 [ath12k]\nath12k_dp_rx_peer_tid_cleanup+0x39/0xa0 [ath12k]\nath12k_mac_peer_cleanup_all+0x61/0x100 [ath12k]\nath12k_core_halt+0x3b/0x100 [ath12k]\nath12k_core_reset+0x494/0x4c0 [ath12k]\n\nsta object in peer will be updated when remote peer is created. Hence\nuse peer::sta to detect the self peer and skip the cleanup.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56543",
"url": "https://www.suse.com/security/cve/CVE-2024-56543"
},
{
"category": "external",
"summary": "SUSE Bug 1235065 for CVE-2024-56543",
"url": "https://bugzilla.suse.com/1235065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56543"
},
{
"cve": "CVE-2024-56546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56546"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()\n\nIf we fail to allocate memory for cb_data by kmalloc, the memory\nallocation for eve_data is never freed, add the missing kfree()\nin the error handling path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56546",
"url": "https://www.suse.com/security/cve/CVE-2024-56546"
},
{
"category": "external",
"summary": "SUSE Bug 1235070 for CVE-2024-56546",
"url": "https://bugzilla.suse.com/1235070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56546"
},
{
"cve": "CVE-2024-56548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56548"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: don\u0027t query the device logical block size multiple times\n\nDevices block sizes may change. One of these cases is a loop device by\nusing ioctl LOOP_SET_BLOCK_SIZE.\n\nWhile this may cause other issues like IO being rejected, in the case of\nhfsplus, it will allocate a block by using that size and potentially write\nout-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the\nlatter function reads a different io_size.\n\nUsing a new min_io_size initally set to sb_min_blocksize works for the\npurposes of the original fix, since it will be set to the max between\nHFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the\nmax between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not\ninitialized.\n\nTested by mounting an hfsplus filesystem with loop block sizes 512, 1024\nand 4096.\n\nThe produced KASAN report before the fix looks like this:\n\n[ 419.944641] ==================================================================\n[ 419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a\n[ 419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678\n[ 419.947612]\n[ 419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84\n[ 419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[ 419.950035] Call Trace:\n[ 419.950384] \u003cTASK\u003e\n[ 419.950676] dump_stack_lvl+0x57/0x78\n[ 419.951212] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.951830] print_report+0x14c/0x49e\n[ 419.952361] ? __virt_addr_valid+0x267/0x278\n[ 419.952979] ? kmem_cache_debug_flags+0xc/0x1d\n[ 419.953561] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.954231] kasan_report+0x89/0xb0\n[ 419.954748] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955367] hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955948] ? __pfx_hfsplus_read_wrapper+0x10/0x10\n[ 419.956618] ? do_raw_spin_unlock+0x59/0x1a9\n[ 419.957214] ? _raw_spin_unlock+0x1a/0x2e\n[ 419.957772] hfsplus_fill_super+0x348/0x1590\n[ 419.958355] ? hlock_class+0x4c/0x109\n[ 419.958867] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.959499] ? __pfx_string+0x10/0x10\n[ 419.960006] ? lock_acquire+0x3e2/0x454\n[ 419.960532] ? bdev_name.constprop.0+0xce/0x243\n[ 419.961129] ? __pfx_bdev_name.constprop.0+0x10/0x10\n[ 419.961799] ? pointer+0x3f0/0x62f\n[ 419.962277] ? __pfx_pointer+0x10/0x10\n[ 419.962761] ? vsnprintf+0x6c4/0xfba\n[ 419.963178] ? __pfx_vsnprintf+0x10/0x10\n[ 419.963621] ? setup_bdev_super+0x376/0x3b3\n[ 419.964029] ? snprintf+0x9d/0xd2\n[ 419.964344] ? __pfx_snprintf+0x10/0x10\n[ 419.964675] ? lock_acquired+0x45c/0x5e9\n[ 419.965016] ? set_blocksize+0x139/0x1c1\n[ 419.965381] ? sb_set_blocksize+0x6d/0xae\n[ 419.965742] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.966179] mount_bdev+0x12f/0x1bf\n[ 419.966512] ? __pfx_mount_bdev+0x10/0x10\n[ 419.966886] ? vfs_parse_fs_string+0xce/0x111\n[ 419.967293] ? __pfx_vfs_parse_fs_string+0x10/0x10\n[ 419.967702] ? __pfx_hfsplus_mount+0x10/0x10\n[ 419.968073] legacy_get_tree+0x104/0x178\n[ 419.968414] vfs_get_tree+0x86/0x296\n[ 419.968751] path_mount+0xba3/0xd0b\n[ 419.969157] ? __pfx_path_mount+0x10/0x10\n[ 419.969594] ? kmem_cache_free+0x1e2/0x260\n[ 419.970311] do_mount+0x99/0xe0\n[ 419.970630] ? __pfx_do_mount+0x10/0x10\n[ 419.971008] __do_sys_mount+0x199/0x1c9\n[ 419.971397] do_syscall_64+0xd0/0x135\n[ 419.971761] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 419.972233] RIP: 0033:0x7c3cb812972e\n[ 419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48\n[ 419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5\n[ 419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e\n[ 419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56548",
"url": "https://www.suse.com/security/cve/CVE-2024-56548"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235073 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "external",
"summary": "SUSE Bug 1235074 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56548"
},
{
"cve": "CVE-2024-56557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56557"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer\n\nThe AD7923 was updated to support devices with 8 channels, but the size\nof tx_buf and ring_xfer was not increased accordingly, leading to a\npotential buffer overflow in ad7923_update_scan_mode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56557",
"url": "https://www.suse.com/security/cve/CVE-2024-56557"
},
{
"category": "external",
"summary": "SUSE Bug 1235122 for CVE-2024-56557",
"url": "https://bugzilla.suse.com/1235122"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56557"
},
{
"cve": "CVE-2024-56558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56558"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: make sure exp active before svc_export_show\n\nThe function `e_show` was called with protection from RCU. This only\nensures that `exp` will not be freed. Therefore, the reference count for\n`exp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `exp_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `exp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 3 PID: 819 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n...\nCall Trace:\n \u003cTASK\u003e\n e_show+0x20b/0x230 [nfsd]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56558",
"url": "https://www.suse.com/security/cve/CVE-2024-56558"
},
{
"category": "external",
"summary": "SUSE Bug 1235100 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "external",
"summary": "SUSE Bug 1243648 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1243648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56558"
},
{
"cve": "CVE-2024-56568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56568"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Defer probe of clients after smmu device bound\n\nNull pointer dereference occurs due to a race between smmu\ndriver probe and client driver probe, when of_dma_configure()\nfor client is called after the iommu_device_register() for smmu driver\nprobe has executed but before the driver_bound() for smmu driver\nhas been called.\n\nFollowing is how the race occurs:\n\nT1:Smmu device probe\t\tT2: Client device probe\n\nreally_probe()\narm_smmu_device_probe()\niommu_device_register()\n\t\t\t\t\treally_probe()\n\t\t\t\t\tplatform_dma_configure()\n\t\t\t\t\tof_dma_configure()\n\t\t\t\t\tof_dma_configure_id()\n\t\t\t\t\tof_iommu_configure()\n\t\t\t\t\tiommu_probe_device()\n\t\t\t\t\tiommu_init_device()\n\t\t\t\t\tarm_smmu_probe_device()\n\t\t\t\t\tarm_smmu_get_by_fwnode()\n\t\t\t\t\t\tdriver_find_device_by_fwnode()\n\t\t\t\t\t\tdriver_find_device()\n\t\t\t\t\t\tnext_device()\n\t\t\t\t\t\tklist_next()\n\t\t\t\t\t\t /* null ptr\n\t\t\t\t\t\t assigned to smmu */\n\t\t\t\t\t/* null ptr dereference\n\t\t\t\t\t while smmu-\u003estreamid_mask */\ndriver_bound()\n\tklist_add_tail()\n\nWhen this null smmu pointer is dereferenced later in\narm_smmu_probe_device, the device crashes.\n\nFix this by deferring the probe of the client device\nuntil the smmu device has bound to the arm smmu driver.\n\n[will: Add comment]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56568",
"url": "https://www.suse.com/security/cve/CVE-2024-56568"
},
{
"category": "external",
"summary": "SUSE Bug 1235032 for CVE-2024-56568",
"url": "https://bugzilla.suse.com/1235032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56568"
},
{
"cve": "CVE-2024-56569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix regression with module command in stack_trace_filter\n\nWhen executing the following command:\n\n # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter\n\nThe current mod command causes a null pointer dereference. While commit\n0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\")\nhas addressed part of the issue, it left a corner case unhandled, which still\nresults in a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56569",
"url": "https://www.suse.com/security/cve/CVE-2024-56569"
},
{
"category": "external",
"summary": "SUSE Bug 1235031 for CVE-2024-56569",
"url": "https://bugzilla.suse.com/1235031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: Filter invalid inodes with missing lookup function\n\nAdd a check to the ovl_dentry_weird() function to prevent the\nprocessing of directory inodes that lack the lookup function.\nThis is important because such inodes can cause errors in overlayfs\nwhen passed to the lowerstack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56570",
"url": "https://www.suse.com/security/cve/CVE-2024-56570"
},
{
"category": "external",
"summary": "SUSE Bug 1235035 for CVE-2024-56570",
"url": "https://bugzilla.suse.com/1235035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56571"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56571",
"url": "https://www.suse.com/security/cve/CVE-2024-56571"
},
{
"category": "external",
"summary": "SUSE Bug 1235037 for CVE-2024-56571",
"url": "https://bugzilla.suse.com/1235037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56571"
},
{
"cve": "CVE-2024-56572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56572"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()\n\nThe buffer in the loop should be released under the exception path,\notherwise there may be a memory leak here.\n\nTo mitigate this, free the buffer when allegro_alloc_buffer fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56572",
"url": "https://www.suse.com/security/cve/CVE-2024-56572"
},
{
"category": "external",
"summary": "SUSE Bug 1235043 for CVE-2024-56572",
"url": "https://bugzilla.suse.com/1235043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56572"
},
{
"cve": "CVE-2024-56573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56573"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/libstub: Free correct pointer on failure\n\ncmdline_ptr is an out parameter, which is not allocated by the function\nitself, and likely points into the caller\u0027s stack.\n\ncmdline refers to the pool allocation that should be freed when cleaning\nup after a failure, so pass this instead to free_pool().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56573",
"url": "https://www.suse.com/security/cve/CVE-2024-56573"
},
{
"category": "external",
"summary": "SUSE Bug 1235042 for CVE-2024-56573",
"url": "https://bugzilla.suse.com/1235042"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56573"
},
{
"cve": "CVE-2024-56574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56574"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ts2020: fix null-ptr-deref in ts2020_probe()\n\nKASAN reported a null-ptr-deref issue when executing the following\ncommand:\n\n # echo ts2020 0x20 \u003e /sys/bus/i2c/devices/i2c-0/new_device\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]\n RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809\n RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010\n RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6\n R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790\n R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001\n FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n ts2020_probe+0xad/0xe10 [ts2020]\n i2c_device_probe+0x421/0xb40\n really_probe+0x266/0x850\n ...\n\nThe cause of the problem is that when using sysfs to dynamically register\nan i2c device, there is no platform data, but the probe process of ts2020\nneeds to use platform data, resulting in a null pointer being accessed.\n\nSolve this problem by adding checks to platform data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56574",
"url": "https://www.suse.com/security/cve/CVE-2024-56574"
},
{
"category": "external",
"summary": "SUSE Bug 1235040 for CVE-2024-56574",
"url": "https://bugzilla.suse.com/1235040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56575"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Ensure power suppliers be suspended before detach them\n\nThe power suppliers are always requested to suspend asynchronously,\ndev_pm_domain_detach() requires the caller to ensure proper\nsynchronization of this function with power management callbacks.\notherwise the detach may led to kernel panic, like below:\n\n[ 1457.107934] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000040\n[ 1457.116777] Mem abort info:\n[ 1457.119589] ESR = 0x0000000096000004\n[ 1457.123358] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 1457.128692] SET = 0, FnV = 0\n[ 1457.131764] EA = 0, S1PTW = 0\n[ 1457.134920] FSC = 0x04: level 0 translation fault\n[ 1457.139812] Data abort info:\n[ 1457.142707] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 1457.148196] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 1457.153256] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 1457.158563] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001138b6000\n[ 1457.165000] [0000000000000040] pgd=0000000000000000, p4d=0000000000000000\n[ 1457.171792] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 1457.178045] Modules linked in: v4l2_jpeg wave6_vpu_ctrl(-) [last unloaded: mxc_jpeg_encdec]\n[ 1457.186383] CPU: 0 PID: 51938 Comm: kworker/0:3 Not tainted 6.6.36-gd23d64eea511 #66\n[ 1457.194112] Hardware name: NXP i.MX95 19X19 board (DT)\n[ 1457.199236] Workqueue: pm pm_runtime_work\n[ 1457.203247] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 1457.210188] pc : genpd_runtime_suspend+0x20/0x290\n[ 1457.214886] lr : __rpm_callback+0x48/0x1d8\n[ 1457.218968] sp : ffff80008250bc50\n[ 1457.222270] x29: ffff80008250bc50 x28: 0000000000000000 x27: 0000000000000000\n[ 1457.229394] x26: 0000000000000000 x25: 0000000000000008 x24: 00000000000f4240\n[ 1457.236518] x23: 0000000000000000 x22: ffff00008590f0e4 x21: 0000000000000008\n[ 1457.243642] x20: ffff80008099c434 x19: ffff00008590f000 x18: ffffffffffffffff\n[ 1457.250766] x17: 5300326563697665 x16: 645f676e696c6f6f x15: 63343a6d726f6674\n[ 1457.257890] x14: 0000000000000004 x13: 00000000000003a4 x12: 0000000000000002\n[ 1457.265014] x11: 0000000000000000 x10: 0000000000000a60 x9 : ffff80008250bbb0\n[ 1457.272138] x8 : ffff000092937200 x7 : ffff0003fdf6af80 x6 : 0000000000000000\n[ 1457.279262] x5 : 00000000410fd050 x4 : 0000000000200000 x3 : 0000000000000000\n[ 1457.286386] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008590f000\n[ 1457.293510] Call trace:\n[ 1457.295946] genpd_runtime_suspend+0x20/0x290\n[ 1457.300296] __rpm_callback+0x48/0x1d8\n[ 1457.304038] rpm_callback+0x6c/0x78\n[ 1457.307515] rpm_suspend+0x10c/0x570\n[ 1457.311077] pm_runtime_work+0xc4/0xc8\n[ 1457.314813] process_one_work+0x138/0x248\n[ 1457.318816] worker_thread+0x320/0x438\n[ 1457.322552] kthread+0x110/0x114\n[ 1457.325767] ret_from_fork+0x10/0x20",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56575",
"url": "https://www.suse.com/security/cve/CVE-2024-56575"
},
{
"category": "external",
"summary": "SUSE Bug 1235039 for CVE-2024-56575",
"url": "https://bugzilla.suse.com/1235039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56575"
},
{
"cve": "CVE-2024-56577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56577"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-jpeg: Fix null-ptr-deref during unload module\n\nThe workqueue should be destroyed in mtk_jpeg_core.c since commit\n09aea13ecf6f (\"media: mtk-jpeg: refactor some variables\"), otherwise\nthe below calltrace can be easily triggered.\n\n[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023\n[ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]\n...\n[ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17\n...\n[ 677.882838] pc : destroy_workqueue+0x3c/0x770\n[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.884314] sp : ffff80008ad974f0\n[ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070\n[ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690\n[ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff800000000000\n[ 677.887515] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800085397ac0\n[ 677.888438] x17: 0000000000000000 x16: ffff8000801b87c8 x15: 1ffff000115b2e10\n[ 677.889361] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d\n[ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90\n[ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001\n[ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000\n[ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118\n[ 677.893977] Call trace:\n[ 677.894297] destroy_workqueue+0x3c/0x770\n[ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.895677] devm_action_release+0x50/0x90\n[ 677.896211] release_nodes+0xe8/0x170\n[ 677.896688] devres_release_all+0xf8/0x178\n[ 677.897219] device_unbind_cleanup+0x24/0x170\n[ 677.897785] device_release_driver_internal+0x35c/0x480\n[ 677.898461] device_release_driver+0x20/0x38\n...\n[ 677.912665] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56577",
"url": "https://www.suse.com/security/cve/CVE-2024-56577"
},
{
"category": "external",
"summary": "SUSE Bug 1235112 for CVE-2024-56577",
"url": "https://bugzilla.suse.com/1235112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56577"
},
{
"cve": "CVE-2024-56578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Set video drvdata before register video device\n\nThe video drvdata should be set before the video device is registered,\notherwise video_drvdata() may return NULL in the open() file ops, and led\nto oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56578",
"url": "https://www.suse.com/security/cve/CVE-2024-56578"
},
{
"category": "external",
"summary": "SUSE Bug 1235115 for CVE-2024-56578",
"url": "https://bugzilla.suse.com/1235115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56578"
},
{
"cve": "CVE-2024-56584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56584"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/tctx: work around xa_store() allocation error issue\n\nsyzbot triggered the following WARN_ON:\n\nWARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51\n\nwhich is the\n\nWARN_ON_ONCE(!xa_empty(\u0026tctx-\u003exa));\n\nsanity check in __io_uring_free() when a io_uring_task is going through\nits final put. The syzbot test case includes injecting memory allocation\nfailures, and it very much looks like xa_store() can fail one of its\nmemory allocations and end up with -\u003ehead being non-NULL even though no\nentries exist in the xarray.\n\nUntil this issue gets sorted out, work around it by attempting to\niterate entries in our xarray, and WARN_ON_ONCE() if one is found.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56584",
"url": "https://www.suse.com/security/cve/CVE-2024-56584"
},
{
"category": "external",
"summary": "SUSE Bug 1235117 for CVE-2024-56584",
"url": "https://bugzilla.suse.com/1235117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56584"
},
{
"cve": "CVE-2024-56587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56587"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex\n\nThere is NULL pointer issue observed if from Process A where hid device\nbeing added which results in adding a led_cdev addition and later a\nanother call to access of led_cdev attribute from Process B can result\nin NULL pointer issue.\n\nUse mutex led_cdev-\u003eled_access to protect access to led-\u003ecdev and its\nattribute inside brightness_show() and max_brightness_show() and also\nupdate the comment for mutex that it should be used to protect the led\nclass device fields.\n\n\tProcess A \t\t\t\tProcess B\n\n kthread+0x114\n worker_thread+0x244\n process_scheduled_works+0x248\n uhid_device_add_worker+0x24\n hid_add_device+0x120\n device_add+0x268\n bus_probe_device+0x94\n device_initial_probe+0x14\n __device_attach+0xfc\n bus_for_each_drv+0x10c\n __device_attach_driver+0x14c\n driver_probe_device+0x3c\n __driver_probe_device+0xa0\n really_probe+0x190\n hid_device_probe+0x130\n ps_probe+0x990\n ps_led_register+0x94\n devm_led_classdev_register_ext+0x58\n led_classdev_register_ext+0x1f8\n device_create_with_groups+0x48\n device_create_groups_vargs+0xc8\n device_add+0x244\n kobject_uevent+0x14\n kobject_uevent_env[jt]+0x224\n mutex_unlock[jt]+0xc4\n __mutex_unlock_slowpath+0xd4\n wake_up_q+0x70\n try_to_wake_up[jt]+0x48c\n preempt_schedule_common+0x28\n __schedule+0x628\n __switch_to+0x174\n\t\t\t\t\t\tel0t_64_sync+0x1a8/0x1ac\n\t\t\t\t\t\tel0t_64_sync_handler+0x68/0xbc\n\t\t\t\t\t\tel0_svc+0x38/0x68\n\t\t\t\t\t\tdo_el0_svc+0x1c/0x28\n\t\t\t\t\t\tel0_svc_common+0x80/0xe0\n\t\t\t\t\t\tinvoke_syscall+0x58/0x114\n\t\t\t\t\t\t__arm64_sys_read+0x1c/0x2c\n\t\t\t\t\t\tksys_read+0x78/0xe8\n\t\t\t\t\t\tvfs_read+0x1e0/0x2c8\n\t\t\t\t\t\tkernfs_fop_read_iter+0x68/0x1b4\n\t\t\t\t\t\tseq_read_iter+0x158/0x4ec\n\t\t\t\t\t\tkernfs_seq_show+0x44/0x54\n\t\t\t\t\t\tsysfs_kf_seq_show+0xb4/0x130\n\t\t\t\t\t\tdev_attr_show+0x38/0x74\n\t\t\t\t\t\tbrightness_show+0x20/0x4c\n\t\t\t\t\t\tdualshock4_led_get_brightness+0xc/0x74\n\n[ 3313.874295][ T4013] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[ 3313.874301][ T4013] Mem abort info:\n[ 3313.874303][ T4013] ESR = 0x0000000096000006\n[ 3313.874305][ T4013] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 3313.874307][ T4013] SET = 0, FnV = 0\n[ 3313.874309][ T4013] EA = 0, S1PTW = 0\n[ 3313.874311][ T4013] FSC = 0x06: level 2 translation fault\n[ 3313.874313][ T4013] Data abort info:\n[ 3313.874314][ T4013] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000\n[ 3313.874316][ T4013] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 3313.874318][ T4013] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 3313.874320][ T4013] user pgtable: 4k pages, 39-bit VAs, pgdp=00000008f2b0a000\n..\n\n[ 3313.874332][ T4013] Dumping ftrace buffer:\n[ 3313.874334][ T4013] (ftrace buffer empty)\n..\n..\n[ dd3313.874639][ T4013] CPU: 6 PID: 4013 Comm: InputReader\n[ 3313.874648][ T4013] pc : dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874653][ T4013] lr : led_update_brightness+0x38/0x60\n[ 3313.874656][ T4013] sp : ffffffc0b910bbd0\n..\n..\n[ 3313.874685][ T4013] Call trace:\n[ 3313.874687][ T4013] dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874690][ T4013] brightness_show+0x20/0x4c\n[ 3313.874692][ T4013] dev_attr_show+0x38/0x74\n[ 3313.874696][ T4013] sysfs_kf_seq_show+0xb4/0x130\n[ 3313.874700][ T4013] kernfs_seq_show+0x44/0x54\n[ 3313.874703][ T4013] seq_read_iter+0x158/0x4ec\n[ 3313.874705][ T4013] kernfs_fop_read_iter+0x68/0x1b4\n[ 3313.874708][ T4013] vfs_read+0x1e0/0x2c8\n[ 3313.874711][ T4013] ksys_read+0x78/0xe8\n[ 3313.874714][ T4013] __arm64_sys_read+0x1c/0x2c\n[ 3313.874718][ T4013] invoke_syscall+0x58/0x114\n[ 3313.874721][ T4013] el0_svc_common+0x80/0xe0\n[ 3313.874724][ T4013] do_el0_svc+0x1c/0x28\n[ 3313.874727][ T4013] el0_svc+0x38/0x68\n[ 3313.874730][ T4013] el0t_64_sync_handler+0x68/0xbc\n[ 3313.874732][ T4013] el0t_64_sync+0x1a8/0x1ac",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56587",
"url": "https://www.suse.com/security/cve/CVE-2024-56587"
},
{
"category": "external",
"summary": "SUSE Bug 1235125 for CVE-2024-56587",
"url": "https://bugzilla.suse.com/1235125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56587"
},
{
"cve": "CVE-2024-56588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56588"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Create all dump files during debugfs initialization\n\nFor the current debugfs of hisi_sas, after user triggers dump, the\ndriver allocate memory space to save the register information and create\ndebugfs files to display the saved information. In this process, the\ndebugfs files created after each dump.\n\nTherefore, when the dump is triggered while the driver is unbind, the\nfollowing hang occurs:\n\n[67840.853907] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[67840.862947] Mem abort info:\n[67840.865855] ESR = 0x0000000096000004\n[67840.869713] EC = 0x25: DABT (current EL), IL = 32 bits\n[67840.875125] SET = 0, FnV = 0\n[67840.878291] EA = 0, S1PTW = 0\n[67840.881545] FSC = 0x04: level 0 translation fault\n[67840.886528] Data abort info:\n[67840.889524] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[67840.895117] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[67840.900284] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[67840.905709] user pgtable: 4k pages, 48-bit VAs, pgdp=0000002803a1f000\n[67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000\n[67840.919177] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[67840.996435] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[67841.003628] pc : down_write+0x30/0x98\n[67841.007546] lr : start_creating.part.0+0x60/0x198\n[67841.012495] sp : ffff8000b979ba20\n[67841.016046] x29: ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40\n[67841.023412] x26: 0000000000000012 x25: ffff20202b355ae8 x24: ffff20202b35a8c8\n[67841.030779] x23: ffffa36877928208 x22: ffffa368b4972240 x21: ffff8000b979bb18\n[67841.038147] x20: ffff00281dc1e3c0 x19: fffffffffffffffe x18: 0000000000000020\n[67841.045515] x17: 0000000000000000 x16: ffffa368b128a530 x15: ffffffffffffffff\n[67841.052888] x14: ffff8000b979bc18 x13: ffffffffffffffff x12: ffff8000b979bb18\n[67841.060263] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa368b1289b18\n[67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6 : 00000000000003a9\n[67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001\n[67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0\n[67841.089759] Call trace:\n[67841.092456] down_write+0x30/0x98\n[67841.096017] start_creating.part.0+0x60/0x198\n[67841.100613] debugfs_create_dir+0x48/0x1f8\n[67841.104950] debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw]\n[67841.111447] debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw]\n[67841.118111] debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw]\n[67841.125115] full_proxy_write+0x68/0xc8\n[67841.129175] vfs_write+0xd8/0x3f0\n[67841.132708] ksys_write+0x70/0x108\n[67841.136317] __arm64_sys_write+0x24/0x38\n[67841.140440] invoke_syscall+0x50/0x128\n[67841.144385] el0_svc_common.constprop.0+0xc8/0xf0\n[67841.149273] do_el0_svc+0x24/0x38\n[67841.152773] el0_svc+0x38/0xd8\n[67841.156009] el0t_64_sync_handler+0xc0/0xc8\n[67841.160361] el0t_64_sync+0x1a4/0x1a8\n[67841.164189] Code: b9000882 d2800002 d2800023 f9800011 (c85ffc05)\n[67841.170443] ---[ end trace 0000000000000000 ]---\n\nTo fix this issue, create all directories and files during debugfs\ninitialization. In this way, the driver only needs to allocate memory\nspace to save information each time the user triggers dumping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56588",
"url": "https://www.suse.com/security/cve/CVE-2024-56588"
},
{
"category": "external",
"summary": "SUSE Bug 1235123 for CVE-2024-56588",
"url": "https://bugzilla.suse.com/1235123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56588"
},
{
"cve": "CVE-2024-56589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56589"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Add cond_resched() for no forced preemption model\n\nFor no forced preemption model kernel, in the scenario where the\nexpander is connected to 12 high performance SAS SSDs, the following\ncall trace may occur:\n\n[ 214.409199][ C240] watchdog: BUG: soft lockup - CPU#240 stuck for 22s! [irq/149-hisi_sa:3211]\n[ 214.568533][ C240] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)\n[ 214.575224][ C240] pc : fput_many+0x8c/0xdc\n[ 214.579480][ C240] lr : fput+0x1c/0xf0\n[ 214.583302][ C240] sp : ffff80002de2b900\n[ 214.587298][ C240] x29: ffff80002de2b900 x28: ffff1082aa412000\n[ 214.593291][ C240] x27: ffff3062a0348c08 x26: ffff80003a9f6000\n[ 214.599284][ C240] x25: ffff1062bbac5c40 x24: 0000000000001000\n[ 214.605277][ C240] x23: 000000000000000a x22: 0000000000000001\n[ 214.611270][ C240] x21: 0000000000001000 x20: 0000000000000000\n[ 214.617262][ C240] x19: ffff3062a41ae580 x18: 0000000000010000\n[ 214.623255][ C240] x17: 0000000000000001 x16: ffffdb3a6efe5fc0\n[ 214.629248][ C240] x15: ffffffffffffffff x14: 0000000003ffffff\n[ 214.635241][ C240] x13: 000000000000ffff x12: 000000000000029c\n[ 214.641234][ C240] x11: 0000000000000006 x10: ffff80003a9f7fd0\n[ 214.647226][ C240] x9 : ffffdb3a6f0482fc x8 : 0000000000000001\n[ 214.653219][ C240] x7 : 0000000000000002 x6 : 0000000000000080\n[ 214.659212][ C240] x5 : ffff55480ee9b000 x4 : fffffde7f94c6554\n[ 214.665205][ C240] x3 : 0000000000000002 x2 : 0000000000000020\n[ 214.671198][ C240] x1 : 0000000000000021 x0 : ffff3062a41ae5b8\n[ 214.677191][ C240] Call trace:\n[ 214.680320][ C240] fput_many+0x8c/0xdc\n[ 214.684230][ C240] fput+0x1c/0xf0\n[ 214.687707][ C240] aio_complete_rw+0xd8/0x1fc\n[ 214.692225][ C240] blkdev_bio_end_io+0x98/0x140\n[ 214.696917][ C240] bio_endio+0x160/0x1bc\n[ 214.701001][ C240] blk_update_request+0x1c8/0x3bc\n[ 214.705867][ C240] scsi_end_request+0x3c/0x1f0\n[ 214.710471][ C240] scsi_io_completion+0x7c/0x1a0\n[ 214.715249][ C240] scsi_finish_command+0x104/0x140\n[ 214.720200][ C240] scsi_softirq_done+0x90/0x180\n[ 214.724892][ C240] blk_mq_complete_request+0x5c/0x70\n[ 214.730016][ C240] scsi_mq_done+0x48/0xac\n[ 214.734194][ C240] sas_scsi_task_done+0xbc/0x16c [libsas]\n[ 214.739758][ C240] slot_complete_v3_hw+0x260/0x760 [hisi_sas_v3_hw]\n[ 214.746185][ C240] cq_thread_v3_hw+0xbc/0x190 [hisi_sas_v3_hw]\n[ 214.752179][ C240] irq_thread_fn+0x34/0xa4\n[ 214.756435][ C240] irq_thread+0xc4/0x130\n[ 214.760520][ C240] kthread+0x108/0x13c\n[ 214.764430][ C240] ret_from_fork+0x10/0x18\n\nThis is because in the hisi_sas driver, both the hardware interrupt\nhandler and the interrupt thread are executed on the same CPU. In the\nperformance test scenario, function irq_wait_for_interrupt() will always\nreturn 0 if lots of interrupts occurs and the CPU will be continuously\nconsumed. As a result, the CPU cannot run the watchdog thread. When the\nwatchdog time exceeds the specified time, call trace occurs.\n\nTo fix it, add cond_resched() to execute the watchdog thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56589",
"url": "https://www.suse.com/security/cve/CVE-2024-56589"
},
{
"category": "external",
"summary": "SUSE Bug 1235241 for CVE-2024-56589",
"url": "https://bugzilla.suse.com/1235241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56589"
},
{
"cve": "CVE-2024-56590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56590"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix not checking skb length on hci_acldata_packet\n\nThis fixes not checking if skb really contains an ACL header otherwise\nthe code may attempt to access some uninitilized/invalid memory past the\nvalid skb-\u003edata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56590",
"url": "https://www.suse.com/security/cve/CVE-2024-56590"
},
{
"category": "external",
"summary": "SUSE Bug 1235038 for CVE-2024-56590",
"url": "https://bugzilla.suse.com/1235038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56590"
},
{
"cve": "CVE-2024-56593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56593"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()\n\nThis patch fixes a NULL pointer dereference bug in brcmfmac that occurs\nwhen a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs\nare sent from the pkt queue.\n\nThe problem is the number of entries in the pre-allocated sgtable, it is\nnents = max(rxglom_size, txglom_size) + max(rxglom_size, txglom_size) \u003e\u003e 4 + 1.\nGiven the default [rt]xglom_size=32 it\u0027s actually 35 which is too small.\nWorst case, the pkt queue can end up with 64 SKBs. This occurs when a new SKB\nis added for each original SKB if tailroom isn\u0027t enough to hold tail_pad.\nAt least one sg entry is needed for each SKB. So, eventually the \"skb_queue_walk loop\"\nin brcmf_sdiod_sglist_rw may run out of sg entries. This makes sg_next return\nNULL and this causes the oops.\n\nThe patch sets nents to max(rxglom_size, txglom_size) * 2 to be able handle\nthe worst-case.\nBtw. this requires only 64-35=29 * 16 (or 20 if CONFIG_NEED_SG_DMA_LENGTH) = 464\nadditional bytes of memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56593",
"url": "https://www.suse.com/security/cve/CVE-2024-56593"
},
{
"category": "external",
"summary": "SUSE Bug 1235252 for CVE-2024-56593",
"url": "https://bugzilla.suse.com/1235252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56594"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: set the right AMDGPU sg segment limitation\n\nThe driver needs to set the correct max_segment_size;\notherwise debug_dma_map_sg() will complain about the\nover-mapping of the AMDGPU sg length as following:\n\nWARNING: CPU: 6 PID: 1964 at kernel/dma/debug.c:1178 debug_dma_map_sg+0x2dc/0x370\n[ 364.049444] Modules linked in: veth amdgpu(OE) amdxcp drm_exec gpu_sched drm_buddy drm_ttm_helper ttm(OE) drm_suballoc_helper drm_display_helper drm_kms_helper i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc amd_atl intel_rapl_msr intel_rapl_common sunrpc sch_fq_codel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd binfmt_misc snd_hda_codec snd_pci_acp6x snd_hda_core snd_acp_config snd_hwdep snd_soc_acpi kvm_amd snd_pcm kvm snd_seq_midi snd_seq_midi_event crct10dif_pclmul ghash_clmulni_intel sha512_ssse3 snd_rawmidi sha256_ssse3 sha1_ssse3 aesni_intel snd_seq nls_iso8859_1 crypto_simd snd_seq_device cryptd snd_timer rapl input_leds snd\n[ 364.049532] ipmi_devintf wmi_bmof ccp serio_raw k10temp sp5100_tco soundcore ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 364.049576] CPU: 6 PID: 1964 Comm: rocminfo Tainted: G OE 6.10.0-custom #492\n[ 364.049579] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 364.049582] RIP: 0010:debug_dma_map_sg+0x2dc/0x370\n[ 364.049585] Code: 89 4d b8 e8 36 b1 86 00 8b 4d b8 48 8b 55 b0 44 8b 45 a8 4c 8b 4d a0 48 89 c6 48 c7 c7 00 4b 74 bc 4c 89 4d b8 e8 b4 73 f3 ff \u003c0f\u003e 0b 4c 8b 4d b8 8b 15 c8 2c b8 01 85 d2 0f 85 ee fd ff ff 8b 05\n[ 364.049588] RSP: 0018:ffff9ca600b57ac0 EFLAGS: 00010286\n[ 364.049590] RAX: 0000000000000000 RBX: ffff88b7c132b0c8 RCX: 0000000000000027\n[ 364.049592] RDX: ffff88bb0f521688 RSI: 0000000000000001 RDI: ffff88bb0f521680\n[ 364.049594] RBP: ffff9ca600b57b20 R08: 000000000000006f R09: ffff9ca600b57930\n[ 364.049596] R10: ffff9ca600b57928 R11: ffffffffbcb46328 R12: 0000000000000000\n[ 364.049597] R13: 0000000000000001 R14: ffff88b7c19c0700 R15: ffff88b7c9059800\n[ 364.049599] FS: 00007fb2d3516e80(0000) GS:ffff88bb0f500000(0000) knlGS:0000000000000000\n[ 364.049601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 364.049603] CR2: 000055610bd03598 CR3: 00000001049f6000 CR4: 0000000000350ef0\n[ 364.049605] Call Trace:\n[ 364.049607] \u003cTASK\u003e\n[ 364.049609] ? show_regs+0x6d/0x80\n[ 364.049614] ? __warn+0x8c/0x140\n[ 364.049618] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049621] ? report_bug+0x193/0x1a0\n[ 364.049627] ? handle_bug+0x46/0x80\n[ 364.049631] ? exc_invalid_op+0x1d/0x80\n[ 364.049635] ? asm_exc_invalid_op+0x1f/0x30\n[ 364.049642] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049647] __dma_map_sg_attrs+0x90/0xe0\n[ 364.049651] dma_map_sgtable+0x25/0x40\n[ 364.049654] amdgpu_bo_move+0x59a/0x850 [amdgpu]\n[ 364.049935] ? srso_return_thunk+0x5/0x5f\n[ 364.049939] ? amdgpu_ttm_tt_populate+0x5d/0xc0 [amdgpu]\n[ 364.050095] ttm_bo_handle_move_mem+0xc3/0x180 [ttm]\n[ 364.050103] ttm_bo_validate+0xc1/0x160 [ttm]\n[ 364.050108] ? amdgpu_ttm_tt_get_user_pages+0xe5/0x1b0 [amdgpu]\n[ 364.050263] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0xa12/0xc90 [amdgpu]\n[ 364.050473] kfd_ioctl_alloc_memory_of_gpu+0x16b/0x3b0 [amdgpu]\n[ 364.050680] kfd_ioctl+0x3c2/0x530 [amdgpu]\n[ 364.050866] ? __pfx_kfd_ioctl_alloc_memory_of_gpu+0x10/0x10 [amdgpu]\n[ 364.05105\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56594",
"url": "https://www.suse.com/security/cve/CVE-2024-56594"
},
{
"category": "external",
"summary": "SUSE Bug 1235413 for CVE-2024-56594",
"url": "https://bugzilla.suse.com/1235413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56595"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add a check to prevent array-index-out-of-bounds in dbAdjTree\n\nWhen the value of lp is 0 at the beginning of the for loop, it will\nbecome negative in the next assignment and we should bail out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56595",
"url": "https://www.suse.com/security/cve/CVE-2024-56595"
},
{
"category": "external",
"summary": "SUSE Bug 1235410 for CVE-2024-56595",
"url": "https://bugzilla.suse.com/1235410"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56595"
},
{
"cve": "CVE-2024-56596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56596"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in jfs_readdir\n\nThe stbl might contain some invalid values. Added a check to\nreturn error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56596",
"url": "https://www.suse.com/security/cve/CVE-2024-56596"
},
{
"category": "external",
"summary": "SUSE Bug 1235458 for CVE-2024-56596",
"url": "https://bugzilla.suse.com/1235458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56596"
},
{
"cve": "CVE-2024-56597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56597"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix shift-out-of-bounds in dbSplit\n\nWhen dmt_budmin is less than zero, it causes errors\nin the later stages. Added a check to return an error beforehand\nin dbAllocCtl itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56597",
"url": "https://www.suse.com/security/cve/CVE-2024-56597"
},
{
"category": "external",
"summary": "SUSE Bug 1235222 for CVE-2024-56597",
"url": "https://bugzilla.suse.com/1235222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56597"
},
{
"cve": "CVE-2024-56598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: array-index-out-of-bounds fix in dtReadFirst\n\nThe value of stbl can be sometimes out of bounds due\nto a bad filesystem. Added a check with appopriate return\nof error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56598",
"url": "https://www.suse.com/security/cve/CVE-2024-56598"
},
{
"category": "external",
"summary": "SUSE Bug 1235220 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "external",
"summary": "SUSE Bug 1235221 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56598"
},
{
"cve": "CVE-2024-56600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet6: do not leave a dangling sk pointer in inet6_create()\n\nsock_init_data() attaches the allocated sk pointer to the provided sock\nobject. If inet6_create() fails later, the sk object is released, but the\nsock object retains the dangling sk pointer, which may cause use-after-free\nlater.\n\nClear the sock sk pointer on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56600",
"url": "https://www.suse.com/security/cve/CVE-2024-56600"
},
{
"category": "external",
"summary": "SUSE Bug 1235217 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "external",
"summary": "SUSE Bug 1235218 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56601"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet: do not leave a dangling sk pointer in inet_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If inet_create() fails later, the sk object is freed, but the\nsock object retains the dangling pointer, which may create use-after-free\nlater.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56601",
"url": "https://www.suse.com/security/cve/CVE-2024-56601"
},
{
"category": "external",
"summary": "SUSE Bug 1235230 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "external",
"summary": "SUSE Bug 1235231 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235231"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56602"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: do not leave a dangling sk pointer in ieee802154_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If ieee802154_create() fails later, the allocated sk object is\nfreed, but the dangling pointer remains in the provided sock object, which\nmay allow use-after-free.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56602",
"url": "https://www.suse.com/security/cve/CVE-2024-56602"
},
{
"category": "external",
"summary": "SUSE Bug 1235521 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "external",
"summary": "SUSE Bug 1235522 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2024-56603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56603"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: af_can: do not leave a dangling sk pointer in can_create()\n\nOn error can_create() frees the allocated sk object, but sock_init_data()\nhas already attached it to the provided sock object. This will leave a\ndangling sk pointer in the sock object and may cause use-after-free later.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56603",
"url": "https://www.suse.com/security/cve/CVE-2024-56603"
},
{
"category": "external",
"summary": "SUSE Bug 1235415 for CVE-2024-56603",
"url": "https://bugzilla.suse.com/1235415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56603"
},
{
"cve": "CVE-2024-56606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56606"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: avoid erroring out after sock_init_data() in packet_create()\n\nAfter sock_init_data() the allocated sk object is attached to the provided\nsock object. On error, packet_create() frees the sk object leaving the\ndangling pointer in the sock object on return. Some other code may try\nto use this pointer and cause use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56606",
"url": "https://www.suse.com/security/cve/CVE-2024-56606"
},
{
"category": "external",
"summary": "SUSE Bug 1235417 for CVE-2024-56606",
"url": "https://bugzilla.suse.com/1235417"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56607"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()\n\nWhen I try to manually set bitrates:\n\niw wlan0 set bitrates legacy-2.4 1\n\nI get sleeping from invalid context error, see below. Fix that by switching to\nuse recently introduced ieee80211_iterate_stations_mtx().\n\nDo note that WCN6855 firmware is still crashing, I\u0027m not sure if that firmware\neven supports bitrate WMI commands and should we consider disabling\nath12k_mac_op_set_bitrate_mask() for WCN6855? But that\u0027s for another patch.\n\nBUG: sleeping function called from invalid context at drivers/net/wireless/ath/ath12k/wmi.c:420\nin_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 2236, name: iw\npreempt_count: 0, expected: 0\nRCU nest depth: 1, expected: 0\n3 locks held by iw/2236:\n #0: ffffffffabc6f1d8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40\n #1: ffff888138410810 (\u0026rdev-\u003ewiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x54d/0x800 [cfg80211]\n #2: ffffffffab2cfaa0 (rcu_read_lock){....}-{1:2}, at: ieee80211_iterate_stations_atomic+0x2f/0x200 [mac80211]\nCPU: 3 UID: 0 PID: 2236 Comm: iw Not tainted 6.11.0-rc7-wt-ath+ #1772\nHardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xa4/0xe0\n dump_stack+0x10/0x20\n __might_resched+0x363/0x5a0\n ? __alloc_skb+0x165/0x340\n __might_sleep+0xad/0x160\n ath12k_wmi_cmd_send+0xb1/0x3d0 [ath12k]\n ? ath12k_wmi_init_wcn7850+0xa40/0xa40 [ath12k]\n ? __netdev_alloc_skb+0x45/0x7b0\n ? __asan_memset+0x39/0x40\n ? ath12k_wmi_alloc_skb+0xf0/0x150 [ath12k]\n ? reacquire_held_locks+0x4d0/0x4d0\n ath12k_wmi_set_peer_param+0x340/0x5b0 [ath12k]\n ath12k_mac_disable_peer_fixed_rate+0xa3/0x110 [ath12k]\n ? ath12k_mac_vdev_stop+0x4f0/0x4f0 [ath12k]\n ieee80211_iterate_stations_atomic+0xd4/0x200 [mac80211]\n ath12k_mac_op_set_bitrate_mask+0x5d2/0x1080 [ath12k]\n ? ath12k_mac_vif_chan+0x320/0x320 [ath12k]\n drv_set_bitrate_mask+0x267/0x470 [mac80211]\n ieee80211_set_bitrate_mask+0x4cc/0x8a0 [mac80211]\n ? __this_cpu_preempt_check+0x13/0x20\n nl80211_set_tx_bitrate_mask+0x2bc/0x530 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? trace_contention_end+0xef/0x140\n ? rtnl_unlock+0x9/0x10\n ? nl80211_pre_doit+0x557/0x800 [cfg80211]\n genl_family_rcv_msg_doit+0x1f0/0x2e0\n ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250\n ? ns_capable+0x57/0xd0\n genl_family_rcv_msg+0x34c/0x600\n ? genl_family_rcv_msg_dumpit+0x310/0x310\n ? __lock_acquire+0xc62/0x1de0\n ? he_set_mcs_mask.isra.0+0x8d0/0x8d0 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? cfg80211_external_auth_request+0x690/0x690 [cfg80211]\n genl_rcv_msg+0xa0/0x130\n netlink_rcv_skb+0x14c/0x400\n ? genl_family_rcv_msg+0x600/0x600\n ? netlink_ack+0xd70/0xd70\n ? rwsem_optimistic_spin+0x4f0/0x4f0\n ? genl_rcv+0x14/0x40\n ? down_read_killable+0x580/0x580\n ? netlink_deliver_tap+0x13e/0x350\n ? __this_cpu_preempt_check+0x13/0x20\n genl_rcv+0x23/0x40\n netlink_unicast+0x45e/0x790\n ? netlink_attachskb+0x7f0/0x7f0\n netlink_sendmsg+0x7eb/0xdb0\n ? netlink_unicast+0x790/0x790\n ? __this_cpu_preempt_check+0x13/0x20\n ? selinux_socket_sendmsg+0x31/0x40\n ? netlink_unicast+0x790/0x790\n __sock_sendmsg+0xc9/0x160\n ____sys_sendmsg+0x620/0x990\n ? kernel_sendmsg+0x30/0x30\n ? __copy_msghdr+0x410/0x410\n ? __kasan_check_read+0x11/0x20\n ? mark_lock+0xe6/0x1470\n ___sys_sendmsg+0xe9/0x170\n ? copy_msghdr_from_user+0x120/0x120\n ? __lock_acquire+0xc62/0x1de0\n ? do_fault_around+0x2c6/0x4e0\n ? do_user_addr_fault+0x8c1/0xde0\n ? reacquire_held_locks+0x220/0x4d0\n ? do_user_addr_fault+0x8c1/0xde0\n ? __kasan_check_read+0x11/0x20\n ? __fdget+0x4e/0x1d0\n ? sockfd_lookup_light+0x1a/0x170\n __sys_sendmsg+0xd2/0x180\n ? __sys_sendmsg_sock+0x20/0x20\n ? reacquire_held_locks+0x4d0/0x4d0\n ? debug_smp_processor_id+0x17/0x20\n __x64_sys_sendmsg+0x72/0xb0\n ? lockdep_hardirqs_on+0x7d/0x100\n x64_sys_call+0x894/0x9f0\n do_syscall_64+0x64/0x130\n entry_SYSCALL_64_after_\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56607",
"url": "https://www.suse.com/security/cve/CVE-2024-56607"
},
{
"category": "external",
"summary": "SUSE Bug 1235423 for CVE-2024-56607",
"url": "https://bugzilla.suse.com/1235423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56607"
},
{
"cve": "CVE-2024-56608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56608"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027\n\nAn issue was identified in the dcn21_link_encoder_create function where\nan out-of-bounds access could occur when the hpd_source index was used\nto reference the link_enc_hpd_regs array. This array has a fixed size\nand the index was not being checked against the array\u0027s bounds before\naccessing it.\n\nThis fix adds a conditional check to ensure that the hpd_source index is\nwithin the valid range of the link_enc_hpd_regs array. If the index is\nout of bounds, the function now returns NULL to prevent undefined\nbehavior.\n\nReferences:\n\n[ 65.920507] ------------[ cut here ]------------\n[ 65.920510] UBSAN: array-index-out-of-bounds in drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn21/dcn21_resource.c:1312:29\n[ 65.920519] index 7 is out of range for type \u0027dcn10_link_enc_hpd_registers [5]\u0027\n[ 65.920523] CPU: 3 PID: 1178 Comm: modprobe Tainted: G OE 6.8.0-cleanershaderfeatureresetasdntipmi200nv2132 #13\n[ 65.920525] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS WMJ0429N_Weekly_20_04_2 04/29/2020\n[ 65.920527] Call Trace:\n[ 65.920529] \u003cTASK\u003e\n[ 65.920532] dump_stack_lvl+0x48/0x70\n[ 65.920541] dump_stack+0x10/0x20\n[ 65.920543] __ubsan_handle_out_of_bounds+0xa2/0xe0\n[ 65.920549] dcn21_link_encoder_create+0xd9/0x140 [amdgpu]\n[ 65.921009] link_create+0x6d3/0xed0 [amdgpu]\n[ 65.921355] create_links+0x18a/0x4e0 [amdgpu]\n[ 65.921679] dc_create+0x360/0x720 [amdgpu]\n[ 65.921999] ? dmi_matches+0xa0/0x220\n[ 65.922004] amdgpu_dm_init+0x2b6/0x2c90 [amdgpu]\n[ 65.922342] ? console_unlock+0x77/0x120\n[ 65.922348] ? dev_printk_emit+0x86/0xb0\n[ 65.922354] dm_hw_init+0x15/0x40 [amdgpu]\n[ 65.922686] amdgpu_device_init+0x26a8/0x33a0 [amdgpu]\n[ 65.922921] amdgpu_driver_load_kms+0x1b/0xa0 [amdgpu]\n[ 65.923087] amdgpu_pci_probe+0x1b7/0x630 [amdgpu]\n[ 65.923087] local_pci_probe+0x4b/0xb0\n[ 65.923087] pci_device_probe+0xc8/0x280\n[ 65.923087] really_probe+0x187/0x300\n[ 65.923087] __driver_probe_device+0x85/0x130\n[ 65.923087] driver_probe_device+0x24/0x110\n[ 65.923087] __driver_attach+0xac/0x1d0\n[ 65.923087] ? __pfx___driver_attach+0x10/0x10\n[ 65.923087] bus_for_each_dev+0x7d/0xd0\n[ 65.923087] driver_attach+0x1e/0x30\n[ 65.923087] bus_add_driver+0xf2/0x200\n[ 65.923087] driver_register+0x64/0x130\n[ 65.923087] ? __pfx_amdgpu_init+0x10/0x10 [amdgpu]\n[ 65.923087] __pci_register_driver+0x61/0x70\n[ 65.923087] amdgpu_init+0x7d/0xff0 [amdgpu]\n[ 65.923087] do_one_initcall+0x49/0x310\n[ 65.923087] ? kmalloc_trace+0x136/0x360\n[ 65.923087] do_init_module+0x6a/0x270\n[ 65.923087] load_module+0x1fce/0x23a0\n[ 65.923087] init_module_from_file+0x9c/0xe0\n[ 65.923087] ? init_module_from_file+0x9c/0xe0\n[ 65.923087] idempotent_init_module+0x179/0x230\n[ 65.923087] __x64_sys_finit_module+0x5d/0xa0\n[ 65.923087] do_syscall_64+0x76/0x120\n[ 65.923087] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n[ 65.923087] RIP: 0033:0x7f2d80f1e88d\n[ 65.923087] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[ 65.923087] RSP: 002b:00007ffc7bc1aa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139\n[ 65.923087] RAX: ffffffffffffffda RBX: 0000564c9c1db130 RCX: 00007f2d80f1e88d\n[ 65.923087] RDX: 0000000000000000 RSI: 0000564c9c1e5480 RDI: 000000000000000f\n[ 65.923087] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000002\n[ 65.923087] R10: 000000000000000f R11: 0000000000000246 R12: 0000564c9c1e5480\n[ 65.923087] R13: 0000564c9c1db260 R14: 0000000000000000 R15: 0000564c9c1e54b0\n[ 65.923087] \u003c/TASK\u003e\n[ 65.923927] ---[ end trace ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56608",
"url": "https://www.suse.com/security/cve/CVE-2024-56608"
},
{
"category": "external",
"summary": "SUSE Bug 1235487 for CVE-2024-56608",
"url": "https://bugzilla.suse.com/1235487"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56608"
},
{
"cve": "CVE-2024-56609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56609"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb\n\nWhen removing kernel modules by:\n rmmod rtw88_8723cs rtw88_8703b rtw88_8723x rtw88_sdio rtw88_core\n\nDriver uses skb_queue_purge() to purge TX skb, but not report tx status\ncausing \"Have pending ack frames!\" warning. Use ieee80211_purge_tx_queue()\nto correct this.\n\nSince ieee80211_purge_tx_queue() doesn\u0027t take locks, to prevent racing\nbetween TX work and purge TX queue, flush and destroy TX work in advance.\n\n wlan0: deauthenticating from aa:f5:fd:60:4c:a8 by local\n choice (Reason: 3=DEAUTH_LEAVING)\n ------------[ cut here ]------------\n Have pending ack frames!\n WARNING: CPU: 3 PID: 9232 at net/mac80211/main.c:1691\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n CPU: 3 PID: 9232 Comm: rmmod Tainted: G C\n 6.10.1-200.fc40.aarch64 #1\n Hardware name: pine64 Pine64 PinePhone Braveheart\n (1.1)/Pine64 PinePhone Braveheart (1.1), BIOS 2024.01 01/01/2024\n pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n lr : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n sp : ffff80008c1b37b0\n x29: ffff80008c1b37b0 x28: ffff000003be8000 x27: 0000000000000000\n x26: 0000000000000000 x25: ffff000003dc14b8 x24: ffff80008c1b37d0\n x23: ffff000000ff9f80 x22: 0000000000000000 x21: 000000007fffffff\n x20: ffff80007c7e93d8 x19: ffff00006e66f400 x18: 0000000000000000\n x17: ffff7ffffd2b3000 x16: ffff800083fc0000 x15: 0000000000000000\n x14: 0000000000000000 x13: 2173656d61726620 x12: 6b636120676e6964\n x11: 0000000000000000 x10: 000000000000005d x9 : ffff8000802af2b0\n x8 : ffff80008c1b3430 x7 : 0000000000000001 x6 : 0000000000000001\n x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000003be8000\n Call trace:\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n idr_for_each+0x74/0x110\n ieee80211_free_hw+0x44/0xe8 [mac80211]\n rtw_sdio_remove+0x9c/0xc0 [rtw88_sdio]\n sdio_bus_remove+0x44/0x180\n device_remove+0x54/0x90\n device_release_driver_internal+0x1d4/0x238\n driver_detach+0x54/0xc0\n bus_remove_driver+0x78/0x108\n driver_unregister+0x38/0x78\n sdio_unregister_driver+0x2c/0x40\n rtw_8723cs_driver_exit+0x18/0x1000 [rtw88_8723cs]\n __do_sys_delete_module.isra.0+0x190/0x338\n __arm64_sys_delete_module+0x1c/0x30\n invoke_syscall+0x74/0x100\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x158\n el0t_64_sync_handler+0x120/0x138\n el0t_64_sync+0x194/0x198\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56609",
"url": "https://www.suse.com/security/cve/CVE-2024-56609"
},
{
"category": "external",
"summary": "SUSE Bug 1235389 for CVE-2024-56609",
"url": "https://bugzilla.suse.com/1235389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56609"
},
{
"cve": "CVE-2024-56610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56610"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcsan: Turn report_filterlist_lock into a raw_spinlock\n\nRan Xiaokai reports that with a KCSAN-enabled PREEMPT_RT kernel, we can see\nsplats like:\n\n| BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\n| in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/1\n| preempt_count: 10002, expected: 0\n| RCU nest depth: 0, expected: 0\n| no locks held by swapper/1/0.\n| irq event stamp: 156674\n| hardirqs last enabled at (156673): [\u003cffffffff81130bd9\u003e] do_idle+0x1f9/0x240\n| hardirqs last disabled at (156674): [\u003cffffffff82254f84\u003e] sysvec_apic_timer_interrupt+0x14/0xc0\n| softirqs last enabled at (0): [\u003cffffffff81099f47\u003e] copy_process+0xfc7/0x4b60\n| softirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n| Preemption disabled at:\n| [\u003cffffffff814a3e2a\u003e] paint_ptr+0x2a/0x90\n| CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0+ #3\n| Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-0-ga698c8995f-prebuilt.qemu.org 04/01/2014\n| Call Trace:\n| \u003cIRQ\u003e\n| dump_stack_lvl+0x7e/0xc0\n| dump_stack+0x1d/0x30\n| __might_resched+0x1a2/0x270\n| rt_spin_lock+0x68/0x170\n| kcsan_skip_report_debugfs+0x43/0xe0\n| print_report+0xb5/0x590\n| kcsan_report_known_origin+0x1b1/0x1d0\n| kcsan_setup_watchpoint+0x348/0x650\n| __tsan_unaligned_write1+0x16d/0x1d0\n| hrtimer_interrupt+0x3d6/0x430\n| __sysvec_apic_timer_interrupt+0xe8/0x3a0\n| sysvec_apic_timer_interrupt+0x97/0xc0\n| \u003c/IRQ\u003e\n\nOn a detected data race, KCSAN\u0027s reporting logic checks if it should\nfilter the report. That list is protected by the report_filterlist_lock\n*non-raw* spinlock which may sleep on RT kernels.\n\nSince KCSAN may report data races in any context, convert it to a\nraw_spinlock.\n\nThis requires being careful about when to allocate memory for the filter\nlist itself which can be done via KCSAN\u0027s debugfs interface. Concurrent\nmodification of the filter list via debugfs should be rare: the chosen\nstrategy is to optimistically pre-allocate memory before the critical\nsection and discard if unused.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56610",
"url": "https://www.suse.com/security/cve/CVE-2024-56610"
},
{
"category": "external",
"summary": "SUSE Bug 1235390 for CVE-2024-56610",
"url": "https://bugzilla.suse.com/1235390"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56610"
},
{
"cve": "CVE-2024-56611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM\n\nWe currently assume that there is at least one VMA in a MM, which isn\u0027t\ntrue.\n\nSo we might end up having find_vma() return NULL, to then de-reference\nNULL. So properly handle find_vma() returning NULL.\n\nThis fixes the report:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nCPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nRIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]\nRIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194\nCode: ...\nRSP: 0018:ffffc9000375fd08 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000\nRDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044\nRBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1\nR10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003\nR13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8\nFS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709\n __do_sys_migrate_pages mm/mempolicy.c:1727 [inline]\n __se_sys_migrate_pages mm/mempolicy.c:1723 [inline]\n __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n[akpm@linux-foundation.org: add unlikely()]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56611",
"url": "https://www.suse.com/security/cve/CVE-2024-56611"
},
{
"category": "external",
"summary": "SUSE Bug 1235391 for CVE-2024-56611",
"url": "https://bugzilla.suse.com/1235391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56611"
},
{
"cve": "CVE-2024-56614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56614"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix OOB map writes when deleting elements\n\nJordy says:\n\n\"\nIn the xsk_map_delete_elem function an unsigned integer\n(map-\u003emax_entries) is compared with a user-controlled signed integer\n(k). Due to implicit type conversion, a large unsigned value for\nmap-\u003emax_entries can bypass the intended bounds check:\n\n\tif (k \u003e= map-\u003emax_entries)\n\t\treturn -EINVAL;\n\nThis allows k to hold a negative value (between -2147483648 and -2),\nwhich is then used as an array index in m-\u003exsk_map[k], which results\nin an out-of-bounds access.\n\n\tspin_lock_bh(\u0026m-\u003elock);\n\tmap_entry = \u0026m-\u003exsk_map[k]; // Out-of-bounds map_entry\n\told_xs = unrcu_pointer(xchg(map_entry, NULL)); // Oob write\n\tif (old_xs)\n\t\txsk_map_sock_delete(old_xs, map_entry);\n\tspin_unlock_bh(\u0026m-\u003elock);\n\nThe xchg operation can then be used to cause an out-of-bounds write.\nMoreover, the invalid map_entry passed to xsk_map_sock_delete can lead\nto further memory corruption.\n\"\n\nIt indeed results in following splat:\n\n[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108\n[76612.904330] #PF: supervisor write access in kernel mode\n[76612.909639] #PF: error_code(0x0002) - not-present page\n[76612.914855] PGD 0 P4D 0\n[76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP\n[76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470\n[76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60\n[76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff \u003c48\u003e 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31\n[76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246\n[76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000\n[76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000\n[76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007\n[76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8\n[76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0\n[76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000\n[76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0\n[76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[76613.041086] PKRU: 55555554\n[76613.043842] Call Trace:\n[76613.046331] \u003cTASK\u003e\n[76613.048468] ? __die+0x20/0x60\n[76613.051581] ? page_fault_oops+0x15a/0x450\n[76613.055747] ? search_extable+0x22/0x30\n[76613.059649] ? search_bpf_extables+0x5f/0x80\n[76613.063988] ? exc_page_fault+0xa9/0x140\n[76613.067975] ? asm_exc_page_fault+0x22/0x30\n[76613.072229] ? xsk_map_delete_elem+0x2d/0x60\n[76613.076573] ? xsk_map_delete_elem+0x23/0x60\n[76613.080914] __sys_bpf+0x19b7/0x23c0\n[76613.084555] __x64_sys_bpf+0x1a/0x20\n[76613.088194] do_syscall_64+0x37/0xb0\n[76613.091832] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n[76613.096962] RIP: 0033:0x7f80b6d1e88d\n[76613.100592] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[76613.119631] RSP: 002b:00007ffd1ae0ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000141\n[76613.131330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80b6d1e88d\n[76613.142632] RDX: 0000000000000098 RSI: 00007ffd1ae0ad20 RDI: 0000000000000003\n[76613.153967] RBP: 00007ffd1ae0adc0 R08: 0000000000000000 R09: 0000000000000000\n[76613.166030] R10: 00007f80b6f77040 R11: 0000000000000206 R12: 00007ffd1ae0aed8\n[76613.177130] R13: 000055ddf42ce1e9 R14: 000055ddf42d0d98 R15: 00\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56614",
"url": "https://www.suse.com/security/cve/CVE-2024-56614"
},
{
"category": "external",
"summary": "SUSE Bug 1235424 for CVE-2024-56614",
"url": "https://bugzilla.suse.com/1235424"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56614"
},
{
"cve": "CVE-2024-56615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix OOB devmap writes when deleting elements\n\nJordy reported issue against XSKMAP which also applies to DEVMAP - the\nindex used for accessing map entry, due to being a signed integer,\ncauses the OOB writes. Fix is simple as changing the type from int to\nu32, however, when compared to XSKMAP case, one more thing needs to be\naddressed.\n\nWhen map is released from system via dev_map_free(), we iterate through\nall of the entries and an iterator variable is also an int, which\nimplies OOB accesses. Again, change it to be u32.\n\nExample splat below:\n\n[ 160.724676] BUG: unable to handle page fault for address: ffffc8fc2c001000\n[ 160.731662] #PF: supervisor read access in kernel mode\n[ 160.736876] #PF: error_code(0x0000) - not-present page\n[ 160.742095] PGD 0 P4D 0\n[ 160.744678] Oops: Oops: 0000 [#1] PREEMPT SMP\n[ 160.749106] CPU: 1 UID: 0 PID: 520 Comm: kworker/u145:12 Not tainted 6.12.0-rc1+ #487\n[ 160.757050] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[ 160.767642] Workqueue: events_unbound bpf_map_free_deferred\n[ 160.773308] RIP: 0010:dev_map_free+0x77/0x170\n[ 160.777735] Code: 00 e8 fd 91 ed ff e8 b8 73 ed ff 41 83 7d 18 19 74 6e 41 8b 45 24 49 8b bd f8 00 00 00 31 db 85 c0 74 48 48 63 c3 48 8d 04 c7 \u003c48\u003e 8b 28 48 85 ed 74 30 48 8b 7d 18 48 85 ff 74 05 e8 b3 52 fa ff\n[ 160.796777] RSP: 0018:ffffc9000ee1fe38 EFLAGS: 00010202\n[ 160.802086] RAX: ffffc8fc2c001000 RBX: 0000000080000000 RCX: 0000000000000024\n[ 160.809331] RDX: 0000000000000000 RSI: 0000000000000024 RDI: ffffc9002c001000\n[ 160.816576] RBP: 0000000000000000 R08: 0000000000000023 R09: 0000000000000001\n[ 160.823823] R10: 0000000000000001 R11: 00000000000ee6b2 R12: dead000000000122\n[ 160.831066] R13: ffff88810c928e00 R14: ffff8881002df405 R15: 0000000000000000\n[ 160.838310] FS: 0000000000000000(0000) GS:ffff8897e0c40000(0000) knlGS:0000000000000000\n[ 160.846528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 160.852357] CR2: ffffc8fc2c001000 CR3: 0000000005c32006 CR4: 00000000007726f0\n[ 160.859604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 160.866847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 160.874092] PKRU: 55555554\n[ 160.876847] Call Trace:\n[ 160.879338] \u003cTASK\u003e\n[ 160.881477] ? __die+0x20/0x60\n[ 160.884586] ? page_fault_oops+0x15a/0x450\n[ 160.888746] ? search_extable+0x22/0x30\n[ 160.892647] ? search_bpf_extables+0x5f/0x80\n[ 160.896988] ? exc_page_fault+0xa9/0x140\n[ 160.900973] ? asm_exc_page_fault+0x22/0x30\n[ 160.905232] ? dev_map_free+0x77/0x170\n[ 160.909043] ? dev_map_free+0x58/0x170\n[ 160.912857] bpf_map_free_deferred+0x51/0x90\n[ 160.917196] process_one_work+0x142/0x370\n[ 160.921272] worker_thread+0x29e/0x3b0\n[ 160.925082] ? rescuer_thread+0x4b0/0x4b0\n[ 160.929157] kthread+0xd4/0x110\n[ 160.932355] ? kthread_park+0x80/0x80\n[ 160.936079] ret_from_fork+0x2d/0x50\n[ 160.943396] ? kthread_park+0x80/0x80\n[ 160.950803] ret_from_fork_asm+0x11/0x20\n[ 160.958482] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56615",
"url": "https://www.suse.com/security/cve/CVE-2024-56615"
},
{
"category": "external",
"summary": "SUSE Bug 1235426 for CVE-2024-56615",
"url": "https://bugzilla.suse.com/1235426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56616"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix MST sideband message body length check\n\nFix the MST sideband message body length check, which must be at least 1\nbyte accounting for the message body CRC (aka message data CRC) at the\nend of the message.\n\nThis fixes a case where an MST branch device returns a header with a\ncorrect header CRC (indicating a correctly received body length), with\nthe body length being incorrectly set to 0. This will later lead to a\nmemory corruption in drm_dp_sideband_append_payload() and the following\nerrors in dmesg:\n\n UBSAN: array-index-out-of-bounds in drivers/gpu/drm/display/drm_dp_mst_topology.c:786:25\n index -1 is out of range for type \u0027u8 [48]\u0027\n Call Trace:\n drm_dp_sideband_append_payload+0x33d/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]\n\n memcpy: detected field-spanning write (size 18446744073709551615) of single field \"\u0026msg-\u003emsg[msg-\u003ecurlen]\" at drivers/gpu/drm/display/drm_dp_mst_topology.c:791 (size 256)\n Call Trace:\n drm_dp_sideband_append_payload+0x324/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56616",
"url": "https://www.suse.com/security/cve/CVE-2024-56616"
},
{
"category": "external",
"summary": "SUSE Bug 1235427 for CVE-2024-56616",
"url": "https://bugzilla.suse.com/1235427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56616"
},
{
"cve": "CVE-2024-56617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56617"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU\n\nCommit\n\n 5944ce092b97 (\"arch_topology: Build cacheinfo from primary CPU\")\n\nadds functionality that architectures can use to optionally allocate and\nbuild cacheinfo early during boot. Commit\n\n 6539cffa9495 (\"cacheinfo: Add arch specific early level initializer\")\n\nlets secondary CPUs correct (and reallocate memory) cacheinfo data if\nneeded.\n\nIf the early build functionality is not used and cacheinfo does not need\ncorrection, memory for cacheinfo is never allocated. x86 does not use\nthe early build functionality. Consequently, during the cacheinfo CPU\nhotplug callback, last_level_cache_is_valid() attempts to dereference\na NULL pointer:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000100\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEPMT SMP NOPTI\n CPU: 0 PID 19 Comm: cpuhp/0 Not tainted 6.4.0-rc2 #1\n RIP: 0010: last_level_cache_is_valid+0x95/0xe0a\n\nAllocate memory for cacheinfo during the cacheinfo CPU hotplug callback\nif not done earlier.\n\nMoreover, before determining the validity of the last-level cache info,\nensure that it has been allocated. Simply checking for non-zero\ncache_leaves() is not sufficient, as some architectures (e.g., Intel\nprocessors) have non-zero cache_leaves() before allocation.\n\nDereferencing NULL cacheinfo can occur in update_per_cpu_data_slice_size().\nThis function iterates over all online CPUs. However, a CPU may have come\nonline recently, but its cacheinfo may not have been allocated yet.\n\nWhile here, remove an unnecessary indentation in allocate_cache_info().\n\n [ bp: Massage. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56617",
"url": "https://www.suse.com/security/cve/CVE-2024-56617"
},
{
"category": "external",
"summary": "SUSE Bug 1235429 for CVE-2024-56617",
"url": "https://bugzilla.suse.com/1235429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56617"
},
{
"cve": "CVE-2024-56619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()\n\nSyzbot reported that when searching for records in a directory where the\ninode\u0027s i_size is corrupted and has a large value, memory access outside\nthe folio/page range may occur, or a use-after-free bug may be detected if\nKASAN is enabled.\n\nThis is because nilfs_last_byte(), which is called by nilfs_find_entry()\nand others to calculate the number of valid bytes of directory data in a\npage from i_size and the page index, loses the upper 32 bits of the 64-bit\nsize information due to an inappropriate type of local variable to which\nthe i_size value is assigned.\n\nThis caused a large byte offset value due to underflow in the end address\ncalculation in the calling nilfs_find_entry(), resulting in memory access\nthat exceeds the folio/page size.\n\nFix this issue by changing the type of the local variable causing the bit\nloss from \"unsigned int\" to \"u64\". The return value of nilfs_last_byte()\nis also of type \"unsigned int\", but it is truncated so as not to exceed\nPAGE_SIZE and no bit loss occurs, so no change is required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56619",
"url": "https://www.suse.com/security/cve/CVE-2024-56619"
},
{
"category": "external",
"summary": "SUSE Bug 1235224 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "external",
"summary": "SUSE Bug 1235225 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56619"
},
{
"cve": "CVE-2024-56620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56620"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: qcom: Only free platform MSIs when ESI is enabled\n\nOtherwise, it will result in a NULL pointer dereference as below:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000008\nCall trace:\n mutex_lock+0xc/0x54\n platform_device_msi_free_irqs_all+0x14/0x20\n ufs_qcom_remove+0x34/0x48 [ufs_qcom]\n platform_remove+0x28/0x44\n device_remove+0x4c/0x80\n device_release_driver_internal+0xd8/0x178\n driver_detach+0x50/0x9c\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n platform_driver_unregister+0x14/0x20\n ufs_qcom_pltform_exit+0x18/0xb94 [ufs_qcom]\n __arm64_sys_delete_module+0x180/0x260\n invoke_syscall+0x44/0x100\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0xdc\n el0t_64_sync_handler+0xc0/0xc4\n el0t_64_sync+0x190/0x194",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56620",
"url": "https://www.suse.com/security/cve/CVE-2024-56620"
},
{
"category": "external",
"summary": "SUSE Bug 1235227 for CVE-2024-56620",
"url": "https://bugzilla.suse.com/1235227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56620"
},
{
"cve": "CVE-2024-56622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56622"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: sysfs: Prevent div by zero\n\nPrevent a division by 0 when monitoring is not enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56622",
"url": "https://www.suse.com/security/cve/CVE-2024-56622"
},
{
"category": "external",
"summary": "SUSE Bug 1235251 for CVE-2024-56622",
"url": "https://bugzilla.suse.com/1235251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56622"
},
{
"cve": "CVE-2024-56623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread. Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022] ? __dentry_kill+0x121/0x170\n[596663.813030] ? _cond_resched+0x15/0x30\n[596663.813034] ? _cond_resched+0x15/0x30\n[596663.813039] ? wait_for_completion+0x35/0x190\n[596663.813048] ? try_to_wake_up+0x63/0x540\n[596663.813055] free_task+0x5a/0x60\n[596663.813061] kthread_stop+0xf3/0x100\n[596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56623",
"url": "https://www.suse.com/security/cve/CVE-2024-56623"
},
{
"category": "external",
"summary": "SUSE Bug 1235466 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "external",
"summary": "SUSE Bug 1235468 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56625"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: can_set_termination(): allow sleeping GPIOs\n\nIn commit 6e86a1543c37 (\"can: dev: provide optional GPIO based\ntermination support\") GPIO based termination support was added.\n\nFor no particular reason that patch uses gpiod_set_value() to set the\nGPIO. This leads to the following warning, if the systems uses a\nsleeping GPIO, i.e. behind an I2C port expander:\n\n| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c\n| CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c\n\nReplace gpiod_set_value() by gpiod_set_value_cansleep() to allow the\nuse of sleeping GPIOs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56625",
"url": "https://www.suse.com/security/cve/CVE-2024-56625"
},
{
"category": "external",
"summary": "SUSE Bug 1235223 for CVE-2024-56625",
"url": "https://bugzilla.suse.com/1235223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56625"
},
{
"cve": "CVE-2024-56629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56629"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix when get product name maybe null pointer\n\nDue to incorrect dev-\u003eproduct reporting by certain devices, null\npointer dereferences occur when dev-\u003eproduct is empty, leading to\npotential system crashes.\n\nThis issue was found on EXCELSIOR DL37-D05 device with\nLoongson-LS3A6000-7A2000-DL37 motherboard.\n\nKernel logs:\n[ 56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci\n[ 56.671638] usb 4-3: string descriptor 0 read error: -22\n[ 56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07\n[ 56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3\n[ 56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0\n[ 56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80\n[ 56.697732] Oops[#1]:\n[ 56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G OE 6.6.0-loong64-desktop #25.00.2000.015\n[ 56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00 10/11/2024\n[ 56.697739] pc 90000000066e35c8 ra ffff800004f98a80 tp 9000000125478000 sp 900000012547b8a0\n[ 56.697741] a0 0000000000000000 a1 ffff800004818b28 a2 0000000000000000 a3 0000000000000000\n[ 56.697743] a4 900000012547b8f0 a5 0000000000000000 a6 0000000000000000 a7 0000000000000000\n[ 56.697745] t0 ffff800004818b2d t1 0000000000000000 t2 0000000000000003 t3 0000000000000005\n[ 56.697747] t4 0000000000000000 t5 0000000000000000 t6 0000000000000000 t7 0000000000000000\n[ 56.697748] t8 0000000000000000 u0 0000000000000000 s9 0000000000000000 s0 900000011aa48028\n[ 56.697750] s1 0000000000000000 s2 0000000000000000 s3 ffff800004818e80 s4 ffff800004810000\n[ 56.697751] s5 90000001000b98d0 s6 ffff800004811f88 s7 ffff800005470440 s8 0000000000000000\n[ 56.697753] ra: ffff800004f98a80 wacom_update_name+0xe0/0x300 [wacom]\n[ 56.697802] ERA: 90000000066e35c8 strstr+0x28/0x120\n[ 56.697806] CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)\n[ 56.697816] PRMD: 0000000c (PPLV0 +PIE +PWE)\n[ 56.697821] EUEN: 00000000 (-FPE -SXE -ASXE -BTE)\n[ 56.697827] ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)\n[ 56.697831] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)\n[ 56.697835] BADV: 0000000000000000\n[ 56.697836] PRID: 0014d000 (Loongson-64bit, Loongson-3A6000)\n[ 56.697838] Modules linked in: wacom(+) bnep bluetooth rfkill qrtr nls_iso8859_1 nls_cp437 snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_timer snd soundcore input_leds mousedev led_class joydev deepin_netmonitor(OE) fuse nfnetlink dmi_sysfs ip_tables x_tables overlay amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_suballoc_helper i2c_algo_bit drm_ttm_helper r8169 ttm drm_display_helper spi_loongson_pci xhci_pci cec xhci_pci_renesas spi_loongson_core hid_generic realtek gpio_loongson_64bit\n[ 56.697887] Process (udev-worker) (pid: 2742, threadinfo=00000000aee0d8b4, task=00000000a9eff1f3)\n[ 56.697890] Stack : 0000000000000000 ffff800004817e00 0000000000000000 0000251c00000000\n[ 56.697896] 0000000000000000 00000011fffffffd 0000000000000000 0000000000000000\n[ 56.697901] 0000000000000000 1b67a968695184b9 0000000000000000 90000001000b98d0\n[ 56.697906] 90000001000bb8d0 900000011aa48028 0000000000000000 ffff800004f9d74c\n[ 56.697911] 90000001000ba000 ffff800004f9ce58 0000000000000000 ffff800005470440\n[ 56.697916] ffff800004811f88 90000001000b98d0 9000000100da2aa8 90000001000bb8d0\n[ 56.697921] 0000000000000000 90000001000ba000 900000011aa48028 ffff800004f9d74c\n[ 56.697926] ffff8000054704e8 90000001000bb8b8 90000001000ba000 0000000000000000\n[ 56.697931] 90000001000bb8d0 \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56629",
"url": "https://www.suse.com/security/cve/CVE-2024-56629"
},
{
"category": "external",
"summary": "SUSE Bug 1235473 for CVE-2024-56629",
"url": "https://bugzilla.suse.com/1235473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56629"
},
{
"cve": "CVE-2024-56630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: free inode when ocfs2_get_init_inode() fails\n\nsyzbot is reporting busy inodes after unmount, for commit 9c89fe0af826\n(\"ocfs2: Handle error from dquot_initialize()\") forgot to call iput() when\nnew_inode() succeeded and dquot_initialize() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56630",
"url": "https://www.suse.com/security/cve/CVE-2024-56630"
},
{
"category": "external",
"summary": "SUSE Bug 1235479 for CVE-2024-56630",
"url": "https://bugzilla.suse.com/1235479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56631"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Fix slab-use-after-free read in sg_release()\n\nFix a use-after-free bug in sg_release(), detected by syzbot with KASAN:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30\nkernel/locking/lockdep.c:5838\n__mutex_unlock_slowpath+0xe2/0x750 kernel/locking/mutex.c:912\nsg_release+0x1f4/0x2e0 drivers/scsi/sg.c:407\n\nIn sg_release(), the function kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) is\ncalled before releasing the open_rel_lock mutex. The kref_put() call may\ndecrement the reference count of sfp to zero, triggering its cleanup\nthrough sg_remove_sfp(). This cleanup includes scheduling deferred work\nvia sg_remove_sfp_usercontext(), which ultimately frees sfp.\n\nAfter kref_put(), sg_release() continues to unlock open_rel_lock and may\nreference sfp or sdp. If sfp has already been freed, this results in a\nslab-use-after-free error.\n\nMove the kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) call after unlocking the\nopen_rel_lock mutex. This ensures:\n\n - No references to sfp or sdp occur after the reference count is\n decremented.\n\n - Cleanup functions such as sg_remove_sfp() and\n sg_remove_sfp_usercontext() can safely execute without impacting the\n mutex handling in sg_release().\n\nThe fix has been tested and validated by syzbot. This patch closes the\nbug reported at the following syzkaller link and ensures proper\nsequencing of resource cleanup and mutex operations, eliminating the\nrisk of use-after-free errors in sg_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56631",
"url": "https://www.suse.com/security/cve/CVE-2024-56631"
},
{
"category": "external",
"summary": "SUSE Bug 1235480 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "external",
"summary": "SUSE Bug 1235482 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56631"
},
{
"cve": "CVE-2024-56632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix the memleak while create new ctrl failed\n\nNow while we create new ctrl failed, we have not free the\ntagset occupied by admin_q, here try to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56632",
"url": "https://www.suse.com/security/cve/CVE-2024-56632"
},
{
"category": "external",
"summary": "SUSE Bug 1235483 for CVE-2024-56632",
"url": "https://bugzilla.suse.com/1235483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56632"
},
{
"cve": "CVE-2024-56634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56634"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: grgpio: Add NULL check in grgpio_probe\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in grgpio_probe is not checked.\nAdd NULL check in grgpio_probe, to handle kernel NULL\npointer dereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56634",
"url": "https://www.suse.com/security/cve/CVE-2024-56634"
},
{
"category": "external",
"summary": "SUSE Bug 1235486 for CVE-2024-56634",
"url": "https://bugzilla.suse.com/1235486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56634"
},
{
"cve": "CVE-2024-56635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56635"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid potential UAF in default_operstate()\n\nsyzbot reported an UAF in default_operstate() [1]\n\nIssue is a race between device and netns dismantles.\n\nAfter calling __rtnl_unlock() from netdev_run_todo(),\nwe can not assume the netns of each device is still alive.\n\nMake sure the device is not in NETREG_UNREGISTERED state,\nand add an ASSERT_RTNL() before the call to\n__dev_get_by_index().\n\nWe might move this ASSERT_RTNL() in __dev_get_by_index()\nin the future.\n\n[1]\n\nBUG: KASAN: slab-use-after-free in __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\nRead of size 8 at addr ffff888043eba1b0 by task syz.0.0/5339\n\nCPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\n default_operstate net/core/link_watch.c:51 [inline]\n rfc2863_policy+0x224/0x300 net/core/link_watch.c:67\n linkwatch_do_dev+0x3e/0x170 net/core/link_watch.c:170\n netdev_run_todo+0x461/0x1000 net/core/dev.c:10894\n rtnl_unlock net/core/rtnetlink.c:152 [inline]\n rtnl_net_unlock include/linux/rtnetlink.h:133 [inline]\n rtnl_dellink+0x760/0x8d0 net/core/rtnetlink.c:3520\n rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:726\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583\n ___sys_sendmsg net/socket.c:2637 [inline]\n __sys_sendmsg+0x269/0x350 net/socket.c:2669\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f2a3cb80809\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f2a3d9cd058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f2a3cd45fa0 RCX: 00007f2a3cb80809\nRDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008\nRBP: 00007f2a3cbf393e R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007f2a3cd45fa0 R15: 00007ffd03bc65c8\n \u003c/TASK\u003e\n\nAllocated by task 5339:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4314\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kmalloc_array_noprof include/linux/slab.h:945 [inline]\n netdev_create_hash net/core/dev.c:11870 [inline]\n netdev_init+0x10c/0x250 net/core/dev.c:11890\n ops_init+0x31e/0x590 net/core/net_namespace.c:138\n setup_net+0x287/0x9e0 net/core/net_namespace.c:362\n copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500\n create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228\n ksys_unshare+0x57d/0xa70 kernel/fork.c:3314\n __do_sys_unshare kernel/fork.c:3385 [inline]\n __se_sys_unshare kernel/fork.c:3383 [inline]\n __x64_sys_unshare+0x38/0x40 kernel/fork.c:3383\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x8\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56635",
"url": "https://www.suse.com/security/cve/CVE-2024-56635"
},
{
"category": "external",
"summary": "SUSE Bug 1235519 for CVE-2024-56635",
"url": "https://bugzilla.suse.com/1235519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56635"
},
{
"cve": "CVE-2024-56636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56636"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: do not assume mac header is set in geneve_xmit_skb()\n\nWe should not assume mac header is set in output path.\n\nUse skb_eth_hdr() instead of eth_hdr() to fix the issue.\n\nsysbot reported the following :\n\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 skb_mac_header include/linux/skbuff.h:3052 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 eth_hdr include/linux/if_ether.h:24 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nModules linked in:\nCPU: 0 UID: 0 PID: 11635 Comm: syz.4.1423 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_mac_header include/linux/skbuff.h:3052 [inline]\n RIP: 0010:eth_hdr include/linux/if_ether.h:24 [inline]\n RIP: 0010:geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n RIP: 0010:geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nCode: 21 c6 02 e9 35 d4 ff ff e8 a5 48 4c fb 90 0f 0b 90 e9 fd f5 ff ff e8 97 48 4c fb 90 0f 0b 90 e9 d8 f5 ff ff e8 89 48 4c fb 90 \u003c0f\u003e 0b 90 e9 41 e4 ff ff e8 7b 48 4c fb 90 0f 0b 90 e9 cd e7 ff ff\nRSP: 0018:ffffc90003b2f870 EFLAGS: 00010283\nRAX: 000000000000037a RBX: 000000000000ffff RCX: ffffc9000dc3d000\nRDX: 0000000000080000 RSI: ffffffff86428417 RDI: 0000000000000003\nRBP: ffffc90003b2f9f0 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000002 R12: ffff88806603c000\nR13: 0000000000000000 R14: ffff8880685b2780 R15: 0000000000000e23\nFS: 00007fdc2deed6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b30a1dff8 CR3: 0000000056b8c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n __dev_direct_xmit+0x58a/0x720 net/core/dev.c:4490\n dev_direct_xmit include/linux/netdevice.h:3181 [inline]\n packet_xmit+0x1e4/0x360 net/packet/af_packet.c:285\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x2700/0x5660 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x488/0x4f0 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2200\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56636",
"url": "https://www.suse.com/security/cve/CVE-2024-56636"
},
{
"category": "external",
"summary": "SUSE Bug 1235520 for CVE-2024-56636",
"url": "https://bugzilla.suse.com/1235520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56636"
},
{
"cve": "CVE-2024-56637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56637"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: Hold module reference while requesting a module\n\nUser space may unload ip_set.ko while it is itself requesting a set type\nbackend module, leading to a kernel crash. The race condition may be\nprovoked by inserting an mdelay() right after the nfnl_unlock() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56637",
"url": "https://www.suse.com/security/cve/CVE-2024-56637"
},
{
"category": "external",
"summary": "SUSE Bug 1235523 for CVE-2024-56637",
"url": "https://bugzilla.suse.com/1235523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n Workqueue: events smc_lgr_terminate_work [smc]\n RIP: 0010:__flush_work+0x19e/0x1b0\n Call Trace:\n ? __wake_up_common+0x7a/0x190\n ? work_busy+0x80/0x80\n __cancel_work_timer+0xe3/0x160\n smc_close_cancel_work+0x1a/0x70 [smc]\n smc_close_active_abort+0x207/0x360 [smc]\n __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n process_one_work+0x19e/0x340\n worker_thread+0x30/0x370\n ? process_one_work+0x340/0x340\n kthread+0x117/0x130\n ? __kthread_cancel_work+0x50/0x50\n ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn-\u003eclose_work is\nflushed before initialization, resulting in WARN_ON(!work-\u003efunc).\n\n__smc_lgr_terminate | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr-\u003econns_all |\n\\- smc_conn_kill |\n \\- smc_close_active_abort |\n \\- smc_close_cancel_work |\n \\- cancel_work_sync |\n \\- __flush_work |\n\t (close_work) |\n\t | smc_close_init\n\t | \\- INIT_WORK(\u0026close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56641",
"url": "https://www.suse.com/security/cve/CVE-2024-56641"
},
{
"category": "external",
"summary": "SUSE Bug 1235526 for CVE-2024-56641",
"url": "https://bugzilla.suse.com/1235526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56641"
},
{
"cve": "CVE-2024-56642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56642"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free of kernel socket in cleanup_bearer().\n\nsyzkaller reported a use-after-free of UDP kernel socket\nin cleanup_bearer() without repro. [0][1]\n\nWhen bearer_disable() calls tipc_udp_disable(), cleanup\nof the UDP kernel socket is deferred by work calling\ncleanup_bearer().\n\ntipc_exit_net() waits for such works to finish by checking\ntipc_net(net)-\u003ewq_count. However, the work decrements the\ncount too early before releasing the kernel socket,\nunblocking cleanup_net() and resulting in use-after-free.\n\nLet\u0027s move the decrement after releasing the socket in\ncleanup_bearer().\n\n[0]:\nref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at\n sk_alloc+0x438/0x608\n inet_create+0x4c8/0xcb0\n __sock_create+0x350/0x6b8\n sock_create_kern+0x58/0x78\n udp_sock_create4+0x68/0x398\n udp_sock_create+0x88/0xc8\n tipc_udp_enable+0x5e8/0x848\n __tipc_nl_bearer_enable+0x84c/0xed8\n tipc_nl_bearer_enable+0x38/0x60\n genl_family_rcv_msg_doit+0x170/0x248\n genl_rcv_msg+0x400/0x5b0\n netlink_rcv_skb+0x1dc/0x398\n genl_rcv+0x44/0x68\n netlink_unicast+0x678/0x8b0\n netlink_sendmsg+0x5e4/0x898\n ____sys_sendmsg+0x500/0x830\n\n[1]:\nBUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline]\nBUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n udp_hashslot include/net/udp.h:85 [inline]\n udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n sk_common_release+0xaf/0x3f0 net/core/sock.c:3820\n inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437\n inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489\n __sock_release net/socket.c:658 [inline]\n sock_release+0xa0/0x210 net/socket.c:686\n cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\n slab_free_hook mm/slub.c:2269 [inline]\n slab_free mm/slub.c:4580 [inline]\n kmem_cache_free+0x207/0xc40 mm/slub.c:4682\n net_free net/core/net_namespace.c:454 [inline]\n cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: events cleanup_bearer",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56642",
"url": "https://www.suse.com/security/cve/CVE-2024-56642"
},
{
"category": "external",
"summary": "SUSE Bug 1235433 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "external",
"summary": "SUSE Bug 1235434 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56642"
},
{
"cve": "CVE-2024-56643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56643"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: Fix memory leak in dccp_feat_change_recv\n\nIf dccp_feat_push_confirm() fails after new value for SP feature was accepted\nwithout reconciliation (\u0027entry == NULL\u0027 branch), memory allocated for that value\nwith dccp_feat_clone_sp_val() is never freed.\n\nHere is the kmemleak stack for this:\n\nunreferenced object 0xffff88801d4ab488 (size 8):\n comm \"syz-executor310\", pid 1127, jiffies 4295085598 (age 41.666s)\n hex dump (first 8 bytes):\n 01 b4 4a 1d 80 88 ff ff ..J.....\n backtrace:\n [\u003c00000000db7cabfe\u003e] kmemdup+0x23/0x50 mm/util.c:128\n [\u003c0000000019b38405\u003e] kmemdup include/linux/string.h:465 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:371 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:367 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_change_recv net/dccp/feat.c:1145 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_parse_options+0x1196/0x2180 net/dccp/feat.c:1416\n [\u003c00000000b1f6d94a\u003e] dccp_parse_options+0xa2a/0x1260 net/dccp/options.c:125\n [\u003c0000000030d7b621\u003e] dccp_rcv_state_process+0x197/0x13d0 net/dccp/input.c:650\n [\u003c000000001f74c72e\u003e] dccp_v4_do_rcv+0xf9/0x1a0 net/dccp/ipv4.c:688\n [\u003c00000000a6c24128\u003e] sk_backlog_rcv include/net/sock.h:1041 [inline]\n [\u003c00000000a6c24128\u003e] __release_sock+0x139/0x3b0 net/core/sock.c:2570\n [\u003c00000000cf1f3a53\u003e] release_sock+0x54/0x1b0 net/core/sock.c:3111\n [\u003c000000008422fa23\u003e] inet_wait_for_connect net/ipv4/af_inet.c:603 [inline]\n [\u003c000000008422fa23\u003e] __inet_stream_connect+0x5d0/0xf70 net/ipv4/af_inet.c:696\n [\u003c0000000015b6f64d\u003e] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:735\n [\u003c0000000010122488\u003e] __sys_connect_file+0x15c/0x1a0 net/socket.c:1865\n [\u003c00000000b4b70023\u003e] __sys_connect+0x165/0x1a0 net/socket.c:1882\n [\u003c00000000f4cb3815\u003e] __do_sys_connect net/socket.c:1892 [inline]\n [\u003c00000000f4cb3815\u003e] __se_sys_connect net/socket.c:1889 [inline]\n [\u003c00000000f4cb3815\u003e] __x64_sys_connect+0x6e/0xb0 net/socket.c:1889\n [\u003c00000000e7b1e839\u003e] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46\n [\u003c0000000055e91434\u003e] entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nClean up the allocated memory in case of dccp_feat_push_confirm() failure\nand bail out with an error reset code.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56643",
"url": "https://www.suse.com/security/cve/CVE-2024-56643"
},
{
"category": "external",
"summary": "SUSE Bug 1235132 for CVE-2024-56643",
"url": "https://bugzilla.suse.com/1235132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56644"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: release expired exception dst cached in socket\n\nDst objects get leaked in ip6_negative_advice() when this function is\nexecuted for an expired IPv6 route located in the exception table. There\nare several conditions that must be fulfilled for the leak to occur:\n* an ICMPv6 packet indicating a change of the MTU for the path is received,\n resulting in an exception dst being created\n* a TCP connection that uses the exception dst for routing packets must\n start timing out so that TCP begins retransmissions\n* after the exception dst expires, the FIB6 garbage collector must not run\n before TCP executes ip6_negative_advice() for the expired exception dst\n\nWhen TCP executes ip6_negative_advice() for an exception dst that has\nexpired and if no other socket holds a reference to the exception dst, the\nrefcount of the exception dst is 2, which corresponds to the increment\nmade by dst_init() and the increment made by the TCP socket for which the\nconnection is timing out. The refcount made by the socket is never\nreleased. The refcount of the dst is decremented in sk_dst_reset() but\nthat decrement is counteracted by a dst_hold() intentionally placed just\nbefore the sk_dst_reset() in ip6_negative_advice(). After\nip6_negative_advice() has finished, there is no other object tied to the\ndst. The socket lost its reference stored in sk_dst_cache and the dst is\nno longer in the exception table. The exception dst becomes a leaked\nobject.\n\nAs a result of this dst leak, an unbalanced refcount is reported for the\nloopback device of a net namespace being destroyed under kernels that do\nnot contain e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"):\nunregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFix the dst leak by removing the dst_hold() in ip6_negative_advice(). The\npatch that introduced the dst_hold() in ip6_negative_advice() was\n92f1655aa2b22 (\"net: fix __dst_negative_advice() race\"). But 92f1655aa2b22\nmerely refactored the code with regards to the dst refcount so the issue\nwas present even before 92f1655aa2b22. The bug was introduced in\n54c1a859efd9f (\"ipv6: Don\u0027t drop cache route entry unless timer actually\nexpired.\") where the expired cached route is deleted and the sk_dst_cache\nmember of the socket is set to NULL by calling dst_negative_advice() but\nthe refcount belonging to the socket is left unbalanced.\n\nThe IPv4 version - ipv4_negative_advice() - is not affected by this bug.\nWhen the TCP connection times out ipv4_negative_advice() merely resets the\nsk_dst_cache of the socket while decrementing the refcount of the\nexception dst.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56644",
"url": "https://www.suse.com/security/cve/CVE-2024-56644"
},
{
"category": "external",
"summary": "SUSE Bug 1235133 for CVE-2024-56644",
"url": "https://bugzilla.suse.com/1235133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: avoid potential out-of-bound access in fill_frame_info()\n\nsyzbot is able to feed a packet with 14 bytes, pretending\nit is a vlan one.\n\nSince fill_frame_info() is relying on skb-\u003emac_len already,\nextend the check to cover this case.\n\nBUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606\n __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x91ae/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4091 [inline]\n slab_alloc_node mm/slub.c:4134 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1323 [inline]\n alloc_skb_with_frags+0xc8/0xd00 net/core/skbuff.c:6612\n sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2881\n packet_alloc_skb net/packet/af_packet.c:2995 [inline]\n packet_snd net/packet/af_packet.c:3089 [inline]\n packet_sendmsg+0x74c6/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56648",
"url": "https://www.suse.com/security/cve/CVE-2024-56648"
},
{
"category": "external",
"summary": "SUSE Bug 1235451 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "external",
"summary": "SUSE Bug 1235452 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56648"
},
{
"cve": "CVE-2024-56649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: enetc: Do not configure preemptible TCs if SIs do not support\n\nBoth ENETC PF and VF drivers share enetc_setup_tc_mqprio() to configure\nMQPRIO. And enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs()\nto configure preemptible TCs. However, only PF is able to configure\npreemptible TCs. Because only PF has related registers, while VF does not\nhave these registers. So for VF, its hw-\u003eport pointer is NULL. Therefore,\nVF will access an invalid pointer when accessing a non-existent register,\nwhich will cause a crash issue. The simplified log is as follows.\n\nroot@ls1028ardb:~# tc qdisc add dev eno0vf0 parent root handle 100: \\\nmqprio num_tc 4 map 0 0 1 1 2 2 3 3 queues 1@0 1@1 1@2 1@3 hw 1\n[ 187.290775] Unable to handle kernel paging request at virtual address 0000000000001f00\n[ 187.424831] pc : enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.430518] lr : enetc_mm_commit_preemptible_tcs+0x30c/0x400\n[ 187.511140] Call trace:\n[ 187.513588] enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.518918] enetc_setup_tc_mqprio+0x180/0x214\n[ 187.523374] enetc_vf_setup_tc+0x1c/0x30\n[ 187.527306] mqprio_enable_offload+0x144/0x178\n[ 187.531766] mqprio_init+0x3ec/0x668\n[ 187.535351] qdisc_create+0x15c/0x488\n[ 187.539023] tc_modify_qdisc+0x398/0x73c\n[ 187.542958] rtnetlink_rcv_msg+0x128/0x378\n[ 187.547064] netlink_rcv_skb+0x60/0x130\n[ 187.550910] rtnetlink_rcv+0x18/0x24\n[ 187.554492] netlink_unicast+0x300/0x36c\n[ 187.558425] netlink_sendmsg+0x1a8/0x420\n[ 187.606759] ---[ end trace 0000000000000000 ]---\n\nIn addition, some PFs also do not support configuring preemptible TCs,\nsuch as eno1 and eno3 on LS1028A. It won\u0027t crash like it does for VFs,\nbut we should prevent these PFs from accessing these unimplemented\nregisters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56649",
"url": "https://www.suse.com/security/cve/CVE-2024-56649"
},
{
"category": "external",
"summary": "SUSE Bug 1235449 for CVE-2024-56649",
"url": "https://bugzilla.suse.com/1235449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56649"
},
{
"cve": "CVE-2024-56650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix LED ID check in led_tg_check()\n\nSyzbot has reported the following BUG detected by KASAN:\n\nBUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70\nRead of size 1 at addr ffff8881022da0c8 by task repro/5879\n...\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x241/0x360\n ? __pfx_dump_stack_lvl+0x10/0x10\n ? __pfx__printk+0x10/0x10\n ? _printk+0xd5/0x120\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n print_report+0x169/0x550\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x45f/0x530\n ? __phys_addr+0xba/0x170\n ? strlen+0x58/0x70\n kasan_report+0x143/0x180\n ? strlen+0x58/0x70\n strlen+0x58/0x70\n kstrdup+0x20/0x80\n led_tg_check+0x18b/0x3c0\n xt_check_target+0x3bb/0xa40\n ? __pfx_xt_check_target+0x10/0x10\n ? stack_depot_save_flags+0x6e4/0x830\n ? nft_target_init+0x174/0xc30\n nft_target_init+0x82d/0xc30\n ? __pfx_nft_target_init+0x10/0x10\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? rcu_is_watching+0x15/0xb0\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? __kmalloc_noprof+0x21a/0x400\n nf_tables_newrule+0x1860/0x2980\n ? __pfx_nf_tables_newrule+0x10/0x10\n ? __nla_parse+0x40/0x60\n nfnetlink_rcv+0x14e5/0x2ab0\n ? __pfx_validate_chain+0x10/0x10\n ? __pfx_nfnetlink_rcv+0x10/0x10\n ? __lock_acquire+0x1384/0x2050\n ? netlink_deliver_tap+0x2e/0x1b0\n ? __pfx_lock_release+0x10/0x10\n ? netlink_deliver_tap+0x2e/0x1b0\n netlink_unicast+0x7f8/0x990\n ? __pfx_netlink_unicast+0x10/0x10\n ? __virt_addr_valid+0x183/0x530\n ? __check_object_size+0x48e/0x900\n netlink_sendmsg+0x8e4/0xcb0\n ? __pfx_netlink_sendmsg+0x10/0x10\n ? aa_sock_msg_perm+0x91/0x160\n ? __pfx_netlink_sendmsg+0x10/0x10\n __sock_sendmsg+0x223/0x270\n ____sys_sendmsg+0x52a/0x7e0\n ? __pfx_____sys_sendmsg+0x10/0x10\n __sys_sendmsg+0x292/0x380\n ? __pfx___sys_sendmsg+0x10/0x10\n ? lockdep_hardirqs_on_prepare+0x43d/0x780\n ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10\n ? exc_page_fault+0x590/0x8c0\n ? do_syscall_64+0xb6/0x230\n do_syscall_64+0xf3/0x230\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n...\n \u003c/TASK\u003e\n\nSince an invalid (without \u0027\\0\u0027 byte at all) byte sequence may be passed\nfrom userspace, add an extra check to ensure that such a sequence is\nrejected as possible ID and so never passed to \u0027kstrdup()\u0027 and further.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56650",
"url": "https://www.suse.com/security/cve/CVE-2024-56650"
},
{
"category": "external",
"summary": "SUSE Bug 1235430 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "external",
"summary": "SUSE Bug 1235431 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: hi311x: hi3110_can_ist(): fix potential use-after-free\n\nThe commit a22bd630cfff (\"can: hi311x: do not report txerr and rxerr\nduring bus-off\") removed the reporting of rxerr and txerr even in case\nof correct operation (i. e. not bus-off).\n\nThe error count information added to the CAN frame after netif_rx() is\na potential use after free, since there is no guarantee that the skb\nis in the same state. It might be freed or reused.\n\nFix the issue by postponing the netif_rx() call in case of txerr and\nrxerr reporting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56651",
"url": "https://www.suse.com/security/cve/CVE-2024-56651"
},
{
"category": "external",
"summary": "SUSE Bug 1235528 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "external",
"summary": "SUSE Bug 1236570 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1236570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56651"
},
{
"cve": "CVE-2024-56654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56654"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating\n\nThe usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is\nnot safe since for the most part entries fetched this way shall be\ntreated as rcu_dereference:\n\n\tNote that the value returned by rcu_dereference() is valid\n\tonly within the enclosing RCU read-side critical section [1]_.\n\tFor example, the following is **not** legal::\n\n\t\trcu_read_lock();\n\t\tp = rcu_dereference(head.next);\n\t\trcu_read_unlock();\n\t\tx = p-\u003eaddress;\t/* BUG!!! */\n\t\trcu_read_lock();\n\t\ty = p-\u003edata;\t/* BUG!!! */\n\t\trcu_read_unlock();",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56654",
"url": "https://www.suse.com/security/cve/CVE-2024-56654"
},
{
"category": "external",
"summary": "SUSE Bug 1235532 for CVE-2024-56654",
"url": "https://bugzilla.suse.com/1235532"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56654"
},
{
"cve": "CVE-2024-56656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips\n\nThe 5760X (P7) chip\u0027s HW GRO/LRO interface is very similar to that of\nthe previous generation (5750X or P5). However, the aggregation ID\nfields in the completion structures on P7 have been redefined from\n16 bits to 12 bits. The freed up 4 bits are redefined for part of the\nmetadata such as the VLAN ID. The aggregation ID mask was not modified\nwhen adding support for P7 chips. Including the extra 4 bits for the\naggregation ID can potentially cause the driver to store or fetch the\npacket header of GRO/LRO packets in the wrong TPA buffer. It may hit\nthe BUG() condition in __skb_pull() because the SKB contains no valid\npacket header:\n\nkernel BUG at include/linux/skbuff.h:2766!\nOops: invalid opcode: 0000 1 PREEMPT SMP NOPTI\nCPU: 4 UID: 0 PID: 0 Comm: swapper/4 Kdump: loaded Tainted: G OE 6.12.0-rc2+ #7\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: Dell Inc. PowerEdge R760/0VRV9X, BIOS 1.0.1 12/27/2022\nRIP: 0010:eth_type_trans+0xda/0x140\nCode: 80 00 00 00 eb c1 8b 47 70 2b 47 74 48 8b 97 d0 00 00 00 83 f8 01 7e 1b 48 85 d2 74 06 66 83 3a ff 74 09 b8 00 04 00 00 eb a5 \u003c0f\u003e 0b b8 00 01 00 00 eb 9c 48 85 ff 74 eb 31 f6 b9 02 00 00 00 48\nRSP: 0018:ff615003803fcc28 EFLAGS: 00010283\nRAX: 00000000000022d2 RBX: 0000000000000003 RCX: ff2e8c25da334040\nRDX: 0000000000000040 RSI: ff2e8c25c1ce8000 RDI: ff2e8c25869f9000\nRBP: ff2e8c258c31c000 R08: ff2e8c25da334000 R09: 0000000000000001\nR10: ff2e8c25da3342c0 R11: ff2e8c25c1ce89c0 R12: ff2e8c258e0990b0\nR13: ff2e8c25bb120000 R14: ff2e8c25c1ce89c0 R15: ff2e8c25869f9000\nFS: 0000000000000000(0000) GS:ff2e8c34be300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055f05317e4c8 CR3: 000000108bac6006 CR4: 0000000000773ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n ? die+0x33/0x90\n ? do_trap+0xd9/0x100\n ? eth_type_trans+0xda/0x140\n ? do_error_trap+0x65/0x80\n ? eth_type_trans+0xda/0x140\n ? exc_invalid_op+0x4e/0x70\n ? eth_type_trans+0xda/0x140\n ? asm_exc_invalid_op+0x16/0x20\n ? eth_type_trans+0xda/0x140\n bnxt_tpa_end+0x10b/0x6b0 [bnxt_en]\n ? bnxt_tpa_start+0x195/0x320 [bnxt_en]\n bnxt_rx_pkt+0x902/0xd90 [bnxt_en]\n ? __bnxt_tx_int.constprop.0+0x89/0x300 [bnxt_en]\n ? kmem_cache_free+0x343/0x440\n ? __bnxt_tx_int.constprop.0+0x24f/0x300 [bnxt_en]\n __bnxt_poll_work+0x193/0x370 [bnxt_en]\n bnxt_poll_p5+0x9a/0x300 [bnxt_en]\n ? try_to_wake_up+0x209/0x670\n __napi_poll+0x29/0x1b0\n\nFix it by redefining the aggregation ID mask for P5_PLUS chips to be\n12 bits. This will work because the maximum aggregation ID is less\nthan 4096 on all P5_PLUS chips.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56656",
"url": "https://www.suse.com/security/cve/CVE-2024-56656"
},
{
"category": "external",
"summary": "SUSE Bug 1235444 for CVE-2024-56656",
"url": "https://bugzilla.suse.com/1235444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56656"
},
{
"cve": "CVE-2024-56659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56659"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lapb: increase LAPB_HEADER_LEN\n\nIt is unclear if net/lapb code is supposed to be ready for 8021q.\n\nWe can at least avoid crashes like the following :\n\nskbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2\n------------[ cut here ]------------\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc90002ddf638 EFLAGS: 00010282\nRAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600\nRDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000\nRBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60\nR10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140\nR13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016\nFS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n nr_header+0x36/0x320 net/netrom/nr_dev.c:69\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n vlan_dev_hard_header+0x359/0x480 net/8021q/vlan_dev.c:83\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n lapbeth_data_transmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257\n lapb_data_transmit+0x91/0xb0 net/lapb/lapb_iface.c:447\n lapb_transmit_buffer+0x168/0x1f0 net/lapb/lapb_out.c:149\n lapb_establish_data_link+0x84/0xd0\n lapb_device_event+0x4e0/0x670\n notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93\n __dev_notify_flags+0x207/0x400\n dev_change_flags+0xf0/0x1a0 net/core/dev.c:8922\n devinet_ioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188\n inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1003\n sock_do_ioctl+0x158/0x460 net/socket.c:1227\n sock_ioctl+0x626/0x8e0 net/socket.c:1346\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56659",
"url": "https://www.suse.com/security/cve/CVE-2024-56659"
},
{
"category": "external",
"summary": "SUSE Bug 1235439 for CVE-2024-56659",
"url": "https://bugzilla.suse.com/1235439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56659"
},
{
"cve": "CVE-2024-56660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: DR, prevent potential error pointer dereference\n\nThe dr_domain_add_vport_cap() function generally returns NULL on error\nbut sometimes we want it to return ERR_PTR(-EBUSY) so the caller can\nretry. The problem here is that \"ret\" can be either -EBUSY or -ENOMEM\nand if it\u0027s and -ENOMEM then the error pointer is propogated back and\neventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56660",
"url": "https://www.suse.com/security/cve/CVE-2024-56660"
},
{
"category": "external",
"summary": "SUSE Bug 1235437 for CVE-2024-56660",
"url": "https://bugzilla.suse.com/1235437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56660"
},
{
"cve": "CVE-2024-56661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix NULL deref in cleanup_bearer()\n\nsyzbot found [1] that after blamed commit, ub-\u003eubsock-\u003esk\nwas NULL when attempting the atomic_dec() :\n\natomic_dec(\u0026tipc_net(sock_net(ub-\u003eubsock-\u003esk))-\u003ewq_count);\n\nFix this by caching the tipc_net pointer.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\nCPU: 0 UID: 0 PID: 5896 Comm: kworker/0:3 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events cleanup_bearer\n RIP: 0010:read_pnet include/net/net_namespace.h:387 [inline]\n RIP: 0010:sock_net include/net/sock.h:655 [inline]\n RIP: 0010:cleanup_bearer+0x1f7/0x280 net/tipc/udp_media.c:820\nCode: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c f7 99 f6 48 8b 1b 48 83 c3 30 e8 f0 e4 60 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 80 3c 28 00 74 08 48 89 df e8 1a f7 99 f6 49 83 c7 e8 48 8b 1b\nRSP: 0018:ffffc9000410fb70 EFLAGS: 00010206\nRAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88802fe45a00\nRDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000410f900\nRBP: ffff88807e1f0908 R08: ffffc9000410f907 R09: 1ffff92000821f20\nR10: dffffc0000000000 R11: fffff52000821f21 R12: ffff888031d19980\nR13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e1f0918\nFS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556ca050b000 CR3: 0000000031c0c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56661",
"url": "https://www.suse.com/security/cve/CVE-2024-56661"
},
{
"category": "external",
"summary": "SUSE Bug 1234931 for CVE-2024-56661",
"url": "https://bugzilla.suse.com/1234931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl\n\nFix an issue detected by syzbot with KASAN:\n\nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/\ncore.c:416 [inline]\nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0\ndrivers/acpi/nfit/core.c:459\n\nThe issue occurs in cmd_to_func when the call_pkg-\u003end_reserved2\narray is accessed without verifying that call_pkg points to a buffer\nthat is appropriately sized as a struct nd_cmd_pkg. This can lead\nto out-of-bounds access and undefined behavior if the buffer does not\nhave sufficient space.\n\nTo address this, a check was added in acpi_nfit_ctl() to ensure that\nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)\nbefore accessing it. This ensures safe access to the members of\ncall_pkg, including the nd_reserved2 array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56662",
"url": "https://www.suse.com/security/cve/CVE-2024-56662"
},
{
"category": "external",
"summary": "SUSE Bug 1235533 for CVE-2024-56662",
"url": "https://bugzilla.suse.com/1235533"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one\n\nSince the netlink attribute range validation provides inclusive\nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be\nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.\n\nOne crash stack for demonstration:\n==================================================================\nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508\n\nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106\n print_report+0xe0/0x750 mm/kasan/report.c:398\n kasan_report+0x139/0x170 mm/kasan/report.c:495\n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189\n memcpy+0x25/0x60 mm/kasan/shadow.c:65\n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]\n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453\n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756\n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]\n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850\n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508\n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861\n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]\n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352\n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874\n sock_sendmsg_nosec net/socket.c:716 [inline]\n __sock_sendmsg net/socket.c:728 [inline]\n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499\n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553\n __sys_sendmsg net/socket.c:2582 [inline]\n __do_sys_sendmsg net/socket.c:2591 [inline]\n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUpdate the policy to ensure correct validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56663",
"url": "https://www.suse.com/security/cve/CVE-2024-56663"
},
{
"category": "external",
"summary": "SUSE Bug 1235454 for CVE-2024-56663",
"url": "https://bugzilla.suse.com/1235454"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56663"
},
{
"cve": "CVE-2024-56664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix race between element replace and close()\n\nElement replace (with a socket different from the one stored) may race\nwith socket\u0027s close() link popping \u0026 unlinking. __sock_map_delete()\nunconditionally unrefs the (wrong) element:\n\n// set map[0] = s0\nmap_update_elem(map, 0, s0)\n\n// drop fd of s0\nclose(s0)\n sock_map_close()\n lock_sock(sk) (s0!)\n sock_map_remove_links(sk)\n link = sk_psock_link_pop()\n sock_map_unlink(sk, link)\n sock_map_delete_from_link\n // replace map[0] with s1\n map_update_elem(map, 0, s1)\n sock_map_update_elem\n (s1!) lock_sock(sk)\n sock_map_update_common\n psock = sk_psock(sk)\n spin_lock(\u0026stab-\u003elock)\n osk = stab-\u003esks[idx]\n sock_map_add_link(..., \u0026stab-\u003esks[idx])\n sock_map_unref(osk, \u0026stab-\u003esks[idx])\n psock = sk_psock(osk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test(\u0026psock))\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n unlock_sock(sk)\n __sock_map_delete\n spin_lock(\u0026stab-\u003elock)\n sk = *psk // s1 replaced s0; sk == s1\n if (!sk_test || sk_test == sk) // sk_test (s0) != sk (s1); no branch\n sk = xchg(psk, NULL)\n if (sk)\n sock_map_unref(sk, psk) // unref s1; sks[idx] will dangle\n psock = sk_psock(sk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test())\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n release_sock(sk)\n\nThen close(map) enqueues bpf_map_free_deferred, which finally calls\nsock_map_free(). This results in some refcount_t warnings along with\na KASAN splat [1].\n\nFix __sock_map_delete(), do not allow sock_map_unref() on elements that\nmay have been replaced.\n\n[1]:\nBUG: KASAN: slab-use-after-free in sock_map_free+0x10e/0x330\nWrite of size 4 at addr ffff88811f5b9100 by task kworker/u64:12/1063\n\nCPU: 14 UID: 0 PID: 1063 Comm: kworker/u64:12 Not tainted 6.12.0+ #125\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014\nWorkqueue: events_unbound bpf_map_free_deferred\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x68/0x90\n print_report+0x174/0x4f6\n kasan_report+0xb9/0x190\n kasan_check_range+0x10f/0x1e0\n sock_map_free+0x10e/0x330\n bpf_map_free_deferred+0x173/0x320\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 1202:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n __kasan_slab_alloc+0x85/0x90\n kmem_cache_alloc_noprof+0x131/0x450\n sk_prot_alloc+0x5b/0x220\n sk_alloc+0x2c/0x870\n unix_create1+0x88/0x8a0\n unix_create+0xc5/0x180\n __sock_create+0x241/0x650\n __sys_socketpair+0x1ce/0x420\n __x64_sys_socketpair+0x92/0x100\n do_syscall_64+0x93/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 46:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x37/0x60\n __kasan_slab_free+0x4b/0x70\n kmem_cache_free+0x1a1/0x590\n __sk_destruct+0x388/0x5a0\n sk_psock_destroy+0x73e/0xa50\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nThe bu\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56664",
"url": "https://www.suse.com/security/cve/CVE-2024-56664"
},
{
"category": "external",
"summary": "SUSE Bug 1235249 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "external",
"summary": "SUSE Bug 1235250 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56664"
},
{
"cve": "CVE-2024-56665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56665"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog\n\nSyzbot reported [1] crash that happens for following tracing scenario:\n\n - create tracepoint perf event with attr.inherit=1, attach it to the\n process and set bpf program to it\n - attached process forks -\u003e chid creates inherited event\n\n the new child event shares the parent\u0027s bpf program and tp_event\n (hence prog_array) which is global for tracepoint\n\n - exit both process and its child -\u003e release both events\n - first perf_event_detach_bpf_prog call will release tp_event-\u003eprog_array\n and second perf_event_detach_bpf_prog will crash, because\n tp_event-\u003eprog_array is NULL\n\nThe fix makes sure the perf_event_detach_bpf_prog checks prog_array\nis valid before it tries to remove the bpf program from it.\n\n[1] https://lore.kernel.org/bpf/Z1MR6dCIKajNS6nU@krava/T/#m91dbf0688221ec7a7fc95e896a7ef9ff93b0b8ad",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56665",
"url": "https://www.suse.com/security/cve/CVE-2024-56665"
},
{
"category": "external",
"summary": "SUSE Bug 1235489 for CVE-2024-56665",
"url": "https://bugzilla.suse.com/1235489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56665"
},
{
"cve": "CVE-2024-56670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer\n\nConsidering that in some extreme cases,\nwhen u_serial driver is accessed by multiple threads,\nThread A is executing the open operation and calling the gs_open,\nThread B is executing the disconnect operation and calling the\ngserial_disconnect function,The port-\u003eport_usb pointer will be set to NULL.\n\nE.g.\n Thread A Thread B\n gs_open() gadget_unbind_driver()\n gs_start_io() composite_disconnect()\n gs_start_rx() gserial_disconnect()\n ... ...\n spin_unlock(\u0026port-\u003eport_lock)\n status = usb_ep_queue() spin_lock(\u0026port-\u003eport_lock)\n spin_lock(\u0026port-\u003eport_lock) port-\u003eport_usb = NULL\n gs_free_requests(port-\u003eport_usb-\u003ein) spin_unlock(\u0026port-\u003eport_lock)\n Crash\n\nThis causes thread A to access a null pointer (port-\u003eport_usb is null)\nwhen calling the gs_free_requests function, causing a crash.\n\nIf port_usb is NULL, the release request will be skipped as it\nwill be done by gserial_disconnect.\n\nSo add a null pointer check to gs_start_io before attempting\nto access the value of the pointer port-\u003eport_usb.\n\nCall trace:\n gs_start_io+0x164/0x25c\n gs_open+0x108/0x13c\n tty_open+0x314/0x638\n chrdev_open+0x1b8/0x258\n do_dentry_open+0x2c4/0x700\n vfs_open+0x2c/0x3c\n path_openat+0xa64/0xc60\n do_filp_open+0xb8/0x164\n do_sys_openat2+0x84/0xf0\n __arm64_sys_openat+0x70/0x9c\n invoke_syscall+0x58/0x114\n el0_svc_common+0x80/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x38/0x68",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56670",
"url": "https://www.suse.com/security/cve/CVE-2024-56670"
},
{
"category": "external",
"summary": "SUSE Bug 1235488 for CVE-2024-56670",
"url": "https://bugzilla.suse.com/1235488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56670"
},
{
"cve": "CVE-2024-56672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56672"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: Fix UAF in blkcg_unpin_online()\n\nblkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To\nwalk up, it uses blkcg_parent(blkcg) but it was calling that after\nblkcg_destroy_blkgs(blkcg) which could free the blkcg, leading to the\nfollowing UAF:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in blkcg_unpin_online+0x15a/0x270\n Read of size 8 at addr ffff8881057678c0 by task kworker/9:1/117\n\n CPU: 9 UID: 0 PID: 117 Comm: kworker/9:1 Not tainted 6.13.0-rc1-work-00182-gb8f52214c61a-dirty #48\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 02/02/2022\n Workqueue: cgwb_release cgwb_release_workfn\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x27/0x80\n print_report+0x151/0x710\n kasan_report+0xc0/0x100\n blkcg_unpin_online+0x15a/0x270\n cgwb_release_workfn+0x194/0x480\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n ...\n Freed by task 1944:\n kasan_save_track+0x2b/0x70\n kasan_save_free_info+0x3c/0x50\n __kasan_slab_free+0x33/0x50\n kfree+0x10c/0x330\n css_free_rwork_fn+0xe6/0xb30\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n\nNote that the UAF is not easy to trigger as the free path is indirected\nbehind a couple RCU grace periods and a work item execution. I could only\ntrigger it with artifical msleep() injected in blkcg_unpin_online().\n\nFix it by reading the parent pointer before destroying the blkcg\u0027s blkg\u0027s.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56672",
"url": "https://www.suse.com/security/cve/CVE-2024-56672"
},
{
"category": "external",
"summary": "SUSE Bug 1235534 for CVE-2024-56672",
"url": "https://bugzilla.suse.com/1235534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56672"
},
{
"cve": "CVE-2024-56675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors\n\nUprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU\nprotection. But it is possible to attach a non-sleepable BPF program to a\nuprobe, and non-sleepable BPF programs are freed via normal RCU (see\n__bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal\nRCU grace period does not imply a tasks-trace-RCU grace period.\n\nFix it by explicitly waiting for a tasks-trace-RCU grace period after\nremoving the attachment of a bpf_prog to a perf_event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56675",
"url": "https://www.suse.com/security/cve/CVE-2024-56675"
},
{
"category": "external",
"summary": "SUSE Bug 1235555 for CVE-2024-56675",
"url": "https://bugzilla.suse.com/1235555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56675"
},
{
"cve": "CVE-2024-56677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56677"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()\n\nDuring early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE,\nsince pageblock_order is still zero and it gets initialized\nlater during initmem_init() e.g.\nsetup_arch() -\u003e initmem_init() -\u003e sparse_init() -\u003e set_pageblock_order()\n\nOne such use case where this causes issue is -\nearly_setup() -\u003e early_init_devtree() -\u003e fadump_reserve_mem() -\u003e fadump_cma_init()\n\nThis causes CMA memory alignment check to be bypassed in\ncma_init_reserved_mem(). Then later cma_activate_area() can hit\na VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1)) if the reserved memory\narea was not pageblock_order aligned.\n\nFix it by moving the fadump_cma_init() after initmem_init(),\nwhere other such cma reservations also gets called.\n\n\u003cstack trace\u003e\n==============\npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10010\nflags: 0x13ffff800000000(node=1|zone=0|lastcpupid=0x7ffff) CMA\nraw: 013ffff800000000 5deadbeef0000100 5deadbeef0000122 0000000000000000\nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1))\n------------[ cut here ]------------\nkernel BUG at mm/page_alloc.c:778!\n\nCall Trace:\n__free_one_page+0x57c/0x7b0 (unreliable)\nfree_pcppages_bulk+0x1a8/0x2c8\nfree_unref_page_commit+0x3d4/0x4e4\nfree_unref_page+0x458/0x6d0\ninit_cma_reserved_pageblock+0x114/0x198\ncma_init_reserved_areas+0x270/0x3e0\ndo_one_initcall+0x80/0x2f8\nkernel_init_freeable+0x33c/0x530\nkernel_init+0x34/0x26c\nret_from_kernel_user_thread+0x14/0x1c",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56677",
"url": "https://www.suse.com/security/cve/CVE-2024-56677"
},
{
"category": "external",
"summary": "SUSE Bug 1235494 for CVE-2024-56677",
"url": "https://bugzilla.suse.com/1235494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56677"
},
{
"cve": "CVE-2024-56678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/mm/fault: Fix kfence page fault reporting\n\ncopy_from_kernel_nofault() can be called when doing read of /proc/kcore.\n/proc/kcore can have some unmapped kfence objects which when read via\ncopy_from_kernel_nofault() can cause page faults. Since *_nofault()\nfunctions define their own fixup table for handling fault, use that\ninstead of asking kfence to handle such faults.\n\nHence we search the exception tables for the nip which generated the\nfault. If there is an entry then we let the fixup table handler handle the\npage fault by returning an error from within ___do_page_fault().\n\nThis can be easily triggered if someone tries to do dd from /proc/kcore.\neg. dd if=/proc/kcore of=/dev/null bs=1M\n\nSome example false negatives:\n\n ===============================\n BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0\n Invalid read at 0xc0000000fdff0000:\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec\n\n BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0\n Use-after-free read at 0xc0000000fe050000 (in kfence-#2):\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56678",
"url": "https://www.suse.com/security/cve/CVE-2024-56678"
},
{
"category": "external",
"summary": "SUSE Bug 1235495 for CVE-2024-56678",
"url": "https://bugzilla.suse.com/1235495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56678"
},
{
"cve": "CVE-2024-56679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56679"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56679",
"url": "https://www.suse.com/security/cve/CVE-2024-56679"
},
{
"category": "external",
"summary": "SUSE Bug 1235498 for CVE-2024-56679",
"url": "https://bugzilla.suse.com/1235498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56679"
},
{
"cve": "CVE-2024-56681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: bcm - add error check in the ahash_hmac_init function\n\nThe ahash_init functions may return fails. The ahash_hmac_init should\nnot return ok when ahash_init returns error. For an example, ahash_init\nwill return -ENOMEM when allocation memory is error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56681",
"url": "https://www.suse.com/security/cve/CVE-2024-56681"
},
{
"category": "external",
"summary": "SUSE Bug 1235557 for CVE-2024-56681",
"url": "https://bugzilla.suse.com/1235557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56683"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hdmi: Avoid hang with debug registers when suspended\n\nTrying to read /sys/kernel/debug/dri/1/hdmi1_regs\nwhen the hdmi is disconnected results in a fatal system hang.\n\nThis is due to the pm suspend code disabling the dvp clock.\nThat is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG,\nwhich results in accesses hanging AXI bus.\n\nProtect against this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56683",
"url": "https://www.suse.com/security/cve/CVE-2024-56683"
},
{
"category": "external",
"summary": "SUSE Bug 1235497 for CVE-2024-56683",
"url": "https://bugzilla.suse.com/1235497"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56683"
},
{
"cve": "CVE-2024-56687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: musb: Fix hardware lockup on first Rx endpoint request\n\nThere is a possibility that a request\u0027s callback could be invoked from\nusb_ep_queue() (call trace below, supplemented with missing calls):\n\nreq-\u003ecomplete from usb_gadget_giveback_request\n\t(drivers/usb/gadget/udc/core.c:999)\nusb_gadget_giveback_request from musb_g_giveback\n\t(drivers/usb/musb/musb_gadget.c:147)\nmusb_g_giveback from rxstate\n\t(drivers/usb/musb/musb_gadget.c:784)\nrxstate from musb_ep_restart\n\t(drivers/usb/musb/musb_gadget.c:1169)\nmusb_ep_restart from musb_ep_restart_resume_work\n\t(drivers/usb/musb/musb_gadget.c:1176)\nmusb_ep_restart_resume_work from musb_queue_resume_work\n\t(drivers/usb/musb/musb_core.c:2279)\nmusb_queue_resume_work from musb_gadget_queue\n\t(drivers/usb/musb/musb_gadget.c:1241)\nmusb_gadget_queue from usb_ep_queue\n\t(drivers/usb/gadget/udc/core.c:300)\n\nAccording to the docstring of usb_ep_queue(), this should not happen:\n\n\"Note that @req\u0027s -\u003ecomplete() callback must never be called from within\nusb_ep_queue() as that can create deadlock situations.\"\n\nIn fact, a hardware lockup might occur in the following sequence:\n\n1. The gadget is initialized using musb_gadget_enable().\n2. Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an\n interrupt.\n3. If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an\n empty queue (next_request() returns NULL). The interrupt flag has\n already been cleared by the glue layer handler, but the RXPKTRDY flag\n remains set.\n4. The first request is enqueued using usb_ep_queue(), leading to the call\n of req-\u003ecomplete(), as shown in the call trace above.\n5. If the callback enables IRQs and another packet is waiting, step (3)\n repeats. The request queue is empty because usb_g_giveback() removes the\n request before invoking the callback.\n6. The endpoint remains locked up, as the interrupt triggered by hardware\n setting the RXPKTRDY flag has been handled, but the flag itself remains\n set.\n\nFor this scenario to occur, it is only necessary for IRQs to be enabled at\nsome point during the complete callback. This happens with the USB Ethernet\ngadget, whose rx_complete() callback calls netif_rx(). If called in the\ntask context, netif_rx() disables the bottom halves (BHs). When the BHs are\nre-enabled, IRQs are also enabled to allow soft IRQs to be processed. The\ngadget itself is initialized at module load (or at boot if built-in), but\nthe first request is enqueued when the network interface is brought up,\ntriggering rx_complete() in the task context via ioctl(). If a packet\narrives while the interface is down, it can prevent the interface from\nreceiving any further packets from the USB host.\n\nThe situation is quite complicated with many parties involved. This\nparticular issue can be resolved in several possible ways:\n\n1. Ensure that callbacks never enable IRQs. This would be difficult to\n enforce, as discovering how netif_rx() interacts with interrupts was\n already quite challenging and u_ether is not the only function driver.\n Similar \"bugs\" could be hidden in other drivers as well.\n2. Disable MUSB interrupts in musb_g_giveback() before calling the callback\n and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(),\n for example). This would ensure that MUSB interrupts are not handled\n during the callback, even if IRQs are enabled. In fact, it would allow\n IRQs to be enabled when releasing the lock. However, this feels like an\n inelegant hack.\n3. Modify the interrupt handler to clear the RXPKTRDY flag if the request\n queue is empty. While this approach also feels like a hack, it wastes\n CPU time by attempting to handle incoming packets when the software is\n not ready to process them.\n4. Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart().\n This ensures that the hardware can receive packets when there is at\n least one request in the queue. Once I\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56687",
"url": "https://www.suse.com/security/cve/CVE-2024-56687"
},
{
"category": "external",
"summary": "SUSE Bug 1235537 for CVE-2024-56687",
"url": "https://bugzilla.suse.com/1235537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56687"
},
{
"cve": "CVE-2024-56688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56688"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport\n\nSince transport-\u003esock has been set to NULL during reset transport,\nXPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the\nxs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request()\nto dereference the transport-\u003esock that has been set to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56688",
"url": "https://www.suse.com/security/cve/CVE-2024-56688"
},
{
"category": "external",
"summary": "SUSE Bug 1235538 for CVE-2024-56688",
"url": "https://bugzilla.suse.com/1235538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56688"
},
{
"cve": "CVE-2024-56690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY\n\nSince commit 8f4f68e788c3 (\"crypto: pcrypt - Fix hungtask for\nPADATA_RESET\"), the pcrypt encryption and decryption operations return\n-EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is\ngenerated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns\n-EAGAIN, the unnecessary panic will occur when panic_on_warn set 1.\nFix this issue by calling crypto layer directly without parallelization\nin that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56690",
"url": "https://www.suse.com/security/cve/CVE-2024-56690"
},
{
"category": "external",
"summary": "SUSE Bug 1235428 for CVE-2024-56690",
"url": "https://bugzilla.suse.com/1235428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56690"
},
{
"cve": "CVE-2024-56691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56691"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56691",
"url": "https://www.suse.com/security/cve/CVE-2024-56691"
},
{
"category": "external",
"summary": "SUSE Bug 1235425 for CVE-2024-56691",
"url": "https://bugzilla.suse.com/1235425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56691"
},
{
"cve": "CVE-2024-56693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56693"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbrd: defer automatic disk creation until module initialization succeeds\n\nMy colleague Wupeng found the following problems during fault injection:\n\nBUG: unable to handle page fault for address: fffffbfff809d073\nPGD 6e648067 P4D 123ec8067 PUD 123ec4067 PMD 100e38067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nCPU: 5 UID: 0 PID: 755 Comm: modprobe Not tainted 6.12.0-rc3+ #17\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:__asan_load8+0x4c/0xa0\n...\nCall Trace:\n \u003cTASK\u003e\n blkdev_put_whole+0x41/0x70\n bdev_release+0x1a3/0x250\n blkdev_release+0x11/0x20\n __fput+0x1d7/0x4a0\n task_work_run+0xfc/0x180\n syscall_exit_to_user_mode+0x1de/0x1f0\n do_syscall_64+0x6b/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nloop_init() is calling loop_add() after __register_blkdev() succeeds and\nis ignoring disk_add() failure from loop_add(), for loop_add() failure\nis not fatal and successfully created disks are already visible to\nbdev_open().\n\nbrd_init() is currently calling brd_alloc() before __register_blkdev()\nsucceeds and is releasing successfully created disks when brd_init()\nreturns an error. This can cause UAF for the latter two case:\n\ncase 1:\n T1:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n add_disk\n disk_scan_partitions\n bdev_file_open_by_dev // alloc file\n fput // won\u0027t free until back to userspace\n brd_alloc(1) // failed since mem alloc error inject\n // error path for modprobe will release code segment\n // back to userspace\n __fput\n blkdev_release\n bdev_release\n blkdev_put_whole\n bdev-\u003ebd_disk-\u003efops-\u003erelease // fops is freed now, UAF!\n\ncase 2:\n T1: T2:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n open(/dev/ram0)\n brd_alloc(1) // fail\n // error path for modprobe\n\n close(/dev/ram0)\n ...\n /* UAF! */\n bdev-\u003ebd_disk-\u003efops-\u003erelease\n\nFix this problem by following what loop_init() does. Besides,\nreintroduce brd_devices_mutex to help serialize modifications to\nbrd_list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56693",
"url": "https://www.suse.com/security/cve/CVE-2024-56693"
},
{
"category": "external",
"summary": "SUSE Bug 1235418 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "external",
"summary": "SUSE Bug 1235419 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56693"
},
{
"cve": "CVE-2024-56694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix recursive lock when verdict program return SK_PASS\n\nWhen the stream_verdict program returns SK_PASS, it places the received skb\ninto its own receive queue, but a recursive lock eventually occurs, leading\nto an operating system deadlock. This issue has been present since v6.9.\n\n\u0027\u0027\u0027\nsk_psock_strp_data_ready\n write_lock_bh(\u0026sk-\u003esk_callback_lock)\n strp_data_ready\n strp_read_sock\n read_sock -\u003e tcp_read_sock\n strp_recv\n cb.rcv_msg -\u003e sk_psock_strp_read\n # now stream_verdict return SK_PASS without peer sock assign\n __SK_PASS = sk_psock_map_verd(SK_PASS, NULL)\n sk_psock_verdict_apply\n sk_psock_skb_ingress_self\n sk_psock_skb_ingress_enqueue\n sk_psock_data_ready\n read_lock_bh(\u0026sk-\u003esk_callback_lock) \u003c= dead lock\n\n\u0027\u0027\u0027\n\nThis topic has been discussed before, but it has not been fixed.\nPrevious discussion:\nhttps://lore.kernel.org/all/6684a5864ec86_403d20898@john.notmuch",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56694",
"url": "https://www.suse.com/security/cve/CVE-2024-56694"
},
{
"category": "external",
"summary": "SUSE Bug 1235412 for CVE-2024-56694",
"url": "https://bugzilla.suse.com/1235412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56694"
},
{
"cve": "CVE-2024-56698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56698"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Fix looping of queued SG entries\n\nThe dwc3_request-\u003enum_queued_sgs is decremented on completion. If a\npartially completed request is handled, then the\ndwc3_request-\u003enum_queued_sgs no longer reflects the total number of\nnum_queued_sgs (it would be cleared).\n\nCorrectly check the number of request SG entries remained to be prepare\nand queued. Failure to do this may cause null pointer dereference when\naccessing non-existent SG entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56698",
"url": "https://www.suse.com/security/cve/CVE-2024-56698"
},
{
"category": "external",
"summary": "SUSE Bug 1235491 for CVE-2024-56698",
"url": "https://bugzilla.suse.com/1235491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56698"
},
{
"cve": "CVE-2024-56700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56700"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: wl128x: Fix atomicity violation in fmc_send_cmd()\n\nAtomicity violation occurs when the fmc_send_cmd() function is executed\nsimultaneously with the modification of the fmdev-\u003eresp_skb value.\nConsider a scenario where, after passing the validity check within the\nfunction, a non-null fmdev-\u003eresp_skb variable is assigned a null value.\nThis results in an invalid fmdev-\u003eresp_skb variable passing the validity\ncheck. As seen in the later part of the function, skb = fmdev-\u003eresp_skb;\nwhen the invalid fmdev-\u003eresp_skb passes the check, a null pointer\ndereference error may occur at line 478, evt_hdr = (void *)skb-\u003edata;\n\nTo address this issue, it is recommended to include the validity check of\nfmdev-\u003eresp_skb within the locked section of the function. This\nmodification ensures that the value of fmdev-\u003eresp_skb does not change\nduring the validation process, thereby maintaining its validity.\n\nThis possible bug is found by an experimental static analysis tool\ndeveloped by our team. This tool analyzes the locking APIs\nto extract function pairs that can be concurrently executed, and then\nanalyzes the instructions in the paired functions to identify possible\nconcurrency bugs including data races and atomicity violations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56700",
"url": "https://www.suse.com/security/cve/CVE-2024-56700"
},
{
"category": "external",
"summary": "SUSE Bug 1235500 for CVE-2024-56700",
"url": "https://bugzilla.suse.com/1235500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix dtl_access_lock to be a rw_semaphore\n\nThe dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because\nthe code calls kmalloc() while holding it, which can sleep:\n\n # echo 1 \u003e /proc/powerpc/vcpudispatch_stats\n BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 199, name: sh\n preempt_count: 1, expected: 0\n 3 locks held by sh/199:\n #0: c00000000a0743f8 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x324/0x438\n #1: c0000000028c7058 (dtl_enable_mutex){+.+.}-{3:3}, at: vcpudispatch_stats_write+0xd4/0x5f4\n #2: c0000000028c70b8 (dtl_access_lock){+.+.}-{2:2}, at: vcpudispatch_stats_write+0x220/0x5f4\n CPU: 0 PID: 199 Comm: sh Not tainted 6.10.0-rc4 #152\n Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1202 0xf000005 of:SLOF,HEAD hv:linux,kvm pSeries\n Call Trace:\n dump_stack_lvl+0x130/0x148 (unreliable)\n __might_resched+0x174/0x410\n kmem_cache_alloc_noprof+0x340/0x3d0\n alloc_dtl_buffers+0x124/0x1ac\n vcpudispatch_stats_write+0x2a8/0x5f4\n proc_reg_write+0xf4/0x150\n vfs_write+0xfc/0x438\n ksys_write+0x88/0x148\n system_call_exception+0x1c4/0x5a0\n system_call_common+0xf4/0x258",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56701",
"url": "https://www.suse.com/security/cve/CVE-2024-56701"
},
{
"category": "external",
"summary": "SUSE Bug 1235496 for CVE-2024-56701",
"url": "https://bugzilla.suse.com/1235496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56701"
},
{
"cve": "CVE-2024-56704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56704"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p/xen: fix release of IRQ\n\nKernel logs indicate an IRQ was double-freed.\n\nPass correct device ID during IRQ release.\n\n[Dominique: remove confusing variable reset to 0]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56704",
"url": "https://www.suse.com/security/cve/CVE-2024-56704"
},
{
"category": "external",
"summary": "SUSE Bug 1235584 for CVE-2024-56704",
"url": "https://bugzilla.suse.com/1235584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56704"
},
{
"cve": "CVE-2024-56705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56705"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Add check for rgby_data memory allocation failure\n\nIn ia_css_3a_statistics_allocate(), there is no check on the allocation\nresult of the rgby_data memory. If rgby_data is not successfully\nallocated, it may trigger the assert(host_stats-\u003ergby_data) assertion in\nia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56705",
"url": "https://www.suse.com/security/cve/CVE-2024-56705"
},
{
"category": "external",
"summary": "SUSE Bug 1235568 for CVE-2024-56705",
"url": "https://bugzilla.suse.com/1235568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56705"
},
{
"cve": "CVE-2024-56707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56707"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c\n\nAdd error pointer checks after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56707",
"url": "https://www.suse.com/security/cve/CVE-2024-56707"
},
{
"category": "external",
"summary": "SUSE Bug 1235545 for CVE-2024-56707",
"url": "https://bugzilla.suse.com/1235545"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56707"
},
{
"cve": "CVE-2024-56708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56708"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/igen6: Avoid segmentation fault on module unload\n\nThe segmentation fault happens because:\n\nDuring modprobe:\n1. In igen6_probe(), igen6_pvt will be allocated with kzalloc()\n2. In igen6_register_mci(), mci-\u003epvt_info will point to\n \u0026igen6_pvt-\u003eimc[mc]\n\nDuring rmmod:\n1. In mci_release() in edac_mc.c, it will kfree(mci-\u003epvt_info)\n2. In igen6_remove(), it will kfree(igen6_pvt);\n\nFix this issue by setting mci-\u003epvt_info to NULL to avoid the double\nkfree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56708",
"url": "https://www.suse.com/security/cve/CVE-2024-56708"
},
{
"category": "external",
"summary": "SUSE Bug 1235564 for CVE-2024-56708",
"url": "https://bugzilla.suse.com/1235564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56708"
},
{
"cve": "CVE-2024-56709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check if iowq is killed before queuing\n\ntask work can be executed after the task has gone through io_uring\ntermination, whether it\u0027s the final task_work run or the fallback path.\nIn this case, task work will find -\u003eio_wq being already killed and\nnull\u0027ed, which is a problem if it then tries to forward the request to\nio_queue_iowq(). Make io_queue_iowq() fail requests in this case.\n\nNote that it also checks PF_KTHREAD, because the user can first close\na DEFER_TASKRUN ring and shortly after kill the task, in which case\n-\u003eiowq check would race.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56709",
"url": "https://www.suse.com/security/cve/CVE-2024-56709"
},
{
"category": "external",
"summary": "SUSE Bug 1235552 for CVE-2024-56709",
"url": "https://bugzilla.suse.com/1235552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56709"
},
{
"cve": "CVE-2024-56712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56712"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: fix memory leak on last export_udmabuf() error path\n\nIn export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a\ndma_buf owning the udmabuf has already been created; but the error handling\nin udmabuf_create() will tear down the udmabuf without doing anything about\nthe containing dma_buf.\n\nThis leaves a dma_buf in memory that contains a dangling pointer; though\nthat doesn\u0027t seem to lead to anything bad except a memory leak.\n\nFix it by moving the dma_buf_fd() call out of export_udmabuf() so that we\ncan give it different error handling.\n\nNote that the shape of this code changed a lot in commit 5e72b2b41a21\n(\"udmabuf: convert udmabuf driver to use folios\"); but the memory leak\nseems to have existed since the introduction of udmabuf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56712",
"url": "https://www.suse.com/security/cve/CVE-2024-56712"
},
{
"category": "external",
"summary": "SUSE Bug 1235565 for CVE-2024-56712",
"url": "https://bugzilla.suse.com/1235565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56712"
},
{
"cve": "CVE-2024-56715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56715"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nionic: Fix netdev notifier unregister on failure\n\nIf register_netdev() fails, then the driver leaks the netdev notifier.\nFix this by calling ionic_lif_unregister() on register_netdev()\nfailure. This will also call ionic_lif_unregister_phc() if it has\nalready been registered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56715",
"url": "https://www.suse.com/security/cve/CVE-2024-56715"
},
{
"category": "external",
"summary": "SUSE Bug 1235612 for CVE-2024-56715",
"url": "https://bugzilla.suse.com/1235612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56715"
},
{
"cve": "CVE-2024-56716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56716"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: prevent bad user input in nsim_dev_health_break_write()\n\nIf either a zero count or a large one is provided, kernel can crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56716",
"url": "https://www.suse.com/security/cve/CVE-2024-56716"
},
{
"category": "external",
"summary": "SUSE Bug 1235587 for CVE-2024-56716",
"url": "https://bugzilla.suse.com/1235587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56716"
},
{
"cve": "CVE-2024-56722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix cpu stuck caused by printings during reset\n\nDuring reset, cmd to destroy resources such as qp, cq, and mr may fail,\nand error logs will be printed. When a large number of resources are\ndestroyed, there will be lots of printings, and it may lead to a cpu\nstuck.\n\nDelete some unnecessary printings and replace other printing functions\nin these paths with the ratelimited version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56722",
"url": "https://www.suse.com/security/cve/CVE-2024-56722"
},
{
"category": "external",
"summary": "SUSE Bug 1235570 for CVE-2024-56722",
"url": "https://bugzilla.suse.com/1235570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56722"
},
{
"cve": "CVE-2024-56723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56723"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56723",
"url": "https://www.suse.com/security/cve/CVE-2024-56723"
},
{
"category": "external",
"summary": "SUSE Bug 1235571 for CVE-2024-56723",
"url": "https://bugzilla.suse.com/1235571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56723"
},
{
"cve": "CVE-2024-56724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56724"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56724",
"url": "https://www.suse.com/security/cve/CVE-2024-56724"
},
{
"category": "external",
"summary": "SUSE Bug 1235577 for CVE-2024-56724",
"url": "https://bugzilla.suse.com/1235577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56724"
},
{
"cve": "CVE-2024-56725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56725"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56725",
"url": "https://www.suse.com/security/cve/CVE-2024-56725"
},
{
"category": "external",
"summary": "SUSE Bug 1235578 for CVE-2024-56725",
"url": "https://bugzilla.suse.com/1235578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56725"
},
{
"cve": "CVE-2024-56726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56726"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56726",
"url": "https://www.suse.com/security/cve/CVE-2024-56726"
},
{
"category": "external",
"summary": "SUSE Bug 1235582 for CVE-2024-56726",
"url": "https://bugzilla.suse.com/1235582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56726"
},
{
"cve": "CVE-2024-56727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56727"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c\n\nAdding error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56727",
"url": "https://www.suse.com/security/cve/CVE-2024-56727"
},
{
"category": "external",
"summary": "SUSE Bug 1235583 for CVE-2024-56727",
"url": "https://bugzilla.suse.com/1235583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56727"
},
{
"cve": "CVE-2024-56728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56728"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56728",
"url": "https://www.suse.com/security/cve/CVE-2024-56728"
},
{
"category": "external",
"summary": "SUSE Bug 1235656 for CVE-2024-56728",
"url": "https://bugzilla.suse.com/1235656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56728"
},
{
"cve": "CVE-2024-56729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56729"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: Initialize cfid-\u003etcon before performing network ops\n\nAvoid leaking a tcon ref when a lease break races with opening the\ncached directory. Processing the leak break might take a reference to\nthe tcon in cached_dir_lease_break() and then fail to release the ref in\ncached_dir_offload_close, since cfid-\u003etcon is still NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56729",
"url": "https://www.suse.com/security/cve/CVE-2024-56729"
},
{
"category": "external",
"summary": "SUSE Bug 1235503 for CVE-2024-56729",
"url": "https://bugzilla.suse.com/1235503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56729"
},
{
"cve": "CVE-2024-56739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: check if __rtc_read_time was successful in rtc_timer_do_work()\n\nIf the __rtc_read_time call fails,, the struct rtc_time tm; may contain\nuninitialized data, or an illegal date/time read from the RTC hardware.\n\nWhen calling rtc_tm_to_ktime later, the result may be a very large value\n(possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue,\nthey will continually expire, may causing kernel softlockup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56739",
"url": "https://www.suse.com/security/cve/CVE-2024-56739"
},
{
"category": "external",
"summary": "SUSE Bug 1235611 for CVE-2024-56739",
"url": "https://bugzilla.suse.com/1235611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56741"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56741",
"url": "https://www.suse.com/security/cve/CVE-2024-56741"
},
{
"category": "external",
"summary": "SUSE Bug 1235502 for CVE-2024-56741",
"url": "https://bugzilla.suse.com/1235502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56741"
},
{
"cve": "CVE-2024-56745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56745"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reset_method_store() memory leak\n\nIn reset_method_store(), a string is allocated via kstrndup() and assigned\nto the local \"options\". options is then used in with strsep() to find\nspaces:\n\n while ((name = strsep(\u0026options, \" \")) != NULL) {\n\nIf there are no remaining spaces, then options is set to NULL by strsep(),\nso the subsequent kfree(options) doesn\u0027t free the memory allocated via\nkstrndup().\n\nFix by using a separate tmp_options to iterate with strsep() so options is\npreserved.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56745",
"url": "https://www.suse.com/security/cve/CVE-2024-56745"
},
{
"category": "external",
"summary": "SUSE Bug 1235563 for CVE-2024-56745",
"url": "https://bugzilla.suse.com/1235563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56745"
},
{
"cve": "CVE-2024-56746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56746"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()\n\nWhen information such as info-\u003escreen_base is not ready, calling\nsh7760fb_free_mem() does not release memory correctly. Call\ndma_free_coherent() instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56746",
"url": "https://www.suse.com/security/cve/CVE-2024-56746"
},
{
"category": "external",
"summary": "SUSE Bug 1235622 for CVE-2024-56746",
"url": "https://bugzilla.suse.com/1235622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56746"
},
{
"cve": "CVE-2024-56747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()\n\nHook \"qedi_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56747",
"url": "https://www.suse.com/security/cve/CVE-2024-56747"
},
{
"category": "external",
"summary": "SUSE Bug 1234934 for CVE-2024-56747",
"url": "https://bugzilla.suse.com/1234934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()\n\nHook \"qed_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56748",
"url": "https://www.suse.com/security/cve/CVE-2024-56748"
},
{
"category": "external",
"summary": "SUSE Bug 1235627 for CVE-2024-56748",
"url": "https://bugzilla.suse.com/1235627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free when COWing tree bock and tracing is enabled\n\nWhen a COWing a tree block, at btrfs_cow_block(), and we have the\ntracepoint trace_btrfs_cow_block() enabled and preemption is also enabled\n(CONFIG_PREEMPT=y), we can trigger a use-after-free in the COWed extent\nbuffer while inside the tracepoint code. This is because in some paths\nthat call btrfs_cow_block(), such as btrfs_search_slot(), we are holding\nthe last reference on the extent buffer @buf so btrfs_force_cow_block()\ndrops the last reference on the @buf extent buffer when it calls\nfree_extent_buffer_stale(buf), which schedules the release of the extent\nbuffer with RCU. This means that if we are on a kernel with preemption,\nthe current task may be preempted before calling trace_btrfs_cow_block()\nand the extent buffer already released by the time trace_btrfs_cow_block()\nis called, resulting in a use-after-free.\n\nFix this by moving the trace_btrfs_cow_block() from btrfs_cow_block() to\nbtrfs_force_cow_block() before the COWed extent buffer is freed.\nThis also has a side effect of invoking the tracepoint in the tree defrag\ncode, at defrag.c:btrfs_realloc_node(), since btrfs_force_cow_block() is\ncalled there, but this is fine and it was actually missing there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56759",
"url": "https://www.suse.com/security/cve/CVE-2024-56759"
},
{
"category": "external",
"summary": "SUSE Bug 1235645 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "external",
"summary": "SUSE Bug 1236569 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1236569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56759"
},
{
"cve": "CVE-2024-56760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/MSI: Handle lack of irqdomain gracefully\n\nAlexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a\nRISCV platform which does not provide PCI/MSI support:\n\n WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32\n __pci_enable_msix_range+0x30c/0x596\n pci_msi_setup_msi_irqs+0x2c/0x32\n pci_alloc_irq_vectors_affinity+0xb8/0xe2\n\nRISCV uses hierarchical interrupt domains and correctly does not implement\nthe legacy fallback. The warning triggers from the legacy fallback stub.\n\nThat warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent\ndomain is associated with the device or not. There is a check for MSI-X,\nwhich has a legacy assumption. But that legacy fallback assumption is only\nvalid when legacy support is enabled, but otherwise the check should simply\nreturn -ENOTSUPP.\n\nLoongarch tripped over the same problem and blindly enabled legacy support\nwithout implementing the legacy fallbacks. There are weak implementations\nwhich return an error, so the problem was papered over.\n\nCorrect pci_msi_domain_supports() to evaluate the legacy mode and add\nthe missing supported check into the MSI enable path to complete it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56760",
"url": "https://www.suse.com/security/cve/CVE-2024-56760"
},
{
"category": "external",
"summary": "SUSE Bug 1235616 for CVE-2024-56760",
"url": "https://bugzilla.suse.com/1235616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56760"
},
{
"cve": "CVE-2024-56763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent bad count for tracing_cpumask_write\n\nIf a large count is provided, it will trigger a warning in bitmap_parse_user.\nAlso check zero for it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56763",
"url": "https://www.suse.com/security/cve/CVE-2024-56763"
},
{
"category": "external",
"summary": "SUSE Bug 1235638 for CVE-2024-56763",
"url": "https://bugzilla.suse.com/1235638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56763"
},
{
"cve": "CVE-2024-56765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/vas: Add close() callback in vas_vm_ops struct\n\nThe mapping VMA address is saved in VAS window struct when the\npaste address is mapped. This VMA address is used during migration\nto unmap the paste address if the window is active. The paste\naddress mapping will be removed when the window is closed or with\nthe munmap(). But the VMA address in the VAS window is not updated\nwith munmap() which is causing invalid access during migration.\n\nThe KASAN report shows:\n[16386.254991] BUG: KASAN: slab-use-after-free in reconfig_close_windows+0x1a0/0x4e8\n[16386.255043] Read of size 8 at addr c00000014a819670 by task drmgr/696928\n\n[16386.255096] CPU: 29 UID: 0 PID: 696928 Comm: drmgr Kdump: loaded Tainted: G B 6.11.0-rc5-nxgzip #2\n[16386.255128] Tainted: [B]=BAD_PAGE\n[16386.255148] Hardware name: IBM,9080-HEX Power11 (architected) 0x820200 0xf000007 of:IBM,FW1110.00 (NH1110_016) hv:phyp pSeries\n[16386.255181] Call Trace:\n[16386.255202] [c00000016b297660] [c0000000018ad0ac] dump_stack_lvl+0x84/0xe8 (unreliable)\n[16386.255246] [c00000016b297690] [c0000000006e8a90] print_report+0x19c/0x764\n[16386.255285] [c00000016b297760] [c0000000006e9490] kasan_report+0x128/0x1f8\n[16386.255309] [c00000016b297880] [c0000000006eb5c8] __asan_load8+0xac/0xe0\n[16386.255326] [c00000016b2978a0] [c00000000013f898] reconfig_close_windows+0x1a0/0x4e8\n[16386.255343] [c00000016b297990] [c000000000140e58] vas_migration_handler+0x3a4/0x3fc\n[16386.255368] [c00000016b297a90] [c000000000128848] pseries_migrate_partition+0x4c/0x4c4\n...\n\n[16386.256136] Allocated by task 696554 on cpu 31 at 16377.277618s:\n[16386.256149] kasan_save_stack+0x34/0x68\n[16386.256163] kasan_save_track+0x34/0x80\n[16386.256175] kasan_save_alloc_info+0x58/0x74\n[16386.256196] __kasan_slab_alloc+0xb8/0xdc\n[16386.256209] kmem_cache_alloc_noprof+0x200/0x3d0\n[16386.256225] vm_area_alloc+0x44/0x150\n[16386.256245] mmap_region+0x214/0x10c4\n[16386.256265] do_mmap+0x5fc/0x750\n[16386.256277] vm_mmap_pgoff+0x14c/0x24c\n[16386.256292] ksys_mmap_pgoff+0x20c/0x348\n[16386.256303] sys_mmap+0xd0/0x160\n...\n\n[16386.256350] Freed by task 0 on cpu 31 at 16386.204848s:\n[16386.256363] kasan_save_stack+0x34/0x68\n[16386.256374] kasan_save_track+0x34/0x80\n[16386.256384] kasan_save_free_info+0x64/0x10c\n[16386.256396] __kasan_slab_free+0x120/0x204\n[16386.256415] kmem_cache_free+0x128/0x450\n[16386.256428] vm_area_free_rcu_cb+0xa8/0xd8\n[16386.256441] rcu_do_batch+0x2c8/0xcf0\n[16386.256458] rcu_core+0x378/0x3c4\n[16386.256473] handle_softirqs+0x20c/0x60c\n[16386.256495] do_softirq_own_stack+0x6c/0x88\n[16386.256509] do_softirq_own_stack+0x58/0x88\n[16386.256521] __irq_exit_rcu+0x1a4/0x20c\n[16386.256533] irq_exit+0x20/0x38\n[16386.256544] interrupt_async_exit_prepare.constprop.0+0x18/0x2c\n...\n\n[16386.256717] Last potentially related work creation:\n[16386.256729] kasan_save_stack+0x34/0x68\n[16386.256741] __kasan_record_aux_stack+0xcc/0x12c\n[16386.256753] __call_rcu_common.constprop.0+0x94/0xd04\n[16386.256766] vm_area_free+0x28/0x3c\n[16386.256778] remove_vma+0xf4/0x114\n[16386.256797] do_vmi_align_munmap.constprop.0+0x684/0x870\n[16386.256811] __vm_munmap+0xe0/0x1f8\n[16386.256821] sys_munmap+0x54/0x6c\n[16386.256830] system_call_exception+0x1a0/0x4a0\n[16386.256841] system_call_vectored_common+0x15c/0x2ec\n\n[16386.256868] The buggy address belongs to the object at c00000014a819670\n which belongs to the cache vm_area_struct of size 168\n[16386.256887] The buggy address is located 0 bytes inside of\n freed 168-byte region [c00000014a819670, c00000014a819718)\n\n[16386.256915] The buggy address belongs to the physical page:\n[16386.256928] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a81\n[16386.256950] memcg:c0000000ba430001\n[16386.256961] anon flags: 0x43ffff800000000(node=4|zone=0|lastcpupid=0x7ffff)\n[16386.256975] page_type: 0xfdffffff(slab)\n[16386\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56765",
"url": "https://www.suse.com/security/cve/CVE-2024-56765"
},
{
"category": "external",
"summary": "SUSE Bug 1235643 for CVE-2024-56765",
"url": "https://bugzilla.suse.com/1235643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56765"
},
{
"cve": "CVE-2024-56766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56766"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc(). Calling kfree(user) will lead to a\ndouble free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56766",
"url": "https://www.suse.com/security/cve/CVE-2024-56766"
},
{
"category": "external",
"summary": "SUSE Bug 1235219 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "external",
"summary": "SUSE Bug 1240426 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1240426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-56766"
},
{
"cve": "CVE-2024-56767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56767"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset\n\nThe at_xdmac_memset_create_desc may return NULL, which will lead to a\nnull pointer dereference. For example, the len input is error, or the\natchan-\u003efree_descs_list is empty and memory is exhausted. Therefore, add\ncheck to avoid this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56767",
"url": "https://www.suse.com/security/cve/CVE-2024-56767"
},
{
"category": "external",
"summary": "SUSE Bug 1235160 for CVE-2024-56767",
"url": "https://bugzilla.suse.com/1235160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56767"
},
{
"cve": "CVE-2024-56769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg\n\nSyzbot reports [1] an uninitialized value issue found by KMSAN in\ndib3000_read_reg().\n\nLocal u8 rb[2] is used in i2c_transfer() as a read buffer; in case\nthat call fails, the buffer may end up with some undefined values.\n\nSince no elaborate error handling is expected in dib3000_write_reg(),\nsimply zero out rb buffer to mitigate the problem.\n\n[1] Syzkaller report\ndvb-usb: bulk message failed: -22 (6/0)\n=====================================================\nBUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31\n dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290\n dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline]\n dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]\n dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310\n dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110\n...\nLocal variable rb created at:\n dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54\n dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56769",
"url": "https://www.suse.com/security/cve/CVE-2024-56769"
},
{
"category": "external",
"summary": "SUSE Bug 1235155 for CVE-2024-56769",
"url": "https://bugzilla.suse.com/1235155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56769"
},
{
"cve": "CVE-2024-56774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56774"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: add a sanity check for btrfs root in btrfs_search_slot()\n\nSyzbot reports a null-ptr-deref in btrfs_search_slot().\n\nThe reproducer is using rescue=ibadroots, and the extent tree root is\ncorrupted thus the extent tree is NULL.\n\nWhen scrub tries to search the extent tree to gather the needed extent\ninfo, btrfs_search_slot() doesn\u0027t check if the target root is NULL or\nnot, resulting the null-ptr-deref.\n\nAdd sanity check for btrfs root before using it in btrfs_search_slot().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56774",
"url": "https://www.suse.com/security/cve/CVE-2024-56774"
},
{
"category": "external",
"summary": "SUSE Bug 1235653 for CVE-2024-56774",
"url": "https://bugzilla.suse.com/1235653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56774"
},
{
"cve": "CVE-2024-56775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56775"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix handling of plane refcount\n\n[Why]\nThe mechanism to backup and restore plane states doesn\u0027t maintain\nrefcount, which can cause issues if the refcount of the plane changes\nin between backup and restore operations, such as memory leaks if the\nrefcount was supposed to go down, or double frees / invalid memory\naccesses if the refcount was supposed to go up.\n\n[How]\nCache and re-apply current refcount when restoring plane states.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56775",
"url": "https://www.suse.com/security/cve/CVE-2024-56775"
},
{
"category": "external",
"summary": "SUSE Bug 1235657 for CVE-2024-56775",
"url": "https://bugzilla.suse.com/1235657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56775"
},
{
"cve": "CVE-2024-56776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56776"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56776",
"url": "https://www.suse.com/security/cve/CVE-2024-56776"
},
{
"category": "external",
"summary": "SUSE Bug 1235647 for CVE-2024-56776",
"url": "https://bugzilla.suse.com/1235647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56776"
},
{
"cve": "CVE-2024-56777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56777"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56777",
"url": "https://www.suse.com/security/cve/CVE-2024-56777"
},
{
"category": "external",
"summary": "SUSE Bug 1235641 for CVE-2024-56777",
"url": "https://bugzilla.suse.com/1235641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56777"
},
{
"cve": "CVE-2024-56778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56778",
"url": "https://www.suse.com/security/cve/CVE-2024-56778"
},
{
"category": "external",
"summary": "SUSE Bug 1235635 for CVE-2024-56778",
"url": "https://bugzilla.suse.com/1235635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56778"
},
{
"cve": "CVE-2024-56779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\n\nThe action force umount(umount -f) will attempt to kill all rpc_task even\numount operation may ultimately fail if some files remain open.\nConsequently, if an action attempts to open a file, it can potentially\nsend two rpc_task to nfs server.\n\n NFS CLIENT\nthread1 thread2\nopen(\"file\")\n...\nnfs4_do_open\n _nfs4_do_open\n _nfs4_open_and_get_state\n _nfs4_proc_open\n nfs4_run_open_task\n /* rpc_task1 */\n rpc_run_task\n rpc_wait_for_completion_task\n\n umount -f\n nfs_umount_begin\n rpc_killall_tasks\n rpc_signal_task\n rpc_task1 been wakeup\n and return -512\n _nfs4_do_open // while loop\n ...\n nfs4_run_open_task\n /* rpc_task2 */\n rpc_run_task\n rpc_wait_for_completion_task\n\nWhile processing an open request, nfsd will first attempt to find or\nallocate an nfs4_openowner. If it finds an nfs4_openowner that is not\nmarked as NFS4_OO_CONFIRMED, this nfs4_openowner will released. Since\ntwo rpc_task can attempt to open the same file simultaneously from the\nclient to server, and because two instances of nfsd can run\nconcurrently, this situation can lead to lots of memory leak.\nAdditionally, when we echo 0 to /proc/fs/nfsd/threads, warning will be\ntriggered.\n\n NFS SERVER\nnfsd1 nfsd2 echo 0 \u003e /proc/fs/nfsd/threads\n\nnfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // alloc oo1, stateid1\n nfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // find oo1, without NFS4_OO_CONFIRMED\n release_openowner\n unhash_openowner_locked\n list_del_init(\u0026oo-\u003eoo_perclient)\n // cannot find this oo\n // from client, LEAK!!!\n alloc_stateowner // alloc oo2\n\n nfsd4_process_open2\n init_open_stateid\n // associate oo1\n // with stateid1, stateid1 LEAK!!!\n nfs4_get_vfs_file\n // alloc nfsd_file1 and nfsd_file_mark1\n // all LEAK!!!\n\n nfsd4_process_open2\n ...\n\n write_threads\n ...\n nfsd_destroy_serv\n nfsd_shutdown_net\n nfs4_state_shutdown_net\n nfs4_state_destroy_net\n destroy_client\n __destroy_client\n // won\u0027t find oo1!!!\n nfsd_shutdown_generic\n nfsd_file_cache_shutdown\n kmem_cache_destroy\n for nfsd_file_slab\n and nfsd_file_mark_slab\n // bark since nfsd_file1\n // and nfsd_file_mark1\n // still alive\n\n=======================================================================\nBUG nfsd_file (Not tainted): Objects remaining in nfsd_file on\n__kmem_cache_shutdown()\n-----------------------------------------------------------------------\n\nSlab 0xffd4000004438a80 objects=34 used=1 fp=0xff11000110e2ad28\nflags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff)\nCPU: 4 UID: 0 PID: 757 Comm: sh Not tainted 6.12.0-rc6+ #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dum\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56779",
"url": "https://www.suse.com/security/cve/CVE-2024-56779"
},
{
"category": "external",
"summary": "SUSE Bug 1235632 for CVE-2024-56779",
"url": "https://bugzilla.suse.com/1235632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: flush quota_release_work upon quota writeback\n\nOne of the paths quota writeback is called from is:\n\nfreeze_super()\n sync_filesystem()\n ext4_sync_fs()\n dquot_writeback_dquots()\n\nSince we currently don\u0027t always flush the quota_release_work queue in\nthis path, we can end up with the following race:\n\n 1. dquot are added to releasing_dquots list during regular operations.\n 2. FS Freeze starts, however, this does not flush the quota_release_work queue.\n 3. Freeze completes.\n 4. Kernel eventually tries to flush the workqueue while FS is frozen which\n hits a WARN_ON since transaction gets started during frozen state:\n\n ext4_journal_check_start+0x28/0x110 [ext4] (unreliable)\n __ext4_journal_start_sb+0x64/0x1c0 [ext4]\n ext4_release_dquot+0x90/0x1d0 [ext4]\n quota_release_workfn+0x43c/0x4d0\n\nWhich is the following line:\n\n WARN_ON(sb-\u003es_writers.frozen == SB_FREEZE_COMPLETE);\n\nWhich ultimately results in generic/390 failing due to dmesg\nnoise. This was detected on powerpc machine 15 cores.\n\nTo avoid this, make sure to flush the workqueue during\ndquot_writeback_dquots() so we dont have any pending workitems after\nfreeze.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56780",
"url": "https://www.suse.com/security/cve/CVE-2024-56780"
},
{
"category": "external",
"summary": "SUSE Bug 1235650 for CVE-2024-56780",
"url": "https://bugzilla.suse.com/1235650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-56787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56787"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: imx8m: Probe the SoC driver as platform driver\n\nWith driver_async_probe=* on kernel command line, the following trace is\nproduced because on i.MX8M Plus hardware because the soc-imx8m.c driver\ncalls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock\ndriver is not yet probed. This was not detected during regular testing\nwithout driver_async_probe.\n\nConvert the SoC code to platform driver and instantiate a platform device\nin its current device_initcall() to probe the platform driver. Rework\n.soc_revision callback to always return valid error code and return SoC\nrevision via parameter. This way, if anything in the .soc_revision callback\nreturn -EPROBE_DEFER, it gets propagated to .probe and the .probe will get\nretried later.\n\n\"\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180\nCPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603\nHardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : imx8mm_soc_revision+0xdc/0x180\nlr : imx8mm_soc_revision+0xd0/0x180\nsp : ffff8000821fbcc0\nx29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120\nx26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311\nx23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb\nx20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff\nx17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8\nx14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801\nx11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c\nx8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3\nx5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000\nx2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb\nCall trace:\n imx8mm_soc_revision+0xdc/0x180\n imx8_soc_init+0xb0/0x1e0\n do_one_initcall+0x94/0x1a8\n kernel_init_freeable+0x240/0x2a8\n kernel_init+0x28/0x140\n ret_from_fork+0x10/0x20\n---[ end trace 0000000000000000 ]---\nSoC: i.MX8MP revision 1.1\n\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56787",
"url": "https://www.suse.com/security/cve/CVE-2024-56787"
},
{
"category": "external",
"summary": "SUSE Bug 1235663 for CVE-2024-56787",
"url": "https://bugzilla.suse.com/1235663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-56787"
},
{
"cve": "CVE-2024-57791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check return value of sock_recvmsg when draining clc data\n\nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the\nlength of msg should be received from network and the value should not be\nfully trusted as it is from the network. Once the value of length exceeds\nthe value of buflen in function smc_clc_wait_msg it may run into deadloop\nwhen trying to drain the remaining data exceeding buflen.\n\nThis patch checks the return value of sock_recvmsg when draining data in\ncase of deadloop in draining.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57791",
"url": "https://www.suse.com/security/cve/CVE-2024-57791"
},
{
"category": "external",
"summary": "SUSE Bug 1235759 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "external",
"summary": "SUSE Bug 1235760 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235760"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57791"
},
{
"cve": "CVE-2024-57792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57792"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57792",
"url": "https://www.suse.com/security/cve/CVE-2024-57792"
},
{
"category": "external",
"summary": "SUSE Bug 1235764 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "external",
"summary": "SUSE Bug 1236568 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1236568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57792"
},
{
"cve": "CVE-2024-57793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57793"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors\n\nIn CoCo VMs it is possible for the untrusted host to cause\nset_memory_decrypted() to fail such that an error is returned\nand the resulting memory is shared. Callers need to take care\nto handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional\nor security issues.\n\nLeak the decrypted memory when set_memory_decrypted() fails,\nand don\u0027t need to print an error since set_memory_decrypted()\nwill call WARN_ONCE().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57793",
"url": "https://www.suse.com/security/cve/CVE-2024-57793"
},
{
"category": "external",
"summary": "SUSE Bug 1235768 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "external",
"summary": "SUSE Bug 1235769 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57793"
},
{
"cve": "CVE-2024-57795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Remove the direct link to net_device\n\nThe similar patch in siw is in the link:\nhttps://git.kernel.org/rdma/rdma/c/16b87037b48889\n\nThis problem also occurred in RXE. The following analyze this problem.\nIn the following Call Traces:\n\"\nBUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\nRead of size 4 at addr ffff8880554640b0 by task kworker/1:4/5295\n\nCPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted\n6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0\nHardware name: Google Compute Engine/Google Compute Engine,\nBIOS Google 09/13/2024\nWorkqueue: infiniband ib_cache_event_task\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\n rxe_query_port+0x12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60\n __ib_query_port drivers/infiniband/core/device.c:2111 [inline]\n ib_query_port+0x168/0x7d0 drivers/infiniband/core/device.c:2143\n ib_cache_update+0x1a9/0xb80 drivers/infiniband/core/cache.c:1494\n ib_cache_event_task+0xf3/0x1e0 drivers/infiniband/core/cache.c:1568\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f2/0x390 kernel/kthread.c:389\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\"\n\n1). In the link [1],\n\n\"\n infiniband syz2: set down\n\"\n\nThis means that on 839.350575, the event ib_cache_event_task was sent andi\nqueued in ib_wq.\n\n2). In the link [1],\n\n\"\n team0 (unregistering): Port device team_slave_0 removed\n\"\n\nIt indicates that before 843.251853, the net device should be freed.\n\n3). In the link [1],\n\n\"\n BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0\n\"\n\nThis means that on 850.559070, this slab-use-after-free problem occurred.\n\nIn all, on 839.350575, the event ib_cache_event_task was sent and queued\nin ib_wq,\n\nbefore 843.251853, the net device veth was freed.\n\non 850.559070, this event was executed, and the mentioned freed net device\nwas called. Thus, the above call trace occurred.\n\n[1] https://syzkaller.appspot.com/x/log.txt?x=12e7025f980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57795",
"url": "https://www.suse.com/security/cve/CVE-2024-57795"
},
{
"category": "external",
"summary": "SUSE Bug 1235906 for CVE-2024-57795",
"url": "https://bugzilla.suse.com/1235906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57795"
},
{
"cve": "CVE-2024-57798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57798"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()\n\nWhile receiving an MST up request message from one thread in\ndrm_dp_mst_handle_up_req(), the MST topology could be removed from\nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing\nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.\nThis could lead to a NULL deref/use-after-free of mst_primary in\ndrm_dp_mst_handle_up_req().\n\nAvoid the above by holding a reference for mst_primary in\ndrm_dp_mst_handle_up_req() while it\u0027s used.\n\nv2: Fix kfreeing the request if getting an mst_primary reference fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57798",
"url": "https://www.suse.com/security/cve/CVE-2024-57798"
},
{
"category": "external",
"summary": "SUSE Bug 1235818 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "external",
"summary": "SUSE Bug 1235819 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57798"
},
{
"cve": "CVE-2024-57801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Skip restore TC rules for vport rep without loaded flag\n\nDuring driver unload, unregister_netdev is called after unloading\nvport rep. So, the mlx5e_rep_priv is already freed while trying to get\nrpriv-\u003enetdev, or walk rpriv-\u003etc_ht, which results in use-after-free.\nSo add the checking to make sure access the data of vport rep which is\nstill loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57801",
"url": "https://www.suse.com/security/cve/CVE-2024-57801"
},
{
"category": "external",
"summary": "SUSE Bug 1235940 for CVE-2024-57801",
"url": "https://bugzilla.suse.com/1235940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57801"
},
{
"cve": "CVE-2024-57802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: check buffer length before accessing it\n\nSyzkaller reports an uninit value read from ax25cmp when sending raw message\nthrough ieee802154 implementation.\n\n=====================================================\nBUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601\n nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774\n nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\n xmit_one net/core/dev.c:3548 [inline]\n dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564\n __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\n raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x318/0x740 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1286 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2780\n sock_alloc_send_skb include/net/sock.h:1884 [inline]\n raw_sendmsg+0x36d/0xc10 net/ieee802154/socket.c:282\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nCPU: 0 PID: 5037 Comm: syz-executor166 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\n=====================================================\n\nThis issue occurs because the skb buffer is too small, and it\u0027s actual\nallocation is aligned. This hides an actual issue, which is that nr_route_frame\ndoes not validate the buffer size before using it.\n\nFix this issue by checking skb-\u003elen before accessing any fields in skb-\u003edata.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57802",
"url": "https://www.suse.com/security/cve/CVE-2024-57802"
},
{
"category": "external",
"summary": "SUSE Bug 1235941 for CVE-2024-57802",
"url": "https://bugzilla.suse.com/1235941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57802"
},
{
"cve": "CVE-2024-57804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57804"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs\n\nThe driver, through the SAS transport, exposes a sysfs interface to\nenable/disable PHYs in a controller/expander setup. When multiple PHYs\nare disabled and enabled in rapid succession, the persistent and current\nconfig pages related to SAS IO unit/SAS Expander pages could get\ncorrupted.\n\nUse separate memory for each config request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57804",
"url": "https://www.suse.com/security/cve/CVE-2024-57804"
},
{
"category": "external",
"summary": "SUSE Bug 1235779 for CVE-2024-57804",
"url": "https://bugzilla.suse.com/1235779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57804"
},
{
"cve": "CVE-2024-57809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: imx6: Fix suspend/resume support on i.MX6QDL\n\nThe suspend/resume functionality is currently broken on the i.MX6QDL\nplatform, as documented in the NXP errata (ERR005723):\n\n https://www.nxp.com/docs/en/errata/IMX6DQCE.pdf\n\nThis patch addresses the issue by sharing most of the suspend/resume\nsequences used by other i.MX devices, while avoiding modifications to\ncritical registers that disrupt the PCIe functionality. It targets the\nsame problem as the following downstream commit:\n\n https://github.com/nxp-imx/linux-imx/commit/4e92355e1f79d225ea842511fcfd42b343b32995\n\nUnlike the downstream commit, this patch also resets the connected PCIe\ndevice if possible. Without this reset, certain drivers, such as ath10k\nor iwlwifi, will crash on resume. The device reset is also done by the\ndriver on other i.MX platforms, making this patch consistent with\nexisting practices.\n\nUpon resuming, the kernel will hang and display an error. Here\u0027s an\nexample of the error encountered with the ath10k driver:\n\n ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible\n Unhandled fault: imprecise external abort (0x1406) at 0x0106f944\n\nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a\nPCIe device is connected.\n\n[kwilczynski: commit log, added tag for stable releases]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57809",
"url": "https://www.suse.com/security/cve/CVE-2024-57809"
},
{
"category": "external",
"summary": "SUSE Bug 1235793 for CVE-2024-57809",
"url": "https://bugzilla.suse.com/1235793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57809"
},
{
"cve": "CVE-2024-57838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Mark IRQ entries to fix stack depot warnings\n\nThe stack depot filters out everything outside of the top interrupt\ncontext as an uninteresting or irrelevant part of the stack traces. This\nhelps with stack trace de-duplication, avoiding an explosion of saved\nstack traces that share the same IRQ context code path but originate\nfrom different randomly interrupted points, eventually exhausting the\nstack depot.\n\nFiltering uses in_irqentry_text() to identify functions within the\n.irqentry.text and .softirqentry.text sections, which then become the\nlast stack trace entries being saved.\n\nWhile __do_softirq() is placed into the .softirqentry.text section by\ncommon code, populating .irqentry.text is architecture-specific.\n\nCurrently, the .irqentry.text section on s390 is empty, which prevents\nstack depot filtering and de-duplication and could result in warnings\nlike:\n\nStack depot reached limit capacity\nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8\n\nwith PREEMPT and KASAN enabled.\n\nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into\nthe .irqentry.text section and updating the kprobes blacklist to include\nthe .irqentry.text section.\n\nThis is done only for asynchronous interrupts and explicitly not for\nprogram checks, which are synchronous and where the context beyond the\nprogram check is important to preserve. Despite machine checks being\nsomewhat in between, they are extremely rare, and preserving context\nwhen possible is also of value.\n\nSVCs and Restart Interrupts are not relevant, one being always at the\nboundary to user space and the other being a one-time thing.\n\nIRQ entries filtering is also optionally used in ftrace function graph,\nwhere the same logic applies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57838",
"url": "https://www.suse.com/security/cve/CVE-2024-57838"
},
{
"category": "external",
"summary": "SUSE Bug 1235798 for CVE-2024-57838",
"url": "https://bugzilla.suse.com/1235798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57838"
},
{
"cve": "CVE-2024-57849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_sf: Handle CPU hotplug remove during sampling\n\nCPU hotplug remove handling triggers the following function\ncall sequence:\n\n CPUHP_AP_PERF_S390_SF_ONLINE --\u003e s390_pmu_sf_offline_cpu()\n ...\n CPUHP_AP_PERF_ONLINE --\u003e perf_event_exit_cpu()\n\nThe s390 CPUMF sampling CPU hotplug handler invokes:\n\n s390_pmu_sf_offline_cpu()\n +--\u003e cpusf_pmu_setup()\n +--\u003e setup_pmc_cpu()\n +--\u003e deallocate_buffers()\n\nThis function de-allocates all sampling data buffers (SDBs) allocated\nfor that CPU at event initialization. It also clears the\nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.\n\nWith the event still being active on the removed CPU, the CPU event\nhotplug support in kernel performance subsystem triggers the\nfollowing function calls on the removed CPU:\n\n perf_event_exit_cpu()\n +--\u003e perf_event_exit_cpu_context()\n +--\u003e __perf_event_exit_context()\n\t +--\u003e __perf_remove_from_context()\n\t +--\u003e event_sched_out()\n\t +--\u003e cpumsf_pmu_del()\n\t +--\u003e cpumsf_pmu_stop()\n +--\u003e hw_perf_event_update()\n\nto stop and remove the event. During removal of the event, the\nsampling device driver tries to read out the remaining samples from\nthe sample data buffers (SDBs). But they have already been freed\n(and may have been re-assigned). This may lead to a use after free\nsituation in which case the samples are most likely invalid. In the\nbest case the memory has not been reassigned and still contains\nvalid data.\n\nRemedy this situation and check if the CPU is still in reserved\nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been\nreleased an contain valid data. This is always the case when\nthe event is removed (and no CPU hotplug off occured).\nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57849",
"url": "https://www.suse.com/security/cve/CVE-2024-57849"
},
{
"category": "external",
"summary": "SUSE Bug 1235814 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "external",
"summary": "SUSE Bug 1235815 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57849"
},
{
"cve": "CVE-2024-57850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: Prevent rtime decompress memory corruption\n\nThe rtime decompression routine does not fully check bounds during the\nentirety of the decompression pass and can corrupt memory outside the\ndecompression buffer if the compressed data is corrupted. This adds the\nrequired check to prevent this failure mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57850",
"url": "https://www.suse.com/security/cve/CVE-2024-57850"
},
{
"category": "external",
"summary": "SUSE Bug 1235812 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "external",
"summary": "SUSE Bug 1235813 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57850"
},
{
"cve": "CVE-2024-57857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Remove direct link to net_device\n\nDo not manage a per device direct link to net_device. Rely\non associated ib_devices net_device management, not doubling\nthe effort locally. A badly managed local link to net_device\nwas causing a \u0027KASAN: slab-use-after-free\u0027 exception during\nsiw_query_port() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57857",
"url": "https://www.suse.com/security/cve/CVE-2024-57857"
},
{
"category": "external",
"summary": "SUSE Bug 1235946 for CVE-2024-57857",
"url": "https://bugzilla.suse.com/1235946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57857"
},
{
"cve": "CVE-2024-57874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57874"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL\n\nCurrently tagged_addr_ctrl_set() doesn\u0027t initialize the temporary \u0027ctrl\u0027\nvariable, and a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently tagged_addr_ctrl_set() will consume an\narbitrary value, potentially leaking up to 64 bits of memory from the\nkernel stack. The read is limited to a specific slot on the stack, and\nthe issue does not provide a write mechanism.\n\nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and\nrejects other values, a partial SETREGSET attempt will randomly succeed\nor fail depending on the value of the uninitialized value, and the\nexposure is significantly limited.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\nvalue of the tagged address ctrl will be retained.\n\nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the\nuser_aarch64_view used by a native AArch64 task to manipulate another\nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error\nvalue when called for a compat task, tagged_addr_ctrl_get() and\ntagged_addr_ctrl_set() should never observe an error value from\nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that\nsuch an error would be unexpected, and error handlnig is not missing in\neither case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57874",
"url": "https://www.suse.com/security/cve/CVE-2024-57874"
},
{
"category": "external",
"summary": "SUSE Bug 1235808 for CVE-2024-57874",
"url": "https://bugzilla.suse.com/1235808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-57874"
},
{
"cve": "CVE-2024-57876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57876"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix resetting msg rx state after topology removal\n\nIf the MST topology is removed during the reception of an MST down reply\nor MST up request sideband message, the\ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset\nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with\nthe reading/parsing of the message from another thread via\ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is\npossible since the reader/parser doesn\u0027t hold any lock while accessing\nthe reception state. This in turn can lead to a memory corruption in the\nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST\nsideband message body length check\").\n\nFix the above by resetting the message reception state if needed before\nreading/parsing a message. Another solution would be to hold the\ndrm_dp_mst_topology_mgr::lock for the whole duration of the message\nreception/parsing in drm_dp_mst_handle_down_rep() and\ndrm_dp_mst_handle_up_req(), however this would require a bigger change.\nSince the fix is also needed for stable, opting for the simpler solution\nin this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57876",
"url": "https://www.suse.com/security/cve/CVE-2024-57876"
},
{
"category": "external",
"summary": "SUSE Bug 1235806 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "external",
"summary": "SUSE Bug 1235807 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57876"
},
{
"cve": "CVE-2024-57884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()\n\nThe task sometimes continues looping in throttle_direct_reclaim() because\nallow_direct_reclaim(pgdat) keeps returning false. \n\n #0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac\n #1 [ffff80002cb6f900] __schedule at ffff800008abbd1c\n #2 [ffff80002cb6f990] schedule at ffff800008abc50c\n #3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550\n #4 [ffff80002cb6fa20] try_to_free_pages at ffff800008277b68\n #5 [ffff80002cb6fae0] __alloc_pages_nodemask at ffff8000082c4660\n #6 [ffff80002cb6fc50] alloc_pages_vma at ffff8000082e4a98\n #7 [ffff80002cb6fca0] do_anonymous_page at ffff80000829f5a8\n #8 [ffff80002cb6fce0] __handle_mm_fault at ffff8000082a5974\n #9 [ffff80002cb6fd90] handle_mm_fault at ffff8000082a5bd4\n\nAt this point, the pgdat contains the following two zones:\n\n NODE: 4 ZONE: 0 ADDR: ffff00817fffe540 NAME: \"DMA32\"\n SIZE: 20480 MIN/LOW/HIGH: 11/28/45\n VM_STAT:\n NR_FREE_PAGES: 359\n NR_ZONE_INACTIVE_ANON: 18813\n NR_ZONE_ACTIVE_ANON: 0\n NR_ZONE_INACTIVE_FILE: 50\n NR_ZONE_ACTIVE_FILE: 0\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\n NODE: 4 ZONE: 1 ADDR: ffff00817fffec00 NAME: \"Normal\"\n SIZE: 8454144 PRESENT: 98304 MIN/LOW/HIGH: 68/166/264\n VM_STAT:\n NR_FREE_PAGES: 146\n NR_ZONE_INACTIVE_ANON: 94668\n NR_ZONE_ACTIVE_ANON: 3\n NR_ZONE_INACTIVE_FILE: 735\n NR_ZONE_ACTIVE_FILE: 78\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\nIn allow_direct_reclaim(), while processing ZONE_DMA32, the sum of\ninactive/active file-backed pages calculated in zone_reclaimable_pages()\nbased on the result of zone_page_state_snapshot() is zero. \n\nAdditionally, since this system lacks swap, the calculation of inactive/\nactive anonymous pages is skipped.\n\n crash\u003e p nr_swap_pages\n nr_swap_pages = $1937 = {\n counter = 0\n }\n\nAs a result, ZONE_DMA32 is deemed unreclaimable and skipped, moving on to\nthe processing of the next zone, ZONE_NORMAL, despite ZONE_DMA32 having\nfree pages significantly exceeding the high watermark.\n\nThe problem is that the pgdat-\u003ekswapd_failures hasn\u0027t been incremented.\n\n crash\u003e px ((struct pglist_data *) 0xffff00817fffe540)-\u003ekswapd_failures\n $1935 = 0x0\n\nThis is because the node deemed balanced. The node balancing logic in\nbalance_pgdat() evaluates all zones collectively. If one or more zones\n(e.g., ZONE_DMA32) have enough free pages to meet their watermarks, the\nentire node is deemed balanced. This causes balance_pgdat() to exit early\nbefore incrementing the kswapd_failures, as it considers the overall\nmemory state acceptable, even though some zones (like ZONE_NORMAL) remain\nunder significant pressure.\n\n\nThe patch ensures that zone_reclaimable_pages() includes free pages\n(NR_FREE_PAGES) in its calculation when no other reclaimable pages are\navailable (e.g., file-backed or anonymous pages). This change prevents\nzones like ZONE_DMA32, which have sufficient free pages, from being\nmistakenly deemed unreclaimable. By doing so, the patch ensures proper\nnode balancing, avoids masking pressure on other zones like ZONE_NORMAL,\nand prevents infinite loops in throttle_direct_reclaim() caused by\nallow_direct_reclaim(pgdat) repeatedly returning false.\n\n\nThe kernel hangs due to a task stuck in throttle_direct_reclaim(), caused\nby a node being incorrectly deemed balanced despite pressure in certain\nzones, such as ZONE_NORMAL. This issue arises from\nzone_reclaimable_pages\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57884",
"url": "https://www.suse.com/security/cve/CVE-2024-57884"
},
{
"category": "external",
"summary": "SUSE Bug 1235948 for CVE-2024-57884",
"url": "https://bugzilla.suse.com/1235948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57884"
},
{
"cve": "CVE-2024-57887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()\n\nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and\nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue\nby dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()\nin error path of probe() and also in the remove().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57887",
"url": "https://www.suse.com/security/cve/CVE-2024-57887"
},
{
"category": "external",
"summary": "SUSE Bug 1235952 for CVE-2024-57887",
"url": "https://bugzilla.suse.com/1235952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57887"
},
{
"cve": "CVE-2024-57888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57888"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker\n\nAfter commit\n746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")\namdgpu started seeing the following warning:\n\n [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu]\n...\n [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched]\n...\n [ ] Call Trace:\n [ ] \u003cTASK\u003e\n...\n [ ] ? check_flush_dependency+0xf5/0x110\n...\n [ ] cancel_delayed_work_sync+0x6e/0x80\n [ ] amdgpu_gfx_off_ctrl+0xab/0x140 [amdgpu]\n [ ] amdgpu_ring_alloc+0x40/0x50 [amdgpu]\n [ ] amdgpu_ib_schedule+0xf4/0x810 [amdgpu]\n [ ] ? drm_sched_run_job_work+0x22c/0x430 [gpu_sched]\n [ ] amdgpu_job_run+0xaa/0x1f0 [amdgpu]\n [ ] drm_sched_run_job_work+0x257/0x430 [gpu_sched]\n [ ] process_one_work+0x217/0x720\n...\n [ ] \u003c/TASK\u003e\n\nThe intent of the verifcation done in check_flush_depedency is to ensure\nforward progress during memory reclaim, by flagging cases when either a\nmemory reclaim process, or a memory reclaim work item is flushed from a\ncontext not marked as memory reclaim safe.\n\nThis is correct when flushing, but when called from the\ncancel(_delayed)_work_sync() paths it is a false positive because work is\neither already running, or will not be running at all. Therefore\ncancelling it is safe and we can relax the warning criteria by letting the\nhelper know of the calling context.\n\nReferences: 746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57888",
"url": "https://www.suse.com/security/cve/CVE-2024-57888"
},
{
"category": "external",
"summary": "SUSE Bug 1235918 for CVE-2024-57888",
"url": "https://bugzilla.suse.com/1235918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57888"
},
{
"cve": "CVE-2024-57890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping. Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap. The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it\u0027s fine on\n64bit systems.\n\nThis patch does two things. First, I\u0027ve re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math. Then I\u0027ve modified\nall the callers to use size_mul() for the multiplications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57890",
"url": "https://www.suse.com/security/cve/CVE-2024-57890"
},
{
"category": "external",
"summary": "SUSE Bug 1235919 for CVE-2024-57890",
"url": "https://bugzilla.suse.com/1235919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57890"
},
{
"cve": "CVE-2024-57892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57892"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv\n\nWhen mounting ocfs2 and then remounting it as read-only, a\nslab-use-after-free occurs after the user uses a syscall to\nquota_getnextquota. Specifically, sb_dqinfo(sb, type)-\u003edqi_priv is the\ndangling pointer.\n\nDuring the remounting process, the pointer dqi_priv is freed but is never\nset as null leaving it to be accessed. Additionally, the read-only option\nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the\nDQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the\nnext quota, the function ocfs2_get_next_id is called and only checks the\nquota usage flags and not the quota suspended flags.\n\nTo fix this, I set dqi_priv to null when it is freed after remounting with\nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.\n\n[akpm@linux-foundation.org: coding-style cleanups]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57892",
"url": "https://www.suse.com/security/cve/CVE-2024-57892"
},
{
"category": "external",
"summary": "SUSE Bug 1235964 for CVE-2024-57892",
"url": "https://bugzilla.suse.com/1235964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57892"
},
{
"cve": "CVE-2024-57893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix races at processing SysEx messages\n\nOSS sequencer handles the SysEx messages split in 6 bytes packets, and\nALSA sequencer OSS layer tries to combine those. It stores the data\nin the internal buffer and this access is racy as of now, which may\nlead to the out-of-bounds access.\n\nAs a temporary band-aid fix, introduce a mutex for serializing the\nprocess of the SysEx message packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57893",
"url": "https://www.suse.com/security/cve/CVE-2024-57893"
},
{
"category": "external",
"summary": "SUSE Bug 1235920 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "external",
"summary": "SUSE Bug 1235921 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57893"
},
{
"cve": "CVE-2024-57896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57896",
"url": "https://www.suse.com/security/cve/CVE-2024-57896"
},
{
"category": "external",
"summary": "SUSE Bug 1235965 for CVE-2024-57896",
"url": "https://bugzilla.suse.com/1235965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57896"
},
{
"cve": "CVE-2024-57897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Correct the migration DMA map direction\n\nThe SVM DMA device map direction should be set the same as\nthe DMA unmap setting, otherwise the DMA core will report\nthe following warning.\n\nBefore finialize this solution, there\u0027re some discussion on\nthe DMA mapping type(stream-based or coherent) in this KFD\nmigration case, followed by https://lore.kernel.org/all/04d4ab32\n-45a1-4b88-86ee-fb0f35a0ca40@amd.com/T/.\n\nAs there\u0027s no dma_sync_single_for_*() in the DMA buffer accessed\nthat because this migration operation should be sync properly and\nautomatically. Give that there\u0027s might not be a performance problem\nin various cache sync policy of DMA sync. Therefore, in order to\nsimplify the DMA direction setting alignment, let\u0027s set the DMA map\ndirection as BIDIRECTIONAL.\n\n[ 150.834218] WARNING: CPU: 8 PID: 1812 at kernel/dma/debug.c:1028 check_unmap+0x1cc/0x930\n[ 150.834225] Modules linked in: amdgpu(OE) amdxcp drm_exec(OE) gpu_sched drm_buddy(OE) drm_ttm_helper(OE) ttm(OE) drm_suballoc_helper(OE) drm_display_helper(OE) drm_kms_helper(OE) i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc sch_fq_codel intel_rapl_msr amd_atl intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd snd_pci_acp6x snd_hda_codec snd_acp_config snd_hda_core snd_hwdep snd_soc_acpi kvm_amd sunrpc snd_pcm kvm binfmt_misc snd_seq_midi crct10dif_pclmul snd_seq_midi_event ghash_clmulni_intel sha512_ssse3 snd_rawmidi nls_iso8859_1 sha256_ssse3 sha1_ssse3 snd_seq aesni_intel snd_seq_device crypto_simd snd_timer cryptd input_leds\n[ 150.834310] wmi_bmof serio_raw k10temp rapl snd sp5100_tco ipmi_devintf soundcore ccp ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport efi_pstore drm(OE) ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 150.834354] CPU: 8 PID: 1812 Comm: rocrtst64 Tainted: G OE 6.10.0-custom #492\n[ 150.834358] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 150.834360] RIP: 0010:check_unmap+0x1cc/0x930\n[ 150.834363] Code: c0 4c 89 4d c8 e8 34 bf 86 00 4c 8b 4d c8 4c 8b 45 c0 48 8b 4d b8 48 89 c6 41 57 4c 89 ea 48 c7 c7 80 49 b4 84 e8 b4 81 f3 ff \u003c0f\u003e 0b 48 c7 c7 04 83 ac 84 e8 76 ba fc ff 41 8b 76 4c 49 8d 7e 50\n[ 150.834365] RSP: 0018:ffffaac5023739e0 EFLAGS: 00010086\n[ 150.834368] RAX: 0000000000000000 RBX: ffffffff8566a2e0 RCX: 0000000000000027\n[ 150.834370] RDX: ffff8f6a8f621688 RSI: 0000000000000001 RDI: ffff8f6a8f621680\n[ 150.834372] RBP: ffffaac502373a30 R08: 00000000000000c9 R09: ffffaac502373850\n[ 150.834373] R10: ffffaac502373848 R11: ffffffff84f46328 R12: ffffaac502373a40\n[ 150.834375] R13: ffff8f6741045330 R14: ffff8f6741a77700 R15: ffffffff84ac831b\n[ 150.834377] FS: 00007faf0fc94c00(0000) GS:ffff8f6a8f600000(0000) knlGS:0000000000000000\n[ 150.834379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 150.834381] CR2: 00007faf0b600020 CR3: 000000010a52e000 CR4: 0000000000350ef0\n[ 150.834383] Call Trace:\n[ 150.834385] \u003cTASK\u003e\n[ 150.834387] ? show_regs+0x6d/0x80\n[ 150.834393] ? __warn+0x8c/0x140\n[ 150.834397] ? check_unmap+0x1cc/0x930\n[ 150.834400] ? report_bug+0x193/0x1a0\n[ 150.834406] ? handle_bug+0x46/0x80\n[ 150.834410] ? exc_invalid_op+0x1d/0x80\n[ 150.834413] ? asm_exc_invalid_op+0x1f/0x30\n[ 150.834420] ? check_unmap+0x1cc/0x930\n[ 150.834425] debug_dma_unmap_page+0x86/0x90\n[ 150.834431] ? srso_return_thunk+0x5/0x5f\n[ 150.834435] \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57897",
"url": "https://www.suse.com/security/cve/CVE-2024-57897"
},
{
"category": "external",
"summary": "SUSE Bug 1235969 for CVE-2024-57897",
"url": "https://bugzilla.suse.com/1235969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57897"
},
{
"cve": "CVE-2024-57899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, \u0026bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n ? show_regs+0x54/0x58\n ? __warn+0x6b/0xd4\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? report_bug+0x113/0x150\n ? exc_overflow+0x30/0x30\n ? handle_bug+0x27/0x44\n ? exc_invalid_op+0x18/0x50\n ? handle_exception+0xf6/0xf6\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n ? process_one_work+0xf1/0x1fc\n ? worker_thread+0x2c0/0x3b4\n ? kthread+0xc7/0xf0\n ? mod_delayed_work_on+0x4c/0x4c\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork+0x24/0x38\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork_asm+0xf/0x14\n ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57899",
"url": "https://www.suse.com/security/cve/CVE-2024-57899"
},
{
"category": "external",
"summary": "SUSE Bug 1235924 for CVE-2024-57899",
"url": "https://bugzilla.suse.com/1235924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57899"
},
{
"cve": "CVE-2024-57903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_REUSEPORT to inet sockets\n\nAfter blamed commit, crypto sockets could accidentally be destroyed\nfrom RCU call back, as spotted by zyzbot [1].\n\nTrying to acquire a mutex in RCU callback is not allowed.\n\nRestrict SO_REUSEPORT socket option to inet sockets.\n\nv1 of this patch supported TCP, UDP and SCTP sockets,\nbut fcnal-test.sh test needed RAW and ICMP support.\n\n[1]\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1\npreempt_count: 100, expected: 0\nRCU nest depth: 0, expected: 0\n1 lock held by ksoftirqd/1/24:\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823\nPreemption disabled at:\n [\u003cffffffff8161c8c8\u003e] softirq_handle_begin kernel/softirq.c:402 [inline]\n [\u003cffffffff8161c8c8\u003e] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537\nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n __might_resched+0x5d4/0x780 kernel/sched/core.c:8758\n __mutex_lock_common kernel/locking/mutex.c:562 [inline]\n __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735\n crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179\n aead_release+0x3d/0x50 crypto/algif_aead.c:489\n alg_do_release crypto/af_alg.c:118 [inline]\n alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502\n __sk_destruct+0x58/0x5f0 net/core/sock.c:2260\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:950\n smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57903",
"url": "https://www.suse.com/security/cve/CVE-2024-57903"
},
{
"category": "external",
"summary": "SUSE Bug 1235967 for CVE-2024-57903",
"url": "https://bugzilla.suse.com/1235967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57903"
},
{
"cve": "CVE-2024-57904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: at91: call input_free_device() on allocated iio_dev\n\nCurrent implementation of at91_ts_register() calls input_free_deivce()\non st-\u003ets_input, however, the err label can be reached before the\nallocated iio_dev is stored to st-\u003ets_input. Thus call\ninput_free_device() on input instead of st-\u003ets_input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57904",
"url": "https://www.suse.com/security/cve/CVE-2024-57904"
},
{
"category": "external",
"summary": "SUSE Bug 1236078 for CVE-2024-57904",
"url": "https://bugzilla.suse.com/1236078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57904"
},
{
"cve": "CVE-2024-57906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads8688: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57906",
"url": "https://www.suse.com/security/cve/CVE-2024-57906"
},
{
"category": "external",
"summary": "SUSE Bug 1236088 for CVE-2024-57906",
"url": "https://bugzilla.suse.com/1236088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-57906"
},
{
"cve": "CVE-2024-57907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe \u0027data\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57907",
"url": "https://www.suse.com/security/cve/CVE-2024-57907"
},
{
"category": "external",
"summary": "SUSE Bug 1236090 for CVE-2024-57907",
"url": "https://bugzilla.suse.com/1236090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2024-57907"
},
{
"cve": "CVE-2024-57908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57908",
"url": "https://www.suse.com/security/cve/CVE-2024-57908"
},
{
"category": "external",
"summary": "SUSE Bug 1236091 for CVE-2024-57908",
"url": "https://bugzilla.suse.com/1236091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57908"
},
{
"cve": "CVE-2024-57910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57910"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: vcnl4035: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to userspace from a\ntriggered buffer, but it does not set an initial value for the single\ndata element, which is an u16 aligned to 8 bytes. That leaves at least\n4 bytes uninitialized even after writing an integer value with\nregmap_read().\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57910",
"url": "https://www.suse.com/security/cve/CVE-2024-57910"
},
{
"category": "external",
"summary": "SUSE Bug 1236097 for CVE-2024-57910",
"url": "https://bugzilla.suse.com/1236097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57910"
},
{
"cve": "CVE-2024-57911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n\nThe \u0027data\u0027 array is allocated via kmalloc() and it is used to push data\nto user space from a triggered buffer, but it does not set values for\ninactive channels, as it only uses iio_for_each_active_channel()\nto assign new values.\n\nUse kzalloc for the memory allocation to avoid pushing uninitialized\ninformation to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57911",
"url": "https://www.suse.com/security/cve/CVE-2024-57911"
},
{
"category": "external",
"summary": "SUSE Bug 1236098 for CVE-2024-57911",
"url": "https://bugzilla.suse.com/1236098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57911"
},
{
"cve": "CVE-2024-57912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe \u0027sample\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57912",
"url": "https://www.suse.com/security/cve/CVE-2024-57912"
},
{
"category": "external",
"summary": "SUSE Bug 1236101 for CVE-2024-57912",
"url": "https://bugzilla.suse.com/1236101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57912"
},
{
"cve": "CVE-2024-57913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n\nThis commit addresses an issue related to below kernel panic where\npanic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON\nin functionsfs_bind, which easily leads to the following scenarios.\n\n1.adb_write in adbd 2. UDC write via configfs\n =================\t =====================\n\n-\u003eusb_ffs_open_thread() -\u003eUDC write\n -\u003eopen_functionfs() -\u003econfigfs_write_iter()\n -\u003eadb_open() -\u003egadget_dev_desc_UDC_store()\n -\u003eadb_write() -\u003eusb_gadget_register_driver_owner\n -\u003edriver_register()\n-\u003eStartMonitor() -\u003ebus_add_driver()\n -\u003eadb_read() -\u003egadget_bind_driver()\n\u003ctimes-out without BIND event\u003e -\u003econfigfs_composite_bind()\n -\u003eusb_add_function()\n-\u003eopen_functionfs() -\u003effs_func_bind()\n -\u003eadb_open() -\u003efunctionfs_bind()\n \u003cffs-\u003estate !=FFS_ACTIVE\u003e\n\nThe adb_open, adb_read, and adb_write operations are invoked from the\ndaemon, but trying to bind the function is a process that is invoked by\nUDC write through configfs, which opens up the possibility of a race\ncondition between the two paths. In this race scenario, the kernel panic\noccurs due to the WARN_ON from functionfs_bind when panic_on_warn is\nenabled. This commit fixes the kernel panic by removing the unnecessary\nWARN_ON.\n\nKernel panic - not syncing: kernel: panic_on_warn set ...\n[ 14.542395] Call trace:\n[ 14.542464] ffs_func_bind+0x1c8/0x14a8\n[ 14.542468] usb_add_function+0xcc/0x1f0\n[ 14.542473] configfs_composite_bind+0x468/0x588\n[ 14.542478] gadget_bind_driver+0x108/0x27c\n[ 14.542483] really_probe+0x190/0x374\n[ 14.542488] __driver_probe_device+0xa0/0x12c\n[ 14.542492] driver_probe_device+0x3c/0x220\n[ 14.542498] __driver_attach+0x11c/0x1fc\n[ 14.542502] bus_for_each_dev+0x104/0x160\n[ 14.542506] driver_attach+0x24/0x34\n[ 14.542510] bus_add_driver+0x154/0x270\n[ 14.542514] driver_register+0x68/0x104\n[ 14.542518] usb_gadget_register_driver_owner+0x48/0xf4\n[ 14.542523] gadget_dev_desc_UDC_store+0xf8/0x144\n[ 14.542526] configfs_write_iter+0xf0/0x138",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57913",
"url": "https://www.suse.com/security/cve/CVE-2024-57913"
},
{
"category": "external",
"summary": "SUSE Bug 1236102 for CVE-2024-57913",
"url": "https://bugzilla.suse.com/1236102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57913"
},
{
"cve": "CVE-2024-57915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57915"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57915",
"url": "https://www.suse.com/security/cve/CVE-2024-57915"
},
{
"category": "external",
"summary": "SUSE Bug 1236120 for CVE-2024-57915",
"url": "https://bugzilla.suse.com/1236120"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57915"
},
{
"cve": "CVE-2024-57916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n\nResolve kernel panic caused by improper handling of IRQs while\naccessing GPIO values. This is done by replacing generic_handle_irq with\nhandle_nested_irq.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57916",
"url": "https://www.suse.com/security/cve/CVE-2024-57916"
},
{
"category": "external",
"summary": "SUSE Bug 1236125 for CVE-2024-57916",
"url": "https://bugzilla.suse.com/1236125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57916"
},
{
"cve": "CVE-2024-57917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntopology: Keep the cpumask unchanged when printing cpumap\n\nDuring fuzz testing, the following warning was discovered:\n\n different return values (15 and 11) from vsnprintf(\"%*pbl\n \", ...)\n\n test:keyward is WARNING in kvasprintf\n WARNING: CPU: 55 PID: 1168477 at lib/kasprintf.c:30 kvasprintf+0x121/0x130\n Call Trace:\n kvasprintf+0x121/0x130\n kasprintf+0xa6/0xe0\n bitmap_print_to_buf+0x89/0x100\n core_siblings_list_read+0x7e/0xb0\n kernfs_file_read_iter+0x15b/0x270\n new_sync_read+0x153/0x260\n vfs_read+0x215/0x290\n ksys_read+0xb9/0x160\n do_syscall_64+0x56/0x100\n entry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nThe call trace shows that kvasprintf() reported this warning during the\nprinting of core_siblings_list. kvasprintf() has several steps:\n\n (1) First, calculate the length of the resulting formatted string.\n\n (2) Allocate a buffer based on the returned length.\n\n (3) Then, perform the actual string formatting.\n\n (4) Check whether the lengths of the formatted strings returned in\n steps (1) and (2) are consistent.\n\nIf the core_cpumask is modified between steps (1) and (3), the lengths\nobtained in these two steps may not match. Indeed our test includes cpu\nhotplugging, which should modify core_cpumask while printing.\n\nTo fix this issue, cache the cpumask into a temporary variable before\ncalling cpumap_print_{list, cpumask}_to_buf(), to keep it unchanged\nduring the printing process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57917",
"url": "https://www.suse.com/security/cve/CVE-2024-57917"
},
{
"category": "external",
"summary": "SUSE Bug 1236127 for CVE-2024-57917",
"url": "https://bugzilla.suse.com/1236127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57917"
},
{
"cve": "CVE-2024-57922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57922",
"url": "https://www.suse.com/security/cve/CVE-2024-57922"
},
{
"category": "external",
"summary": "SUSE Bug 1236080 for CVE-2024-57922",
"url": "https://bugzilla.suse.com/1236080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57922"
},
{
"cve": "CVE-2024-57926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57926"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err\n\nThe pointer need to be set to NULL, otherwise KASAN complains about\nuse-after-free. Because in mtk_drm_bind, all private\u0027s drm are set\nas follows.\n\nprivate-\u003eall_drm_private[i]-\u003edrm = drm;\n\nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns\nfailure. However, the shutdown path still accesses the previous allocated\nmemory in drm_atomic_helper_shutdown.\n\n[ 84.874820] watchdog: watchdog0: watchdog did not stop!\n[ 86.512054] ==================================================================\n[ 86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1\n[ 86.515213]\n[ 86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55\n[ 86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022\n[ 86.517960] Call trace:\n[ 86.518333] show_stack+0x20/0x38 (C)\n[ 86.518891] dump_stack_lvl+0x90/0xd0\n[ 86.519443] print_report+0xf8/0x5b0\n[ 86.519985] kasan_report+0xb4/0x100\n[ 86.520526] __asan_report_load8_noabort+0x20/0x30\n[ 86.521240] drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.521966] mtk_drm_shutdown+0x54/0x80\n[ 86.522546] platform_shutdown+0x64/0x90\n[ 86.523137] device_shutdown+0x260/0x5b8\n[ 86.523728] kernel_restart+0x78/0xf0\n[ 86.524282] __do_sys_reboot+0x258/0x2f0\n[ 86.524871] __arm64_sys_reboot+0x90/0xd8\n[ 86.525473] invoke_syscall+0x74/0x268\n[ 86.526041] el0_svc_common.constprop.0+0xb0/0x240\n[ 86.526751] do_el0_svc+0x4c/0x70\n[ 86.527251] el0_svc+0x4c/0xc0\n[ 86.527719] el0t_64_sync_handler+0x144/0x168\n[ 86.528367] el0t_64_sync+0x198/0x1a0\n[ 86.528920]\n[ 86.529157] The buggy address belongs to the physical page:\n[ 86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc\n[ 86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)\n[ 86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000\n[ 86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000\n[ 86.534511] page dumped because: kasan: bad access detected\n[ 86.535323]\n[ 86.535559] Memory state around the buggy address:\n[ 86.536265] ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.537314] ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.538363] \u003effff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.544733] ^\n[ 86.551057] ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.557510] ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.563928] ==================================================================\n[ 86.571093] Disabling lock debugging due to kernel taint\n[ 86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b\n[ 86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57926",
"url": "https://www.suse.com/security/cve/CVE-2024-57926"
},
{
"category": "external",
"summary": "SUSE Bug 1236082 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "external",
"summary": "SUSE Bug 1236084 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "important"
}
],
"title": "CVE-2024-57926"
},
{
"cve": "CVE-2024-57929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: fix releasing a faulty array block twice in dm_array_cursor_end\n\nWhen dm_bm_read_lock() fails due to locking or checksum errors, it\nreleases the faulty block implicitly while leaving an invalid output\npointer behind. The caller of dm_bm_read_lock() should not operate on\nthis invalid dm_block pointer, or it will lead to undefined result.\nFor example, the dm_array_cursor incorrectly caches the invalid pointer\non reading a faulty array block, causing a double release in\ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().\n\nReproduce steps:\n\n1. initialize a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. wipe the second array block offline\n\ndmsteup remove cache cmeta cdata corig\nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock\n\n3. try reopen the cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10\ndevice-mapper: block manager: array validator check failed for block 10\ndevice-mapper: array: get_ablock failed\ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed\n------------[ cut here ]------------\nkernel BUG at drivers/md/dm-bufio.c:638!\n\nFix by setting the cached block pointer to NULL on errors.\n\nIn addition to the reproducer described above, this fix can be\nverified using the \"array_cursor/damaged\" test in dm-unit:\n dm-unit run /pdata/array_cursor/damaged --kernel-dir \u003cKERNEL_DIR\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57929",
"url": "https://www.suse.com/security/cve/CVE-2024-57929"
},
{
"category": "external",
"summary": "SUSE Bug 1236096 for CVE-2024-57929",
"url": "https://bugzilla.suse.com/1236096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57929"
},
{
"cve": "CVE-2024-57931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: ignore unknown extended permissions\n\nWhen evaluating extended permissions, ignore unknown permissions instead\nof calling BUG(). This commit ensures that future permissions can be\nadded without interfering with older kernels.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57931",
"url": "https://www.suse.com/security/cve/CVE-2024-57931"
},
{
"category": "external",
"summary": "SUSE Bug 1236192 for CVE-2024-57931",
"url": "https://bugzilla.suse.com/1236192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57931"
},
{
"cve": "CVE-2024-57932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv-\u003enum_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57932",
"url": "https://www.suse.com/security/cve/CVE-2024-57932"
},
{
"category": "external",
"summary": "SUSE Bug 1236190 for CVE-2024-57932",
"url": "https://bugzilla.suse.com/1236190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57932"
},
{
"cve": "CVE-2024-57933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XSK operations on the existence of queues\n\nThis patch predicates the enabling and disabling of XSK pools on the\nexistence of queues. As it stands, if the interface is down, disabling\nor enabling XSK pools would result in a crash, as the RX queue pointer\nwould be NULL. XSK pool registration will occur as part of the next\ninterface up.\n\nSimilarly, xsk_wakeup needs be guarded against queues disappearing\nwhile the function is executing, so a check against the\nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the\ndisabling of the bit and the synchronize_net() in gve_turndown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57933",
"url": "https://www.suse.com/security/cve/CVE-2024-57933"
},
{
"category": "external",
"summary": "SUSE Bug 1236178 for CVE-2024-57933",
"url": "https://bugzilla.suse.com/1236178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57933"
},
{
"cve": "CVE-2024-57935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57935",
"url": "https://www.suse.com/security/cve/CVE-2024-57935"
},
{
"category": "external",
"summary": "SUSE Bug 1236180 for CVE-2024-57935",
"url": "https://bugzilla.suse.com/1236180"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57935"
},
{
"cve": "CVE-2024-57936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Fix max SGEs for the Work Request\n\nGen P7 supports up to 13 SGEs for now. WQE software structure\ncan hold only 6 now. Since the max send sge is reported as\n13, the stack can give requests up to 13 SGEs. This is causing\ntraffic failures and system crashes.\n\nUse the define for max SGE supported for variable size. This\nwill work for both static and variable WQEs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57936",
"url": "https://www.suse.com/security/cve/CVE-2024-57936"
},
{
"category": "external",
"summary": "SUSE Bug 1236181 for CVE-2024-57936",
"url": "https://bugzilla.suse.com/1236181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57936"
},
{
"cve": "CVE-2024-57938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()\n\nWhile by default max_autoclose equals to INT_MAX / HZ, one may set\nnet.sctp.max_autoclose to UINT_MAX. There is code in\nsctp_association_init() that can consequently trigger overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57938",
"url": "https://www.suse.com/security/cve/CVE-2024-57938"
},
{
"category": "external",
"summary": "SUSE Bug 1236182 for CVE-2024-57938",
"url": "https://bugzilla.suse.com/1236182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57938"
},
{
"cve": "CVE-2024-57940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix the infinite loop in exfat_readdir()\n\nIf the file system is corrupted so that a cluster is linked to\nitself in the cluster chain, and there is an unused directory\nentry in the cluster, \u0027dentry\u0027 will not be incremented, causing\ncondition \u0027dentry \u003c max_dentries\u0027 unable to prevent an infinite\nloop.\n\nThis infinite loop causes s_lock not to be released, and other\ntasks will hang, such as exfat_sync_fs().\n\nThis commit stops traversing the cluster chain when there is unused\ndirectory entry in the cluster to avoid this infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57940",
"url": "https://www.suse.com/security/cve/CVE-2024-57940"
},
{
"category": "external",
"summary": "SUSE Bug 1236227 for CVE-2024-57940",
"url": "https://bugzilla.suse.com/1236227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57940"
},
{
"cve": "CVE-2024-57946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: don\u0027t keep queue frozen during system suspend\n\nCommit 4ce6e2db00de (\"virtio-blk: Ensure no requests in virtqueues before\ndeleting vqs.\") replaces queue quiesce with queue freeze in virtio-blk\u0027s\nPM callbacks. And the motivation is to drain inflight IOs before suspending.\n\nblock layer\u0027s queue freeze looks very handy, but it is also easy to cause\ndeadlock, such as, any attempt to call into bio_queue_enter() may run into\ndeadlock if the queue is frozen in current context. There are all kinds\nof -\u003esuspend() called in suspend context, so keeping queue frozen in the\nwhole suspend context isn\u0027t one good idea. And Marek reported lockdep\nwarning[1] caused by virtio-blk\u0027s freeze queue in virtblk_freeze().\n\n[1] https://lore.kernel.org/linux-block/ca16370e-d646-4eee-b9cc-87277c89c43c@samsung.com/\n\nGiven the motivation is to drain in-flight IOs, it can be done by calling\nfreeze \u0026 unfreeze, meantime restore to previous behavior by keeping queue\nquiesced during suspend.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57946",
"url": "https://www.suse.com/security/cve/CVE-2024-57946"
},
{
"category": "external",
"summary": "SUSE Bug 1236247 for CVE-2024-57946",
"url": "https://bugzilla.suse.com/1236247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2024-57946"
},
{
"cve": "CVE-2025-21632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Ensure shadow stack is active before \"getting\" registers\n\nThe x86 shadow stack support has its own set of registers. Those registers\nare XSAVE-managed, but they are \"supervisor state components\" which means\nthat userspace can not touch them with XSAVE/XRSTOR. It also means that\nthey are not accessible from the existing ptrace ABI for XSAVE state.\nThus, there is a new ptrace get/set interface for it.\n\nThe regset code that ptrace uses provides an -\u003eactive() handler in\naddition to the get/set ones. For shadow stack this -\u003eactive() handler\nverifies that shadow stack is enabled via the ARCH_SHSTK_SHSTK bit in the\nthread struct. The -\u003eactive() handler is checked from some call sites of\nthe regset get/set handlers, but not the ptrace ones. This was not\nunderstood when shadow stack support was put in place.\n\nAs a result, both the set/get handlers can be called with\nXFEATURE_CET_USER in its init state, which would cause get_xsave_addr() to\nreturn NULL and trigger a WARN_ON(). The ssp_set() handler luckily has an\nssp_active() check to avoid surprising the kernel with shadow stack\nbehavior when the kernel is not ready for it (ARCH_SHSTK_SHSTK==0). That\ncheck just happened to avoid the warning.\n\nBut the -\u003eget() side wasn\u0027t so lucky. It can be called with shadow stacks\ndisabled, triggering the warning in practice, as reported by Christina\nSchimpe:\n\nWARNING: CPU: 5 PID: 1773 at arch/x86/kernel/fpu/regset.c:198 ssp_get+0x89/0xa0\n[...]\nCall Trace:\n\u003cTASK\u003e\n? show_regs+0x6e/0x80\n? ssp_get+0x89/0xa0\n? __warn+0x91/0x150\n? ssp_get+0x89/0xa0\n? report_bug+0x19d/0x1b0\n? handle_bug+0x46/0x80\n? exc_invalid_op+0x1d/0x80\n? asm_exc_invalid_op+0x1f/0x30\n? __pfx_ssp_get+0x10/0x10\n? ssp_get+0x89/0xa0\n? ssp_get+0x52/0xa0\n__regset_get+0xad/0xf0\ncopy_regset_to_user+0x52/0xc0\nptrace_regset+0x119/0x140\nptrace_request+0x13c/0x850\n? wait_task_inactive+0x142/0x1d0\n? do_syscall_64+0x6d/0x90\narch_ptrace+0x102/0x300\n[...]\n\nEnsure that shadow stacks are active in a thread before looking them up\nin the XSAVE buffer. Since ARCH_SHSTK_SHSTK and user_ssp[SHSTK_EN] are\nset at the same time, the active check ensures that there will be\nsomething to find in the XSAVE buffer.\n\n[ dhansen: changelog/subject tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21632",
"url": "https://www.suse.com/security/cve/CVE-2025-21632"
},
{
"category": "external",
"summary": "SUSE Bug 1236106 for CVE-2025-21632",
"url": "https://bugzilla.suse.com/1236106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21632"
},
{
"cve": "CVE-2025-21645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it\n\nWakeup for IRQ1 should be disabled only in cases where i8042 had\nactually enabled it, otherwise \"wake_depth\" for this IRQ will try to\ndrop below zero and there will be an unpleasant WARN() logged:\n\nkernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug\nkernel: ------------[ cut here ]------------\nkernel: Unbalanced IRQ 1 wake disable\nkernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0\n\nThe PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops\nwhich sets amd_pmc_suspend_handler() to the .suspend, .freeze, and\n.poweroff handlers. i8042_pm_suspend(), however, is only set as\nthe .suspend handler.\n\nFix the issue by call PMC suspend handler only from the same set of\ndev_pm_ops handlers as i8042_pm_suspend(), which currently means just\nthe .suspend handler.\n\nTo reproduce this issue try hibernating (S4) the machine after a fresh boot\nwithout putting it into s2idle first.\n\n[ij: edited the commit message.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21645",
"url": "https://www.suse.com/security/cve/CVE-2025-21645"
},
{
"category": "external",
"summary": "SUSE Bug 1236131 for CVE-2025-21645",
"url": "https://bugzilla.suse.com/1236131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21645"
},
{
"cve": "CVE-2025-21646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21646"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the maximum cell name length\n\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\nproblem occurs if someone actually does that: kafs tries to create a\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\nwith a warning:\n\n WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\n\nbecause procfs limits the maximum filename length to 255.\n\nHowever, the DNS limits the maximum lookup length and, by extension, the\nmaximum cell name, to 255 less two (length count and trailing NUL).\n\nFix this by limiting the maximum acceptable cellname length to 253. This\nalso allows us to be sure we can create the \"/afs/.\u003ccell\u003e/\" mountpoint too.\n\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\nexceeds 253.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21646",
"url": "https://www.suse.com/security/cve/CVE-2025-21646"
},
{
"category": "external",
"summary": "SUSE Bug 1236168 for CVE-2025-21646",
"url": "https://bugzilla.suse.com/1236168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21646"
},
{
"cve": "CVE-2025-21649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is sent on HIP08 devices\n\nCurrently, HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL. But the tx process would still try to set hardware time\nstamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.\n\n[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge]\n[ 128.292938] sp : ffff800059b93140\n[ 128.297200] x29: ffff800059b93140 x28: 0000000000003280\n[ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080\n[ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001\n[ 128.315969] x23: 0000000000000000 x22: 0000000000000194\n[ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000\n[ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000\n[ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24\n[ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000\n[ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368\n[ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02\n[ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0\n[ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000\n[ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff\n[ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294\n[ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080\n[ 128.390626] Call trace:\n[ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3]\n[ 128.405468] xmit_one.constprop.0+0xc4/0x200\n[ 128.410600] dev_hard_start_xmit+0x54/0xf0\n[ 128.415556] sch_direct_xmit+0xe8/0x634\n[ 128.420246] __dev_queue_xmit+0x224/0xc70\n[ 128.425101] dev_queue_xmit+0x1c/0x40\n[ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch]\n[ 128.435409] do_output+0x60/0x17c [openvswitch]\n[ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch]\n[ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch]\n[ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch]\n[ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch]\n[ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch]\n[ 128.471460] xmit_one.constprop.0+0xc4/0x200\n[ 128.476561] dev_hard_start_xmit+0x54/0xf0\n[ 128.481489] __dev_queue_xmit+0x968/0xc70\n[ 128.486330] dev_queue_xmit+0x1c/0x40\n[ 128.490856] ip_finish_output2+0x250/0x570\n[ 128.495810] __ip_finish_output+0x170/0x1e0\n[ 128.500832] ip_finish_output+0x3c/0xf0\n[ 128.505504] ip_output+0xbc/0x160\n[ 128.509654] ip_send_skb+0x58/0xd4\n[ 128.513892] udp_send_skb+0x12c/0x354\n[ 128.518387] udp_sendmsg+0x7a8/0x9c0\n[ 128.522793] inet_sendmsg+0x4c/0x8c\n[ 128.527116] __sock_sendmsg+0x48/0x80\n[ 128.531609] __sys_sendto+0x124/0x164\n[ 128.536099] __arm64_sys_sendto+0x30/0x5c\n[ 128.540935] invoke_syscall+0x50/0x130\n[ 128.545508] el0_svc_common.constprop.0+0x10c/0x124\n[ 128.551205] do_el0_svc+0x34/0xdc\n[ 128.555347] el0_svc+0x20/0x30\n[ 128.559227] el0_sync_handler+0xb8/0xc0\n[ 128.563883] el0_sync+0x160/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21649",
"url": "https://www.suse.com/security/cve/CVE-2025-21649"
},
{
"category": "external",
"summary": "SUSE Bug 1236143 for CVE-2025-21649",
"url": "https://bugzilla.suse.com/1236143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21649"
},
{
"cve": "CVE-2025-21650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue\n\nThe TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs\n1024-1279 are in different BAR space addresses. However,\nhclge_fetch_pf_reg does not distinguish the tqp space information when\nreading the tqp space information. When the number of TQPs is greater\nthan 1024, access bar space overwriting occurs.\nThe problem of different segments has been considered during the\ninitialization of tqp.io_base. Therefore, tqp.io_base is directly used\nwhen the queue is read in hclge_fetch_pf_reg.\n\nThe error message:\n\nUnable to handle kernel paging request at virtual address ffff800037200000\npc : hclge_fetch_pf_reg+0x138/0x250 [hclge]\nlr : hclge_get_regs+0x84/0x1d0 [hclge]\nCall trace:\n hclge_fetch_pf_reg+0x138/0x250 [hclge]\n hclge_get_regs+0x84/0x1d0 [hclge]\n hns3_get_regs+0x2c/0x50 [hns3]\n ethtool_get_regs+0xf4/0x270\n dev_ethtool+0x674/0x8a0\n dev_ioctl+0x270/0x36c\n sock_do_ioctl+0x110/0x2a0\n sock_ioctl+0x2ac/0x530\n __arm64_sys_ioctl+0xa8/0x100\n invoke_syscall+0x4c/0x124\n el0_svc_common.constprop.0+0x140/0x15c\n do_el0_svc+0x30/0xd0\n el0_svc+0x1c/0x2c\n el0_sync_handler+0xb0/0xb4\n el0_sync+0x168/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21650",
"url": "https://www.suse.com/security/cve/CVE-2025-21650"
},
{
"category": "external",
"summary": "SUSE Bug 1236144 for CVE-2025-21650",
"url": "https://bugzilla.suse.com/1236144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21650"
},
{
"cve": "CVE-2025-21651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: don\u0027t auto enable misc vector\n\nCurrently, there is a time window between misc irq enabled\nand service task inited. If an interrupte is reported at\nthis time, it will cause warning like below:\n\n[ 16.324639] Call trace:\n[ 16.324641] __queue_delayed_work+0xb8/0xe0\n[ 16.324643] mod_delayed_work_on+0x78/0xd0\n[ 16.324655] hclge_errhand_task_schedule+0x58/0x90 [hclge]\n[ 16.324662] hclge_misc_irq_handle+0x168/0x240 [hclge]\n[ 16.324666] __handle_irq_event_percpu+0x64/0x1e0\n[ 16.324667] handle_irq_event+0x80/0x170\n[ 16.324670] handle_fasteoi_edge_irq+0x110/0x2bc\n[ 16.324671] __handle_domain_irq+0x84/0xfc\n[ 16.324673] gic_handle_irq+0x88/0x2c0\n[ 16.324674] el1_irq+0xb8/0x140\n[ 16.324677] arch_cpu_idle+0x18/0x40\n[ 16.324679] default_idle_call+0x5c/0x1bc\n[ 16.324682] cpuidle_idle_call+0x18c/0x1c4\n[ 16.324684] do_idle+0x174/0x17c\n[ 16.324685] cpu_startup_entry+0x30/0x6c\n[ 16.324687] secondary_start_kernel+0x1a4/0x280\n[ 16.324688] ---[ end trace 6aa0bff672a964aa ]---\n\nSo don\u0027t auto enable misc vector when request irq..",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21651",
"url": "https://www.suse.com/security/cve/CVE-2025-21651"
},
{
"category": "external",
"summary": "SUSE Bug 1236145 for CVE-2025-21651",
"url": "https://bugzilla.suse.com/1236145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21651"
},
{
"cve": "CVE-2025-21652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21652"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Fix use-after-free in ipvlan_get_iflink().\n\nsyzbot presented an use-after-free report [0] regarding ipvlan and\nlinkwatch.\n\nipvlan does not hold a refcnt of the lower device unlike vlan and\nmacvlan.\n\nIf the linkwatch work is triggered for the ipvlan dev, the lower dev\nmight have already been freed, resulting in UAF of ipvlan-\u003ephy_dev in\nipvlan_get_iflink().\n\nWe can delay the lower dev unregistration like vlan and macvlan by\nholding the lower dev\u0027s refcnt in dev-\u003enetdev_ops-\u003endo_init() and\nreleasing it in dev-\u003epriv_destructor().\n\nJakub pointed out calling .ndo_XXX after unregister_netdevice() has\nreturned is error prone and suggested [1] addressing this UAF in the\ncore by taking commit 750e51603395 (\"net: avoid potential UAF in\ndefault_operstate()\") further.\n\nLet\u0027s assume unregistering devices DOWN and use RCU protection in\ndefault_operstate() not to race with the device unregistration.\n\n[0]:\nBUG: KASAN: slab-use-after-free in ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\nRead of size 4 at addr ffff0000d768c0e0 by task kworker/u8:35/6944\n\nCPU: 0 UID: 0 PID: 6944 Comm: kworker/u8:35 Not tainted 6.13.0-rc2-g9bc5c9515b48 #12 4c3cb9e8b4565456f6a355f312ff91f4f29b3c47\nHardware name: linux,dummy-virt (DT)\nWorkqueue: events_unbound linkwatch_event\nCall trace:\n show_stack+0x38/0x50 arch/arm64/kernel/stacktrace.c:484 (C)\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xbc/0x108 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x16c/0x6f0 mm/kasan/report.c:489\n kasan_report+0xc0/0x120 mm/kasan/report.c:602\n __asan_report_load4_noabort+0x20/0x30 mm/kasan/report_generic.c:380\n ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\n dev_get_iflink+0x7c/0xd8 net/core/dev.c:674\n default_operstate net/core/link_watch.c:45 [inline]\n rfc2863_policy+0x144/0x360 net/core/link_watch.c:72\n linkwatch_do_dev+0x60/0x228 net/core/link_watch.c:175\n __linkwatch_run_queue+0x2f4/0x5b8 net/core/link_watch.c:239\n linkwatch_event+0x64/0xa8 net/core/link_watch.c:282\n process_one_work+0x700/0x1398 kernel/workqueue.c:3229\n process_scheduled_works kernel/workqueue.c:3310 [inline]\n worker_thread+0x8c4/0xe10 kernel/workqueue.c:3391\n kthread+0x2b0/0x360 kernel/kthread.c:389\n ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862\n\nAllocated by task 9303:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x30/0x68 mm/kasan/common.c:68\n kasan_save_alloc_info+0x44/0x58 mm/kasan/generic.c:568\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x84/0xa0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4283 [inline]\n __kmalloc_node_noprof+0x2a0/0x560 mm/slub.c:4289\n __kvmalloc_node_noprof+0x9c/0x230 mm/util.c:650\n alloc_netdev_mqs+0xb4/0x1118 net/core/dev.c:11209\n rtnl_create_link+0x2b8/0xb60 net/core/rtnetlink.c:3595\n rtnl_newlink_create+0x19c/0x868 net/core/rtnetlink.c:3771\n __rtnl_newlink net/core/rtnetlink.c:3896 [inline]\n rtnl_newlink+0x122c/0x15c0 net/core/rtnetlink.c:4011\n rtnetlink_rcv_msg+0x61c/0x918 net/core/rtnetlink.c:6901\n netlink_rcv_skb+0x1dc/0x398 net/netlink/af_netlink.c:2542\n rtnetlink_rcv+0x34/0x50 net/core/rtnetlink.c:6928\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x618/0x838 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x5fc/0x8b0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x2ec/0x438 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __arm64_sys_sendto+0xe4/0x110 net/socket.c:2200\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x90/0x278 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x13c/0x250 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x54/0x70 arch/arm64/kernel/syscall.c:151\n el\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21652",
"url": "https://www.suse.com/security/cve/CVE-2025-21652"
},
{
"category": "external",
"summary": "SUSE Bug 1236160 for CVE-2025-21652",
"url": "https://bugzilla.suse.com/1236160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21652"
},
{
"cve": "CVE-2025-21653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute\n\nsyzbot found that TCA_FLOW_RSHIFT attribute was not validated.\nRight shitfing a 32bit integer is undefined for large shift values.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_flow.c:329:23\nshift exponent 9445 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: ipv6_addrconf addrconf_dad_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468\n flow_classify+0x24d5/0x25b0 net/sched/cls_flow.c:329\n tc_classify include/net/tc_wrapper.h:197 [inline]\n __tcf_classify net/sched/cls_api.c:1771 [inline]\n tcf_classify+0x420/0x1160 net/sched/cls_api.c:1867\n sfb_classify net/sched/sch_sfb.c:260 [inline]\n sfb_enqueue+0x3ad/0x18b0 net/sched/sch_sfb.c:318\n dev_qdisc_enqueue+0x4b/0x290 net/core/dev.c:3793\n __dev_xmit_skb net/core/dev.c:3889 [inline]\n __dev_queue_xmit+0xf0e/0x3f50 net/core/dev.c:4400\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n neigh_hh_output include/net/neighbour.h:523 [inline]\n neigh_output include/net/neighbour.h:537 [inline]\n ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236\n iptunnel_xmit+0x55d/0x9b0 net/ipv4/ip_tunnel_core.c:82\n udp_tunnel_xmit_skb+0x262/0x3b0 net/ipv4/udp_tunnel_core.c:173\n geneve_xmit_skb drivers/net/geneve.c:916 [inline]\n geneve_xmit+0x21dc/0x2d00 drivers/net/geneve.c:1039\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606\n __dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4434",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21653",
"url": "https://www.suse.com/security/cve/CVE-2025-21653"
},
{
"category": "external",
"summary": "SUSE Bug 1236161 for CVE-2025-21653",
"url": "https://bugzilla.suse.com/1236161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21653"
},
{
"cve": "CVE-2025-21655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21655"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/eventfd: ensure io_eventfd_signal() defers another RCU period\n\nio_eventfd_do_signal() is invoked from an RCU callback, but when\ndropping the reference to the io_ev_fd, it calls io_eventfd_free()\ndirectly if the refcount drops to zero. This isn\u0027t correct, as any\npotential freeing of the io_ev_fd should be deferred another RCU grace\nperiod.\n\nJust call io_eventfd_put() rather than open-code the dec-and-test and\nfree, which will correctly defer it another RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21655",
"url": "https://www.suse.com/security/cve/CVE-2025-21655"
},
{
"category": "external",
"summary": "SUSE Bug 1236163 for CVE-2025-21655",
"url": "https://bugzilla.suse.com/1236163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21655"
},
{
"cve": "CVE-2025-21656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur\n\nscsi_execute_cmd() function can return both negative (linux codes) and\npositive (scsi_cmnd result field) error codes.\n\nCurrently the driver just passes error codes of scsi_execute_cmd() to\nhwmon core, which is incorrect because hwmon only checks for negative\nerror codes. This leads to hwmon reporting uninitialized data to\nuserspace in case of SCSI errors (for example if the disk drive was\ndisconnected).\n\nThis patch checks scsi_execute_cmd() output and returns -EIO if it\u0027s\nerror code is positive.\n\n[groeck: Avoid inline variable declaration for portability]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21656",
"url": "https://www.suse.com/security/cve/CVE-2025-21656"
},
{
"category": "external",
"summary": "SUSE Bug 1236248 for CVE-2025-21656",
"url": "https://bugzilla.suse.com/1236248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "low"
}
],
"title": "CVE-2025-21656"
},
{
"cve": "CVE-2025-21662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix variable not being completed when function returns\n\nWhen cmd_alloc_index(), fails cmd_work_handler() needs\nto complete ent-\u003eslotted before returning early.\nOtherwise the task which issued the command may hang:\n\n mlx5_core 0000:01:00.0: cmd_work_handler:877:(pid 3880418): failed to allocate command entry\n INFO: task kworker/13:2:4055883 blocked for more than 120 seconds.\n Not tainted 4.19.90-25.44.v2101.ky10.aarch64 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n kworker/13:2 D 0 4055883 2 0x00000228\n Workqueue: events mlx5e_tx_dim_work [mlx5_core]\n Call trace:\n __switch_to+0xe8/0x150\n __schedule+0x2a8/0x9b8\n schedule+0x2c/0x88\n schedule_timeout+0x204/0x478\n wait_for_common+0x154/0x250\n wait_for_completion+0x28/0x38\n cmd_exec+0x7a0/0xa00 [mlx5_core]\n mlx5_cmd_exec+0x54/0x80 [mlx5_core]\n mlx5_core_modify_cq+0x6c/0x80 [mlx5_core]\n mlx5_core_modify_cq_moderation+0xa0/0xb8 [mlx5_core]\n mlx5e_tx_dim_work+0x54/0x68 [mlx5_core]\n process_one_work+0x1b0/0x448\n worker_thread+0x54/0x468\n kthread+0x134/0x138\n ret_from_fork+0x10/0x18",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21662",
"url": "https://www.suse.com/security/cve/CVE-2025-21662"
},
{
"category": "external",
"summary": "SUSE Bug 1236198 for CVE-2025-21662",
"url": "https://bugzilla.suse.com/1236198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21662"
},
{
"cve": "CVE-2025-21663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: dwmac-tegra: Read iommu stream id from device tree\n\nNvidia\u0027s Tegra MGBE controllers require the IOMMU \"Stream ID\" (SID) to be\nwritten to the MGBE_WRAP_AXI_ASID0_CTRL register.\n\nThe current driver is hard coded to use MGBE0\u0027s SID for all controllers.\nThis causes softirq time outs and kernel panics when using controllers\nother than MGBE0.\n\nExample dmesg errors when an ethernet cable is connected to MGBE1:\n\n[ 116.133290] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 121.851283] tegra-mgbe 6910000.ethernet eth1: NETDEV WATCHDOG: CPU: 5: transmit queue 0 timed out 5690 ms\n[ 121.851782] tegra-mgbe 6910000.ethernet eth1: Reset adapter.\n[ 121.892464] tegra-mgbe 6910000.ethernet eth1: Register MEM_TYPE_PAGE_POOL RxQ-0\n[ 121.905920] tegra-mgbe 6910000.ethernet eth1: PHY [stmmac-1:00] driver [Aquantia AQR113] (irq=171)\n[ 121.907356] tegra-mgbe 6910000.ethernet eth1: Enabling Safety Features\n[ 121.907578] tegra-mgbe 6910000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported\n[ 121.908399] tegra-mgbe 6910000.ethernet eth1: registered PTP clock\n[ 121.908582] tegra-mgbe 6910000.ethernet eth1: configuring for phy/10gbase-r link mode\n[ 125.961292] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 181.921198] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:\n[ 181.921404] rcu: \t7-....: (1 GPs behind) idle=540c/1/0x4000000000000002 softirq=1748/1749 fqs=2337\n[ 181.921684] rcu: \t(detected by 4, t=6002 jiffies, g=1357, q=1254 ncpus=8)\n[ 181.921878] Sending NMI from CPU 4 to CPUs 7:\n[ 181.921886] NMI backtrace for cpu 7\n[ 181.922131] CPU: 7 UID: 0 PID: 0 Comm: swapper/7 Kdump: loaded Not tainted 6.13.0-rc3+ #6\n[ 181.922390] Hardware name: NVIDIA CTI Forge + Orin AGX/Jetson, BIOS 202402.1-Unknown 10/28/2024\n[ 181.922658] pstate: 40400009 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 181.922847] pc : handle_softirqs+0x98/0x368\n[ 181.922978] lr : __do_softirq+0x18/0x20\n[ 181.923095] sp : ffff80008003bf50\n[ 181.923189] x29: ffff80008003bf50 x28: 0000000000000008 x27: 0000000000000000\n[ 181.923379] x26: ffffce78ea277000 x25: 0000000000000000 x24: 0000001c61befda0\n[ 181.924486] x23: 0000000060400009 x22: ffffce78e99918bc x21: ffff80008018bd70\n[ 181.925568] x20: ffffce78e8bb00d8 x19: ffff80008018bc20 x18: 0000000000000000\n[ 181.926655] x17: ffff318ebe7d3000 x16: ffff800080038000 x15: 0000000000000000\n[ 181.931455] x14: ffff000080816680 x13: ffff318ebe7d3000 x12: 000000003464d91d\n[ 181.938628] x11: 0000000000000040 x10: ffff000080165a70 x9 : ffffce78e8bb0160\n[ 181.945804] x8 : ffff8000827b3160 x7 : f9157b241586f343 x6 : eeb6502a01c81c74\n[ 181.953068] x5 : a4acfcdd2e8096bb x4 : ffffce78ea277340 x3 : 00000000ffffd1e1\n[ 181.960329] x2 : 0000000000000101 x1 : ffffce78ea277340 x0 : ffff318ebe7d3000\n[ 181.967591] Call trace:\n[ 181.970043] handle_softirqs+0x98/0x368 (P)\n[ 181.974240] __do_softirq+0x18/0x20\n[ 181.977743] ____do_softirq+0x14/0x28\n[ 181.981415] call_on_irq_stack+0x24/0x30\n[ 181.985180] do_softirq_own_stack+0x20/0x30\n[ 181.989379] __irq_exit_rcu+0x114/0x140\n[ 181.993142] irq_exit_rcu+0x14/0x28\n[ 181.996816] el1_interrupt+0x44/0xb8\n[ 182.000316] el1h_64_irq_handler+0x14/0x20\n[ 182.004343] el1h_64_irq+0x80/0x88\n[ 182.007755] cpuidle_enter_state+0xc4/0x4a8 (P)\n[ 182.012305] cpuidle_enter+0x3c/0x58\n[ 182.015980] cpuidle_idle_call+0x128/0x1c0\n[ 182.020005] do_idle+0xe0/0xf0\n[ 182.023155] cpu_startup_entry+0x3c/0x48\n[ 182.026917] secondary_start_kernel+0xdc/0x120\n[ 182.031379] __secondary_switched+0x74/0x78\n[ 212.971162] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 7-.... } 6103 jiffies s: 417 root: 0x80/.\n[ 212.985935] rcu: blocking rcu_node structures (internal RCU debug):\n[ 212.992758] Sending NMI from CPU 0 to CPUs 7:\n[ 212.998539] NMI backtrace for cpu 7\n[ 213.004304] CPU: 7 UID: 0 PI\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21663",
"url": "https://www.suse.com/security/cve/CVE-2025-21663"
},
{
"category": "external",
"summary": "SUSE Bug 1236260 for CVE-2025-21663",
"url": "https://bugzilla.suse.com/1236260"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21663"
},
{
"cve": "CVE-2025-21664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm thin: make get_first_thin use rcu-safe list first function\n\nThe documentation in rculist.h explains the absence of list_empty_rcu()\nand cautions programmers against relying on a list_empty() -\u003e\nlist_first() sequence in RCU safe code. This is because each of these\nfunctions performs its own READ_ONCE() of the list head. This can lead\nto a situation where the list_empty() sees a valid list entry, but the\nsubsequent list_first() sees a different view of list head state after a\nmodification.\n\nIn the case of dm-thin, this author had a production box crash from a GP\nfault in the process_deferred_bios path. This function saw a valid list\nhead in get_first_thin() but when it subsequently dereferenced that and\nturned it into a thin_c, it got the inside of the struct pool, since the\nlist was now empty and referring to itself. The kernel on which this\noccurred printed both a warning about a refcount_t being saturated, and\na UBSAN error for an out-of-bounds cpuid access in the queued spinlock,\nprior to the fault itself. When the resulting kdump was examined, it\nwas possible to see another thread patiently waiting in thin_dtr\u0027s\nsynchronize_rcu.\n\nThe thin_dtr call managed to pull the thin_c out of the active thins\nlist (and have it be the last entry in the active_thins list) at just\nthe wrong moment which lead to this crash.\n\nFortunately, the fix here is straight forward. Switch get_first_thin()\nfunction to use list_first_or_null_rcu() which performs just a single\nREAD_ONCE() and returns NULL if the list is already empty.\n\nThis was run against the devicemapper test suite\u0027s thin-provisioning\nsuites for delete and suspend and no regressions were observed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21664",
"url": "https://www.suse.com/security/cve/CVE-2025-21664"
},
{
"category": "external",
"summary": "SUSE Bug 1236262 for CVE-2025-21664",
"url": "https://bugzilla.suse.com/1236262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21664"
},
{
"cve": "CVE-2025-21674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21674"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel\n\nAttempt to enable IPsec packet offload in tunnel mode in debug kernel\ngenerates the following kernel panic, which is happening due to two\nissues:\n1. In SA add section, the should be _bh() variant when marking SA mode.\n2. There is not needed flush_workqueue in SA delete routine. It is not\nneeded as at this stage as it is removed from SADB and the running work\nwill be canceled later in SA free.\n\n =====================================================\n WARNING: SOFTIRQ-safe -\u003e SOFTIRQ-unsafe lock order detected\n 6.12.0+ #4 Not tainted\n -----------------------------------------------------\n charon/1337 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:\n ffff88810f365020 (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}, at: mlx5e_xfrm_del_state+0xca/0x1e0 [mlx5_core]\n\n and this task is already holding:\n ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n which would create a new lock dependency:\n (\u0026x-\u003elock){+.-.}-{3:3} -\u003e (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n but this new dependency connects a SOFTIRQ-irq-safe lock:\n (\u0026x-\u003elock){+.-.}-{3:3}\n\n ... which became SOFTIRQ-irq-safe at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n hrtimer_run_softirq+0x146/0x2e0\n handle_softirqs+0x266/0x860\n irq_exit_rcu+0x115/0x1a0\n sysvec_apic_timer_interrupt+0x6e/0x90\n asm_sysvec_apic_timer_interrupt+0x16/0x20\n default_idle+0x13/0x20\n default_idle_call+0x67/0xa0\n do_idle+0x2da/0x320\n cpu_startup_entry+0x50/0x60\n start_secondary+0x213/0x2a0\n common_startup_64+0x129/0x138\n\n to a SOFTIRQ-irq-unsafe lock:\n (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n ... which became SOFTIRQ-irq-unsafe at:\n ...\n lock_acquire+0x1be/0x520\n _raw_spin_lock+0x2c/0x40\n xa_set_mark+0x70/0x110\n mlx5e_xfrm_add_state+0xe48/0x2290 [mlx5_core]\n xfrm_dev_state_add+0x3bb/0xd70\n xfrm_add_sa+0x2451/0x4a90\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n other info that might help us debug this:\n\n Possible interrupt unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026xa-\u003exa_lock#24);\n local_irq_disable();\n lock(\u0026x-\u003elock);\n lock(\u0026xa-\u003exa_lock#24);\n \u003cInterrupt\u003e\n lock(\u0026x-\u003elock);\n\n *** DEADLOCK ***\n\n 2 locks held by charon/1337:\n #0: ffffffff87f8f858 (\u0026net-\u003exfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x5e/0x90\n #1: ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n\n the dependencies between SOFTIRQ-irq-safe lock and the holding lock:\n -\u003e (\u0026x-\u003elock){+.-.}-{3:3} ops: 29 {\n HARDIRQ-ON-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_alloc_spi+0xc0/0xe60\n xfrm_alloc_userspi+0x5f6/0xbc0\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n IN-SOFTIRQ-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21674",
"url": "https://www.suse.com/security/cve/CVE-2025-21674"
},
{
"category": "external",
"summary": "SUSE Bug 1236688 for CVE-2025-21674",
"url": "https://bugzilla.suse.com/1236688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21674"
},
{
"cve": "CVE-2025-21676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21676"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: handle page_pool_dev_alloc_pages error\n\nThe fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did\nnot handle the case when it returned NULL. There was a WARN_ON(!new_page)\nbut it would still proceed to use the NULL pointer and then crash.\n\nThis case does seem somewhat rare but when the system is under memory\npressure it can happen. One case where I can duplicate this with some\nfrequency is when writing over a smbd share to a SATA HDD attached to an\nimx6q.\n\nSetting /proc/sys/vm/min_free_kbytes to higher values also seems to solve\nthe problem for my test case. But it still seems wrong that the fec driver\nignores the memory allocation error and can crash.\n\nThis commit handles the allocation error by dropping the current packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21676",
"url": "https://www.suse.com/security/cve/CVE-2025-21676"
},
{
"category": "external",
"summary": "SUSE Bug 1236696 for CVE-2025-21676",
"url": "https://bugzilla.suse.com/1236696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21676"
},
{
"cve": "CVE-2025-21678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngtp: Destroy device along with udp socket\u0027s netns dismantle.\n\ngtp_newlink() links the device to a list in dev_net(dev) instead of\nsrc_net, where a udp tunnel socket is created.\n\nEven when src_net is removed, the device stays alive on dev_net(dev).\nThen, removing src_net triggers the splat below. [0]\n\nIn this example, gtp0 is created in ns2, and the udp socket is created\nin ns1.\n\n ip netns add ns1\n ip netns add ns2\n ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn\n ip netns del ns1\n\nLet\u0027s link the device to the socket\u0027s netns instead.\n\nNow, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove\nall gtp devices in the netns.\n\n[0]:\nref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at\n sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236)\n inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252)\n __sock_create (net/socket.c:1558)\n udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18)\n gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423)\n gtp_create_sockets (drivers/net/gtp.c:1447)\n gtp_newlink (drivers/net/gtp.c:1507)\n rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012)\n rtnetlink_rcv_msg (net/core/rtnetlink.c:6922)\n netlink_rcv_skb (net/netlink/af_netlink.c:2542)\n netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347)\n netlink_sendmsg (net/netlink/af_netlink.c:1891)\n ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583)\n ___sys_sendmsg (net/socket.c:2639)\n __sys_sendmsg (net/socket.c:2669)\n do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)\n\nWARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179)\nModules linked in:\nCPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nWorkqueue: netns cleanup_net\nRIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179)\nCode: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 \u003c0f\u003e 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89\nRSP: 0018:ff11000009a07b60 EFLAGS: 00010286\nRAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c\nRBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae\nR10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0\nR13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000\nFS: 0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cTASK\u003e\n ? __warn (kernel/panic.c:748)\n ? ref_tracker_dir_exit (lib/ref_tracker.c:179)\n ? report_bug (lib/bug.c:201 lib/bug.c:219)\n ? handle_bug (arch/x86/kernel/traps.c:285)\n ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1))\n ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621)\n ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194)\n ? ref_tracker_dir_exit (lib/ref_tracker.c:179)\n ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158)\n ? kfree (mm/slub.c:4613 mm/slub.c:4761)\n net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467)\n cleanup_net (net/core/net_namespace.c:664 (discriminator 3))\n process_one_work (kernel/workqueue.c:3229)\n worker_thread (kernel/workqueue.c:3304 kernel/workqueue.c:3391\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21678",
"url": "https://www.suse.com/security/cve/CVE-2025-21678"
},
{
"category": "external",
"summary": "SUSE Bug 1236698 for CVE-2025-21678",
"url": "https://bugzilla.suse.com/1236698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21678"
},
{
"cve": "CVE-2025-21682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21682"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: bnxt: always recalculate features after XDP clearing, fix null-deref\n\nRecalculate features when XDP is detached.\n\nBefore:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: off [requested on]\n\nAfter:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: on\n\nThe fact that HW-GRO doesn\u0027t get re-enabled automatically is just\na minor annoyance. The real issue is that the features will randomly\ncome back during another reconfiguration which just happens to invoke\nnetdev_update_features(). The driver doesn\u0027t handle reconfiguring\ntwo things at a time very robustly.\n\nStarting with commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") we only reconfigure the RSS hash table\nif the \"effective\" number of Rx rings has changed. If HW-GRO is\nenabled \"effective\" number of rings is 2x what user sees.\nSo if we are in the bad state, with HW-GRO re-enablement \"pending\"\nafter XDP off, and we lower the rings by / 2 - the HW-GRO rings\ndoing 2x and the ethtool -L doing / 2 may cancel each other out,\nand the:\n\n if (old_rx_rings != bp-\u003ehw_resc.resv_rx_rings \u0026\u0026\n\ncondition in __bnxt_reserve_rings() will be false.\nThe RSS map won\u0027t get updated, and we\u0027ll crash with:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000168\n RIP: 0010:__bnxt_hwrm_vnic_set_rss+0x13a/0x1a0\n bnxt_hwrm_vnic_rss_cfg_p5+0x47/0x180\n __bnxt_setup_vnic_p5+0x58/0x110\n bnxt_init_nic+0xb72/0xf50\n __bnxt_open_nic+0x40d/0xab0\n bnxt_open_nic+0x2b/0x60\n ethtool_set_channels+0x18c/0x1d0\n\nAs we try to access a freed ring.\n\nThe issue is present since XDP support was added, really, but\nprior to commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") it wasn\u0027t causing major issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21682",
"url": "https://www.suse.com/security/cve/CVE-2025-21682"
},
{
"category": "external",
"summary": "SUSE Bug 1236703 for CVE-2025-21682",
"url": "https://bugzilla.suse.com/1236703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:cluster-md-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:dlm-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:gfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-devel-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-extra-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-azure-optional-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-azure-vdso-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kernel-devel-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-source-azure-6.4.0-150600.8.26.1.noarch",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kernel-syms-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:kselftests-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:ocfs2-kmp-azure-6.4.0-150600.8.26.1.x86_64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.aarch64",
"openSUSE Leap 15.6:reiserfs-kmp-azure-6.4.0-150600.8.26.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-02-11T10:40:10Z",
"details": "moderate"
}
],
"title": "CVE-2025-21682"
}
]
}
suse-su-2025:20248-1
Vulnerability from csaf_suse
Published
2025-03-27 15:23
Modified
2025-03-27 15:23
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
- CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized
delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
- CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).
- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).
- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).
- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
- CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before "getting" registers (bsc#1236106).
- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
The following non-security bugs were fixed:
- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).
- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).
- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).
- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).
- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).
- ACPI: resource: Fix memory resource type union access (git-fixes).
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).
- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).
- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).
- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).
- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).
- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).
- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: seq: Check UMP support for midi_version change (git-fixes).
- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).
- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).
- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).
- ALSA: seq: ump: Use guard() for locking (stable-fixes).
- ALSA: ump: Use guard() for locking (stable-fixes).
- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).
- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).
- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).
- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).
- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).
- ASoC: amd: yc: Fix the wrong return value (git-fixes).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).
- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).
- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).
- ASoC: samsung: Add missing depends on I2C (git-fixes).
- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).
- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).
- ASoC: wm8994: Add depends on MFD core (stable-fixes).
- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).
- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).
- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).
- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).
- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).
- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).
- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).
- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).
- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).
- Bluetooth: iso: Fix recursive locking warning (git-fixes).
- Delete XHCI patch for regression (bsc#1235550)
- Disable ceph (jsc#PED-7242)
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).
- Drop downstream TPM fix patch (bsc#1233260 bsc#1233259 bsc#1232421)
- Drop uvcvideo fix due to regression (bsc#1235894)
- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).
- HID: fix generic desktop D-Pad controls (git-fixes).
- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).
- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).
- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).
- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).
- Input: bbnsm_pwrkey - add remove hook (git-fixes).
- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).
- Input: davinci-keyscan - remove leftover header (git-fixes).
- Input: xpad - add QH Electronics VID/PID (stable-fixes).
- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).
- Input: xpad - add support for Nacon Pro Compact (stable-fixes).
- Input: xpad - add support for wooting two he (arm) (stable-fixes).
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).
- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).
- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).
- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).
- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).
- NFSD: Async COPY result needs to return a write verifier (git-fixes).
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).
- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).
- NFSD: Prevent a potential integer overflow (git-fixes).
- NFSD: Remove a never-true comparison (git-fixes).
- NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (git-fixes).
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).
- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).
- PCI/AER: Disable AER service on suspend (stable-fixes).
- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (stable-fixes).
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).
- PCI: Add T_PERST_CLK_US macro (git-fixes).
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).
- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).
- PCI: Fix use-after-free of slot->bus on hot remove (stable-fixes).
- PCI: Use preserve_config in place of pci_flags (stable-fixes).
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).
- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).
- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).
- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).
- PCI: j721e: Add per platform maximum lane settings (stable-fixes).
- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).
- PCI: j721e: Add suspend and resume support (git-fixes).
- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).
- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).
- PCI: qcom: Add support for IPQ9574 (stable-fixes).
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).
- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).
- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).
- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)
- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)
- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)
- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)
- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)
- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)
- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)
- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)
- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)
- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)
- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)
- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)
- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)
- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)
- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)
- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)
- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)
- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)
- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)
- RDMA/rtrs: Ensure 'ib_sge list' is accessible (git-fixes)
- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)
- RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (git-fixes)
- RDMA/srp: Fix error handling in srp_add_port (git-fixes)
- RDMA/uverbs: Prevent integer overflow issue (git-fixes)
- Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad" (stable-fixes).
- Revert "block/mq-deadline: use correct way to throttling write requests" (bsc#1234146).
- Revert "btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)"
- Revert "drm/i915/dpt: Make DPT object unshrinkable" (stable-fixes).
- Revert "igb: Disable threaded IRQ for igb_msix_other" (git-fixes).
- Revert "mm, kmsan: fix infinite recursion due to RCU critical section" (bsc#1230413)
- Revert "mm/sparsemem: fix race in accessing memory_section->usage" (bsc#1230413)
- Revert "mm: prevent derefencing NULL ptr in pfn_section_valid()" (bsc#1230413)
- Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (git-fixes).
- Revert "unicode: Do not special case ignorable code points" (stable-fixes).
- Revert "usb: gadget: u_serial: Disable ep before setting port to null
to fix the crash caused by port being null" (stable-fixes).
- Revert 'arm64: Kconfig: Make SME depend on BROKEN for now'
- Revert 0dd78566990 ("Disable ceph (jsc#PED-7242)")
- SUNRPC: make sure cache entry active before cache_show (git-fixes).
- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).
- USB: core: Disable LPM only for non-suspended ports (git-fixes).
- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).
- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).
- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).
- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
- USB: serial: option: add Neoway N723-EA support (stable-fixes).
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).
- USB: serial: option: add TCL IK512 MBIM & ECM (stable-fixes).
- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).
- USB: usblp: return error when setting unsupported protocol (git-fixes).
- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
- VMCI: fix reference to ioctl-number.rst (git-fixes).
- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).
- accel/habanalabs: fix debugfs files permissions (stable-fixes).
- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).
- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).
- afs: Automatically generate trace tag enums (git-fixes).
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).
- afs: Fix cleanup of immediately failed async calls (git-fixes).
- afs: Fix directory format encoding struct (git-fixes).
- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).
- afs: Fix the maximum cell name length (git-fixes).
- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).
- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).
- arch: Remove cmpxchg_double (bsc#1220773).
- arch: consolidate arch_irq_work_raise prototypes (git-fixes).
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (git-fixes)
- arm64: Force position-independent veneers (git-fixes).
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245)
- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).
- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).
- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)
- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).
- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).
- batman-adv: Do not send uninitialized TT changes (git-fixes).
- batman-adv: Remove uninitialized data in full table TT response (git-fixes).
- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).
- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).
- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).
- blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (bsc#1234140).
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).
- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).
- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).
- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).
- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).
- block/mq-deadline: Fix the tag reservation code (bsc#1234148).
- block: Call .limit_depth() after .hctx has been set (bsc#1234148).
- block: Fix where bio IO priority gets set (bsc#1234145).
- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).
- block: update the stable_writes flag in bdev_add (bsc#1234141).
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)
- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).
- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).
- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).
- bpf: verifier: prevent userspace memory access (git-fixes).
- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).
- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).
- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).
- can: j1939: fix error in J1939 documentation (stable-fixes).
- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
- checkpatch: always parse orig_commit in fixes tag (git-fixes).
- checkpatch: check for missing Fixes tags (stable-fixes).
- cleanup: Add conditional guard support (stable-fixes).
- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).
- cleanup: Remove address space of returned pointer (git-fixes).
- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).
- clocksource/drivers:sp804: Make user selectable (git-fixes).
- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).
- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).
- cpufreq: ACPI: Fix max-frequency computation (git-fixes).
- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).
- cpufreq: amd-pstate: remove global header file (git-fixes).
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).
- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).
- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).
- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).
- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).
- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).
- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).
- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).
- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).
- cpupower: fix TSC MHz calculation (git-fixes).
- crypto: caam - use JobR's space to access page 0 regs (git-fixes).
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).
- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).
- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).
- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (git-fixes).
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).
- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).
- crypto: qce - fix goto jump in error path (git-fixes).
- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).
- crypto: qce - unregister previously registered algos in error path (git-fixes).
- crypto: x86/sha256 - Add parentheses around macros' single arguments (stable-fixes).
- cyrpto/b128ops: Remove struct u128 (bsc#1220773).
- devcoredump: cleanup some comments (git-fixes).
- devlink: Fix length of eswitch inline-mode (git-fixes).
- dlm: fix possible lkb_resource null dereference (git-fixes).
- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).
- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).
- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).
- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).
- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).
- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).
- dmaengine: tegra: Return correct DMA status when paused (git-fixes).
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).
- docs: media: update location of the media patches (stable-fixes).
- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).
- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).
- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).
- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).
- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).
- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).
- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).
- drm/amd/display: Fix DSC-re-computing (stable-fixes).
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).
- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).
- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).
- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).
- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).
- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).
- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).
- drm/amdgpu/pm: Remove gpu_od if it's an empty directory (stable-fixes).
- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).
- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).
- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).
- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).
- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).
- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).
- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).
- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).
- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).
- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).
- drm/amdgpu: do not access invalid sched (git-fixes).
- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).
- drm/amdgpu: fix usage slab after free (stable-fixes).
- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).
- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).
- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).
- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).
- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).
- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).
- drm/amdkfd: Use device based logging for errors (stable-fixes).
- drm/amdkfd: Use the correct wptr size (stable-fixes).
- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).
- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).
- drm/bridge: it6505: Enable module autoloading (stable-fixes).
- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).
- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).
- drm/display: Fix building with GCC 15 (stable-fixes).
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).
- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).
- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).
- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).
- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).
- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).
- drm/i915/dg1: Fix power gate sequence (git-fixes).
- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).
- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).
- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).
- drm/mcde: Enable module autoloading (stable-fixes).
- drm/mediatek: Add return value check when reading DPCD (git-fixes).
- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).
- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).
- drm/mediatek: Fix mode valid issue for dp (git-fixes).
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (git-fixes).
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).
- drm/mediatek: stop selecting foreign drivers (git-fixes).
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).
- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).
- drm/msm: Check return value of of_dma_configure() (git-fixes).
- drm/msm: do not clean up priv->kms prematurely (git-fixes).
- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).
- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).
- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).
- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).
- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).
- drm/radeon: change rdev->ddev to rdev_to_drm(rdev) (stable-fixes).
- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).
- drm/sched: memset() 'job' in drm_sched_job_init() (stable-fixes).
- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).
- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).
- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).
- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).
- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).
- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).
- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).
- drm/vmwgfx: Add new keep_resv BO param (git-fixes).
- drm: adv7511: Drop dsi single lane support (git-fixes).
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).
- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- erofs: avoid debugging output for (de)compressed data (git-fixes).
- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).
- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).
- exfat: fix the infinite loop in exfat_readdir() (git-fixes).
- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).
- ext4: add a new helper to check if es must be kept (bsc#1234170).
- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).
- ext4: add missed brelse in update_backups (bsc#1234171).
- ext4: allow for the last group to be marked as trimmed (bsc#1234278).
- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).
- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).
- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).
- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).
- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).
- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).
- ext4: check the extent status again before inserting delalloc block (bsc#1234186).
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).
- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).
- ext4: correct best extent lstart adjustment logic (bsc#1234179).
- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).
- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).
- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).
- ext4: correct the start block of counting reserved clusters (bsc#1234169).
- ext4: do not let fstrim block system suspend (bsc#1234166).
- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).
- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).
- ext4: factor out a common helper to query extent map (bsc#1234186).
- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix potential unnitialized variable (bsc#1234183).
- ext4: fix race between writepages and remount (bsc#1234168).
- ext4: fix rec_len verify error (bsc#1234167).
- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).
- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).
- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).
- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).
- ext4: make ext4_es_insert_extent() return void (bsc#1234170).
- ext4: make ext4_es_remove_extent() return void (bsc#1234170).
- ext4: make ext4_zeroout_es() return void (bsc#1234170).
- ext4: make sure allocate pending entry not fail (bsc#1234170).
- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).
- ext4: move 'ix' sanity check to corrent position (bsc#1234174).
- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).
- ext4: nested locking for xattr inode (bsc#1234189).
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).
- ext4: refactor ext4_da_map_blocks() (bsc#1234178).
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).
- ext4: remove the redundant folio_wait_stable() (bsc#1234184).
- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).
- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).
- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).
- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).
- filemap: Fix bounds checking in filemap_read() (bsc#1234209).
- filemap: add a per-mapping stable writes flag (bsc#1234141).
- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).
- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).
- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).
- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).
- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).
- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).
- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).
- genksyms: fix memory leak when the same symbol is added from source (git-fixes).
- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).
- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).
- gpio: grgpio: use a helper variable to store the address of ofdev->dev (stable-fixes).
- gpio: mxc: remove dead code after switch to DT-only (git-fixes).
- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
- hfsplus: do not query the device logical block size multiple times (git-fixes).
- hvc/xen: fix console unplug (git-fixes).
- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).
- hvc/xen: fix event channel handling for secondary consoles (git-fixes).
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).
- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).
- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).
- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).
- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).
- hwmon: (tmp513) Do not use "proxy" headers (stable-fixes).
- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).
- hwmon: (tmp513) Fix division of negative numbers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).
- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).
- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).
- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).
- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).
- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
- i2c: i801: Add support for Intel Panther Lake (stable-fixes).
- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).
- i2c: microchip-core: actually use repeated sends (git-fixes).
- i2c: microchip-core: fix "ghost" detections (git-fixes).
- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).
- i2c: pnx: Fix timeout in wait functions (git-fixes).
- i2c: rcar: fix NACK handling when being a target (git-fixes).
- i2c: riic: Always round-up when calculating bus period (git-fixes).
- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).
- i40e: Fix handling changed priv flags (git-fixes).
- i915/guc: Accumulate active runtime on gt reset (git-fixes).
- i915/guc: Ensure busyness counter increases motonically (git-fixes).
- i915/guc: Reset engine utilization buffer before registration (git-fixes).
- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
- ice: Unbind the workqueue (bsc#1234989)
- ice: change q_index variable type to s16 to store -1 value (git-fixes).
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).
- ice: fix PHY Clock Recovery availability check (git-fixes).
- idpf: add support for SW triggered interrupts (bsc#1235507).
- idpf: enable WB_ON_ITR (bsc#1235507).
- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).
- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).
- iio: adc: ad7124: Disable all channels at probe time (git-fixes).
- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).
- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).
- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).
- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).
- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).
- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).
- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).
- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).
- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).
- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).
- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).
- instrumentation: Wire up cmpxchg128() (bsc#1220773).
- intel_th: core: fix kernel-doc warnings (git-fixes).
- io_uring/rw: avoid punting to io-wq directly (git-fixes).
- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).
- io_uring: Fix registered ring file refcount leak (git-fixes).
- io_uring: always lock __io_cqring_overflow_flush (git-fixes).
- io_uring: check if iowq is killed before queuing (git-fixes).
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).
- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).
- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).
- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).
- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).
- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).
- jffs2: Fix rtime decompressor (git-fixes).
- jffs2: Prevent rtime decompress memory corruption (git-fixes).
- jffs2: fix use of uninitialized variable (git-fixes).
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).
- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).
- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).
- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).
- jfs: xattr: check invalid xattr size more strictly (git-fixes).
- kABI workaround for struct auto_pin_cfg_item change (git-fixes).
- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).
- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)
- kasan: make report_lock a raw spinlock (git-fixes).
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).
- kdb: Fix buffer overflow during tab-complete (bsc#1234652).
- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).
- kdb: Merge identical case statements in kdb_read() (bsc#1234657).
- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).
- kdb: Use format-strings rather than '\0' injection in kdb_read() (bsc#1234654).
- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).
- kdb: address -Wformat-security warnings (bsc#1234659).
- kgdb: Flush console before entering kgdb on panic (bsc#1234651).
- kheaders: Ignore silly-rename files (stable-fixes).
- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).
- ktest.pl: Check kernelrelease return in get_version (git-fixes).
- ktest.pl: Fix typo "accesing" (git-fixes).
- ktest.pl: Fix typo in comment (git-fixes).
- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).
- ktest: force $buildonly = 1 for 'make_warnings_file' test type (stable-fixes).
- landlock: Handle weird files (git-fixes).
- latencytop: use correct kernel-doc format for func params (git-fixes).
- leds: class: Protect brightness_show() with led_cdev->led_access mutex (stable-fixes).
- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).
- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).
- lib/inflate.c: remove dead code (git-fixes).
- lib/stackdepot: print disabled message only if truly disabled (git-fixes).
- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).
- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).
- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).
- mac80211: fix user-power when emulating chanctx (stable-fixes).
- mac802154: check local interfaces before deleting sdata list (stable-fixes).
- mailbox: pcc: Add support for platform notification handling (stable-fixes).
- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).
- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).
- maple_tree: simplify split calculation (git-fixes).
- media: camif-core: Add check for clk_enable() (git-fixes).
- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).
- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).
- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).
- media: i2c: imx412: Add missing newline to prints (git-fixes).
- media: i2c: ov9282: Correct the exposure offset (git-fixes).
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).
- media: imx296: Add standby delay during probe (git-fixes).
- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).
- media: marvell: Add check for clk_enable() (git-fixes).
- media: mc: fix endpoint iteration (git-fixes).
- media: mipi-csis: Add check for clk_enable() (git-fixes).
- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).
- media: ov5640: fix get_light_freq on auto (git-fixes).
- media: rc: iguanair: handle timeouts (git-fixes).
- media: rkisp1: Fix unused value issue (git-fixes).
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).
- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).
- media: uvcvideo: Fix double free in error path (git-fixes).
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).
- media: uvcvideo: Only save async fh if success (git-fixes).
- media: uvcvideo: Propagate buf->error to userspace (git-fixes).
- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).
- media: uvcvideo: Remove dangling pointers (git-fixes).
- media: uvcvideo: Remove redundant NULL assignment (git-fixes).
- media: uvcvideo: Support partial control reads (git-fixes).
- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).
- memory-failure: use a folio in me_huge_page() (git-fixes).
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).
- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).
- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).
- misc: fastrpc: Fix copy buffer page size (git-fixes).
- misc: fastrpc: Fix registered buffer page address (git-fixes).
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).
- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).
- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).
- mm/memory-failure: check the mapcount of the precise page (git-fixes).
- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).
- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).
- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).
- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).
- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).
- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).
- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).
- mm/migrate: putback split folios when numa hint migration fails (git-fixes).
- mm/migrate: split source folio if it is on deferred split list (git-fixes).
- mm/page_owner: remove free_ts from page_owner output (git-fixes).
- mm/readahead: do not allow order-1 folio (bsc#1234205).
- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).
- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).
- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).
- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).
- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).
- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).
- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).
- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).
- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).
- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).
- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).
- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).
- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).
- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).
- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).
- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).
- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).
- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).
- net/ipv6: release expired exception dst cached in socket (bsc#1216813).
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).
- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).
- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).
- net/qed: allow old cards not supporting "num_images" to work (git-fixes).
- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).
- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).
- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).
- net: rose: fix timer races against user threads (git-fixes).
- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).
- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).
- net: usb: rtl8150: enable basic endpoint checking (git-fixes).
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).
- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).
- nfsd: make sure exp active before svc_export_show (git-fixes).
- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).
- nfsd: restore callback functionality for NFSv4.0 (git-fixes).
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).
- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).
- nilfs2: prevent use of deleted inode (git-fixes).
- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).
- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).
- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).
- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).
- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).
- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).
- nvme: apple: fix device reference counting (git-fixes).
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).
- nvme: fix metadata handling in nvme-passthrough (git-fixes).
- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).
- nvmet: propagate npwg topology (git-fixes).
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).
- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).
- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).
- of: address: Report error on resource bounds overflow (stable-fixes).
- padata: add pd get/put refcnt helper (git-fixes).
- padata: avoid UAF for reorder_work (git-fixes).
- padata: fix UAF in padata_reorder (git-fixes).
- parisc: Raise minimal GCC version (bsc#1220773).
- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).
- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).
- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).
- percpu: Wire up cmpxchg128 (bsc#1220773).
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).
- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).
- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).
- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).
- phy: usb: Toggle the PHY power during init (git-fixes).
- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).
- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).
- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).
- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).
- pinmux: Use sequential access to access desc->pinmux data (stable-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).
- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).
- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).
- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).
- platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed (stable-fixes).
- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).
- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).
- power: supply: gpio-charger: Fix set charge current limits (git-fixes).
- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).
- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).
- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).
- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).
- pps: add an error check in parport_attach (git-fixes).
- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- printk: Add is_printk_legacy_deferred() (bsc#1236733).
- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).
- pwm: stm32-lp: Add check for clk_enable() (git-fixes).
- pwm: stm32: Add check for clk_enable() (git-fixes).
- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).
- quota: explicitly forbid quota files from being encrypted (bsc#1234196).
- quota: flush quota_release_work upon quota writeback (bsc#1234195).
- quota: simplify drop_dquot_ref() (bsc#1234197).
- rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (git-fixes)
- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)
- rcu: Dump memory object info if callback function is invalid (git-fixes)
- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)
- rcuscale: Move rcu_scale_writer() (git-fixes)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)
- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).
- regmap: Use correct format specifier for logging range errors (stable-fixes).
- regulator: core: Add missing newline character (git-fixes).
- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).
- remoteproc: core: Fix ida_free call while not allocated (git-fixes).
- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).
- rtc: zynqmp: Fix optional clock name property (git-fixes).
- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).
- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).
- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).
- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).
- s390/facility: Disable compile time optimization for decompressor code (git-fixes).
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).
- s390/pageattr: Implement missing kernel_page_present() (git-fixes).
- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)
- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).
- scatterlist: fix incorrect func name in kernel-doc (git-fixes).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).
- sched/numa: fix memory leak due to the overwritten vma->numab_state (git fixes (sched/numa)).
- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).
- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).
- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).
- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).
- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).
- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).
- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).
- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).
- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).
- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).
- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).
- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).
- scsi: qla2xxx: Remove the unused 'del_list_entry' field in struct fc_port (bsc#1235406).
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).
- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).
- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).
- selftest: media_tests: fix trivial UAF typo (git-fixes).
- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).
- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).
- selftests/landlock: Fix error message (git-fixes).
- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).
- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).
- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).
- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).
- selftests: tc-testing: reduce rshift value (stable-fixes).
- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).
- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).
- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).
- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).
- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).
- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).
- serial: 8250_fintek: Add support for F81216E (stable-fixes).
- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).
- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).
- serial: amba-pl011: Use port lock wrappers (stable-fixes).
- serial: amba-pl011: fix build regression (git-fixes).
- serial: do not use uninitialized value in uart_poll_init() (git-fixes).
- serial: imx: only set receiver level if it is zero (git-fixes).
- serial: imx: set receiver level before starting uart (git-fixes).
- serial: qcom-geni: Do not cancel/abort if we can't get the port lock (git-fixes).
- serial: qcom-geni: disable interrupts during console writes (git-fixes).
- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).
- serial: qcom-geni: fix console corruption (git-fixes).
- serial: qcom-geni: fix dma rx cancellation (git-fixes).
- serial: qcom-geni: fix false console tx restart (git-fixes).
- serial: qcom-geni: fix fifo polling timeout (git-fixes).
- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).
- serial: qcom-geni: fix polled console corruption (git-fixes).
- serial: qcom-geni: fix polled console initialisation (git-fixes).
- serial: qcom-geni: fix receiver enable (git-fixes).
- serial: qcom-geni: fix shutdown race (git-fixes).
- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).
- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).
- serial: qcom-geni: revert broken hibernation support (git-fixes).
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).
- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).
- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).
- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).
- slub: Replace cmpxchg_double() (bsc#1220773).
- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).
- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]
- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).
- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).
- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).
- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).
- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).
- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).
- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).
- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).
- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).
- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).
- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).
- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).
- spi: zynq-qspi: Add check for clk_enable() (git-fixes).
- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)
- srcu: Only accelerate on enqueue time (git-fixes)
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).
- staging: iio: ad9832: Correct phase range check (git-fixes).
- staging: iio: ad9834: Correct phase range check (git-fixes).
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).
- staging: media: max96712: fix kernel oops when removing module (git-fixes).
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).
- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)
- svcrdma: Address an integer overflow (git-fixes).
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).
- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).
- swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (git-fixes).
- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).
- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).
- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).
- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
- tools: Sync if_xdp.h uapi tooling header (git-fixes).
- tools: hv: change permissions of NetworkManager configuration file (git-fixes).
- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)
- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).
- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).
- types: Introduce [us]128 (bsc#1220773).
- ubifs: Correct the total block count by deducting journal reservation (git-fixes).
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).
- ubifs: skip dumping tnc tree when zroot is null (git-fixes).
- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).
- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).
- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).
- udf: refactor inode_bmap() to handle error (bsc#1234242).
- udf: refactor udf_current_aext() to handle error (bsc#1234240).
- udf: refactor udf_next_aext() to handle error (bsc#1234241).
- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).
- uio: Fix return value of poll (git-fixes).
- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).
- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).
- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).
- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).
- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).
- usb: dwc2: Fix HCD port connection race (git-fixes).
- usb: dwc2: Fix HCD resume (git-fixes).
- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (git-fixes).
- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).
- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).
- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).
- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).
- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).
- usb: fix reference leak in usb_new_device() (git-fixes).
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).
- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).
- usb: gadget: f_tcm: Do not free command immediately (git-fixes).
- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).
- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).
- usb: gadget: f_tcm: Translate error to sense (git-fixes).
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).
- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).
- usb: host: xhci-plat: Assign shared_hcd->rsrc_start (git-fixes).
- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).
- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)
- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).
- usb: typec: use cleanup facility for 'altmodes_node' (stable-fixes).
- usbnet: ipheth: break up NCM header size computation (git-fixes).
- usbnet: ipheth: check that DPE points past NCM header (git-fixes).
- usbnet: ipheth: fix DPE OoB read (git-fixes).
- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).
- usbnet: ipheth: refactor NCM datagram loop (git-fixes).
- usbnet: ipheth: use static NDP16 location in URB (git-fixes).
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).
- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).
- vdpa: solidrun: Fix UB bug with devres (git-fixes).
- vfs: fix readahead(2) on block devices (bsc#1234201).
- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).
- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).
- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).
- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).
- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).
- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).
- wifi: ath5k: add PCI ID for SX76X (git-fixes).
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).
- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).
- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).
- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).
- wifi: cw1200: Fix potential NULL dereference (git-fixes).
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).
- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).
- wifi: mac80211: Add non-atomic station iterator (stable-fixes).
- wifi: mac80211: Fix common size calculation for ML element (git-fixes).
- wifi: mac80211: clean up 'ret' in sta_link_apply_parameters() (stable-fixes).
- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).
- wifi: mac80211: fix station NSS capability initialization order (git-fixes).
- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).
- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).
- wifi: mac80211: prohibit deactivating all links (git-fixes).
- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).
- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7915: fix register mapping (git-fixes).
- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).
- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).
- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).
- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).
- wifi: mt76: mt7996: fix ldpc setting (git-fixes).
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7996: fix register mapping (git-fixes).
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).
- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).
- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).
- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).
- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).
- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).
- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).
- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).
- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).
- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).
- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).
- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).
- xfs: do not allocate COW extents when unsharing a hole (git-fixes).
- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).
- xfs: remove unknown compat feature check in superblock write validation (git-fixes).
- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).
- xfs: sb_spino_align is not verified (git-fixes).
- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).
- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).
- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).
Patchnames
SUSE-SLE-Micro-6.1-kernel-3
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nThe SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).\n- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).\n- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).\n- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).\n- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).\n- CVE-2024-44996: vsock: fix recursive -\u003erecvmsg calls (bsc#1230205).\n- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).\n- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).\n- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).\n- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).\n- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).\n- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).\n- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).\n- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).\n- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).\n- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).\n- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).\n- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).\n- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).\n- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized\n delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).\n- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).\n- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).\n- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).\n- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).\n- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).\n- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).\n- CVE-2024-53099: bpf: Check validity of link-\u003etype in bpf_link_show_fdinfo() (bsc#1233772).\n- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).\n- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).\n- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).\n- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).\n- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).\n- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).\n- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).\n- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).\n- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).\n- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).\n- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)\n- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).\n- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).\n- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).\n- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).\n- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).\n- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).\n- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).\n- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).\n- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).\n- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).\n- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).\n- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).\n- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).\n- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).\n- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).\n- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).\n- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).\n- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).\n- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).\n- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).\n- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).\n- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).\n- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).\n- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).\n- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).\n- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).\n- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).\n- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).\n- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object-\u003efile (bsc#1234912).\n- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).\n- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).\n- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).\n- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).\n- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).\n- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).\n- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).\n- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).\n- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).\n- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).\n- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).\n- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).\n- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).\n- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027 (bsc#1235487).\n- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).\n- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).\n- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).\n- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).\n- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).\n- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).\n- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).\n- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).\n- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).\n- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).\n- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).\n- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).\n- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).\n- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).\n- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).\n- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).\n- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).\n- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).\n- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).\n- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).\n- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).\n- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).\n- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).\n- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).\n- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).\n- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).\n- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).\n- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).\n- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).\n- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).\n- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).\n- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).\n- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).\n- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).\n- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).\n- CVE-2024-56729: smb: Initialize cfid-\u003etcon before performing network ops (bsc#1235503).\n- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).\n- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).\n- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).\n- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).\n- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).\n- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).\n- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).\n- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).\n- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).\n- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).\n- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).\n- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).\n- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).\n- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).\n- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).\n- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).\n- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).\n- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).\n- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).\n- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).\n- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).\n- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).\n- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).\n- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).\n- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).\n- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).\n- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).\n- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before \"getting\" registers (bsc#1236106).\n- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).\n- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).\n- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).\n- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).\n- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).\n- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).\n- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).\n- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).\n- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).\n- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).\n- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).\n- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).\n\nThe following non-security bugs were fixed:\n\n- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).\n- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).\n- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).\n- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).\n- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).\n- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).\n- ACPI: resource: Fix memory resource type union access (git-fixes).\n- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).\n- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).\n- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).\n- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).\n- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).\n- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).\n- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).\n- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).\n- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).\n- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).\n- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).\n- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).\n- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).\n- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).\n- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).\n- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).\n- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).\n- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).\n- ALSA: line6: Fix racy access to midibuf (stable-fixes).\n- ALSA: seq: Check UMP support for midi_version change (git-fixes).\n- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).\n- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).\n- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).\n- ALSA: seq: ump: Use guard() for locking (stable-fixes).\n- ALSA: ump: Use guard() for locking (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).\n- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).\n- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).\n- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).\n- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).\n- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).\n- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).\n- ASoC: SOF: Remove libraries from topology lookups (git-fixes).\n- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).\n- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).\n- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).\n- ASoC: amd: yc: Fix the wrong return value (git-fixes).\n- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).\n- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).\n- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).\n- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).\n- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).\n- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).\n- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).\n- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).\n- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).\n- ASoC: nau8822: Lower debug print priority (stable-fixes).\n- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).\n- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).\n- ASoC: samsung: Add missing depends on I2C (git-fixes).\n- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).\n- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).\n- ASoC: wm8994: Add depends on MFD core (stable-fixes).\n- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).\n- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).\n- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).\n- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).\n- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).\n- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).\n- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).\n- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).\n- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).\n- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).\n- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).\n- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).\n- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).\n- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).\n- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).\n- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).\n- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).\n- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).\n- Bluetooth: iso: Fix recursive locking warning (git-fixes).\n- Delete XHCI patch for regression (bsc#1235550)\n- Disable ceph (jsc#PED-7242)\n- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).\n- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).\n- Drop downstream TPM fix patch (bsc#1233260 bsc#1233259 bsc#1232421)\n- Drop uvcvideo fix due to regression (bsc#1235894)\n- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).\n- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).\n- HID: fix generic desktop D-Pad controls (git-fixes).\n- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).\n- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).\n- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).\n- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).\n- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).\n- Input: bbnsm_pwrkey - add remove hook (git-fixes).\n- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).\n- Input: davinci-keyscan - remove leftover header (git-fixes).\n- Input: xpad - add QH Electronics VID/PID (stable-fixes).\n- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).\n- Input: xpad - add support for Nacon Pro Compact (stable-fixes).\n- Input: xpad - add support for wooting two he (arm) (stable-fixes).\n- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).\n- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).\n- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).\n- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).\n- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).\n- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).\n- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).\n- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).\n- NFSD: Async COPY result needs to return a write verifier (git-fixes).\n- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).\n- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).\n- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).\n- NFSD: Prevent a potential integer overflow (git-fixes).\n- NFSD: Remove a never-true comparison (git-fixes).\n- NFSD: initialize copy-\u003ecp_clp early in nfsd4_copy for use by trace point (git-fixes).\n- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).\n- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).\n- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).\n- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).\n- PCI/AER: Disable AER service on suspend (stable-fixes).\n- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).\n- PCI: Add \u0027reset_subordinate\u0027 to reset hierarchy below bridge (stable-fixes).\n- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).\n- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).\n- PCI: Add T_PERST_CLK_US macro (git-fixes).\n- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).\n- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).\n- PCI: Fix use-after-free of slot-\u003ebus on hot remove (stable-fixes).\n- PCI: Use preserve_config in place of pci_flags (stable-fixes).\n- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).\n- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).\n- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).\n- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).\n- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).\n- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).\n- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).\n- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).\n- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).\n- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).\n- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).\n- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).\n- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).\n- PCI: j721e: Add per platform maximum lane settings (stable-fixes).\n- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).\n- PCI: j721e: Add suspend and resume support (git-fixes).\n- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).\n- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).\n- PCI: qcom: Add support for IPQ9574 (stable-fixes).\n- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).\n- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).\n- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).\n- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).\n- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).\n- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)\n- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)\n- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)\n- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)\n- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)\n- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)\n- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)\n- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)\n- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)\n- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)\n- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)\n- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)\n- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)\n- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)\n- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)\n- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)\n- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)\n- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)\n- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)\n- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)\n- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)\n- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)\n- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)\n- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)\n- RDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible (git-fixes)\n- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)\n- RDMA/rxe: Fix the warning \"__rxe_cleanup+0x12c/0x170 [rdma_rxe]\" (git-fixes)\n- RDMA/srp: Fix error handling in srp_add_port (git-fixes)\n- RDMA/uverbs: Prevent integer overflow issue (git-fixes)\n- Revert \"HID: multitouch: Add support for lenovo Y9000P Touchpad\" (stable-fixes).\n- Revert \"block/mq-deadline: use correct way to throttling write requests\" (bsc#1234146).\n- Revert \"btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\"\n- Revert \"drm/i915/dpt: Make DPT object unshrinkable\" (stable-fixes).\n- Revert \"igb: Disable threaded IRQ for igb_msix_other\" (git-fixes).\n- Revert \"mm, kmsan: fix infinite recursion due to RCU critical section\" (bsc#1230413)\n- Revert \"mm/sparsemem: fix race in accessing memory_section-\u003eusage\" (bsc#1230413)\n- Revert \"mm: prevent derefencing NULL ptr in pfn_section_valid()\" (bsc#1230413)\n- Revert \"mtd: spi-nor: core: replace dummy buswidth from addr to data\" (git-fixes).\n- Revert \"unicode: Do not special case ignorable code points\" (stable-fixes).\n- Revert \"usb: gadget: u_serial: Disable ep before setting port to null\n to fix the crash caused by port being null\" (stable-fixes).\n- Revert \u0027arm64: Kconfig: Make SME depend on BROKEN for now\u0027 \n- Revert 0dd78566990 (\"Disable ceph (jsc#PED-7242)\") \n- SUNRPC: make sure cache entry active before cache_show (git-fixes).\n- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).\n- USB: core: Disable LPM only for non-suspended ports (git-fixes).\n- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).\n- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).\n- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).\n- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).\n- USB: serial: option: add Neoway N723-EA support (stable-fixes).\n- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).\n- USB: serial: option: add TCL IK512 MBIM \u0026 ECM (stable-fixes).\n- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).\n- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).\n- USB: usblp: return error when setting unsupported protocol (git-fixes).\n- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).\n- VMCI: fix reference to ioctl-number.rst (git-fixes).\n- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).\n- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).\n- accel/habanalabs: fix debugfs files permissions (stable-fixes).\n- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).\n- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).\n- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).\n- afs: Automatically generate trace tag enums (git-fixes).\n- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).\n- afs: Fix cleanup of immediately failed async calls (git-fixes).\n- afs: Fix directory format encoding struct (git-fixes).\n- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).\n- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).\n- afs: Fix the maximum cell name length (git-fixes).\n- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).\n- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).\n- arch: Remove cmpxchg_double (bsc#1220773).\n- arch: consolidate arch_irq_work_raise prototypes (git-fixes).\n- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)\n- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)\n- arm64: Filter out SVE hwcaps when FEAT_SVE isn\u0027t implemented (git-fixes)\n- arm64: Force position-independent veneers (git-fixes).\n- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245)\n- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).\n- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)\n- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).\n- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)\n- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).\n- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)\n- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)\n- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)\n- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).\n- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).\n- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).\n- batman-adv: Do not send uninitialized TT changes (git-fixes).\n- batman-adv: Remove uninitialized data in full table TT response (git-fixes).\n- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).\n- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).\n- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).\n- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).\n- blk-throttle: fix lockdep warning of \"cgroup_mutex or RCU read lock required!\" (bsc#1234140).\n- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).\n- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).\n- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).\n- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).\n- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).\n- block/mq-deadline: Fix the tag reservation code (bsc#1234148).\n- block: Call .limit_depth() after .hctx has been set (bsc#1234148).\n- block: Fix where bio IO priority gets set (bsc#1234145).\n- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).\n- block: update the stable_writes flag in bdev_add (bsc#1234141).\n- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)\n- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).\n- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).\n- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).\n- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).\n- bpf: verifier: prevent userspace memory access (git-fixes).\n- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).\n- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).\n- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).\n- can: j1939: fix error in J1939 documentation (stable-fixes).\n- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).\n- checkpatch: always parse orig_commit in fixes tag (git-fixes).\n- checkpatch: check for missing Fixes tags (stable-fixes).\n- cleanup: Add conditional guard support (stable-fixes).\n- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).\n- cleanup: Remove address space of returned pointer (git-fixes).\n- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).\n- clocksource/drivers:sp804: Make user selectable (git-fixes).\n- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).\n- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).\n- cpufreq: ACPI: Fix max-frequency computation (git-fixes).\n- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).\n- cpufreq: amd-pstate: remove global header file (git-fixes).\n- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).\n- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).\n- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).\n- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).\n- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).\n- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).\n- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).\n- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).\n- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).\n- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).\n- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).\n- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).\n- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).\n- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).\n- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).\n- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).\n- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).\n- cpupower: fix TSC MHz calculation (git-fixes).\n- crypto: caam - use JobR\u0027s space to access page 0 regs (git-fixes).\n- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).\n- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).\n- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).\n- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).\n- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).\n- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to \u0027async\u0027 (git-fixes).\n- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).\n- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).\n- crypto: qce - fix goto jump in error path (git-fixes).\n- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).\n- crypto: qce - unregister previously registered algos in error path (git-fixes).\n- crypto: x86/sha256 - Add parentheses around macros\u0027 single arguments (stable-fixes).\n- cyrpto/b128ops: Remove struct u128 (bsc#1220773).\n- devcoredump: cleanup some comments (git-fixes).\n- devlink: Fix length of eswitch inline-mode (git-fixes).\n- dlm: fix possible lkb_resource null dereference (git-fixes).\n- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).\n- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).\n- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).\n- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).\n- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).\n- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).\n- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).\n- dmaengine: tegra: Return correct DMA status when paused (git-fixes).\n- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).\n- docs: media: update location of the media patches (stable-fixes).\n- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).\n- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).\n- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).\n- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).\n- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).\n- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).\n- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).\n- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).\n- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).\n- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).\n- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).\n- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).\n- drm/amd/display: Fix DSC-re-computing (stable-fixes).\n- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).\n- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).\n- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).\n- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).\n- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).\n- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).\n- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).\n- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).\n- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).\n- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).\n- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).\n- drm/amdgpu/pm: Remove gpu_od if it\u0027s an empty directory (stable-fixes).\n- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).\n- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).\n- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).\n- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).\n- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).\n- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).\n- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).\n- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).\n- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).\n- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).\n- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).\n- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).\n- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).\n- drm/amdgpu: do not access invalid sched (git-fixes).\n- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).\n- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).\n- drm/amdgpu: fix usage slab after free (stable-fixes).\n- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).\n- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).\n- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).\n- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).\n- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).\n- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).\n- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).\n- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).\n- drm/amdkfd: Use device based logging for errors (stable-fixes).\n- drm/amdkfd: Use the correct wptr size (stable-fixes).\n- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).\n- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).\n- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).\n- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).\n- drm/bridge: it6505: Enable module autoloading (stable-fixes).\n- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).\n- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).\n- drm/display: Fix building with GCC 15 (stable-fixes).\n- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).\n- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).\n- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).\n- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).\n- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).\n- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).\n- drm/i915/dg1: Fix power gate sequence (git-fixes).\n- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).\n- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).\n- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).\n- drm/mcde: Enable module autoloading (stable-fixes).\n- drm/mediatek: Add return value check when reading DPCD (git-fixes).\n- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).\n- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).\n- drm/mediatek: Fix mode valid issue for dp (git-fixes).\n- drm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err (git-fixes).\n- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).\n- drm/mediatek: stop selecting foreign drivers (git-fixes).\n- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).\n- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).\n- drm/msm: Check return value of of_dma_configure() (git-fixes).\n- drm/msm: do not clean up priv-\u003ekms prematurely (git-fixes).\n- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).\n- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).\n- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).\n- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).\n- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).\n- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).\n- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).\n- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).\n- drm/radeon: change rdev-\u003eddev to rdev_to_drm(rdev) (stable-fixes).\n- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).\n- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).\n- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).\n- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).\n- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).\n- drm/sched: memset() \u0027job\u0027 in drm_sched_job_init() (stable-fixes).\n- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).\n- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).\n- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).\n- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).\n- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).\n- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).\n- drm/vmwgfx: Add new keep_resv BO param (git-fixes).\n- drm: adv7511: Drop dsi single lane support (git-fixes).\n- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).\n- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- erofs: avoid debugging output for (de)compressed data (git-fixes).\n- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).\n- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).\n- exfat: fix the infinite loop in exfat_readdir() (git-fixes).\n- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).\n- ext4: add a new helper to check if es must be kept (bsc#1234170).\n- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).\n- ext4: add missed brelse in update_backups (bsc#1234171).\n- ext4: allow for the last group to be marked as trimmed (bsc#1234278).\n- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).\n- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).\n- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).\n- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).\n- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).\n- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).\n- ext4: check the extent status again before inserting delalloc block (bsc#1234186).\n- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).\n- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).\n- ext4: correct best extent lstart adjustment logic (bsc#1234179).\n- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).\n- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).\n- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).\n- ext4: correct the start block of counting reserved clusters (bsc#1234169).\n- ext4: do not let fstrim block system suspend (bsc#1234166).\n- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).\n- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).\n- ext4: factor out a common helper to query extent map (bsc#1234186).\n- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).\n- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).\n- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).\n- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).\n- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).\n- ext4: fix potential unnitialized variable (bsc#1234183).\n- ext4: fix race between writepages and remount (bsc#1234168).\n- ext4: fix rec_len verify error (bsc#1234167).\n- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).\n- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).\n- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).\n- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).\n- ext4: make ext4_es_insert_extent() return void (bsc#1234170).\n- ext4: make ext4_es_remove_extent() return void (bsc#1234170).\n- ext4: make ext4_zeroout_es() return void (bsc#1234170).\n- ext4: make sure allocate pending entry not fail (bsc#1234170).\n- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).\n- ext4: move \u0027ix\u0027 sanity check to corrent position (bsc#1234174).\n- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).\n- ext4: nested locking for xattr inode (bsc#1234189).\n- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).\n- ext4: refactor ext4_da_map_blocks() (bsc#1234178).\n- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).\n- ext4: remove the redundant folio_wait_stable() (bsc#1234184).\n- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).\n- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).\n- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).\n- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).\n- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).\n- filemap: Fix bounds checking in filemap_read() (bsc#1234209).\n- filemap: add a per-mapping stable writes flag (bsc#1234141).\n- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).\n- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).\n- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).\n- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).\n- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).\n- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).\n- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).\n- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).\n- genksyms: fix memory leak when the same symbol is added from source (git-fixes).\n- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).\n- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).\n- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).\n- gpio: grgpio: use a helper variable to store the address of ofdev-\u003edev (stable-fixes).\n- gpio: mxc: remove dead code after switch to DT-only (git-fixes).\n- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).\n- hfsplus: do not query the device logical block size multiple times (git-fixes).\n- hvc/xen: fix console unplug (git-fixes).\n- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).\n- hvc/xen: fix event channel handling for secondary consoles (git-fixes).\n- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).\n- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).\n- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).\n- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).\n- hwmon: (tmp513) Do not use \"proxy\" headers (stable-fixes).\n- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).\n- hwmon: (tmp513) Fix division of negative numbers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).\n- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).\n- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).\n- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).\n- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).\n- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).\n- i2c: i801: Add support for Intel Panther Lake (stable-fixes).\n- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).\n- i2c: microchip-core: actually use repeated sends (git-fixes).\n- i2c: microchip-core: fix \"ghost\" detections (git-fixes).\n- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).\n- i2c: pnx: Fix timeout in wait functions (git-fixes).\n- i2c: rcar: fix NACK handling when being a target (git-fixes).\n- i2c: riic: Always round-up when calculating bus period (git-fixes).\n- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).\n- i40e: Fix handling changed priv flags (git-fixes).\n- i915/guc: Accumulate active runtime on gt reset (git-fixes).\n- i915/guc: Ensure busyness counter increases motonically (git-fixes).\n- i915/guc: Reset engine utilization buffer before registration (git-fixes).\n- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).\n- ice: Unbind the workqueue (bsc#1234989)\n- ice: change q_index variable type to s16 to store -1 value (git-fixes).\n- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).\n- ice: fix PHY Clock Recovery availability check (git-fixes).\n- idpf: add support for SW triggered interrupts (bsc#1235507).\n- idpf: enable WB_ON_ITR (bsc#1235507).\n- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).\n- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).\n- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).\n- iio: adc: ad7124: Disable all channels at probe time (git-fixes).\n- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).\n- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).\n- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).\n- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).\n- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).\n- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).\n- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).\n- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).\n- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).\n- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).\n- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).\n- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).\n- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).\n- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).\n- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).\n- instrumentation: Wire up cmpxchg128() (bsc#1220773).\n- intel_th: core: fix kernel-doc warnings (git-fixes).\n- io_uring/rw: avoid punting to io-wq directly (git-fixes).\n- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).\n- io_uring: Fix registered ring file refcount leak (git-fixes).\n- io_uring: always lock __io_cqring_overflow_flush (git-fixes).\n- io_uring: check if iowq is killed before queuing (git-fixes).\n- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).\n- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).\n- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).\n- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).\n- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).\n- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).\n- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).\n- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).\n- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).\n- jffs2: Fix rtime decompressor (git-fixes).\n- jffs2: Prevent rtime decompress memory corruption (git-fixes).\n- jffs2: fix use of uninitialized variable (git-fixes).\n- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).\n- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).\n- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).\n- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).\n- jfs: xattr: check invalid xattr size more strictly (git-fixes).\n- kABI workaround for struct auto_pin_cfg_item change (git-fixes).\n- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).\n- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)\n- kasan: make report_lock a raw spinlock (git-fixes).\n- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).\n- kdb: Fix buffer overflow during tab-complete (bsc#1234652).\n- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).\n- kdb: Merge identical case statements in kdb_read() (bsc#1234657).\n- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).\n- kdb: Use format-strings rather than \u0027\\0\u0027 injection in kdb_read() (bsc#1234654).\n- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).\n- kdb: address -Wformat-security warnings (bsc#1234659).\n- kgdb: Flush console before entering kgdb on panic (bsc#1234651).\n- kheaders: Ignore silly-rename files (stable-fixes).\n- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).\n- ktest.pl: Check kernelrelease return in get_version (git-fixes).\n- ktest.pl: Fix typo \"accesing\" (git-fixes).\n- ktest.pl: Fix typo in comment (git-fixes).\n- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).\n- ktest: force $buildonly = 1 for \u0027make_warnings_file\u0027 test type (stable-fixes).\n- landlock: Handle weird files (git-fixes).\n- latencytop: use correct kernel-doc format for func params (git-fixes).\n- leds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex (stable-fixes).\n- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).\n- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).\n- lib/inflate.c: remove dead code (git-fixes).\n- lib/stackdepot: print disabled message only if truly disabled (git-fixes).\n- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).\n- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).\n- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).\n- mac80211: fix user-power when emulating chanctx (stable-fixes).\n- mac802154: check local interfaces before deleting sdata list (stable-fixes).\n- mailbox: pcc: Add support for platform notification handling (stable-fixes).\n- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).\n- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).\n- maple_tree: simplify split calculation (git-fixes).\n- media: camif-core: Add check for clk_enable() (git-fixes).\n- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).\n- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).\n- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).\n- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).\n- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).\n- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).\n- media: i2c: imx412: Add missing newline to prints (git-fixes).\n- media: i2c: ov9282: Correct the exposure offset (git-fixes).\n- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).\n- media: imx296: Add standby delay during probe (git-fixes).\n- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).\n- media: marvell: Add check for clk_enable() (git-fixes).\n- media: mc: fix endpoint iteration (git-fixes).\n- media: mipi-csis: Add check for clk_enable() (git-fixes).\n- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).\n- media: ov5640: fix get_light_freq on auto (git-fixes).\n- media: rc: iguanair: handle timeouts (git-fixes).\n- media: rkisp1: Fix unused value issue (git-fixes).\n- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).\n- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).\n- media: uvcvideo: Fix double free in error path (git-fixes).\n- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).\n- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).\n- media: uvcvideo: Only save async fh if success (git-fixes).\n- media: uvcvideo: Propagate buf-\u003eerror to userspace (git-fixes).\n- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).\n- media: uvcvideo: Remove dangling pointers (git-fixes).\n- media: uvcvideo: Remove redundant NULL assignment (git-fixes).\n- media: uvcvideo: Support partial control reads (git-fixes).\n- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).\n- memory-failure: use a folio in me_huge_page() (git-fixes).\n- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).\n- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).\n- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).\n- misc: fastrpc: Fix copy buffer page size (git-fixes).\n- misc: fastrpc: Fix registered buffer page address (git-fixes).\n- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).\n- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).\n- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).\n- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).\n- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).\n- mm/memory-failure: check the mapcount of the precise page (git-fixes).\n- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).\n- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).\n- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).\n- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).\n- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).\n- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).\n- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).\n- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).\n- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).\n- mm/migrate: putback split folios when numa hint migration fails (git-fixes).\n- mm/migrate: split source folio if it is on deferred split list (git-fixes).\n- mm/page_owner: remove free_ts from page_owner output (git-fixes).\n- mm/readahead: do not allow order-1 folio (bsc#1234205).\n- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).\n- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).\n- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).\n- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).\n- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).\n- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).\n- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).\n- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).\n- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).\n- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).\n- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).\n- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).\n- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).\n- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).\n- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).\n- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).\n- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).\n- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).\n- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).\n- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).\n- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).\n- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).\n- net/ipv6: release expired exception dst cached in socket (bsc#1216813).\n- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).\n- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).\n- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).\n- net/qed: allow old cards not supporting \"num_images\" to work (git-fixes).\n- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).\n- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).\n- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).\n- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).\n- net: rose: fix timer races against user threads (git-fixes).\n- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).\n- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).\n- net: usb: rtl8150: enable basic endpoint checking (git-fixes).\n- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).\n- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).\n- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).\n- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).\n- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).\n- nfsd: make sure exp active before svc_export_show (git-fixes).\n- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).\n- nfsd: restore callback functionality for NFSv4.0 (git-fixes).\n- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).\n- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).\n- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).\n- nilfs2: prevent use of deleted inode (git-fixes).\n- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).\n- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).\n- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).\n- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).\n- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).\n- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).\n- nvme: apple: fix device reference counting (git-fixes).\n- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).\n- nvme: fix metadata handling in nvme-passthrough (git-fixes).\n- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).\n- nvmet: propagate npwg topology (git-fixes).\n- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).\n- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).\n- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).\n- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).\n- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).\n- of: address: Report error on resource bounds overflow (stable-fixes).\n- padata: add pd get/put refcnt helper (git-fixes).\n- padata: avoid UAF for reorder_work (git-fixes).\n- padata: fix UAF in padata_reorder (git-fixes).\n- parisc: Raise minimal GCC version (bsc#1220773).\n- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).\n- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).\n- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).\n- percpu: Wire up cmpxchg128 (bsc#1220773).\n- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).\n- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).\n- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).\n- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).\n- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).\n- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).\n- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).\n- phy: usb: Toggle the PHY power during init (git-fixes).\n- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).\n- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).\n- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).\n- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).\n- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).\n- pinmux: Use sequential access to access desc-\u003epinmux data (stable-fixes).\n- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).\n- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).\n- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).\n- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).\n- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).\n- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).\n- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).\n- platform/x86: thinkpad_acpi: Fix for ThinkPad\u0027s with ECFW showing incorrect fan speed (stable-fixes).\n- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).\n- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).\n- power: supply: gpio-charger: Fix set charge current limits (git-fixes).\n- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).\n- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).\n- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).\n- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).\n- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).\n- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).\n- pps: add an error check in parport_attach (git-fixes).\n- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).\n- printk: Add is_printk_legacy_deferred() (bsc#1236733).\n- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).\n- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).\n- pwm: stm32-lp: Add check for clk_enable() (git-fixes).\n- pwm: stm32: Add check for clk_enable() (git-fixes).\n- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).\n- quota: explicitly forbid quota files from being encrypted (bsc#1234196).\n- quota: flush quota_release_work upon quota writeback (bsc#1234195).\n- quota: simplify drop_dquot_ref() (bsc#1234197).\n- rcu-tasks: Pull sampling of -\u003epercpu_dequeue_lim out of loop (git-fixes)\n- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)\n- rcu: Dump memory object info if callback function is invalid (git-fixes)\n- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)\n- rcuscale: Move rcu_scale_writer() (git-fixes)\n- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)\n- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).\n- regmap: Use correct format specifier for logging range errors (stable-fixes).\n- regulator: core: Add missing newline character (git-fixes).\n- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).\n- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).\n- remoteproc: core: Fix ida_free call while not allocated (git-fixes).\n- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).\n- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).\n- rtc: zynqmp: Fix optional clock name property (git-fixes).\n- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).\n- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).\n- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).\n- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).\n- s390/facility: Disable compile time optimization for decompressor code (git-fixes).\n- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).\n- s390/pageattr: Implement missing kernel_page_present() (git-fixes).\n- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)\n- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).\n- scatterlist: fix incorrect func name in kernel-doc (git-fixes).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).\n- sched/numa: fix memory leak due to the overwritten vma-\u003enumab_state (git fixes (sched/numa)).\n- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).\n- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).\n- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).\n- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).\n- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).\n- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).\n- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).\n- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).\n- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).\n- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).\n- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).\n- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).\n- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).\n- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).\n- scsi: qla2xxx: Remove the unused \u0027del_list_entry\u0027 field in struct fc_port (bsc#1235406).\n- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).\n- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).\n- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).\n- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).\n- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).\n- selftest: media_tests: fix trivial UAF typo (git-fixes).\n- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).\n- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).\n- selftests/landlock: Fix error message (git-fixes).\n- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).\n- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).\n- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).\n- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).\n- selftests: tc-testing: reduce rshift value (stable-fixes).\n- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).\n- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).\n- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).\n- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).\n- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).\n- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).\n- serial: 8250_fintek: Add support for F81216E (stable-fixes).\n- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).\n- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).\n- serial: amba-pl011: Use port lock wrappers (stable-fixes).\n- serial: amba-pl011: fix build regression (git-fixes).\n- serial: do not use uninitialized value in uart_poll_init() (git-fixes).\n- serial: imx: only set receiver level if it is zero (git-fixes).\n- serial: imx: set receiver level before starting uart (git-fixes).\n- serial: qcom-geni: Do not cancel/abort if we can\u0027t get the port lock (git-fixes).\n- serial: qcom-geni: disable interrupts during console writes (git-fixes).\n- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).\n- serial: qcom-geni: fix console corruption (git-fixes).\n- serial: qcom-geni: fix dma rx cancellation (git-fixes).\n- serial: qcom-geni: fix false console tx restart (git-fixes).\n- serial: qcom-geni: fix fifo polling timeout (git-fixes).\n- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).\n- serial: qcom-geni: fix polled console corruption (git-fixes).\n- serial: qcom-geni: fix polled console initialisation (git-fixes).\n- serial: qcom-geni: fix receiver enable (git-fixes).\n- serial: qcom-geni: fix shutdown race (git-fixes).\n- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).\n- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).\n- serial: qcom-geni: revert broken hibernation support (git-fixes).\n- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).\n- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).\n- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).\n- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).\n- slub: Replace cmpxchg_double() (bsc#1220773).\n- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).\n- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]\n- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).\n- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).\n- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).\n- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).\n- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).\n- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).\n- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).\n- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).\n- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).\n- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).\n- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).\n- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).\n- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).\n- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).\n- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).\n- spi: zynq-qspi: Add check for clk_enable() (git-fixes).\n- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)\n- srcu: Only accelerate on enqueue time (git-fixes)\n- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).\n- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).\n- staging: iio: ad9832: Correct phase range check (git-fixes).\n- staging: iio: ad9834: Correct phase range check (git-fixes).\n- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).\n- staging: media: max96712: fix kernel oops when removing module (git-fixes).\n- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).\n- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).\n- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).\n- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)\n- svcrdma: Address an integer overflow (git-fixes).\n- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).\n- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).\n- swiotlb: Reinstate page-alignment for mappings \u003e= PAGE_SIZE (git-fixes).\n- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).\n- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).\n- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).\n- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).\n- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).\n- tools: Sync if_xdp.h uapi tooling header (git-fixes).\n- tools: hv: change permissions of NetworkManager configuration file (git-fixes).\n- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)\n- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).\n- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).\n- types: Introduce [us]128 (bsc#1220773).\n- ubifs: Correct the total block count by deducting journal reservation (git-fixes).\n- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).\n- ubifs: skip dumping tnc tree when zroot is null (git-fixes).\n- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).\n- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).\n- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).\n- udf: refactor inode_bmap() to handle error (bsc#1234242).\n- udf: refactor udf_current_aext() to handle error (bsc#1234240).\n- udf: refactor udf_next_aext() to handle error (bsc#1234241).\n- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).\n- uio: Fix return value of poll (git-fixes).\n- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).\n- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).\n- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).\n- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).\n- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).\n- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).\n- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).\n- usb: dwc2: Fix HCD port connection race (git-fixes).\n- usb: dwc2: Fix HCD resume (git-fixes).\n- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).\n- usb: dwc2: hcd: Fix GetPortStatus \u0026 SetPortFeature (git-fixes).\n- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).\n- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).\n- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).\n- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).\n- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).\n- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).\n- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).\n- usb: fix reference leak in usb_new_device() (git-fixes).\n- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).\n- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).\n- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).\n- usb: gadget: f_tcm: Do not free command immediately (git-fixes).\n- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).\n- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).\n- usb: gadget: f_tcm: Translate error to sense (git-fixes).\n- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).\n- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).\n- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).\n- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).\n- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).\n- usb: host: xhci-plat: Assign shared_hcd-\u003ersrc_start (git-fixes).\n- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).\n- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).\n- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)\n- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).\n- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).\n- usb: typec: use cleanup facility for \u0027altmodes_node\u0027 (stable-fixes).\n- usbnet: ipheth: break up NCM header size computation (git-fixes).\n- usbnet: ipheth: check that DPE points past NCM header (git-fixes).\n- usbnet: ipheth: fix DPE OoB read (git-fixes).\n- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).\n- usbnet: ipheth: refactor NCM datagram loop (git-fixes).\n- usbnet: ipheth: use static NDP16 location in URB (git-fixes).\n- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).\n- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).\n- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).\n- vdpa: solidrun: Fix UB bug with devres (git-fixes).\n- vfs: fix readahead(2) on block devices (bsc#1234201).\n- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).\n- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).\n- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).\n- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).\n- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).\n- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).\n- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).\n- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).\n- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).\n- wifi: ath5k: add PCI ID for SX76X (git-fixes).\n- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).\n- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).\n- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).\n- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).\n- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).\n- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).\n- wifi: mac80211: Add non-atomic station iterator (stable-fixes).\n- wifi: mac80211: Fix common size calculation for ML element (git-fixes).\n- wifi: mac80211: clean up \u0027ret\u0027 in sta_link_apply_parameters() (stable-fixes).\n- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).\n- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).\n- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).\n- wifi: mac80211: fix station NSS capability initialization order (git-fixes).\n- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).\n- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).\n- wifi: mac80211: prohibit deactivating all links (git-fixes).\n- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).\n- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).\n- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).\n- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).\n- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).\n- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7915: fix register mapping (git-fixes).\n- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).\n- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).\n- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).\n- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).\n- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).\n- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).\n- wifi: mt76: mt7996: fix ldpc setting (git-fixes).\n- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7996: fix register mapping (git-fixes).\n- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).\n- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).\n- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).\n- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).\n- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).\n- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).\n- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).\n- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).\n- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).\n- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).\n- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).\n- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).\n- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).\n- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).\n- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).\n- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).\n- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).\n- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).\n- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).\n- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).\n- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).\n- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).\n- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).\n- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).\n- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).\n- xfs: do not allocate COW extents when unsharing a hole (git-fixes).\n- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).\n- xfs: remove unknown compat feature check in superblock write validation (git-fixes).\n- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).\n- xfs: sb_spino_align is not verified (git-fixes).\n- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).\n- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).\n- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-kernel-3",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20248-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:20248-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520248-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:20248-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021074.html"
},
{
"category": "self",
"summary": "SUSE Bug 1012628",
"url": "https://bugzilla.suse.com/1012628"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1214954",
"url": "https://bugzilla.suse.com/1214954"
},
{
"category": "self",
"summary": "SUSE Bug 1215199",
"url": "https://bugzilla.suse.com/1215199"
},
{
"category": "self",
"summary": "SUSE Bug 1216813",
"url": "https://bugzilla.suse.com/1216813"
},
{
"category": "self",
"summary": "SUSE Bug 1218470",
"url": "https://bugzilla.suse.com/1218470"
},
{
"category": "self",
"summary": "SUSE Bug 1220711",
"url": "https://bugzilla.suse.com/1220711"
},
{
"category": "self",
"summary": "SUSE Bug 1220773",
"url": "https://bugzilla.suse.com/1220773"
},
{
"category": "self",
"summary": "SUSE Bug 1224095",
"url": "https://bugzilla.suse.com/1224095"
},
{
"category": "self",
"summary": "SUSE Bug 1224726",
"url": "https://bugzilla.suse.com/1224726"
},
{
"category": "self",
"summary": "SUSE Bug 1225743",
"url": "https://bugzilla.suse.com/1225743"
},
{
"category": "self",
"summary": "SUSE Bug 1225820",
"url": "https://bugzilla.suse.com/1225820"
},
{
"category": "self",
"summary": "SUSE Bug 1225897",
"url": "https://bugzilla.suse.com/1225897"
},
{
"category": "self",
"summary": "SUSE Bug 1226980",
"url": "https://bugzilla.suse.com/1226980"
},
{
"category": "self",
"summary": "SUSE Bug 1227445",
"url": "https://bugzilla.suse.com/1227445"
},
{
"category": "self",
"summary": "SUSE Bug 1228526",
"url": "https://bugzilla.suse.com/1228526"
},
{
"category": "self",
"summary": "SUSE Bug 1228592",
"url": "https://bugzilla.suse.com/1228592"
},
{
"category": "self",
"summary": "SUSE Bug 1229809",
"url": "https://bugzilla.suse.com/1229809"
},
{
"category": "self",
"summary": "SUSE Bug 1229833",
"url": "https://bugzilla.suse.com/1229833"
},
{
"category": "self",
"summary": "SUSE Bug 1230205",
"url": "https://bugzilla.suse.com/1230205"
},
{
"category": "self",
"summary": "SUSE Bug 1230413",
"url": "https://bugzilla.suse.com/1230413"
},
{
"category": "self",
"summary": "SUSE Bug 1230697",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "self",
"summary": "SUSE Bug 1231016",
"url": "https://bugzilla.suse.com/1231016"
},
{
"category": "self",
"summary": "SUSE Bug 1231854",
"url": "https://bugzilla.suse.com/1231854"
},
{
"category": "self",
"summary": "SUSE Bug 1231909",
"url": "https://bugzilla.suse.com/1231909"
},
{
"category": "self",
"summary": "SUSE Bug 1231963",
"url": "https://bugzilla.suse.com/1231963"
},
{
"category": "self",
"summary": "SUSE Bug 1232087",
"url": "https://bugzilla.suse.com/1232087"
},
{
"category": "self",
"summary": "SUSE Bug 1232101",
"url": "https://bugzilla.suse.com/1232101"
},
{
"category": "self",
"summary": "SUSE Bug 1232158",
"url": "https://bugzilla.suse.com/1232158"
},
{
"category": "self",
"summary": "SUSE Bug 1232161",
"url": "https://bugzilla.suse.com/1232161"
},
{
"category": "self",
"summary": "SUSE Bug 1232193",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "self",
"summary": "SUSE Bug 1232198",
"url": "https://bugzilla.suse.com/1232198"
},
{
"category": "self",
"summary": "SUSE Bug 1232201",
"url": "https://bugzilla.suse.com/1232201"
},
{
"category": "self",
"summary": "SUSE Bug 1232418",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "self",
"summary": "SUSE Bug 1232419",
"url": "https://bugzilla.suse.com/1232419"
},
{
"category": "self",
"summary": "SUSE Bug 1232420",
"url": "https://bugzilla.suse.com/1232420"
},
{
"category": "self",
"summary": "SUSE Bug 1232421",
"url": "https://bugzilla.suse.com/1232421"
},
{
"category": "self",
"summary": "SUSE Bug 1232436",
"url": "https://bugzilla.suse.com/1232436"
},
{
"category": "self",
"summary": "SUSE Bug 1232882",
"url": "https://bugzilla.suse.com/1232882"
},
{
"category": "self",
"summary": "SUSE Bug 1233038",
"url": "https://bugzilla.suse.com/1233038"
},
{
"category": "self",
"summary": "SUSE Bug 1233055",
"url": "https://bugzilla.suse.com/1233055"
},
{
"category": "self",
"summary": "SUSE Bug 1233070",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "self",
"summary": "SUSE Bug 1233096",
"url": "https://bugzilla.suse.com/1233096"
},
{
"category": "self",
"summary": "SUSE Bug 1233112",
"url": "https://bugzilla.suse.com/1233112"
},
{
"category": "self",
"summary": "SUSE Bug 1233200",
"url": "https://bugzilla.suse.com/1233200"
},
{
"category": "self",
"summary": "SUSE Bug 1233204",
"url": "https://bugzilla.suse.com/1233204"
},
{
"category": "self",
"summary": "SUSE Bug 1233239",
"url": "https://bugzilla.suse.com/1233239"
},
{
"category": "self",
"summary": "SUSE Bug 1233259",
"url": "https://bugzilla.suse.com/1233259"
},
{
"category": "self",
"summary": "SUSE Bug 1233260",
"url": "https://bugzilla.suse.com/1233260"
},
{
"category": "self",
"summary": "SUSE Bug 1233324",
"url": "https://bugzilla.suse.com/1233324"
},
{
"category": "self",
"summary": "SUSE Bug 1233328",
"url": "https://bugzilla.suse.com/1233328"
},
{
"category": "self",
"summary": "SUSE Bug 1233461",
"url": "https://bugzilla.suse.com/1233461"
},
{
"category": "self",
"summary": "SUSE Bug 1233467",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "self",
"summary": "SUSE Bug 1233469",
"url": "https://bugzilla.suse.com/1233469"
},
{
"category": "self",
"summary": "SUSE Bug 1233488",
"url": "https://bugzilla.suse.com/1233488"
},
{
"category": "self",
"summary": "SUSE Bug 1233546",
"url": "https://bugzilla.suse.com/1233546"
},
{
"category": "self",
"summary": "SUSE Bug 1233558",
"url": "https://bugzilla.suse.com/1233558"
},
{
"category": "self",
"summary": "SUSE Bug 1233637",
"url": "https://bugzilla.suse.com/1233637"
},
{
"category": "self",
"summary": "SUSE Bug 1233638",
"url": "https://bugzilla.suse.com/1233638"
},
{
"category": "self",
"summary": "SUSE Bug 1233642",
"url": "https://bugzilla.suse.com/1233642"
},
{
"category": "self",
"summary": "SUSE Bug 1233772",
"url": "https://bugzilla.suse.com/1233772"
},
{
"category": "self",
"summary": "SUSE Bug 1233778",
"url": "https://bugzilla.suse.com/1233778"
},
{
"category": "self",
"summary": "SUSE Bug 1233837",
"url": "https://bugzilla.suse.com/1233837"
},
{
"category": "self",
"summary": "SUSE Bug 1234024",
"url": "https://bugzilla.suse.com/1234024"
},
{
"category": "self",
"summary": "SUSE Bug 1234069",
"url": "https://bugzilla.suse.com/1234069"
},
{
"category": "self",
"summary": "SUSE Bug 1234071",
"url": "https://bugzilla.suse.com/1234071"
},
{
"category": "self",
"summary": "SUSE Bug 1234073",
"url": "https://bugzilla.suse.com/1234073"
},
{
"category": "self",
"summary": "SUSE Bug 1234075",
"url": "https://bugzilla.suse.com/1234075"
},
{
"category": "self",
"summary": "SUSE Bug 1234076",
"url": "https://bugzilla.suse.com/1234076"
},
{
"category": "self",
"summary": "SUSE Bug 1234077",
"url": "https://bugzilla.suse.com/1234077"
},
{
"category": "self",
"summary": "SUSE Bug 1234079",
"url": "https://bugzilla.suse.com/1234079"
},
{
"category": "self",
"summary": "SUSE Bug 1234086",
"url": "https://bugzilla.suse.com/1234086"
},
{
"category": "self",
"summary": "SUSE Bug 1234139",
"url": "https://bugzilla.suse.com/1234139"
},
{
"category": "self",
"summary": "SUSE Bug 1234140",
"url": "https://bugzilla.suse.com/1234140"
},
{
"category": "self",
"summary": "SUSE Bug 1234141",
"url": "https://bugzilla.suse.com/1234141"
},
{
"category": "self",
"summary": "SUSE Bug 1234142",
"url": "https://bugzilla.suse.com/1234142"
},
{
"category": "self",
"summary": "SUSE Bug 1234143",
"url": "https://bugzilla.suse.com/1234143"
},
{
"category": "self",
"summary": "SUSE Bug 1234144",
"url": "https://bugzilla.suse.com/1234144"
},
{
"category": "self",
"summary": "SUSE Bug 1234145",
"url": "https://bugzilla.suse.com/1234145"
},
{
"category": "self",
"summary": "SUSE Bug 1234146",
"url": "https://bugzilla.suse.com/1234146"
},
{
"category": "self",
"summary": "SUSE Bug 1234147",
"url": "https://bugzilla.suse.com/1234147"
},
{
"category": "self",
"summary": "SUSE Bug 1234148",
"url": "https://bugzilla.suse.com/1234148"
},
{
"category": "self",
"summary": "SUSE Bug 1234149",
"url": "https://bugzilla.suse.com/1234149"
},
{
"category": "self",
"summary": "SUSE Bug 1234150",
"url": "https://bugzilla.suse.com/1234150"
},
{
"category": "self",
"summary": "SUSE Bug 1234153",
"url": "https://bugzilla.suse.com/1234153"
},
{
"category": "self",
"summary": "SUSE Bug 1234155",
"url": "https://bugzilla.suse.com/1234155"
},
{
"category": "self",
"summary": "SUSE Bug 1234156",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "self",
"summary": "SUSE Bug 1234158",
"url": "https://bugzilla.suse.com/1234158"
},
{
"category": "self",
"summary": "SUSE Bug 1234159",
"url": "https://bugzilla.suse.com/1234159"
},
{
"category": "self",
"summary": "SUSE Bug 1234160",
"url": "https://bugzilla.suse.com/1234160"
},
{
"category": "self",
"summary": "SUSE Bug 1234161",
"url": "https://bugzilla.suse.com/1234161"
},
{
"category": "self",
"summary": "SUSE Bug 1234162",
"url": "https://bugzilla.suse.com/1234162"
},
{
"category": "self",
"summary": "SUSE Bug 1234163",
"url": "https://bugzilla.suse.com/1234163"
},
{
"category": "self",
"summary": "SUSE Bug 1234164",
"url": "https://bugzilla.suse.com/1234164"
},
{
"category": "self",
"summary": "SUSE Bug 1234165",
"url": "https://bugzilla.suse.com/1234165"
},
{
"category": "self",
"summary": "SUSE Bug 1234166",
"url": "https://bugzilla.suse.com/1234166"
},
{
"category": "self",
"summary": "SUSE Bug 1234167",
"url": "https://bugzilla.suse.com/1234167"
},
{
"category": "self",
"summary": "SUSE Bug 1234168",
"url": "https://bugzilla.suse.com/1234168"
},
{
"category": "self",
"summary": "SUSE Bug 1234169",
"url": "https://bugzilla.suse.com/1234169"
},
{
"category": "self",
"summary": "SUSE Bug 1234170",
"url": "https://bugzilla.suse.com/1234170"
},
{
"category": "self",
"summary": "SUSE Bug 1234171",
"url": "https://bugzilla.suse.com/1234171"
},
{
"category": "self",
"summary": "SUSE Bug 1234172",
"url": "https://bugzilla.suse.com/1234172"
},
{
"category": "self",
"summary": "SUSE Bug 1234173",
"url": "https://bugzilla.suse.com/1234173"
},
{
"category": "self",
"summary": "SUSE Bug 1234174",
"url": "https://bugzilla.suse.com/1234174"
},
{
"category": "self",
"summary": "SUSE Bug 1234175",
"url": "https://bugzilla.suse.com/1234175"
},
{
"category": "self",
"summary": "SUSE Bug 1234176",
"url": "https://bugzilla.suse.com/1234176"
},
{
"category": "self",
"summary": "SUSE Bug 1234177",
"url": "https://bugzilla.suse.com/1234177"
},
{
"category": "self",
"summary": "SUSE Bug 1234178",
"url": "https://bugzilla.suse.com/1234178"
},
{
"category": "self",
"summary": "SUSE Bug 1234179",
"url": "https://bugzilla.suse.com/1234179"
},
{
"category": "self",
"summary": "SUSE Bug 1234180",
"url": "https://bugzilla.suse.com/1234180"
},
{
"category": "self",
"summary": "SUSE Bug 1234181",
"url": "https://bugzilla.suse.com/1234181"
},
{
"category": "self",
"summary": "SUSE Bug 1234182",
"url": "https://bugzilla.suse.com/1234182"
},
{
"category": "self",
"summary": "SUSE Bug 1234183",
"url": "https://bugzilla.suse.com/1234183"
},
{
"category": "self",
"summary": "SUSE Bug 1234184",
"url": "https://bugzilla.suse.com/1234184"
},
{
"category": "self",
"summary": "SUSE Bug 1234185",
"url": "https://bugzilla.suse.com/1234185"
},
{
"category": "self",
"summary": "SUSE Bug 1234186",
"url": "https://bugzilla.suse.com/1234186"
},
{
"category": "self",
"summary": "SUSE Bug 1234187",
"url": "https://bugzilla.suse.com/1234187"
},
{
"category": "self",
"summary": "SUSE Bug 1234188",
"url": "https://bugzilla.suse.com/1234188"
},
{
"category": "self",
"summary": "SUSE Bug 1234189",
"url": "https://bugzilla.suse.com/1234189"
},
{
"category": "self",
"summary": "SUSE Bug 1234190",
"url": "https://bugzilla.suse.com/1234190"
},
{
"category": "self",
"summary": "SUSE Bug 1234191",
"url": "https://bugzilla.suse.com/1234191"
},
{
"category": "self",
"summary": "SUSE Bug 1234192",
"url": "https://bugzilla.suse.com/1234192"
},
{
"category": "self",
"summary": "SUSE Bug 1234193",
"url": "https://bugzilla.suse.com/1234193"
},
{
"category": "self",
"summary": "SUSE Bug 1234194",
"url": "https://bugzilla.suse.com/1234194"
},
{
"category": "self",
"summary": "SUSE Bug 1234195",
"url": "https://bugzilla.suse.com/1234195"
},
{
"category": "self",
"summary": "SUSE Bug 1234196",
"url": "https://bugzilla.suse.com/1234196"
},
{
"category": "self",
"summary": "SUSE Bug 1234197",
"url": "https://bugzilla.suse.com/1234197"
},
{
"category": "self",
"summary": "SUSE Bug 1234198",
"url": "https://bugzilla.suse.com/1234198"
},
{
"category": "self",
"summary": "SUSE Bug 1234199",
"url": "https://bugzilla.suse.com/1234199"
},
{
"category": "self",
"summary": "SUSE Bug 1234200",
"url": "https://bugzilla.suse.com/1234200"
},
{
"category": "self",
"summary": "SUSE Bug 1234201",
"url": "https://bugzilla.suse.com/1234201"
},
{
"category": "self",
"summary": "SUSE Bug 1234203",
"url": "https://bugzilla.suse.com/1234203"
},
{
"category": "self",
"summary": "SUSE Bug 1234204",
"url": "https://bugzilla.suse.com/1234204"
},
{
"category": "self",
"summary": "SUSE Bug 1234205",
"url": "https://bugzilla.suse.com/1234205"
},
{
"category": "self",
"summary": "SUSE Bug 1234207",
"url": "https://bugzilla.suse.com/1234207"
},
{
"category": "self",
"summary": "SUSE Bug 1234208",
"url": "https://bugzilla.suse.com/1234208"
},
{
"category": "self",
"summary": "SUSE Bug 1234209",
"url": "https://bugzilla.suse.com/1234209"
},
{
"category": "self",
"summary": "SUSE Bug 1234219",
"url": "https://bugzilla.suse.com/1234219"
},
{
"category": "self",
"summary": "SUSE Bug 1234220",
"url": "https://bugzilla.suse.com/1234220"
},
{
"category": "self",
"summary": "SUSE Bug 1234221",
"url": "https://bugzilla.suse.com/1234221"
},
{
"category": "self",
"summary": "SUSE Bug 1234237",
"url": "https://bugzilla.suse.com/1234237"
},
{
"category": "self",
"summary": "SUSE Bug 1234238",
"url": "https://bugzilla.suse.com/1234238"
},
{
"category": "self",
"summary": "SUSE Bug 1234239",
"url": "https://bugzilla.suse.com/1234239"
},
{
"category": "self",
"summary": "SUSE Bug 1234240",
"url": "https://bugzilla.suse.com/1234240"
},
{
"category": "self",
"summary": "SUSE Bug 1234241",
"url": "https://bugzilla.suse.com/1234241"
},
{
"category": "self",
"summary": "SUSE Bug 1234242",
"url": "https://bugzilla.suse.com/1234242"
},
{
"category": "self",
"summary": "SUSE Bug 1234243",
"url": "https://bugzilla.suse.com/1234243"
},
{
"category": "self",
"summary": "SUSE Bug 1234278",
"url": "https://bugzilla.suse.com/1234278"
},
{
"category": "self",
"summary": "SUSE Bug 1234279",
"url": "https://bugzilla.suse.com/1234279"
},
{
"category": "self",
"summary": "SUSE Bug 1234280",
"url": "https://bugzilla.suse.com/1234280"
},
{
"category": "self",
"summary": "SUSE Bug 1234281",
"url": "https://bugzilla.suse.com/1234281"
},
{
"category": "self",
"summary": "SUSE Bug 1234282",
"url": "https://bugzilla.suse.com/1234282"
},
{
"category": "self",
"summary": "SUSE Bug 1234294",
"url": "https://bugzilla.suse.com/1234294"
},
{
"category": "self",
"summary": "SUSE Bug 1234338",
"url": "https://bugzilla.suse.com/1234338"
},
{
"category": "self",
"summary": "SUSE Bug 1234357",
"url": "https://bugzilla.suse.com/1234357"
},
{
"category": "self",
"summary": "SUSE Bug 1234381",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "self",
"summary": "SUSE Bug 1234454",
"url": "https://bugzilla.suse.com/1234454"
},
{
"category": "self",
"summary": "SUSE Bug 1234464",
"url": "https://bugzilla.suse.com/1234464"
},
{
"category": "self",
"summary": "SUSE Bug 1234605",
"url": "https://bugzilla.suse.com/1234605"
},
{
"category": "self",
"summary": "SUSE Bug 1234619",
"url": "https://bugzilla.suse.com/1234619"
},
{
"category": "self",
"summary": "SUSE Bug 1234635",
"url": "https://bugzilla.suse.com/1234635"
},
{
"category": "self",
"summary": "SUSE Bug 1234651",
"url": "https://bugzilla.suse.com/1234651"
},
{
"category": "self",
"summary": "SUSE Bug 1234652",
"url": "https://bugzilla.suse.com/1234652"
},
{
"category": "self",
"summary": "SUSE Bug 1234654",
"url": "https://bugzilla.suse.com/1234654"
},
{
"category": "self",
"summary": "SUSE Bug 1234655",
"url": "https://bugzilla.suse.com/1234655"
},
{
"category": "self",
"summary": "SUSE Bug 1234657",
"url": "https://bugzilla.suse.com/1234657"
},
{
"category": "self",
"summary": "SUSE Bug 1234658",
"url": "https://bugzilla.suse.com/1234658"
},
{
"category": "self",
"summary": "SUSE Bug 1234659",
"url": "https://bugzilla.suse.com/1234659"
},
{
"category": "self",
"summary": "SUSE Bug 1234668",
"url": "https://bugzilla.suse.com/1234668"
},
{
"category": "self",
"summary": "SUSE Bug 1234683",
"url": "https://bugzilla.suse.com/1234683"
},
{
"category": "self",
"summary": "SUSE Bug 1234690",
"url": "https://bugzilla.suse.com/1234690"
},
{
"category": "self",
"summary": "SUSE Bug 1234693",
"url": "https://bugzilla.suse.com/1234693"
},
{
"category": "self",
"summary": "SUSE Bug 1234725",
"url": "https://bugzilla.suse.com/1234725"
},
{
"category": "self",
"summary": "SUSE Bug 1234726",
"url": "https://bugzilla.suse.com/1234726"
},
{
"category": "self",
"summary": "SUSE Bug 1234810",
"url": "https://bugzilla.suse.com/1234810"
},
{
"category": "self",
"summary": "SUSE Bug 1234811",
"url": "https://bugzilla.suse.com/1234811"
},
{
"category": "self",
"summary": "SUSE Bug 1234825",
"url": "https://bugzilla.suse.com/1234825"
},
{
"category": "self",
"summary": "SUSE Bug 1234826",
"url": "https://bugzilla.suse.com/1234826"
},
{
"category": "self",
"summary": "SUSE Bug 1234827",
"url": "https://bugzilla.suse.com/1234827"
},
{
"category": "self",
"summary": "SUSE Bug 1234829",
"url": "https://bugzilla.suse.com/1234829"
},
{
"category": "self",
"summary": "SUSE Bug 1234832",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "self",
"summary": "SUSE Bug 1234834",
"url": "https://bugzilla.suse.com/1234834"
},
{
"category": "self",
"summary": "SUSE Bug 1234843",
"url": "https://bugzilla.suse.com/1234843"
},
{
"category": "self",
"summary": "SUSE Bug 1234846",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "self",
"summary": "SUSE Bug 1234848",
"url": "https://bugzilla.suse.com/1234848"
},
{
"category": "self",
"summary": "SUSE Bug 1234853",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "self",
"summary": "SUSE Bug 1234855",
"url": "https://bugzilla.suse.com/1234855"
},
{
"category": "self",
"summary": "SUSE Bug 1234856",
"url": "https://bugzilla.suse.com/1234856"
},
{
"category": "self",
"summary": "SUSE Bug 1234863",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "self",
"summary": "SUSE Bug 1234884",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "self",
"summary": "SUSE Bug 1234887",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "self",
"summary": "SUSE Bug 1234888",
"url": "https://bugzilla.suse.com/1234888"
},
{
"category": "self",
"summary": "SUSE Bug 1234889",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "self",
"summary": "SUSE Bug 1234891",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "self",
"summary": "SUSE Bug 1234893",
"url": "https://bugzilla.suse.com/1234893"
},
{
"category": "self",
"summary": "SUSE Bug 1234898",
"url": "https://bugzilla.suse.com/1234898"
},
{
"category": "self",
"summary": "SUSE Bug 1234899",
"url": "https://bugzilla.suse.com/1234899"
},
{
"category": "self",
"summary": "SUSE Bug 1234900",
"url": "https://bugzilla.suse.com/1234900"
},
{
"category": "self",
"summary": "SUSE Bug 1234901",
"url": "https://bugzilla.suse.com/1234901"
},
{
"category": "self",
"summary": "SUSE Bug 1234905",
"url": "https://bugzilla.suse.com/1234905"
},
{
"category": "self",
"summary": "SUSE Bug 1234906",
"url": "https://bugzilla.suse.com/1234906"
},
{
"category": "self",
"summary": "SUSE Bug 1234907",
"url": "https://bugzilla.suse.com/1234907"
},
{
"category": "self",
"summary": "SUSE Bug 1234909",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "self",
"summary": "SUSE Bug 1234911",
"url": "https://bugzilla.suse.com/1234911"
},
{
"category": "self",
"summary": "SUSE Bug 1234912",
"url": "https://bugzilla.suse.com/1234912"
},
{
"category": "self",
"summary": "SUSE Bug 1234916",
"url": "https://bugzilla.suse.com/1234916"
},
{
"category": "self",
"summary": "SUSE Bug 1234918",
"url": "https://bugzilla.suse.com/1234918"
},
{
"category": "self",
"summary": "SUSE Bug 1234920",
"url": "https://bugzilla.suse.com/1234920"
},
{
"category": "self",
"summary": "SUSE Bug 1234921",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "self",
"summary": "SUSE Bug 1234922",
"url": "https://bugzilla.suse.com/1234922"
},
{
"category": "self",
"summary": "SUSE Bug 1234923",
"url": "https://bugzilla.suse.com/1234923"
},
{
"category": "self",
"summary": "SUSE Bug 1234929",
"url": "https://bugzilla.suse.com/1234929"
},
{
"category": "self",
"summary": "SUSE Bug 1234930",
"url": "https://bugzilla.suse.com/1234930"
},
{
"category": "self",
"summary": "SUSE Bug 1234931",
"url": "https://bugzilla.suse.com/1234931"
},
{
"category": "self",
"summary": "SUSE Bug 1234934",
"url": "https://bugzilla.suse.com/1234934"
},
{
"category": "self",
"summary": "SUSE Bug 1234937",
"url": "https://bugzilla.suse.com/1234937"
},
{
"category": "self",
"summary": "SUSE Bug 1234947",
"url": "https://bugzilla.suse.com/1234947"
},
{
"category": "self",
"summary": "SUSE Bug 1234948",
"url": "https://bugzilla.suse.com/1234948"
},
{
"category": "self",
"summary": "SUSE Bug 1234950",
"url": "https://bugzilla.suse.com/1234950"
},
{
"category": "self",
"summary": "SUSE Bug 1234952",
"url": "https://bugzilla.suse.com/1234952"
},
{
"category": "self",
"summary": "SUSE Bug 1234957",
"url": "https://bugzilla.suse.com/1234957"
},
{
"category": "self",
"summary": "SUSE Bug 1234960",
"url": "https://bugzilla.suse.com/1234960"
},
{
"category": "self",
"summary": "SUSE Bug 1234962",
"url": "https://bugzilla.suse.com/1234962"
},
{
"category": "self",
"summary": "SUSE Bug 1234963",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "self",
"summary": "SUSE Bug 1234968",
"url": "https://bugzilla.suse.com/1234968"
},
{
"category": "self",
"summary": "SUSE Bug 1234969",
"url": "https://bugzilla.suse.com/1234969"
},
{
"category": "self",
"summary": "SUSE Bug 1234970",
"url": "https://bugzilla.suse.com/1234970"
},
{
"category": "self",
"summary": "SUSE Bug 1234971",
"url": "https://bugzilla.suse.com/1234971"
},
{
"category": "self",
"summary": "SUSE Bug 1234973",
"url": "https://bugzilla.suse.com/1234973"
},
{
"category": "self",
"summary": "SUSE Bug 1234974",
"url": "https://bugzilla.suse.com/1234974"
},
{
"category": "self",
"summary": "SUSE Bug 1234989",
"url": "https://bugzilla.suse.com/1234989"
},
{
"category": "self",
"summary": "SUSE Bug 1234999",
"url": "https://bugzilla.suse.com/1234999"
},
{
"category": "self",
"summary": "SUSE Bug 1235000",
"url": "https://bugzilla.suse.com/1235000"
},
{
"category": "self",
"summary": "SUSE Bug 1235001",
"url": "https://bugzilla.suse.com/1235001"
},
{
"category": "self",
"summary": "SUSE Bug 1235002",
"url": "https://bugzilla.suse.com/1235002"
},
{
"category": "self",
"summary": "SUSE Bug 1235003",
"url": "https://bugzilla.suse.com/1235003"
},
{
"category": "self",
"summary": "SUSE Bug 1235004",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "self",
"summary": "SUSE Bug 1235007",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "self",
"summary": "SUSE Bug 1235009",
"url": "https://bugzilla.suse.com/1235009"
},
{
"category": "self",
"summary": "SUSE Bug 1235011",
"url": "https://bugzilla.suse.com/1235011"
},
{
"category": "self",
"summary": "SUSE Bug 1235016",
"url": "https://bugzilla.suse.com/1235016"
},
{
"category": "self",
"summary": "SUSE Bug 1235019",
"url": "https://bugzilla.suse.com/1235019"
},
{
"category": "self",
"summary": "SUSE Bug 1235031",
"url": "https://bugzilla.suse.com/1235031"
},
{
"category": "self",
"summary": "SUSE Bug 1235032",
"url": "https://bugzilla.suse.com/1235032"
},
{
"category": "self",
"summary": "SUSE Bug 1235033",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "self",
"summary": "SUSE Bug 1235035",
"url": "https://bugzilla.suse.com/1235035"
},
{
"category": "self",
"summary": "SUSE Bug 1235037",
"url": "https://bugzilla.suse.com/1235037"
},
{
"category": "self",
"summary": "SUSE Bug 1235038",
"url": "https://bugzilla.suse.com/1235038"
},
{
"category": "self",
"summary": "SUSE Bug 1235039",
"url": "https://bugzilla.suse.com/1235039"
},
{
"category": "self",
"summary": "SUSE Bug 1235040",
"url": "https://bugzilla.suse.com/1235040"
},
{
"category": "self",
"summary": "SUSE Bug 1235042",
"url": "https://bugzilla.suse.com/1235042"
},
{
"category": "self",
"summary": "SUSE Bug 1235043",
"url": "https://bugzilla.suse.com/1235043"
},
{
"category": "self",
"summary": "SUSE Bug 1235045",
"url": "https://bugzilla.suse.com/1235045"
},
{
"category": "self",
"summary": "SUSE Bug 1235046",
"url": "https://bugzilla.suse.com/1235046"
},
{
"category": "self",
"summary": "SUSE Bug 1235050",
"url": "https://bugzilla.suse.com/1235050"
},
{
"category": "self",
"summary": "SUSE Bug 1235051",
"url": "https://bugzilla.suse.com/1235051"
},
{
"category": "self",
"summary": "SUSE Bug 1235053",
"url": "https://bugzilla.suse.com/1235053"
},
{
"category": "self",
"summary": "SUSE Bug 1235054",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "self",
"summary": "SUSE Bug 1235056",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "self",
"summary": "SUSE Bug 1235057",
"url": "https://bugzilla.suse.com/1235057"
},
{
"category": "self",
"summary": "SUSE Bug 1235059",
"url": "https://bugzilla.suse.com/1235059"
},
{
"category": "self",
"summary": "SUSE Bug 1235061",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "self",
"summary": "SUSE Bug 1235065",
"url": "https://bugzilla.suse.com/1235065"
},
{
"category": "self",
"summary": "SUSE Bug 1235070",
"url": "https://bugzilla.suse.com/1235070"
},
{
"category": "self",
"summary": "SUSE Bug 1235073",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "self",
"summary": "SUSE Bug 1235075",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "self",
"summary": "SUSE Bug 1235100",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "self",
"summary": "SUSE Bug 1235108",
"url": "https://bugzilla.suse.com/1235108"
},
{
"category": "self",
"summary": "SUSE Bug 1235112",
"url": "https://bugzilla.suse.com/1235112"
},
{
"category": "self",
"summary": "SUSE Bug 1235115",
"url": "https://bugzilla.suse.com/1235115"
},
{
"category": "self",
"summary": "SUSE Bug 1235117",
"url": "https://bugzilla.suse.com/1235117"
},
{
"category": "self",
"summary": "SUSE Bug 1235122",
"url": "https://bugzilla.suse.com/1235122"
},
{
"category": "self",
"summary": "SUSE Bug 1235123",
"url": "https://bugzilla.suse.com/1235123"
},
{
"category": "self",
"summary": "SUSE Bug 1235125",
"url": "https://bugzilla.suse.com/1235125"
},
{
"category": "self",
"summary": "SUSE Bug 1235128",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "self",
"summary": "SUSE Bug 1235132",
"url": "https://bugzilla.suse.com/1235132"
},
{
"category": "self",
"summary": "SUSE Bug 1235133",
"url": "https://bugzilla.suse.com/1235133"
},
{
"category": "self",
"summary": "SUSE Bug 1235134",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "self",
"summary": "SUSE Bug 1235138",
"url": "https://bugzilla.suse.com/1235138"
},
{
"category": "self",
"summary": "SUSE Bug 1235155",
"url": "https://bugzilla.suse.com/1235155"
},
{
"category": "self",
"summary": "SUSE Bug 1235160",
"url": "https://bugzilla.suse.com/1235160"
},
{
"category": "self",
"summary": "SUSE Bug 1235217",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "self",
"summary": "SUSE Bug 1235219",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "self",
"summary": "SUSE Bug 1235220",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "self",
"summary": "SUSE Bug 1235222",
"url": "https://bugzilla.suse.com/1235222"
},
{
"category": "self",
"summary": "SUSE Bug 1235223",
"url": "https://bugzilla.suse.com/1235223"
},
{
"category": "self",
"summary": "SUSE Bug 1235224",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "self",
"summary": "SUSE Bug 1235227",
"url": "https://bugzilla.suse.com/1235227"
},
{
"category": "self",
"summary": "SUSE Bug 1235230",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "self",
"summary": "SUSE Bug 1235241",
"url": "https://bugzilla.suse.com/1235241"
},
{
"category": "self",
"summary": "SUSE Bug 1235246",
"url": "https://bugzilla.suse.com/1235246"
},
{
"category": "self",
"summary": "SUSE Bug 1235249",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "self",
"summary": "SUSE Bug 1235251",
"url": "https://bugzilla.suse.com/1235251"
},
{
"category": "self",
"summary": "SUSE Bug 1235252",
"url": "https://bugzilla.suse.com/1235252"
},
{
"category": "self",
"summary": "SUSE Bug 1235389",
"url": "https://bugzilla.suse.com/1235389"
},
{
"category": "self",
"summary": "SUSE Bug 1235390",
"url": "https://bugzilla.suse.com/1235390"
},
{
"category": "self",
"summary": "SUSE Bug 1235391",
"url": "https://bugzilla.suse.com/1235391"
},
{
"category": "self",
"summary": "SUSE Bug 1235406",
"url": "https://bugzilla.suse.com/1235406"
},
{
"category": "self",
"summary": "SUSE Bug 1235409",
"url": "https://bugzilla.suse.com/1235409"
},
{
"category": "self",
"summary": "SUSE Bug 1235410",
"url": "https://bugzilla.suse.com/1235410"
},
{
"category": "self",
"summary": "SUSE Bug 1235412",
"url": "https://bugzilla.suse.com/1235412"
},
{
"category": "self",
"summary": "SUSE Bug 1235413",
"url": "https://bugzilla.suse.com/1235413"
},
{
"category": "self",
"summary": "SUSE Bug 1235415",
"url": "https://bugzilla.suse.com/1235415"
},
{
"category": "self",
"summary": "SUSE Bug 1235416",
"url": "https://bugzilla.suse.com/1235416"
},
{
"category": "self",
"summary": "SUSE Bug 1235417",
"url": "https://bugzilla.suse.com/1235417"
},
{
"category": "self",
"summary": "SUSE Bug 1235418",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "self",
"summary": "SUSE Bug 1235423",
"url": "https://bugzilla.suse.com/1235423"
},
{
"category": "self",
"summary": "SUSE Bug 1235424",
"url": "https://bugzilla.suse.com/1235424"
},
{
"category": "self",
"summary": "SUSE Bug 1235425",
"url": "https://bugzilla.suse.com/1235425"
},
{
"category": "self",
"summary": "SUSE Bug 1235426",
"url": "https://bugzilla.suse.com/1235426"
},
{
"category": "self",
"summary": "SUSE Bug 1235427",
"url": "https://bugzilla.suse.com/1235427"
},
{
"category": "self",
"summary": "SUSE Bug 1235428",
"url": "https://bugzilla.suse.com/1235428"
},
{
"category": "self",
"summary": "SUSE Bug 1235429",
"url": "https://bugzilla.suse.com/1235429"
},
{
"category": "self",
"summary": "SUSE Bug 1235430",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "self",
"summary": "SUSE Bug 1235433",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "self",
"summary": "SUSE Bug 1235437",
"url": "https://bugzilla.suse.com/1235437"
},
{
"category": "self",
"summary": "SUSE Bug 1235439",
"url": "https://bugzilla.suse.com/1235439"
},
{
"category": "self",
"summary": "SUSE Bug 1235444",
"url": "https://bugzilla.suse.com/1235444"
},
{
"category": "self",
"summary": "SUSE Bug 1235445",
"url": "https://bugzilla.suse.com/1235445"
},
{
"category": "self",
"summary": "SUSE Bug 1235449",
"url": "https://bugzilla.suse.com/1235449"
},
{
"category": "self",
"summary": "SUSE Bug 1235451",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "self",
"summary": "SUSE Bug 1235454",
"url": "https://bugzilla.suse.com/1235454"
},
{
"category": "self",
"summary": "SUSE Bug 1235458",
"url": "https://bugzilla.suse.com/1235458"
},
{
"category": "self",
"summary": "SUSE Bug 1235459",
"url": "https://bugzilla.suse.com/1235459"
},
{
"category": "self",
"summary": "SUSE Bug 1235464",
"url": "https://bugzilla.suse.com/1235464"
},
{
"category": "self",
"summary": "SUSE Bug 1235466",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "self",
"summary": "SUSE Bug 1235473",
"url": "https://bugzilla.suse.com/1235473"
},
{
"category": "self",
"summary": "SUSE Bug 1235479",
"url": "https://bugzilla.suse.com/1235479"
},
{
"category": "self",
"summary": "SUSE Bug 1235480",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "self",
"summary": "SUSE Bug 1235483",
"url": "https://bugzilla.suse.com/1235483"
},
{
"category": "self",
"summary": "SUSE Bug 1235486",
"url": "https://bugzilla.suse.com/1235486"
},
{
"category": "self",
"summary": "SUSE Bug 1235487",
"url": "https://bugzilla.suse.com/1235487"
},
{
"category": "self",
"summary": "SUSE Bug 1235488",
"url": "https://bugzilla.suse.com/1235488"
},
{
"category": "self",
"summary": "SUSE Bug 1235489",
"url": "https://bugzilla.suse.com/1235489"
},
{
"category": "self",
"summary": "SUSE Bug 1235491",
"url": "https://bugzilla.suse.com/1235491"
},
{
"category": "self",
"summary": "SUSE Bug 1235494",
"url": "https://bugzilla.suse.com/1235494"
},
{
"category": "self",
"summary": "SUSE Bug 1235495",
"url": "https://bugzilla.suse.com/1235495"
},
{
"category": "self",
"summary": "SUSE Bug 1235496",
"url": "https://bugzilla.suse.com/1235496"
},
{
"category": "self",
"summary": "SUSE Bug 1235497",
"url": "https://bugzilla.suse.com/1235497"
},
{
"category": "self",
"summary": "SUSE Bug 1235498",
"url": "https://bugzilla.suse.com/1235498"
},
{
"category": "self",
"summary": "SUSE Bug 1235500",
"url": "https://bugzilla.suse.com/1235500"
},
{
"category": "self",
"summary": "SUSE Bug 1235502",
"url": "https://bugzilla.suse.com/1235502"
},
{
"category": "self",
"summary": "SUSE Bug 1235503",
"url": "https://bugzilla.suse.com/1235503"
},
{
"category": "self",
"summary": "SUSE Bug 1235507",
"url": "https://bugzilla.suse.com/1235507"
},
{
"category": "self",
"summary": "SUSE Bug 1235519",
"url": "https://bugzilla.suse.com/1235519"
},
{
"category": "self",
"summary": "SUSE Bug 1235520",
"url": "https://bugzilla.suse.com/1235520"
},
{
"category": "self",
"summary": "SUSE Bug 1235521",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "self",
"summary": "SUSE Bug 1235523",
"url": "https://bugzilla.suse.com/1235523"
},
{
"category": "self",
"summary": "SUSE Bug 1235526",
"url": "https://bugzilla.suse.com/1235526"
},
{
"category": "self",
"summary": "SUSE Bug 1235528",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "self",
"summary": "SUSE Bug 1235532",
"url": "https://bugzilla.suse.com/1235532"
},
{
"category": "self",
"summary": "SUSE Bug 1235533",
"url": "https://bugzilla.suse.com/1235533"
},
{
"category": "self",
"summary": "SUSE Bug 1235534",
"url": "https://bugzilla.suse.com/1235534"
},
{
"category": "self",
"summary": "SUSE Bug 1235537",
"url": "https://bugzilla.suse.com/1235537"
},
{
"category": "self",
"summary": "SUSE Bug 1235538",
"url": "https://bugzilla.suse.com/1235538"
},
{
"category": "self",
"summary": "SUSE Bug 1235545",
"url": "https://bugzilla.suse.com/1235545"
},
{
"category": "self",
"summary": "SUSE Bug 1235550",
"url": "https://bugzilla.suse.com/1235550"
},
{
"category": "self",
"summary": "SUSE Bug 1235552",
"url": "https://bugzilla.suse.com/1235552"
},
{
"category": "self",
"summary": "SUSE Bug 1235555",
"url": "https://bugzilla.suse.com/1235555"
},
{
"category": "self",
"summary": "SUSE Bug 1235557",
"url": "https://bugzilla.suse.com/1235557"
},
{
"category": "self",
"summary": "SUSE Bug 1235563",
"url": "https://bugzilla.suse.com/1235563"
},
{
"category": "self",
"summary": "SUSE Bug 1235564",
"url": "https://bugzilla.suse.com/1235564"
},
{
"category": "self",
"summary": "SUSE Bug 1235565",
"url": "https://bugzilla.suse.com/1235565"
},
{
"category": "self",
"summary": "SUSE Bug 1235568",
"url": "https://bugzilla.suse.com/1235568"
},
{
"category": "self",
"summary": "SUSE Bug 1235570",
"url": "https://bugzilla.suse.com/1235570"
},
{
"category": "self",
"summary": "SUSE Bug 1235571",
"url": "https://bugzilla.suse.com/1235571"
},
{
"category": "self",
"summary": "SUSE Bug 1235577",
"url": "https://bugzilla.suse.com/1235577"
},
{
"category": "self",
"summary": "SUSE Bug 1235578",
"url": "https://bugzilla.suse.com/1235578"
},
{
"category": "self",
"summary": "SUSE Bug 1235582",
"url": "https://bugzilla.suse.com/1235582"
},
{
"category": "self",
"summary": "SUSE Bug 1235583",
"url": "https://bugzilla.suse.com/1235583"
},
{
"category": "self",
"summary": "SUSE Bug 1235584",
"url": "https://bugzilla.suse.com/1235584"
},
{
"category": "self",
"summary": "SUSE Bug 1235587",
"url": "https://bugzilla.suse.com/1235587"
},
{
"category": "self",
"summary": "SUSE Bug 1235611",
"url": "https://bugzilla.suse.com/1235611"
},
{
"category": "self",
"summary": "SUSE Bug 1235612",
"url": "https://bugzilla.suse.com/1235612"
},
{
"category": "self",
"summary": "SUSE Bug 1235616",
"url": "https://bugzilla.suse.com/1235616"
},
{
"category": "self",
"summary": "SUSE Bug 1235622",
"url": "https://bugzilla.suse.com/1235622"
},
{
"category": "self",
"summary": "SUSE Bug 1235627",
"url": "https://bugzilla.suse.com/1235627"
},
{
"category": "self",
"summary": "SUSE Bug 1235632",
"url": "https://bugzilla.suse.com/1235632"
},
{
"category": "self",
"summary": "SUSE Bug 1235635",
"url": "https://bugzilla.suse.com/1235635"
},
{
"category": "self",
"summary": "SUSE Bug 1235638",
"url": "https://bugzilla.suse.com/1235638"
},
{
"category": "self",
"summary": "SUSE Bug 1235641",
"url": "https://bugzilla.suse.com/1235641"
},
{
"category": "self",
"summary": "SUSE Bug 1235643",
"url": "https://bugzilla.suse.com/1235643"
},
{
"category": "self",
"summary": "SUSE Bug 1235645",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "self",
"summary": "SUSE Bug 1235646",
"url": "https://bugzilla.suse.com/1235646"
},
{
"category": "self",
"summary": "SUSE Bug 1235647",
"url": "https://bugzilla.suse.com/1235647"
},
{
"category": "self",
"summary": "SUSE Bug 1235650",
"url": "https://bugzilla.suse.com/1235650"
},
{
"category": "self",
"summary": "SUSE Bug 1235653",
"url": "https://bugzilla.suse.com/1235653"
},
{
"category": "self",
"summary": "SUSE Bug 1235656",
"url": "https://bugzilla.suse.com/1235656"
},
{
"category": "self",
"summary": "SUSE Bug 1235657",
"url": "https://bugzilla.suse.com/1235657"
},
{
"category": "self",
"summary": "SUSE Bug 1235663",
"url": "https://bugzilla.suse.com/1235663"
},
{
"category": "self",
"summary": "SUSE Bug 1235686",
"url": "https://bugzilla.suse.com/1235686"
},
{
"category": "self",
"summary": "SUSE Bug 1235700",
"url": "https://bugzilla.suse.com/1235700"
},
{
"category": "self",
"summary": "SUSE Bug 1235705",
"url": "https://bugzilla.suse.com/1235705"
},
{
"category": "self",
"summary": "SUSE Bug 1235707",
"url": "https://bugzilla.suse.com/1235707"
},
{
"category": "self",
"summary": "SUSE Bug 1235708",
"url": "https://bugzilla.suse.com/1235708"
},
{
"category": "self",
"summary": "SUSE Bug 1235710",
"url": "https://bugzilla.suse.com/1235710"
},
{
"category": "self",
"summary": "SUSE Bug 1235714",
"url": "https://bugzilla.suse.com/1235714"
},
{
"category": "self",
"summary": "SUSE Bug 1235716",
"url": "https://bugzilla.suse.com/1235716"
},
{
"category": "self",
"summary": "SUSE Bug 1235720",
"url": "https://bugzilla.suse.com/1235720"
},
{
"category": "self",
"summary": "SUSE Bug 1235723",
"url": "https://bugzilla.suse.com/1235723"
},
{
"category": "self",
"summary": "SUSE Bug 1235727",
"url": "https://bugzilla.suse.com/1235727"
},
{
"category": "self",
"summary": "SUSE Bug 1235730",
"url": "https://bugzilla.suse.com/1235730"
},
{
"category": "self",
"summary": "SUSE Bug 1235737",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "self",
"summary": "SUSE Bug 1235739",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "self",
"summary": "SUSE Bug 1235745",
"url": "https://bugzilla.suse.com/1235745"
},
{
"category": "self",
"summary": "SUSE Bug 1235747",
"url": "https://bugzilla.suse.com/1235747"
},
{
"category": "self",
"summary": "SUSE Bug 1235750",
"url": "https://bugzilla.suse.com/1235750"
},
{
"category": "self",
"summary": "SUSE Bug 1235753",
"url": "https://bugzilla.suse.com/1235753"
},
{
"category": "self",
"summary": "SUSE Bug 1235759",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "self",
"summary": "SUSE Bug 1235764",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "self",
"summary": "SUSE Bug 1235768",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "self",
"summary": "SUSE Bug 1235776",
"url": "https://bugzilla.suse.com/1235776"
},
{
"category": "self",
"summary": "SUSE Bug 1235777",
"url": "https://bugzilla.suse.com/1235777"
},
{
"category": "self",
"summary": "SUSE Bug 1235778",
"url": "https://bugzilla.suse.com/1235778"
},
{
"category": "self",
"summary": "SUSE Bug 1235779",
"url": "https://bugzilla.suse.com/1235779"
},
{
"category": "self",
"summary": "SUSE Bug 1235793",
"url": "https://bugzilla.suse.com/1235793"
},
{
"category": "self",
"summary": "SUSE Bug 1235798",
"url": "https://bugzilla.suse.com/1235798"
},
{
"category": "self",
"summary": "SUSE Bug 1235806",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "self",
"summary": "SUSE Bug 1235808",
"url": "https://bugzilla.suse.com/1235808"
},
{
"category": "self",
"summary": "SUSE Bug 1235812",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "self",
"summary": "SUSE Bug 1235814",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "self",
"summary": "SUSE Bug 1235818",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "self",
"summary": "SUSE Bug 1235842",
"url": "https://bugzilla.suse.com/1235842"
},
{
"category": "self",
"summary": "SUSE Bug 1235865",
"url": "https://bugzilla.suse.com/1235865"
},
{
"category": "self",
"summary": "SUSE Bug 1235894",
"url": "https://bugzilla.suse.com/1235894"
},
{
"category": "self",
"summary": "SUSE Bug 1235902",
"url": "https://bugzilla.suse.com/1235902"
},
{
"category": "self",
"summary": "SUSE Bug 1235903",
"url": "https://bugzilla.suse.com/1235903"
},
{
"category": "self",
"summary": "SUSE Bug 1235906",
"url": "https://bugzilla.suse.com/1235906"
},
{
"category": "self",
"summary": "SUSE Bug 1235918",
"url": "https://bugzilla.suse.com/1235918"
},
{
"category": "self",
"summary": "SUSE Bug 1235919",
"url": "https://bugzilla.suse.com/1235919"
},
{
"category": "self",
"summary": "SUSE Bug 1235920",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "self",
"summary": "SUSE Bug 1235924",
"url": "https://bugzilla.suse.com/1235924"
},
{
"category": "self",
"summary": "SUSE Bug 1235940",
"url": "https://bugzilla.suse.com/1235940"
},
{
"category": "self",
"summary": "SUSE Bug 1235941",
"url": "https://bugzilla.suse.com/1235941"
},
{
"category": "self",
"summary": "SUSE Bug 1235946",
"url": "https://bugzilla.suse.com/1235946"
},
{
"category": "self",
"summary": "SUSE Bug 1235948",
"url": "https://bugzilla.suse.com/1235948"
},
{
"category": "self",
"summary": "SUSE Bug 1235952",
"url": "https://bugzilla.suse.com/1235952"
},
{
"category": "self",
"summary": "SUSE Bug 1235964",
"url": "https://bugzilla.suse.com/1235964"
},
{
"category": "self",
"summary": "SUSE Bug 1235965",
"url": "https://bugzilla.suse.com/1235965"
},
{
"category": "self",
"summary": "SUSE Bug 1235967",
"url": "https://bugzilla.suse.com/1235967"
},
{
"category": "self",
"summary": "SUSE Bug 1235969",
"url": "https://bugzilla.suse.com/1235969"
},
{
"category": "self",
"summary": "SUSE Bug 1235976",
"url": "https://bugzilla.suse.com/1235976"
},
{
"category": "self",
"summary": "SUSE Bug 1235977",
"url": "https://bugzilla.suse.com/1235977"
},
{
"category": "self",
"summary": "SUSE Bug 1236078",
"url": "https://bugzilla.suse.com/1236078"
},
{
"category": "self",
"summary": "SUSE Bug 1236080",
"url": "https://bugzilla.suse.com/1236080"
},
{
"category": "self",
"summary": "SUSE Bug 1236082",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "self",
"summary": "SUSE Bug 1236088",
"url": "https://bugzilla.suse.com/1236088"
},
{
"category": "self",
"summary": "SUSE Bug 1236090",
"url": "https://bugzilla.suse.com/1236090"
},
{
"category": "self",
"summary": "SUSE Bug 1236091",
"url": "https://bugzilla.suse.com/1236091"
},
{
"category": "self",
"summary": "SUSE Bug 1236096",
"url": "https://bugzilla.suse.com/1236096"
},
{
"category": "self",
"summary": "SUSE Bug 1236097",
"url": "https://bugzilla.suse.com/1236097"
},
{
"category": "self",
"summary": "SUSE Bug 1236098",
"url": "https://bugzilla.suse.com/1236098"
},
{
"category": "self",
"summary": "SUSE Bug 1236101",
"url": "https://bugzilla.suse.com/1236101"
},
{
"category": "self",
"summary": "SUSE Bug 1236102",
"url": "https://bugzilla.suse.com/1236102"
},
{
"category": "self",
"summary": "SUSE Bug 1236104",
"url": "https://bugzilla.suse.com/1236104"
},
{
"category": "self",
"summary": "SUSE Bug 1236106",
"url": "https://bugzilla.suse.com/1236106"
},
{
"category": "self",
"summary": "SUSE Bug 1236120",
"url": "https://bugzilla.suse.com/1236120"
},
{
"category": "self",
"summary": "SUSE Bug 1236125",
"url": "https://bugzilla.suse.com/1236125"
},
{
"category": "self",
"summary": "SUSE Bug 1236127",
"url": "https://bugzilla.suse.com/1236127"
},
{
"category": "self",
"summary": "SUSE Bug 1236131",
"url": "https://bugzilla.suse.com/1236131"
},
{
"category": "self",
"summary": "SUSE Bug 1236138",
"url": "https://bugzilla.suse.com/1236138"
},
{
"category": "self",
"summary": "SUSE Bug 1236143",
"url": "https://bugzilla.suse.com/1236143"
},
{
"category": "self",
"summary": "SUSE Bug 1236144",
"url": "https://bugzilla.suse.com/1236144"
},
{
"category": "self",
"summary": "SUSE Bug 1236145",
"url": "https://bugzilla.suse.com/1236145"
},
{
"category": "self",
"summary": "SUSE Bug 1236160",
"url": "https://bugzilla.suse.com/1236160"
},
{
"category": "self",
"summary": "SUSE Bug 1236161",
"url": "https://bugzilla.suse.com/1236161"
},
{
"category": "self",
"summary": "SUSE Bug 1236163",
"url": "https://bugzilla.suse.com/1236163"
},
{
"category": "self",
"summary": "SUSE Bug 1236168",
"url": "https://bugzilla.suse.com/1236168"
},
{
"category": "self",
"summary": "SUSE Bug 1236178",
"url": "https://bugzilla.suse.com/1236178"
},
{
"category": "self",
"summary": "SUSE Bug 1236180",
"url": "https://bugzilla.suse.com/1236180"
},
{
"category": "self",
"summary": "SUSE Bug 1236181",
"url": "https://bugzilla.suse.com/1236181"
},
{
"category": "self",
"summary": "SUSE Bug 1236182",
"url": "https://bugzilla.suse.com/1236182"
},
{
"category": "self",
"summary": "SUSE Bug 1236190",
"url": "https://bugzilla.suse.com/1236190"
},
{
"category": "self",
"summary": "SUSE Bug 1236192",
"url": "https://bugzilla.suse.com/1236192"
},
{
"category": "self",
"summary": "SUSE Bug 1236198",
"url": "https://bugzilla.suse.com/1236198"
},
{
"category": "self",
"summary": "SUSE Bug 1236227",
"url": "https://bugzilla.suse.com/1236227"
},
{
"category": "self",
"summary": "SUSE Bug 1236245",
"url": "https://bugzilla.suse.com/1236245"
},
{
"category": "self",
"summary": "SUSE Bug 1236247",
"url": "https://bugzilla.suse.com/1236247"
},
{
"category": "self",
"summary": "SUSE Bug 1236248",
"url": "https://bugzilla.suse.com/1236248"
},
{
"category": "self",
"summary": "SUSE Bug 1236260",
"url": "https://bugzilla.suse.com/1236260"
},
{
"category": "self",
"summary": "SUSE Bug 1236262",
"url": "https://bugzilla.suse.com/1236262"
},
{
"category": "self",
"summary": "SUSE Bug 1236628",
"url": "https://bugzilla.suse.com/1236628"
},
{
"category": "self",
"summary": "SUSE Bug 1236688",
"url": "https://bugzilla.suse.com/1236688"
},
{
"category": "self",
"summary": "SUSE Bug 1236696",
"url": "https://bugzilla.suse.com/1236696"
},
{
"category": "self",
"summary": "SUSE Bug 1236703",
"url": "https://bugzilla.suse.com/1236703"
},
{
"category": "self",
"summary": "SUSE Bug 1236732",
"url": "https://bugzilla.suse.com/1236732"
},
{
"category": "self",
"summary": "SUSE Bug 1236733",
"url": "https://bugzilla.suse.com/1236733"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52923 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26924 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27397 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35839 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36476 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39282 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39480 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41042 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44934 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44996 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48873 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49854 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49948 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49978 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49998 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50016 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50018 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50039 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50047 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50051 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50106 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50211 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50228 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50256 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50256/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50262 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50272 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50272/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50278 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50280 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50299 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52332 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53050 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53064 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53090 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53091 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53095 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53099 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53103 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53105 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53111 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53113 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53117 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53118 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53119 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53120 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53122 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53125 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53127 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53129 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53130 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53131 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53133 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53134 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53136 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53142 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53144 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53148 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53150 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53155 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53156 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53157 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53158 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53159 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53160 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53161 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53162 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53164 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53166 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53168 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53169 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53170 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53171 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53172 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53173 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53174 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53175 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53179 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53180 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53187 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53188 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53190 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53191 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53194 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53195 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53196 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53197 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53198 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53200 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53201 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53206 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53207 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53208 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53209 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53210 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53213 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53214 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53215 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53216 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53217 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53222 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53224 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53229 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53230 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53231 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53232 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53233 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53234 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53236 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53237 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53239 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53240 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53241 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53685 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-54680 page",
"url": "https://www.suse.com/security/cve/CVE-2024-54680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55639 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56369 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56372 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56531 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56533 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56536 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56538 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56539 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56543 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56546 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56548 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56549 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56551 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56557 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56558 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56562 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56566 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56567 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56568 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56570 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56571 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56572 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56573 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56574 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56575 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56576 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56577 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56578 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56582 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56584 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56587 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56588 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56589 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56590 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56593 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56594 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56595 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56596 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56597 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56598 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56599 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56600 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56601 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56602 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56603 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56604 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56605 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56606 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56607 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56608 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56609 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56610 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56611 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56614 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56616 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56617 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56619 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56620 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56622 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56623 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56625 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56629 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56631 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56632 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56634 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56635 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56636 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56637 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56641 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56642 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56643 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56644 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56645 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56648 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56649 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56650 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56651 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56654 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56656 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56659 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56661 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56662 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56663 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56664 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56665 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56667 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56670 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56672 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56675 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56677 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56679 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56681 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56683 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56687 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56688 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56691 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56693 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56694 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56698 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56700 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56701 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56704 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56705 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56707 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56708 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56709 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56712 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56715 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56716 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56722 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56723 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56724 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56725 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56726 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56727 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56728 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56729 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56741 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56745 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56746 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56747 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56748 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56752 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56754 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56755 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56756 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56759 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56760 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56763 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56765 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56766 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56767 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56769 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56774 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56775 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56776 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56777 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56778 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56779 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56780 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56787 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57791 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57792 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57793 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57795 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57798 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57801 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57802 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57804 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57838 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57849 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57850 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57874 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57876 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57887 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57888 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57890 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57892 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57893 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57906 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57910 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57912 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57917 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57926 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57933 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57946 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-8805 page",
"url": "https://www.suse.com/security/cve/CVE-2024-8805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21632 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21645 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21646 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21649 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21650 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21651 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21652 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21653 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21655 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21656 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21662 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21663 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21664 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21674 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21676 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21682 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21682/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2025-03-27T15:23:42Z",
"generator": {
"date": "2025-03-27T15:23:42Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:20248-1",
"initial_release_date": "2025-03-27T15:23:42Z",
"revision_history": [
{
"date": "2025-03-27T15:23:42Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-6.4.0-25.1.aarch64",
"product": {
"name": "kernel-default-6.4.0-25.1.aarch64",
"product_id": "kernel-default-6.4.0-25.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-6.4.0-24.1.21.4.aarch64",
"product": {
"name": "kernel-default-base-6.4.0-24.1.21.4.aarch64",
"product_id": "kernel-default-base-6.4.0-24.1.21.4.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-6.4.0-25.1.aarch64",
"product": {
"name": "kernel-default-devel-6.4.0-25.1.aarch64",
"product_id": "kernel-default-devel-6.4.0-25.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-6.4.0-25.1.noarch",
"product": {
"name": "kernel-devel-6.4.0-25.1.noarch",
"product_id": "kernel-devel-6.4.0-25.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-macros-6.4.0-25.1.noarch",
"product": {
"name": "kernel-macros-6.4.0-25.1.noarch",
"product_id": "kernel-macros-6.4.0-25.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-6.4.0-25.1.noarch",
"product": {
"name": "kernel-source-6.4.0-25.1.noarch",
"product_id": "kernel-source-6.4.0-25.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-6.4.0-25.1.s390x",
"product": {
"name": "kernel-default-6.4.0-25.1.s390x",
"product_id": "kernel-default-6.4.0-25.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-6.4.0-25.1.s390x",
"product": {
"name": "kernel-default-devel-6.4.0-25.1.s390x",
"product_id": "kernel-default-devel-6.4.0-25.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-6.4.0-25.1.s390x",
"product": {
"name": "kernel-default-livepatch-6.4.0-25.1.s390x",
"product_id": "kernel-default-livepatch-6.4.0-25.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"product": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"product_id": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-default-6.4.0-25.1.x86_64",
"product_id": "kernel-default-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-6.4.0-24.1.21.4.x86_64",
"product": {
"name": "kernel-default-base-6.4.0-24.1.21.4.x86_64",
"product_id": "kernel-default-base-6.4.0-24.1.21.4.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-default-devel-6.4.0-25.1.x86_64",
"product_id": "kernel-default-devel-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-default-livepatch-6.4.0-25.1.x86_64",
"product_id": "kernel-default-livepatch-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-kvmsmall-6.4.0-25.1.x86_64",
"product_id": "kernel-kvmsmall-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"product_id": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-6.4.0-25.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64"
},
"product_reference": "kernel-default-6.4.0-25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-6.4.0-25.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x"
},
"product_reference": "kernel-default-6.4.0-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-default-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-6.4.0-24.1.21.4.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64"
},
"product_reference": "kernel-default-base-6.4.0-24.1.21.4.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-6.4.0-24.1.21.4.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64"
},
"product_reference": "kernel-default-base-6.4.0-24.1.21.4.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-6.4.0-25.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64"
},
"product_reference": "kernel-default-devel-6.4.0-25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-6.4.0-25.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x"
},
"product_reference": "kernel-default-devel-6.4.0-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-default-devel-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-6.4.0-25.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x"
},
"product_reference": "kernel-default-livepatch-6.4.0-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-default-livepatch-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch"
},
"product_reference": "kernel-devel-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kvmsmall-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-kvmsmall-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x"
},
"product_reference": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch"
},
"product_reference": "kernel-macros-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
},
"product_reference": "kernel-source-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: adapt set backend to use GC transaction API\n\nUse the GC transaction API to replace the old and buggy gc API and the\nbusy mark approach.\n\nNo set elements are removed from async garbage collection anymore,\ninstead the _DEAD bit is set on so the set element is not visible from\nlookup path anymore. Async GC enqueues transaction work that might be\naborted and retried later.\n\nrbtree and pipapo set backends does not set on the _DEAD bit from the\nsync GC path since this runs in control plane path where mutex is held.\nIn this case, set elements are deactivated, removed and then released\nvia RCU callback, sync GC never fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52923",
"url": "https://www.suse.com/security/cve/CVE-2023-52923"
},
{
"category": "external",
"summary": "SUSE Bug 1236104 for CVE-2023-52923",
"url": "https://bugzilla.suse.com/1236104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2023-52923"
},
{
"cve": "CVE-2024-26924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_pipapo: do not free live element\n\nPablo reports a crash with large batches of elements with a\nback-to-back add/remove pattern. Quoting Pablo:\n\n add_elem(\"00000000\") timeout 100 ms\n ...\n add_elem(\"0000000X\") timeout 100 ms\n del_elem(\"0000000X\") \u003c---------------- delete one that was just added\n ...\n add_elem(\"00005000\") timeout 100 ms\n\n 1) nft_pipapo_remove() removes element 0000000X\n Then, KASAN shows a splat.\n\nLooking at the remove function there is a chance that we will drop a\nrule that maps to a non-deactivated element.\n\nRemoval happens in two steps, first we do a lookup for key k and return the\nto-be-removed element and mark it as inactive in the next generation.\nThen, in a second step, the element gets removed from the set/map.\n\nThe _remove function does not work correctly if we have more than one\nelement that share the same key.\n\nThis can happen if we insert an element into a set when the set already\nholds an element with same key, but the element mapping to the existing\nkey has timed out or is not active in the next generation.\n\nIn such case its possible that removal will unmap the wrong element.\nIf this happens, we will leak the non-deactivated element, it becomes\nunreachable.\n\nThe element that got deactivated (and will be freed later) will\nremain reachable in the set data structure, this can result in\na crash when such an element is retrieved during lookup (stale\npointer).\n\nAdd a check that the fully matching key does in fact map to the element\nthat we have marked as inactive in the deactivation step.\nIf not, we need to continue searching.\n\nAdd a bug/warn trap at the end of the function as well, the remove\nfunction must not ever be called with an invisible/unreachable/non-existent\nelement.\n\nv2: avoid uneeded temporary variable (Stefano)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26924",
"url": "https://www.suse.com/security/cve/CVE-2024-26924"
},
{
"category": "external",
"summary": "SUSE Bug 1223387 for CVE-2024-26924",
"url": "https://bugzilla.suse.com/1223387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-26924"
},
{
"cve": "CVE-2024-27397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27397"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: use timestamp to check for set element timeout\n\nAdd a timestamp field at the beginning of the transaction, store it\nin the nftables per-netns area.\n\nUpdate set backend .insert, .deactivate and sync gc path to use the\ntimestamp, this avoids that an element expires while control plane\ntransaction is still unfinished.\n\n.lookup and .update, which are used from packet path, still use the\ncurrent time to check if the element has expired. And .get path and dump\nalso since this runs lockless under rcu read size lock. Then, there is\nasync gc which also needs to check the current time since it runs\nasynchronously from a workqueue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27397",
"url": "https://www.suse.com/security/cve/CVE-2024-27397"
},
{
"category": "external",
"summary": "SUSE Bug 1224095 for CVE-2024-27397",
"url": "https://bugzilla.suse.com/1224095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-27397"
},
{
"cve": "CVE-2024-35839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35839"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: replace physindev with physinif in nf_bridge_info\n\nAn skb can be added to a neigh-\u003earp_queue while waiting for an arp\nreply. Where original skb\u0027s skb-\u003edev can be different to neigh\u0027s\nneigh-\u003edev. For instance in case of bridging dnated skb from one veth to\nanother, the skb would be added to a neigh-\u003earp_queue of the bridge.\n\nAs skb-\u003edev can be reset back to nf_bridge-\u003ephysindev and used, and as\nthere is no explicit mechanism that prevents this physindev from been\nfreed under us (for instance neigh_flush_dev doesn\u0027t cleanup skbs from\ndifferent device\u0027s neigh queue) we can crash on e.g. this stack:\n\narp_process\n neigh_update\n skb = __skb_dequeue(\u0026neigh-\u003earp_queue)\n neigh_resolve_output(..., skb)\n ...\n br_nf_dev_xmit\n br_nf_pre_routing_finish_bridge_slow\n skb-\u003edev = nf_bridge-\u003ephysindev\n br_handle_frame_finish\n\nLet\u0027s use plain ifindex instead of net_device link. To peek into the\noriginal net_device we will use dev_get_by_index_rcu(). Thus either we\nget device and are safe to use it or we don\u0027t get it and drop skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35839",
"url": "https://www.suse.com/security/cve/CVE-2024-35839"
},
{
"category": "external",
"summary": "SUSE Bug 1224726 for CVE-2024-35839",
"url": "https://bugzilla.suse.com/1224726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-35839"
},
{
"cve": "CVE-2024-36476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36476"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible\n\nMove the declaration of the \u0027ib_sge list\u0027 variable outside the\n\u0027always_invalidate\u0027 block to ensure it remains accessible for use\nthroughout the function.\n\nPreviously, \u0027ib_sge list\u0027 was declared within the \u0027always_invalidate\u0027\nblock, limiting its accessibility, then caused a\n\u0027BUG: kernel NULL pointer dereference\u0027[1].\n ? __die_body.cold+0x19/0x27\n ? page_fault_oops+0x15a/0x2d0\n ? search_module_extables+0x19/0x60\n ? search_bpf_extables+0x5f/0x80\n ? exc_page_fault+0x7e/0x180\n ? asm_exc_page_fault+0x26/0x30\n ? memcpy_orig+0xd5/0x140\n rxe_mr_copy+0x1c3/0x200 [rdma_rxe]\n ? rxe_pool_get_index+0x4b/0x80 [rdma_rxe]\n copy_data+0xa5/0x230 [rdma_rxe]\n rxe_requester+0xd9b/0xf70 [rdma_rxe]\n ? finish_task_switch.isra.0+0x99/0x2e0\n rxe_sender+0x13/0x40 [rdma_rxe]\n do_task+0x68/0x1e0 [rdma_rxe]\n process_one_work+0x177/0x330\n worker_thread+0x252/0x390\n ? __pfx_worker_thread+0x10/0x10\n\nThis change ensures the variable is available for subsequent operations\nthat require it.\n\n[1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-bc69-a9b03ecfcda7@fujitsu.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36476",
"url": "https://www.suse.com/security/cve/CVE-2024-36476"
},
{
"category": "external",
"summary": "SUSE Bug 1235902 for CVE-2024-36476",
"url": "https://bugzilla.suse.com/1235902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-36476"
},
{
"cve": "CVE-2024-36908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-iocost: do not WARN if iocg was already offlined\n\nIn iocg_pay_debt(), warn is triggered if \u0027active_list\u0027 is empty, which\nis intended to confirm iocg is active when it has debt. However, warn\ncan be triggered during a blkcg or disk removal, if iocg_waitq_timer_fn()\nis run at that time:\n\n WARNING: CPU: 0 PID: 2344971 at block/blk-iocost.c:1402 iocg_pay_debt+0x14c/0x190\n Call trace:\n iocg_pay_debt+0x14c/0x190\n iocg_kick_waitq+0x438/0x4c0\n iocg_waitq_timer_fn+0xd8/0x130\n __run_hrtimer+0x144/0x45c\n __hrtimer_run_queues+0x16c/0x244\n hrtimer_interrupt+0x2cc/0x7b0\n\nThe warn in this situation is meaningless. Since this iocg is being\nremoved, the state of the \u0027active_list\u0027 is irrelevant, and \u0027waitq_timer\u0027\nis canceled after removing \u0027active_list\u0027 in ioc_pd_free(), which ensures\niocg is freed after iocg_waitq_timer_fn() returns.\n\nTherefore, add the check if iocg was already offlined to avoid warn\nwhen removing a blkcg or disk.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36908",
"url": "https://www.suse.com/security/cve/CVE-2024-36908"
},
{
"category": "external",
"summary": "SUSE Bug 1225743 for CVE-2024-36908",
"url": "https://bugzilla.suse.com/1225743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-36908"
},
{
"cve": "CVE-2024-39282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39282"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: Fix FSM command timeout issue\n\nWhen driver processes the internal state change command, it use an\nasynchronous thread to process the command operation. If the main\nthread detects that the task has timed out, the asynchronous thread\nwill panic when executing the completion notification because the\nmain thread completion object has been released.\n\nBUG: unable to handle page fault for address: fffffffffffffff8\nPGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nRIP: 0010:complete_all+0x3e/0xa0\n[...]\nCall Trace:\n \u003cTASK\u003e\n ? __die_body+0x68/0xb0\n ? page_fault_oops+0x379/0x3e0\n ? exc_page_fault+0x69/0xa0\n ? asm_exc_page_fault+0x22/0x30\n ? complete_all+0x3e/0xa0\n fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_autoremove_wake_function+0x10/0x10\n kthread+0xd8/0x110\n ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x38/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n[...]\nCR2: fffffffffffffff8\n---[ end trace 0000000000000000 ]---\n\nUse the reference counter to ensure safe release as Sergey suggests:\nhttps://lore.kernel.org/all/da90f64c-260a-4329-87bf-1f9ff20a5951@gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39282",
"url": "https://www.suse.com/security/cve/CVE-2024-39282"
},
{
"category": "external",
"summary": "SUSE Bug 1235903 for CVE-2024-39282",
"url": "https://bugzilla.suse.com/1235903"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-39282"
},
{
"cve": "CVE-2024-39480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39480"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkdb: Fix buffer overflow during tab-complete\n\nCurrently, when the user attempts symbol completion with the Tab key, kdb\nwill use strncpy() to insert the completed symbol into the command buffer.\nUnfortunately it passes the size of the source buffer rather than the\ndestination to strncpy() with predictably horrible results. Most obviously\nif the command buffer is already full but cp, the cursor position, is in\nthe middle of the buffer, then we will write past the end of the supplied\nbuffer.\n\nFix this by replacing the dubious strncpy() calls with memmove()/memcpy()\ncalls plus explicit boundary checks to make sure we have enough space\nbefore we start moving characters around.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39480",
"url": "https://www.suse.com/security/cve/CVE-2024-39480"
},
{
"category": "external",
"summary": "SUSE Bug 1227445 for CVE-2024-39480",
"url": "https://bugzilla.suse.com/1227445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-39480"
},
{
"cve": "CVE-2024-41042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41042"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: prefer nft_chain_validate\n\nnft_chain_validate already performs loop detection because a cycle will\nresult in a call stack overflow (ctx-\u003elevel \u003e= NFT_JUMP_STACK_SIZE).\n\nIt also follows maps via -\u003evalidate callback in nft_lookup, so there\nappears no reason to iterate the maps again.\n\nnf_tables_check_loops() and all its helper functions can be removed.\nThis improves ruleset load time significantly, from 23s down to 12s.\n\nThis also fixes a crash bug. Old loop detection code can result in\nunbounded recursion:\n\nBUG: TASK stack guard page was hit at ....\nOops: stack guard page: 0000 [#1] PREEMPT SMP KASAN\nCPU: 4 PID: 1539 Comm: nft Not tainted 6.10.0-rc5+ #1\n[..]\n\nwith a suitable ruleset during validation of register stores.\n\nI can\u0027t see any actual reason to attempt to check for this from\nnft_validate_register_store(), at this point the transaction is still in\nprogress, so we don\u0027t have a full picture of the rule graph.\n\nFor nf-next it might make sense to either remove it or make this depend\non table-\u003evalidate_state in case we could catch an error earlier\n(for improved error reporting to userspace).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41042",
"url": "https://www.suse.com/security/cve/CVE-2024-41042"
},
{
"category": "external",
"summary": "SUSE Bug 1228526 for CVE-2024-41042",
"url": "https://bugzilla.suse.com/1228526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-41042"
},
{
"cve": "CVE-2024-43913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: apple: fix device reference counting\n\nDrivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl.\nSplit the allocation side out to make the error handling boundary easier\nto navigate. The apple driver had been doing this wrong, leaking the\ncontroller device memory on a tagset failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43913",
"url": "https://www.suse.com/security/cve/CVE-2024-43913"
},
{
"category": "external",
"summary": "SUSE Bug 1229833 for CVE-2024-43913",
"url": "https://bugzilla.suse.com/1229833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-43913"
},
{
"cve": "CVE-2024-44934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44934"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: wait for previous gc cycles when removing port\n\nsyzbot hit a use-after-free[1] which is caused because the bridge doesn\u0027t\nmake sure that all previous garbage has been collected when removing a\nport. What happens is:\n CPU 1 CPU 2\n start gc cycle remove port\n acquire gc lock first\n wait for lock\n call br_multicasg_gc() directly\n acquire lock now but free port\n the port can be freed\n while grp timers still\n running\n\nMake sure all previous gc cycles have finished by using flush_work before\nfreeing the port.\n\n[1]\n BUG: KASAN: slab-use-after-free in br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n Read of size 8 at addr ffff888071d6d000 by task syz.5.1232/9699\n\n CPU: 1 PID: 9699 Comm: syz.5.1232 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024\n Call Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0xc3/0x620 mm/kasan/report.c:488\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n call_timer_fn+0x1a3/0x610 kernel/time/timer.c:1792\n expire_timers kernel/time/timer.c:1843 [inline]\n __run_timers+0x74b/0xaf0 kernel/time/timer.c:2417\n __run_timer_base kernel/time/timer.c:2428 [inline]\n __run_timer_base kernel/time/timer.c:2421 [inline]\n run_timer_base+0x111/0x190 kernel/time/timer.c:2437",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44934",
"url": "https://www.suse.com/security/cve/CVE-2024-44934"
},
{
"category": "external",
"summary": "SUSE Bug 1229809 for CVE-2024-44934",
"url": "https://bugzilla.suse.com/1229809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-44934"
},
{
"cve": "CVE-2024-44996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44996"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: fix recursive -\u003erecvmsg calls\n\nAfter a vsock socket has been added to a BPF sockmap, its prot-\u003erecvmsg\nhas been replaced with vsock_bpf_recvmsg(). Thus the following\nrecursiion could happen:\n\nvsock_bpf_recvmsg()\n -\u003e __vsock_recvmsg()\n -\u003e vsock_connectible_recvmsg()\n -\u003e prot-\u003erecvmsg()\n -\u003e vsock_bpf_recvmsg() again\n\nWe need to fix it by calling the original -\u003erecvmsg() without any BPF\nsockmap logic in __vsock_recvmsg().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44996",
"url": "https://www.suse.com/security/cve/CVE-2024-44996"
},
{
"category": "external",
"summary": "SUSE Bug 1230205 for CVE-2024-44996",
"url": "https://bugzilla.suse.com/1230205"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-44996"
},
{
"cve": "CVE-2024-45828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Mask ring interrupts before ring stop request\n\nBus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when\nthe ring is being stopped. Depending on timing between ring stop request\ncompletion, interrupt handler removal and code execution this may lead\nto a NULL pointer dereference in hci_dma_irq_handler() if it gets to run\nafter the io_data pointer is set to NULL in hci_dma_cleanup().\n\nPrevent this my masking the ring interrupts before ring stop request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45828",
"url": "https://www.suse.com/security/cve/CVE-2024-45828"
},
{
"category": "external",
"summary": "SUSE Bug 1235705 for CVE-2024-45828",
"url": "https://bugzilla.suse.com/1235705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-45828"
},
{
"cve": "CVE-2024-46896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: don\u0027t access invalid sched\n\nSince 2320c9e6a768 (\"drm/sched: memset() \u0027job\u0027 in drm_sched_job_init()\")\naccessing job-\u003ebase.sched can produce unexpected results as the initialisation\nof (*job)-\u003ebase.sched done in amdgpu_job_alloc is overwritten by the\nmemset.\n\nThis commit fixes an issue when a CS would fail validation and would\nbe rejected after job-\u003enum_ibs is incremented. In this case,\namdgpu_ib_free(ring-\u003eadev, ...) will be called, which would crash the\nmachine because the ring value is bogus.\n\nTo fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this\nbecause the device is actually not used in this function.\n\nThe next commit will remove the ring argument completely.\n\n(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46896",
"url": "https://www.suse.com/security/cve/CVE-2024-46896"
},
{
"category": "external",
"summary": "SUSE Bug 1235707 for CVE-2024-46896",
"url": "https://bugzilla.suse.com/1235707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-46896"
},
{
"cve": "CVE-2024-47141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinmux: Use sequential access to access desc-\u003epinmux data\n\nWhen two client of the same gpio call pinctrl_select_state() for the\nsame functionality, we are seeing NULL pointer issue while accessing\ndesc-\u003emux_owner.\n\nLet\u0027s say two processes A, B executing in pin_request() for the same pin\nand process A updates the desc-\u003emux_usecount but not yet updated the\ndesc-\u003emux_owner while process B see the desc-\u003emux_usecount which got\nupdated by A path and further executes strcmp and while accessing\ndesc-\u003emux_owner it crashes with NULL pointer.\n\nSerialize the access to mux related setting with a mutex lock.\n\n\tcpu0 (process A)\t\t\tcpu1(process B)\n\npinctrl_select_state() {\t\t pinctrl_select_state() {\n pin_request() {\t\t\t\tpin_request() {\n ...\n\t\t\t\t\t\t ....\n } else {\n desc-\u003emux_usecount++;\n \t\t\t\t\t\tdesc-\u003emux_usecount \u0026\u0026 strcmp(desc-\u003emux_owner, owner)) {\n\n if (desc-\u003emux_usecount \u003e 1)\n return 0;\n desc-\u003emux_owner = owner;\n\n }\t\t\t\t\t\t}",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47141",
"url": "https://www.suse.com/security/cve/CVE-2024-47141"
},
{
"category": "external",
"summary": "SUSE Bug 1235708 for CVE-2024-47141",
"url": "https://bugzilla.suse.com/1235708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47141"
},
{
"cve": "CVE-2024-47143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-debug: fix a possible deadlock on radix_lock\n\nradix_lock() shouldn\u0027t be held while holding dma_hash_entry[idx].lock\notherwise, there\u0027s a possible deadlock scenario when\ndma debug API is called holding rq_lock():\n\nCPU0 CPU1 CPU2\ndma_free_attrs()\ncheck_unmap() add_dma_entry() __schedule() //out\n (A) rq_lock()\nget_hash_bucket()\n(A) dma_entry_hash\n check_sync()\n (A) radix_lock() (W) dma_entry_hash\ndma_entry_free()\n(W) radix_lock()\n // CPU2\u0027s one\n (W) rq_lock()\n\nCPU1 situation can happen when it extending radix tree and\nit tries to wake up kswapd via wake_all_kswapd().\n\nCPU2 situation can happen while perf_event_task_sched_out()\n(i.e. dma sync operation is called while deleting perf_event using\n etm and etr tmc which are Arm Coresight hwtracing driver backends).\n\nTo remove this possible situation, call dma_entry_free() after\nput_hash_bucket() in check_unmap().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47143",
"url": "https://www.suse.com/security/cve/CVE-2024-47143"
},
{
"category": "external",
"summary": "SUSE Bug 1235710 for CVE-2024-47143",
"url": "https://bugzilla.suse.com/1235710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47143"
},
{
"cve": "CVE-2024-47678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: change the order of rate limits\n\nICMP messages are ratelimited :\n\nAfter the blamed commits, the two rate limiters are applied in this order:\n\n1) host wide ratelimit (icmp_global_allow())\n\n2) Per destination ratelimit (inetpeer based)\n\nIn order to avoid side-channels attacks, we need to apply\nthe per destination check first.\n\nThis patch makes the following change :\n\n1) icmp_global_allow() checks if the host wide limit is reached.\n But credits are not yet consumed. This is deferred to 3)\n\n2) The per destination limit is checked/updated.\n This might add a new node in inetpeer tree.\n\n3) icmp_global_consume() consumes tokens if prior operations succeeded.\n\nThis means that host wide ratelimit is still effective\nin keeping inetpeer tree small even under DDOS.\n\nAs a bonus, I removed icmp_global.lock as the fast path\ncan use a lock-free operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47678",
"url": "https://www.suse.com/security/cve/CVE-2024-47678"
},
{
"category": "external",
"summary": "SUSE Bug 1231854 for CVE-2024-47678",
"url": "https://bugzilla.suse.com/1231854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47678"
},
{
"cve": "CVE-2024-47809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix possible lkb_resource null dereference\n\nThis patch fixes a possible null pointer dereference when this function is\ncalled from request_lock() as lkb-\u003elkb_resource is not assigned yet,\nonly after validate_lock_args() by calling attach_lkb(). Another issue\nis that a resource name could be a non printable bytearray and we cannot\nassume to be ASCII coded.\n\nThe log functionality is probably never being hit when DLM is used in\nnormal way and no debug logging is enabled. The null pointer dereference\ncan only occur on a new created lkb that does not have the resource\nassigned yet, it probably never hits the null pointer dereference but we\nshould be sure that other changes might not change this behaviour and we\nactually can hit the mentioned null pointer dereference.\n\nIn this patch we just drop the printout of the resource name, the lkb id\nis enough to make a possible connection to a resource name if this\nexists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47809",
"url": "https://www.suse.com/security/cve/CVE-2024-47809"
},
{
"category": "external",
"summary": "SUSE Bug 1235714 for CVE-2024-47809",
"url": "https://bugzilla.suse.com/1235714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47809"
},
{
"cve": "CVE-2024-48873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48873"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: check return value of ieee80211_probereq_get() for RNR\n\nThe return value of ieee80211_probereq_get() might be NULL, so check it\nbefore using to avoid NULL pointer access.\n\nAddresses-Coverity-ID: 1529805 (\"Dereference null return value\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48873",
"url": "https://www.suse.com/security/cve/CVE-2024-48873"
},
{
"category": "external",
"summary": "SUSE Bug 1235716 for CVE-2024-48873",
"url": "https://bugzilla.suse.com/1235716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-48873"
},
{
"cve": "CVE-2024-48881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721 if (!IS_ERR_OR_NULL(c-\u003eroot))\n1722 list_add(\u0026c-\u003eroot-\u003elist, \u0026c-\u003ebtree_cache);\n\n\u003eFrom the above code in cache_set_flush(), if previous registration code\nfails before allocating c-\u003eroot, it is possible c-\u003eroot is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc-\u003eroot is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48881",
"url": "https://www.suse.com/security/cve/CVE-2024-48881"
},
{
"category": "external",
"summary": "SUSE Bug 1235727 for CVE-2024-48881",
"url": "https://bugzilla.suse.com/1235727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-rdma: unquiesce admin_q before destroy it\n\nKernel will hang on destroy admin_q while we create ctrl failed, such\nas following calltrace:\n\nPID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: \"nvme\"\n #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15\n #1 [ff61d23de260fc08] schedule at ffffffff8323c014\n #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1\n #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a\n #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006\n #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce\n #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced\n #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b\n #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362\n #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25\n RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202\n RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574\n RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004\n RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90\n R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004\n R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500\n ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b\n\nThis due to we have quiesced admi_q before cancel requests, but forgot\nto unquiesce before destroy it, as a result we fail to drain the\npending requests, and hang on blk_mq_freeze_queue_wait() forever. Here\ntry to reuse nvme_rdma_teardown_admin_queue() to fix this issue and\nsimplify the code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49569",
"url": "https://www.suse.com/security/cve/CVE-2024-49569"
},
{
"category": "external",
"summary": "SUSE Bug 1235730 for CVE-2024-49569",
"url": "https://bugzilla.suse.com/1235730"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49569"
},
{
"cve": "CVE-2024-49854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix uaf for accessing waker_bfqq after splitting\n\nAfter commit 42c306ed7233 (\"block, bfq: don\u0027t break merge chain in\nbfq_split_bfqq()\"), if the current procress is the last holder of bfqq,\nthe bfqq can be freed after bfq_split_bfqq(). Hence recored the bfqq and\nthen access bfqq-\u003ewaker_bfqq may trigger UAF. What\u0027s more, the waker_bfqq\nmay in the merge chain of bfqq, hence just recored waker_bfqq is still\nnot safe.\n\nFix the problem by adding a helper bfq_waker_bfqq() to check if\nbfqq-\u003ewaker_bfqq is in the merge chain, and current procress is the only\nholder.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49854",
"url": "https://www.suse.com/security/cve/CVE-2024-49854"
},
{
"category": "external",
"summary": "SUSE Bug 1232193 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "external",
"summary": "SUSE Bug 1236571 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1236571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-49854"
},
{
"cve": "CVE-2024-49884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix slab-use-after-free in ext4_split_extent_at()\n\nWe hit the following use-after-free:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_split_extent_at+0xba8/0xcc0\nRead of size 2 at addr ffff88810548ed08 by task kworker/u20:0/40\nCPU: 0 PID: 40 Comm: kworker/u20:0 Not tainted 6.9.0-dirty #724\nCall Trace:\n \u003cTASK\u003e\n kasan_report+0x93/0xc0\n ext4_split_extent_at+0xba8/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nAllocated by task 40:\n __kmalloc_noprof+0x1ac/0x480\n ext4_find_extent+0xf3b/0x1e70\n ext4_ext_map_blocks+0x188/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nFreed by task 40:\n kfree+0xf1/0x2b0\n ext4_find_extent+0xa71/0x1e70\n ext4_ext_insert_extent+0xa22/0x3260\n ext4_split_extent_at+0x3ef/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n==================================================================\n\nThe flow of issue triggering is as follows:\n\next4_split_extent_at\n path = *ppath\n ext4_ext_insert_extent(ppath)\n ext4_ext_create_new_leaf(ppath)\n ext4_find_extent(orig_path)\n path = *orig_path\n read_extent_tree_block\n // return -ENOMEM or -EIO\n ext4_free_ext_path(path)\n kfree(path)\n *orig_path = NULL\n a. If err is -ENOMEM:\n ext4_ext_dirty(path + path-\u003ep_depth)\n // path use-after-free !!!\n b. If err is -EIO and we have EXT_DEBUG defined:\n ext4_ext_show_leaf(path)\n eh = path[depth].p_hdr\n // path also use-after-free !!!\n\nSo when trying to zeroout or fix the extent length, call ext4_find_extent()\nto update the path.\n\nIn addition we use *ppath directly as an ext4_ext_show_leaf() input to\navoid possible use-after-free when EXT_DEBUG is defined, and to avoid\nunnecessary path updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49884",
"url": "https://www.suse.com/security/cve/CVE-2024-49884"
},
{
"category": "external",
"summary": "SUSE Bug 1225742 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1225742"
},
{
"category": "external",
"summary": "SUSE Bug 1232198 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1232198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49884"
},
{
"cve": "CVE-2024-49915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn32_init_hw` function. The issue could occur when `dc-\u003eclk_mgr` is\nnull.\n\nThe fix adds a check to ensure `dc-\u003eclk_mgr` is not null before\naccessing its functions. This prevents a potential null pointer\ndereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn32/dcn32_hwseq.c:961 dcn32_init_hw() error: we previously assumed \u0027dc-\u003eclk_mgr\u0027 could be null (see line 782)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49915",
"url": "https://www.suse.com/security/cve/CVE-2024-49915"
},
{
"category": "external",
"summary": "SUSE Bug 1231963 for CVE-2024-49915",
"url": "https://bugzilla.suse.com/1231963"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49915"
},
{
"cve": "CVE-2024-49948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: add more sanity checks to qdisc_pkt_len_init()\n\nOne path takes care of SKB_GSO_DODGY, assuming\nskb-\u003elen is bigger than hdr_len.\n\nvirtio_net_hdr_to_skb() does not fully dissect TCP headers,\nit only make sure it is at least 20 bytes.\n\nIt is possible for an user to provide a malicious \u0027GSO\u0027 packet,\ntotal length of 80 bytes.\n\n- 20 bytes of IPv4 header\n- 60 bytes TCP header\n- a small gso_size like 8\n\nvirtio_net_hdr_to_skb() would declare this packet as a normal\nGSO packet, because it would see 40 bytes of payload,\nbigger than gso_size.\n\nWe need to make detect this case to not underflow\nqdisc_skb_cb(skb)-\u003epkt_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49948",
"url": "https://www.suse.com/security/cve/CVE-2024-49948"
},
{
"category": "external",
"summary": "SUSE Bug 1232161 for CVE-2024-49948",
"url": "https://bugzilla.suse.com/1232161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-49951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible crash on mgmt_index_removed\n\nIf mgmt_index_removed is called while there are commands queued on\ncmd_sync it could lead to crashes like the bellow trace:\n\n0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc\n0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth]\n0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth]\n0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth]\n\nSo while handling mgmt_index_removed this attempts to dequeue\ncommands passed as user_data to cmd_sync.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49951",
"url": "https://www.suse.com/security/cve/CVE-2024-49951"
},
{
"category": "external",
"summary": "SUSE Bug 1232158 for CVE-2024-49951",
"url": "https://bugzilla.suse.com/1232158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49951"
},
{
"cve": "CVE-2024-49978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49978"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngso: fix udp gso fraglist segmentation after pull from frag_list\n\nDetect gso fraglist skbs with corrupted geometry (see below) and\npass these to skb_segment instead of skb_segment_list, as the first\ncan segment them correctly.\n\nValid SKB_GSO_FRAGLIST skbs\n- consist of two or more segments\n- the head_skb holds the protocol headers plus first gso_size\n- one or more frag_list skbs hold exactly one segment\n- all but the last must be gso_size\n\nOptional datapath hooks such as NAT and BPF (bpf_skb_pull_data) can\nmodify these skbs, breaking these invariants.\n\nIn extreme cases they pull all data into skb linear. For UDP, this\ncauses a NULL ptr deref in __udpv4_gso_segment_list_csum at\nudp_hdr(seg-\u003enext)-\u003edest.\n\nDetect invalid geometry due to pull, by checking head_skb size.\nDon\u0027t just drop, as this may blackhole a destination. Convert to be\nable to pass to regular skb_segment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49978",
"url": "https://www.suse.com/security/cve/CVE-2024-49978"
},
{
"category": "external",
"summary": "SUSE Bug 1232101 for CVE-2024-49978",
"url": "https://bugzilla.suse.com/1232101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49978"
},
{
"cve": "CVE-2024-49998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: improve shutdown sequence\n\nAlexander Sverdlin presents 2 problems during shutdown with the\nlan9303 driver. One is specific to lan9303 and the other just happens\nto reproduce there.\n\nThe first problem is that lan9303 is unique among DSA drivers in that it\ncalls dev_get_drvdata() at \"arbitrary runtime\" (not probe, not shutdown,\nnot remove):\n\nphy_state_machine()\n-\u003e ...\n -\u003e dsa_user_phy_read()\n -\u003e ds-\u003eops-\u003ephy_read()\n -\u003e lan9303_phy_read()\n -\u003e chip-\u003eops-\u003ephy_read()\n -\u003e lan9303_mdio_phy_read()\n -\u003e dev_get_drvdata()\n\nBut we never stop the phy_state_machine(), so it may continue to run\nafter dsa_switch_shutdown(). Our common pattern in all DSA drivers is\nto set drvdata to NULL to suppress the remove() method that may come\nafterwards. But in this case it will result in an NPD.\n\nThe second problem is that the way in which we set\ndp-\u003econduit-\u003edsa_ptr = NULL; is concurrent with receive packet\nprocessing. dsa_switch_rcv() checks once whether dev-\u003edsa_ptr is NULL,\nbut afterwards, rather than continuing to use that non-NULL value,\ndev-\u003edsa_ptr is dereferenced again and again without NULL checks:\ndsa_conduit_find_user() and many other places. In between dereferences,\nthere is no locking to ensure that what was valid once continues to be\nvalid.\n\nBoth problems have the common aspect that closing the conduit interface\nsolves them.\n\nIn the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN\nevent in dsa_user_netdevice_event() which closes user ports as well.\ndsa_port_disable_rt() calls phylink_stop(), which synchronously stops\nthe phylink state machine, and ds-\u003eops-\u003ephy_read() will thus no longer\ncall into the driver after this point.\n\nIn the second case, dev_close(conduit) should do this, as per\nDocumentation/networking/driver.rst:\n\n| Quiescence\n| ----------\n|\n| After the ndo_stop routine has been called, the hardware must\n| not receive or transmit any data. All in flight packets must\n| be aborted. If necessary, poll or wait for completion of\n| any reset commands.\n\nSo it should be sufficient to ensure that later, when we zeroize\nconduit-\u003edsa_ptr, there will be no concurrent dsa_switch_rcv() call\non this conduit.\n\nThe addition of the netif_device_detach() function is to ensure that\nioctls, rtnetlinks and ethtool requests on the user ports no longer\npropagate down to the driver - we\u0027re no longer prepared to handle them.\n\nThe race condition actually did not exist when commit 0650bf52b31f\n(\"net: dsa: be compatible with masters which unregister on shutdown\")\nfirst introduced dsa_switch_shutdown(). It was created later, when we\nstopped unregistering the user interfaces from a bad spot, and we just\nreplaced that sequence with a racy zeroization of conduit-\u003edsa_ptr\n(one which doesn\u0027t ensure that the interfaces aren\u0027t up).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49998",
"url": "https://www.suse.com/security/cve/CVE-2024-49998"
},
{
"category": "external",
"summary": "SUSE Bug 1232087 for CVE-2024-49998",
"url": "https://bugzilla.suse.com/1232087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49998"
},
{
"cve": "CVE-2024-50016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50016"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50016",
"url": "https://www.suse.com/security/cve/CVE-2024-50016"
},
{
"category": "external",
"summary": "SUSE Bug 1232420 for CVE-2024-50016",
"url": "https://bugzilla.suse.com/1232420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50016"
},
{
"cve": "CVE-2024-50018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50018"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50018",
"url": "https://www.suse.com/security/cve/CVE-2024-50018"
},
{
"category": "external",
"summary": "SUSE Bug 1232419 for CVE-2024-50018",
"url": "https://bugzilla.suse.com/1232419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50018"
},
{
"cve": "CVE-2024-50039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50039"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: accept TCA_STAB only for root qdisc\n\nMost qdiscs maintain their backlog using qdisc_pkt_len(skb)\non the assumption it is invariant between the enqueue()\nand dequeue() handlers.\n\nUnfortunately syzbot can crash a host rather easily using\na TBF + SFQ combination, with an STAB on SFQ [1]\n\nWe can\u0027t support TCA_STAB on arbitrary level, this would\nrequire to maintain per-qdisc storage.\n\n[1]\n[ 88.796496] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[ 88.798611] #PF: supervisor read access in kernel mode\n[ 88.799014] #PF: error_code(0x0000) - not-present page\n[ 88.799506] PGD 0 P4D 0\n[ 88.799829] Oops: Oops: 0000 [#1] SMP NOPTI\n[ 88.800569] CPU: 14 UID: 0 PID: 2053 Comm: b371744477 Not tainted 6.12.0-rc1-virtme #1117\n[ 88.801107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 88.801779] RIP: 0010:sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.802544] Code: 0f b7 50 12 48 8d 04 d5 00 00 00 00 48 89 d6 48 29 d0 48 8b 91 c0 01 00 00 48 c1 e0 03 48 01 c2 66 83 7a 1a 00 7e c0 48 8b 3a \u003c4c\u003e 8b 07 4c 89 02 49 89 50 08 48 c7 47 08 00 00 00 00 48 c7 07 00\nAll code\n========\n 0:\t0f b7 50 12 \tmovzwl 0x12(%rax),%edx\n 4:\t48 8d 04 d5 00 00 00 \tlea 0x0(,%rdx,8),%rax\n b:\t00\n c:\t48 89 d6 \tmov %rdx,%rsi\n f:\t48 29 d0 \tsub %rdx,%rax\n 12:\t48 8b 91 c0 01 00 00 \tmov 0x1c0(%rcx),%rdx\n 19:\t48 c1 e0 03 \tshl $0x3,%rax\n 1d:\t48 01 c2 \tadd %rax,%rdx\n 20:\t66 83 7a 1a 00 \tcmpw $0x0,0x1a(%rdx)\n 25:\t7e c0 \tjle 0xffffffffffffffe7\n 27:\t48 8b 3a \tmov (%rdx),%rdi\n 2a:*\t4c 8b 07 \tmov (%rdi),%r8\t\t\u003c-- trapping instruction\n 2d:\t4c 89 02 \tmov %r8,(%rdx)\n 30:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n 34:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 3b:\t00\n 3c:\t48 \trex.W\n 3d:\tc7 \t.byte 0xc7\n 3e:\t07 \t(bad)\n\t...\n\nCode starting with the faulting instruction\n===========================================\n 0:\t4c 8b 07 \tmov (%rdi),%r8\n 3:\t4c 89 02 \tmov %r8,(%rdx)\n 6:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n a:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 11:\t00\n 12:\t48 \trex.W\n 13:\tc7 \t.byte 0xc7\n 14:\t07 \t(bad)\n\t...\n[ 88.803721] RSP: 0018:ffff9a1f892b7d58 EFLAGS: 00000206\n[ 88.804032] RAX: 0000000000000000 RBX: ffff9a1f8420c800 RCX: ffff9a1f8420c800\n[ 88.804560] RDX: ffff9a1f81bc1440 RSI: 0000000000000000 RDI: 0000000000000000\n[ 88.805056] RBP: ffffffffc04bb0e0 R08: 0000000000000001 R09: 00000000ff7f9a1f\n[ 88.805473] R10: 000000000001001b R11: 0000000000009a1f R12: 0000000000000140\n[ 88.806194] R13: 0000000000000001 R14: ffff9a1f886df400 R15: ffff9a1f886df4ac\n[ 88.806734] FS: 00007f445601a740(0000) GS:ffff9a2e7fd80000(0000) knlGS:0000000000000000\n[ 88.807225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 88.807672] CR2: 0000000000000000 CR3: 000000050cc46000 CR4: 00000000000006f0\n[ 88.808165] Call Trace:\n[ 88.808459] \u003cTASK\u003e\n[ 88.808710] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434)\n[ 88.809261] ? page_fault_oops (arch/x86/mm/fault.c:715)\n[ 88.809561] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539)\n[ 88.809806] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623)\n[ 88.810074] ? sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.810411] sfq_reset (net/sched/sch_sfq.c:525) sch_sfq\n[ 88.810671] qdisc_reset (./include/linux/skbuff.h:2135 ./include/linux/skbuff.h:2441 ./include/linux/skbuff.h:3304 ./include/linux/skbuff.h:3310 net/sched/sch_g\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50039",
"url": "https://www.suse.com/security/cve/CVE-2024-50039"
},
{
"category": "external",
"summary": "SUSE Bug 1231909 for CVE-2024-50039",
"url": "https://bugzilla.suse.com/1231909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50039"
},
{
"cve": "CVE-2024-50047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50047"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix UAF in async decryption\n\nDoing an async decryption (large read) crashes with a\nslab-use-after-free way down in the crypto API.\n\nReproducer:\n # mount.cifs -o ...,seal,esize=1 //srv/share /mnt\n # dd if=/mnt/largefile of=/dev/null\n ...\n [ 194.196391] ==================================================================\n [ 194.196844] BUG: KASAN: slab-use-after-free in gf128mul_4k_lle+0xc1/0x110\n [ 194.197269] Read of size 8 at addr ffff888112bd0448 by task kworker/u77:2/899\n [ 194.197707]\n [ 194.197818] CPU: 12 UID: 0 PID: 899 Comm: kworker/u77:2 Not tainted 6.11.0-lku-00028-gfca3ca14a17a-dirty #43\n [ 194.198400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014\n [ 194.199046] Workqueue: smb3decryptd smb2_decrypt_offload [cifs]\n [ 194.200032] Call Trace:\n [ 194.200191] \u003cTASK\u003e\n [ 194.200327] dump_stack_lvl+0x4e/0x70\n [ 194.200558] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.200809] print_report+0x174/0x505\n [ 194.201040] ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n [ 194.201352] ? srso_return_thunk+0x5/0x5f\n [ 194.201604] ? __virt_addr_valid+0xdf/0x1c0\n [ 194.201868] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202128] kasan_report+0xc8/0x150\n [ 194.202361] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202616] gf128mul_4k_lle+0xc1/0x110\n [ 194.202863] ghash_update+0x184/0x210\n [ 194.203103] shash_ahash_update+0x184/0x2a0\n [ 194.203377] ? __pfx_shash_ahash_update+0x10/0x10\n [ 194.203651] ? srso_return_thunk+0x5/0x5f\n [ 194.203877] ? crypto_gcm_init_common+0x1ba/0x340\n [ 194.204142] gcm_hash_assoc_remain_continue+0x10a/0x140\n [ 194.204434] crypt_message+0xec1/0x10a0 [cifs]\n [ 194.206489] ? __pfx_crypt_message+0x10/0x10 [cifs]\n [ 194.208507] ? srso_return_thunk+0x5/0x5f\n [ 194.209205] ? srso_return_thunk+0x5/0x5f\n [ 194.209925] ? srso_return_thunk+0x5/0x5f\n [ 194.210443] ? srso_return_thunk+0x5/0x5f\n [ 194.211037] decrypt_raw_data+0x15f/0x250 [cifs]\n [ 194.212906] ? __pfx_decrypt_raw_data+0x10/0x10 [cifs]\n [ 194.214670] ? srso_return_thunk+0x5/0x5f\n [ 194.215193] smb2_decrypt_offload+0x12a/0x6c0 [cifs]\n\nThis is because TFM is being used in parallel.\n\nFix this by allocating a new AEAD TFM for async decryption, but keep\nthe existing one for synchronous READ cases (similar to what is done\nin smb3_calc_signature()).\n\nAlso remove the calls to aead_request_set_callback() and\ncrypto_wait_req() since it\u0027s always going to be a synchronous operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50047",
"url": "https://www.suse.com/security/cve/CVE-2024-50047"
},
{
"category": "external",
"summary": "SUSE Bug 1232418 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "external",
"summary": "SUSE Bug 1232576 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232576"
},
{
"category": "external",
"summary": "SUSE Bug 1232638 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-50047"
},
{
"cve": "CVE-2024-50051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: Add cancel_work_sync before module remove\n\nIf we remove the module which will call mpc52xx_spi_remove\nit will free \u0027ms\u0027 through spi_unregister_controller.\nwhile the work ms-\u003ework will be used. The sequence of operations\nthat may lead to a UAF bug.\n\nFix it by ensuring that the work is canceled before proceeding with\nthe cleanup in mpc52xx_spi_remove.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50051",
"url": "https://www.suse.com/security/cve/CVE-2024-50051"
},
{
"category": "external",
"summary": "SUSE Bug 1235739 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "external",
"summary": "SUSE Bug 1239156 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1239156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-50051"
},
{
"cve": "CVE-2024-50106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix race between laundromat and free_stateid\n\nThere is a race between laundromat handling of revoked delegations\nand a client sending free_stateid operation. Laundromat thread\nfinds that delegation has expired and needs to be revoked so it\nmarks the delegation stid revoked and it puts it on a reaper list\nbut then it unlock the state lock and the actual delegation revocation\nhappens without the lock. Once the stid is marked revoked a racing\nfree_stateid processing thread does the following (1) it calls\nlist_del_init() which removes it from the reaper list and (2) frees\nthe delegation stid structure. The laundromat thread ends up not\ncalling the revoke_delegation() function for this particular delegation\nbut that means it will no release the lock lease that exists on\nthe file.\n\nNow, a new open for this file comes in and ends up finding that\nlease list isn\u0027t empty and calls nfsd_breaker_owns_lease() which ends\nup trying to derefence a freed delegation stateid. Leading to the\nfollowint use-after-free KASAN warning:\n\nkernel: ==================================================================\nkernel: BUG: KASAN: slab-use-after-free in nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: Read of size 8 at addr ffff0000e73cd0c8 by task nfsd/6205\nkernel:\nkernel: CPU: 2 UID: 0 PID: 6205 Comm: nfsd Kdump: loaded Not tainted 6.11.0-rc7+ #9\nkernel: Hardware name: Apple Inc. Apple Virtualization Generic Platform, BIOS 2069.0.0.0.0 08/03/2024\nkernel: Call trace:\nkernel: dump_backtrace+0x98/0x120\nkernel: show_stack+0x1c/0x30\nkernel: dump_stack_lvl+0x80/0xe8\nkernel: print_address_description.constprop.0+0x84/0x390\nkernel: print_report+0xa4/0x268\nkernel: kasan_report+0xb4/0xf8\nkernel: __asan_report_load8_noabort+0x1c/0x28\nkernel: nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: nfsd_file_do_acquire+0xb3c/0x11d0 [nfsd]\nkernel: nfsd_file_acquire_opened+0x84/0x110 [nfsd]\nkernel: nfs4_get_vfs_file+0x634/0x958 [nfsd]\nkernel: nfsd4_process_open2+0xa40/0x1a40 [nfsd]\nkernel: nfsd4_open+0xa08/0xe80 [nfsd]\nkernel: nfsd4_proc_compound+0xb8c/0x2130 [nfsd]\nkernel: nfsd_dispatch+0x22c/0x718 [nfsd]\nkernel: svc_process_common+0x8e8/0x1960 [sunrpc]\nkernel: svc_process+0x3d4/0x7e0 [sunrpc]\nkernel: svc_handle_xprt+0x828/0xe10 [sunrpc]\nkernel: svc_recv+0x2cc/0x6a8 [sunrpc]\nkernel: nfsd+0x270/0x400 [nfsd]\nkernel: kthread+0x288/0x310\nkernel: ret_from_fork+0x10/0x20\n\nThis patch proposes a fixed that\u0027s based on adding 2 new additional\nstid\u0027s sc_status values that help coordinate between the laundromat\nand other operations (nfsd4_free_stateid() and nfsd4_delegreturn()).\n\nFirst to make sure, that once the stid is marked revoked, it is not\nremoved by the nfsd4_free_stateid(), the laundromat take a reference\non the stateid. Then, coordinating whether the stid has been put\non the cl_revoked list or we are processing FREE_STATEID and need to\nmake sure to remove it from the list, each check that state and act\naccordingly. If laundromat has added to the cl_revoke list before\nthe arrival of FREE_STATEID, then nfsd4_free_stateid() knows to remove\nit from the list. If nfsd4_free_stateid() finds that operations arrived\nbefore laundromat has placed it on cl_revoke list, it marks the state\nfreed and then laundromat will no longer add it to the list.\n\nAlso, for nfsd4_delegreturn() when looking for the specified stid,\nwe need to access stid that are marked removed or freeable, it means\nthe laundromat has started processing it but hasn\u0027t finished and this\ndelegreturn needs to return nfserr_deleg_revoked and not\nnfserr_bad_stateid. The latter will not trigger a FREE_STATEID and the\nlack of it will leave this stid on the cl_revoked list indefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50106",
"url": "https://www.suse.com/security/cve/CVE-2024-50106"
},
{
"category": "external",
"summary": "SUSE Bug 1232882 for CVE-2024-50106",
"url": "https://bugzilla.suse.com/1232882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50106"
},
{
"cve": "CVE-2024-50143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: fix uninit-value use in udf_get_fileshortad\n\nCheck for overflow when computing alen in udf_current_aext to mitigate\nlater uninit-value use in udf_get_fileshortad KMSAN bug[1].\nAfter applying the patch reproducer did not trigger any issue[2].\n\n[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df\n[2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50143",
"url": "https://www.suse.com/security/cve/CVE-2024-50143"
},
{
"category": "external",
"summary": "SUSE Bug 1233038 for CVE-2024-50143",
"url": "https://bugzilla.suse.com/1233038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50143"
},
{
"cve": "CVE-2024-50151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOBs when building SMB2_IOCTL request\n\nWhen using encryption, either enforced by the server or when using\n\u0027seal\u0027 mount option, the client will squash all compound request buffers\ndown for encryption into a single iov in smb2_set_next_command().\n\nSMB2_ioctl_init() allocates a small buffer (448 bytes) to hold the\nSMB2_IOCTL request in the first iov, and if the user passes an input\nbuffer that is greater than 328 bytes, smb2_set_next_command() will\nend up writing off the end of @rqst-\u003eiov[0].iov_base as shown below:\n\n mount.cifs //srv/share /mnt -o ...,seal\n ln -s $(perl -e \"print(\u0027a\u0027)for 1..1024\") /mnt/link\n\n BUG: KASAN: slab-out-of-bounds in\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n Write of size 4116 at addr ffff8881148fcab8 by task ln/859\n\n CPU: 1 UID: 0 PID: 859 Comm: ln Not tainted 6.12.0-rc3 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n 1.16.3-2.fc40 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n print_report+0x156/0x4d9\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n ? __virt_addr_valid+0x145/0x310\n ? __phys_addr+0x46/0x90\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_report+0xda/0x110\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_check_range+0x10f/0x1f0\n __asan_memcpy+0x3c/0x60\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n smb2_compound_op+0x238c/0x3840 [cifs]\n ? kasan_save_track+0x14/0x30\n ? kasan_save_free_info+0x3b/0x70\n ? vfs_symlink+0x1a1/0x2c0\n ? do_symlinkat+0x108/0x1c0\n ? __pfx_smb2_compound_op+0x10/0x10 [cifs]\n ? kmem_cache_free+0x118/0x3e0\n ? cifs_get_writable_path+0xeb/0x1a0 [cifs]\n smb2_get_reparse_inode+0x423/0x540 [cifs]\n ? __pfx_smb2_get_reparse_inode+0x10/0x10 [cifs]\n ? rcu_is_watching+0x20/0x50\n ? __kmalloc_noprof+0x37c/0x480\n ? smb2_create_reparse_symlink+0x257/0x490 [cifs]\n ? smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n ? __pfx_smb2_create_reparse_symlink+0x10/0x10 [cifs]\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? __build_path_from_dentry_optional_prefix+0x19d/0x2e0 [cifs]\n cifs_symlink+0x24f/0x960 [cifs]\n ? __pfx_make_vfsuid+0x10/0x10\n ? __pfx_cifs_symlink+0x10/0x10 [cifs]\n ? make_vfsgid+0x6b/0xc0\n ? generic_permission+0x96/0x2d0\n vfs_symlink+0x1a1/0x2c0\n do_symlinkat+0x108/0x1c0\n ? __pfx_do_symlinkat+0x10/0x10\n ? strncpy_from_user+0xaa/0x160\n __x64_sys_symlinkat+0xb9/0xf0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7f08d75c13bb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50151",
"url": "https://www.suse.com/security/cve/CVE-2024-50151"
},
{
"category": "external",
"summary": "SUSE Bug 1233055 for CVE-2024-50151",
"url": "https://bugzilla.suse.com/1233055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50151"
},
{
"cve": "CVE-2024-50154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp/dccp: Don\u0027t use timer_pending() in reqsk_queue_unlink().\n\nMartin KaFai Lau reported use-after-free [0] in reqsk_timer_handler().\n\n \"\"\"\n We are seeing a use-after-free from a bpf prog attached to\n trace_tcp_retransmit_synack. The program passes the req-\u003esk to the\n bpf_sk_storage_get_tracing kernel helper which does check for null\n before using it.\n \"\"\"\n\nThe commit 83fccfc3940c (\"inet: fix potential deadlock in\nreqsk_queue_unlink()\") added timer_pending() in reqsk_queue_unlink() not\nto call del_timer_sync() from reqsk_timer_handler(), but it introduced a\nsmall race window.\n\nBefore the timer is called, expire_timers() calls detach_timer(timer, true)\nto clear timer-\u003eentry.pprev and marks it as not pending.\n\nIf reqsk_queue_unlink() checks timer_pending() just after expire_timers()\ncalls detach_timer(), TCP will miss del_timer_sync(); the reqsk timer will\ncontinue running and send multiple SYN+ACKs until it expires.\n\nThe reported UAF could happen if req-\u003esk is close()d earlier than the timer\nexpiration, which is 63s by default.\n\nThe scenario would be\n\n 1. inet_csk_complete_hashdance() calls inet_csk_reqsk_queue_drop(),\n but del_timer_sync() is missed\n\n 2. reqsk timer is executed and scheduled again\n\n 3. req-\u003esk is accept()ed and reqsk_put() decrements rsk_refcnt, but\n reqsk timer still has another one, and inet_csk_accept() does not\n clear req-\u003esk for non-TFO sockets\n\n 4. sk is close()d\n\n 5. reqsk timer is executed again, and BPF touches req-\u003esk\n\nLet\u0027s not use timer_pending() by passing the caller context to\n__inet_csk_reqsk_queue_drop().\n\nNote that reqsk timer is pinned, so the issue does not happen in most\nuse cases. [1]\n\n[0]\nBUG: KFENCE: use-after-free read in bpf_sk_storage_get_tracing+0x2e/0x1b0\n\nUse-after-free read at 0x00000000a891fb3a (in kfence-#1):\nbpf_sk_storage_get_tracing+0x2e/0x1b0\nbpf_prog_5ea3e95db6da0438_tcp_retransmit_synack+0x1d20/0x1dda\nbpf_trace_run2+0x4c/0xc0\ntcp_rtx_synack+0xf9/0x100\nreqsk_timer_handler+0xda/0x3d0\nrun_timer_softirq+0x292/0x8a0\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\nintel_idle_irq+0x5a/0xa0\ncpuidle_enter_state+0x94/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nkfence-#1: 0x00000000a72cc7b6-0x00000000d97616d9, size=2376, cache=TCPv6\n\nallocated by task 0 on cpu 9 at 260507.901592s:\nsk_prot_alloc+0x35/0x140\nsk_clone_lock+0x1f/0x3f0\ninet_csk_clone_lock+0x15/0x160\ntcp_create_openreq_child+0x1f/0x410\ntcp_v6_syn_recv_sock+0x1da/0x700\ntcp_check_req+0x1fb/0x510\ntcp_v6_rcv+0x98b/0x1420\nipv6_list_rcv+0x2258/0x26e0\nnapi_complete_done+0x5b1/0x2990\nmlx5e_napi_poll+0x2ae/0x8d0\nnet_rx_action+0x13e/0x590\nirq_exit_rcu+0xf5/0x320\ncommon_interrupt+0x80/0x90\nasm_common_interrupt+0x22/0x40\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nfreed by task 0 on cpu 9 at 260507.927527s:\nrcu_core_si+0x4ff/0xf10\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50154",
"url": "https://www.suse.com/security/cve/CVE-2024-50154"
},
{
"category": "external",
"summary": "SUSE Bug 1233070 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "external",
"summary": "SUSE Bug 1233072 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233072"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-50154"
},
{
"cve": "CVE-2024-50199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50199"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/swapfile: skip HugeTLB pages for unuse_vma\n\nI got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The\nproblem can be reproduced by the following steps:\n\n 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.\n 2. Swapout the above anonymous memory.\n 3. run swapoff and we will get a bad pud error in kernel message:\n\n mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)\n\nWe can tell that pud_clear_bad is called by pud_none_or_clear_bad in\nunuse_pud_range() by ftrace. And therefore the HugeTLB pages will never\nbe freed because we lost it from page table. We can skip HugeTLB pages\nfor unuse_vma to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50199",
"url": "https://www.suse.com/security/cve/CVE-2024-50199"
},
{
"category": "external",
"summary": "SUSE Bug 1233112 for CVE-2024-50199",
"url": "https://bugzilla.suse.com/1233112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50199"
},
{
"cve": "CVE-2024-50202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: propagate directory read errors from nilfs_find_entry()\n\nSyzbot reported that a task hang occurs in vcs_open() during a fuzzing\ntest for nilfs2.\n\nThe root cause of this problem is that in nilfs_find_entry(), which\nsearches for directory entries, ignores errors when loading a directory\npage/folio via nilfs_get_folio() fails.\n\nIf the filesystem images is corrupted, and the i_size of the directory\ninode is large, and the directory page/folio is successfully read but\nfails the sanity check, for example when it is zero-filled,\nnilfs_check_folio() may continue to spit out error messages in bursts.\n\nFix this issue by propagating the error to the callers when loading a\npage/folio fails in nilfs_find_entry().\n\nThe current interface of nilfs_find_entry() and its callers is outdated\nand cannot propagate error codes such as -EIO and -ENOMEM returned via\nnilfs_find_entry(), so fix it together.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50202",
"url": "https://www.suse.com/security/cve/CVE-2024-50202"
},
{
"category": "external",
"summary": "SUSE Bug 1233324 for CVE-2024-50202",
"url": "https://bugzilla.suse.com/1233324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50202"
},
{
"cve": "CVE-2024-50203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Fix address emission with tag-based KASAN enabled\n\nWhen BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image\nstruct on the stack is passed during the size calculation pass and\nan address on the heap is passed during code generation. This may\ncause a heap buffer overflow if the heap address is tagged because\nemit_a64_mov_i64() will emit longer code than it did during the size\ncalculation pass. The same problem could occur without tag-based\nKASAN if one of the 16-bit words of the stack address happened to\nbe all-ones during the size calculation pass. Fix the problem by\nassuming the worst case (4 instructions) when calculating the size\nof the bpf_tramp_image address emission.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50203",
"url": "https://www.suse.com/security/cve/CVE-2024-50203"
},
{
"category": "external",
"summary": "SUSE Bug 1233328 for CVE-2024-50203",
"url": "https://bugzilla.suse.com/1233328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50203"
},
{
"cve": "CVE-2024-50211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50211"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: refactor inode_bmap() to handle error\n\nRefactor inode_bmap() to handle error since udf_next_aext() can return\nerror now. On situations like ftruncate, udf_extend_file() can now\ndetect errors and bail out early without resorting to checking for\nparticular offsets and assuming internal behavior of these functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50211",
"url": "https://www.suse.com/security/cve/CVE-2024-50211"
},
{
"category": "external",
"summary": "SUSE Bug 1233096 for CVE-2024-50211",
"url": "https://bugzilla.suse.com/1233096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50211"
},
{
"cve": "CVE-2024-50228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50228"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50228",
"url": "https://www.suse.com/security/cve/CVE-2024-50228"
},
{
"category": "external",
"summary": "SUSE Bug 1233204 for CVE-2024-50228",
"url": "https://bugzilla.suse.com/1233204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50228"
},
{
"cve": "CVE-2024-50256",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50256"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()\n\nI got a syzbot report without a repro [1] crashing in nf_send_reset6()\n\nI think the issue is that dev-\u003ehard_header_len is zero, and we attempt\nlater to push an Ethernet header.\n\nUse LL_MAX_HEADER, as other functions in net/ipv6/netfilter/nf_reject_ipv6.c.\n\n[1]\n\nskbuff: skb_under_panic: text:ffffffff89b1d008 len:74 put:14 head:ffff88803123aa00 data:ffff88803123a9f2 tail:0x3c end:0x140 dev:syz_tun\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 7373 Comm: syz.1.568 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 60 a6 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 ba 30 38 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc900045269b0 EFLAGS: 00010282\nRAX: 0000000000000088 RBX: dffffc0000000000 RCX: cd66dacdc5d8e800\nRDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000\nRBP: ffff88802d39a3d0 R08: ffffffff8174afec R09: 1ffff920008a4ccc\nR10: dffffc0000000000 R11: fffff520008a4ccd R12: 0000000000000140\nR13: ffff88803123aa00 R14: ffff88803123a9f2 R15: 000000000000003c\nFS: 00007fdbee5ff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000005d322000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n eth_header+0x38/0x1f0 net/ethernet/eth.c:83\n dev_hard_header include/linux/netdevice.h:3208 [inline]\n nf_send_reset6+0xce6/0x1270 net/ipv6/netfilter/nf_reject_ipv6.c:358\n nft_reject_inet_eval+0x3b9/0x690 net/netfilter/nft_reject_inet.c:48\n expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]\n nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288\n nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626\n nf_hook include/linux/netfilter.h:269 [inline]\n NF_HOOK include/linux/netfilter.h:312 [inline]\n br_nf_pre_routing_ipv6+0x63e/0x770 net/bridge/br_netfilter_ipv6.c:184\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]\n br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424\n __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5562\n __netif_receive_skb_one_core net/core/dev.c:5666 [inline]\n __netif_receive_skb+0x12f/0x650 net/core/dev.c:5781\n netif_receive_skb_internal net/core/dev.c:5867 [inline]\n netif_receive_skb+0x1e8/0x890 net/core/dev.c:5926\n tun_rx_batched+0x1b7/0x8f0 drivers/net/tun.c:1550\n tun_get_user+0x3056/0x47e0 drivers/net/tun.c:2007\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2053\n new_sync_write fs/read_write.c:590 [inline]\n vfs_write+0xa6d/0xc90 fs/read_write.c:683\n ksys_write+0x183/0x2b0 fs/read_write.c:736\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fdbeeb7d1ff\nCode: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48\nRSP: 002b:00007fdbee5ff000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 00007fdbeed36058 RCX: 00007fdbeeb7d1ff\nRDX: 000000000000008e RSI: 0000000020000040 RDI: 00000000000000c8\nRBP: 00007fdbeebf12be R08: 0000000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50256",
"url": "https://www.suse.com/security/cve/CVE-2024-50256"
},
{
"category": "external",
"summary": "SUSE Bug 1233200 for CVE-2024-50256",
"url": "https://bugzilla.suse.com/1233200"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50256"
},
{
"cve": "CVE-2024-50262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50262"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix out-of-bounds write in trie_get_next_key()\n\ntrie_get_next_key() allocates a node stack with size trie-\u003emax_prefixlen,\nwhile it writes (trie-\u003emax_prefixlen + 1) nodes to the stack when it has\nfull paths from the root to leaves. For example, consider a trie with\nmax_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ...\n0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with\n.prefixlen = 8 make 9 nodes be written on the node stack with size 8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50262",
"url": "https://www.suse.com/security/cve/CVE-2024-50262"
},
{
"category": "external",
"summary": "SUSE Bug 1233239 for CVE-2024-50262",
"url": "https://bugzilla.suse.com/1233239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50262"
},
{
"cve": "CVE-2024-50272",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50272"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfilemap: Fix bounds checking in filemap_read()\n\nIf the caller supplies an iocb-\u003eki_pos value that is close to the\nfilesystem upper limit, and an iterator with a count that causes us to\noverflow that limit, then filemap_read() enters an infinite loop.\n\nThis behaviour was discovered when testing xfstests generic/525 with the\n\"localio\" optimisation for loopback NFS mounts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50272",
"url": "https://www.suse.com/security/cve/CVE-2024-50272"
},
{
"category": "external",
"summary": "SUSE Bug 1233461 for CVE-2024-50272",
"url": "https://bugzilla.suse.com/1233461"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50272"
},
{
"cve": "CVE-2024-50278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50278"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix potential out-of-bounds access on the first resume\n\nOut-of-bounds access occurs if the fast device is expanded unexpectedly\nbefore the first-time resume of the cache table. This happens because\nexpanding the fast device requires reloading the cache table for\ncache_create to allocate new in-core data structures that fit the new\nsize, and the check in cache_preresume is not performed during the\nfirst resume, leading to the issue.\n\nReproduce steps:\n\n1. prepare component devices:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\n\n2. load a cache table of 512 cache blocks, and deliberately expand the\n fast device before resuming the cache, making the in-core data\n structures inadequate.\n\ndmsetup create cache --notable\ndmsetup reload cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\ndmsetup reload cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup resume cdata\ndmsetup resume cache\n\n3. suspend the cache to write out the in-core dirty bitset and hint\n array, leading to out-of-bounds access to the dirty bitset at offset\n 0x40:\n\ndmsetup suspend cache\n\nKASAN reports:\n\n BUG: KASAN: vmalloc-out-of-bounds in is_dirty_callback+0x2b/0x80\n Read of size 8 at addr ffffc90000085040 by task dmsetup/90\n\n (...snip...)\n The buggy address belongs to the virtual mapping at\n [ffffc90000085000, ffffc90000087000) created by:\n cache_ctr+0x176a/0x35f0\n\n (...snip...)\n Memory state around the buggy address:\n ffffc90000084f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000084f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n \u003effffc90000085000: 00 00 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8\n ^\n ffffc90000085080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000085100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n\nFix by checking the size change on the first resume.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50278",
"url": "https://www.suse.com/security/cve/CVE-2024-50278"
},
{
"category": "external",
"summary": "SUSE Bug 1233467 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "external",
"summary": "SUSE Bug 1233709 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50278"
},
{
"cve": "CVE-2024-50280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50280"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix flushing uninitialized delayed_work on cache_ctr error\n\nAn unexpected WARN_ON from flush_work() may occur when cache creation\nfails, caused by destroying the uninitialized delayed_work waker in the\nerror path of cache_create(). For example, the warning appears on the\nsuperblock checksum error.\n\nReproduce steps:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\nWARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890\n\nFix by pulling out the cancel_delayed_work_sync() from the constructor\u0027s\nerror path. This patch doesn\u0027t affect the use-after-free fix for\nconcurrent dm_resume and dm_destroy (commit 6a459d8edbdb (\"dm cache: Fix\nUAF in destroy()\")) as cache_dtr is not changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50280",
"url": "https://www.suse.com/security/cve/CVE-2024-50280"
},
{
"category": "external",
"summary": "SUSE Bug 1233469 for CVE-2024-50280",
"url": "https://bugzilla.suse.com/1233469"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50280"
},
{
"cve": "CVE-2024-50299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50299"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: properly validate chunk size in sctp_sf_ootb()\n\nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add\nsize validation when walking chunks\") is also required in sctp_sf_ootb()\nto address a crash reported by syzbot:\n\n BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166\n sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407\n sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88\n sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243\n sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159\n ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50299",
"url": "https://www.suse.com/security/cve/CVE-2024-50299"
},
{
"category": "external",
"summary": "SUSE Bug 1233488 for CVE-2024-50299",
"url": "https://bugzilla.suse.com/1233488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-52332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52332",
"url": "https://www.suse.com/security/cve/CVE-2024-52332"
},
{
"category": "external",
"summary": "SUSE Bug 1235700 for CVE-2024-52332",
"url": "https://bugzilla.suse.com/1235700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53050"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/hdcp: Add encoder check in hdcp2_get_capability\n\nAdd encoder check in intel_hdcp2_get_capability to avoid\nnull pointer error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53050",
"url": "https://www.suse.com/security/cve/CVE-2024-53050"
},
{
"category": "external",
"summary": "SUSE Bug 1233546 for CVE-2024-53050",
"url": "https://bugzilla.suse.com/1233546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53050"
},
{
"cve": "CVE-2024-53064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53064"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix idpf_vc_core_init error path\n\nIn an event where the platform running the device control plane\nis rebooted, reset is detected on the driver. It releases\nall the resources and waits for the reset to complete. Once the\nreset is done, it tries to build the resources back. At this\ntime if the device control plane is not yet started, then\nthe driver timeouts on the virtchnl message and retries to\nestablish the mailbox again.\n\nIn the retry flow, mailbox is deinitialized but the mailbox\nworkqueue is still alive and polling for the mailbox message.\nThis results in accessing the released control queue leading to\nnull-ptr-deref. Fix it by unrolling the work queue cancellation\nand mailbox deinitialization in the reverse order which they got\ninitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53064",
"url": "https://www.suse.com/security/cve/CVE-2024-53064"
},
{
"category": "external",
"summary": "SUSE Bug 1233558 for CVE-2024-53064",
"url": "https://bugzilla.suse.com/1233558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53064"
},
{
"cve": "CVE-2024-53090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53090"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix lock recursion\n\nafs_wake_up_async_call() can incur lock recursion. The problem is that it\nis called from AF_RXRPC whilst holding the -\u003enotify_lock, but it tries to\ntake a ref on the afs_call struct in order to pass it to a work queue - but\nif the afs_call is already queued, we then have an extraneous ref that must\nbe put... calling afs_put_call() may call back down into AF_RXRPC through\nrxrpc_kernel_shutdown_call(), however, which might try taking the\n-\u003enotify_lock again.\n\nThis case isn\u0027t very common, however, so defer it to a workqueue. The oops\nlooks something like:\n\n BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646\n lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0\n CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351\n Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x70\n do_raw_spin_lock+0x3c/0x90\n rxrpc_kernel_shutdown_call+0x83/0xb0\n afs_put_call+0xd7/0x180\n rxrpc_notify_socket+0xa0/0x190\n rxrpc_input_split_jumbo+0x198/0x1d0\n rxrpc_input_data+0x14b/0x1e0\n ? rxrpc_input_call_packet+0xc2/0x1f0\n rxrpc_input_call_event+0xad/0x6b0\n rxrpc_input_packet_on_conn+0x1e1/0x210\n rxrpc_input_packet+0x3f2/0x4d0\n rxrpc_io_thread+0x243/0x410\n ? __pfx_rxrpc_io_thread+0x10/0x10\n kthread+0xcf/0xe0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x24/0x40\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53090",
"url": "https://www.suse.com/security/cve/CVE-2024-53090"
},
{
"category": "external",
"summary": "SUSE Bug 1233637 for CVE-2024-53090",
"url": "https://bugzilla.suse.com/1233637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53090"
},
{
"cve": "CVE-2024-53091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53091"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx\n\nAs the introduction of the support for vsock and unix sockets in sockmap,\ntls_sw_has_ctx_tx/rx cannot presume the socket passed in must be IS_ICSK.\nvsock and af_unix sockets have vsock_sock and unix_sock instead of\ninet_connection_sock. For these sockets, tls_get_ctx may return an invalid\npointer and cause page fault in function tls_sw_ctx_rx.\n\nBUG: unable to handle page fault for address: 0000000000040030\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:sk_psock_strp_data_ready+0x23/0x60\nCall Trace:\n ? __die+0x81/0xc3\n ? no_context+0x194/0x350\n ? do_page_fault+0x30/0x110\n ? async_page_fault+0x3e/0x50\n ? sk_psock_strp_data_ready+0x23/0x60\n virtio_transport_recv_pkt+0x750/0x800\n ? update_load_avg+0x7e/0x620\n vsock_loopback_work+0xd0/0x100\n process_one_work+0x1a7/0x360\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x112/0x130\n ? __kthread_cancel_work+0x40/0x40\n ret_from_fork+0x1f/0x40\n\nv2:\n - Add IS_ICSK check\nv3:\n - Update the commits in Fixes",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53091",
"url": "https://www.suse.com/security/cve/CVE-2024-53091"
},
{
"category": "external",
"summary": "SUSE Bug 1233638 for CVE-2024-53091",
"url": "https://bugzilla.suse.com/1233638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53091"
},
{
"cve": "CVE-2024-53095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53095"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix use-after-free of network namespace.\n\nRecently, we got a customer report that CIFS triggers oops while\nreconnecting to a server. [0]\n\nThe workload runs on Kubernetes, and some pods mount CIFS servers\nin non-root network namespaces. The problem rarely happened, but\nit was always while the pod was dying.\n\nThe root cause is wrong reference counting for network namespace.\n\nCIFS uses kernel sockets, which do not hold refcnt of the netns that\nthe socket belongs to. That means CIFS must ensure the socket is\nalways freed before its netns; otherwise, use-after-free happens.\n\nThe repro steps are roughly:\n\n 1. mount CIFS in a non-root netns\n 2. drop packets from the netns\n 3. destroy the netns\n 4. unmount CIFS\n\nWe can reproduce the issue quickly with the script [1] below and see\nthe splat [2] if CONFIG_NET_NS_REFCNT_TRACKER is enabled.\n\nWhen the socket is TCP, it is hard to guarantee the netns lifetime\nwithout holding refcnt due to async timers.\n\nLet\u0027s hold netns refcnt for each socket as done for SMC in commit\n9744d2bf1976 (\"smc: Fix use-after-free in tcp_write_timer_handler().\").\n\nNote that we need to move put_net() from cifs_put_tcp_session() to\nclean_demultiplex_info(); otherwise, __sock_create() still could touch a\nfreed netns while cifsd tries to reconnect from cifs_demultiplex_thread().\n\nAlso, maybe_get_net() cannot be put just before __sock_create() because\nthe code is not under RCU and there is a small chance that the same\naddress happened to be reallocated to another netns.\n\n[0]:\nCIFS: VFS: \\\\XXXXXXXXXXX has not responded in 15 seconds. Reconnecting...\nCIFS: Serverclose failed 4 times, giving up\nUnable to handle kernel paging request at virtual address 14de99e461f84a07\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\n[14de99e461f84a07] address between user and kernel address ranges\nInternal error: Oops: 0000000096000004 [#1] SMP\nModules linked in: cls_bpf sch_ingress nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver tcp_diag inet_diag veth xt_state xt_connmark nf_conntrack_netlink xt_nat xt_statistic xt_MASQUERADE xt_mark xt_addrtype ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nf_tables nfnetlink overlay nls_ascii nls_cp437 sunrpc vfat fat aes_ce_blk aes_ce_cipher ghash_ce sm4_ce_cipher sm4 sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 sha1_ce ena button sch_fq_codel loop fuse configfs dmi_sysfs sha2_ce sha256_arm64 dm_mirror dm_region_hash dm_log dm_mod dax efivarfs\nCPU: 5 PID: 2690970 Comm: cifsd Not tainted 6.1.103-109.184.amzn2023.aarch64 #1\nHardware name: Amazon EC2 r7g.4xlarge/, BIOS 1.0 11/1/2018\npstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : fib_rules_lookup+0x44/0x238\nlr : __fib_lookup+0x64/0xbc\nsp : ffff8000265db790\nx29: ffff8000265db790 x28: 0000000000000000 x27: 000000000000bd01\nx26: 0000000000000000 x25: ffff000b4baf8000 x24: ffff00047b5e4580\nx23: ffff8000265db7e0 x22: 0000000000000000 x21: ffff00047b5e4500\nx20: ffff0010e3f694f8 x19: 14de99e461f849f7 x18: 0000000000000000\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000000 x13: 0000000000000000 x12: 3f92800abd010002\nx11: 0000000000000001 x10: ffff0010e3f69420 x9 : ffff800008a6f294\nx8 : 0000000000000000 x7 : 0000000000000006 x6 : 0000000000000000\nx5 : 0000000000000001 x4 : ffff001924354280 x3 : ffff8000265db7e0\nx2 : 0000000000000000 x1 : ffff0010e3f694f8 x0 : ffff00047b5e4500\nCall trace:\n fib_rules_lookup+0x44/0x238\n __fib_lookup+0x64/0xbc\n ip_route_output_key_hash_rcu+0x2c4/0x398\n ip_route_output_key_hash+0x60/0x8c\n tcp_v4_connect+0x290/0x488\n __inet_stream_connect+0x108/0x3d0\n inet_stream_connect+0x50/0x78\n kernel_connect+0x6c/0xac\n generic_ip_conne\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53095",
"url": "https://www.suse.com/security/cve/CVE-2024-53095"
},
{
"category": "external",
"summary": "SUSE Bug 1233642 for CVE-2024-53095",
"url": "https://bugzilla.suse.com/1233642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53095"
},
{
"cve": "CVE-2024-53099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53099"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check validity of link-\u003etype in bpf_link_show_fdinfo()\n\nIf a newly-added link type doesn\u0027t invoke BPF_LINK_TYPE(), accessing\nbpf_link_type_strs[link-\u003etype] may result in an out-of-bounds access.\n\nTo spot such missed invocations early in the future, checking the\nvalidity of link-\u003etype in bpf_link_show_fdinfo() and emitting a warning\nwhen such invocations are missed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53099",
"url": "https://www.suse.com/security/cve/CVE-2024-53099"
},
{
"category": "external",
"summary": "SUSE Bug 1233772 for CVE-2024-53099",
"url": "https://bugzilla.suse.com/1233772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53099"
},
{
"cve": "CVE-2024-53103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53103"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer\n\nWhen hvs is released, there is a possibility that vsk-\u003etrans may not\nbe initialized to NULL, which could lead to a dangling pointer.\nThis issue is resolved by initializing vsk-\u003etrans to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53103",
"url": "https://www.suse.com/security/cve/CVE-2024-53103"
},
{
"category": "external",
"summary": "SUSE Bug 1234024 for CVE-2024-53103",
"url": "https://bugzilla.suse.com/1234024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53103"
},
{
"cve": "CVE-2024-53105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53105"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: page_alloc: move mlocked flag clearance into free_pages_prepare()\n\nSyzbot reported a bad page state problem caused by a page being freed\nusing free_page() still having a mlocked flag at free_pages_prepare()\nstage:\n\n BUG: Bad page state in process syz.5.504 pfn:61f45\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61f45\n flags: 0xfff00000080204(referenced|workingset|mlocked|node=0|zone=1|lastcpupid=0x7ff)\n raw: 00fff00000080204 0000000000000000 dead000000000122 0000000000000000\n raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\n page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set\n page_owner tracks the page as allocated\n page last allocated via order 0, migratetype Unmovable, gfp_mask 0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), pid 8443, tgid 8442 (syz.5.504), ts 201884660643, free_ts 201499827394\n set_page_owner include/linux/page_owner.h:32 [inline]\n post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1537\n prep_new_page mm/page_alloc.c:1545 [inline]\n get_page_from_freelist+0x303f/0x3190 mm/page_alloc.c:3457\n __alloc_pages_noprof+0x292/0x710 mm/page_alloc.c:4733\n alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265\n kvm_coalesced_mmio_init+0x1f/0xf0 virt/kvm/coalesced_mmio.c:99\n kvm_create_vm virt/kvm/kvm_main.c:1235 [inline]\n kvm_dev_ioctl_create_vm virt/kvm/kvm_main.c:5488 [inline]\n kvm_dev_ioctl+0x12dc/0x2240 virt/kvm/kvm_main.c:5530\n __do_compat_sys_ioctl fs/ioctl.c:1007 [inline]\n __se_compat_sys_ioctl+0x510/0xc90 fs/ioctl.c:950\n do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]\n __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386\n do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411\n entry_SYSENTER_compat_after_hwframe+0x84/0x8e\n page last free pid 8399 tgid 8399 stack trace:\n reset_page_owner include/linux/page_owner.h:25 [inline]\n free_pages_prepare mm/page_alloc.c:1108 [inline]\n free_unref_folios+0xf12/0x18d0 mm/page_alloc.c:2686\n folios_put_refs+0x76c/0x860 mm/swap.c:1007\n free_pages_and_swap_cache+0x5c8/0x690 mm/swap_state.c:335\n __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline]\n tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]\n tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]\n tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373\n tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465\n exit_mmap+0x496/0xc40 mm/mmap.c:1926\n __mmput+0x115/0x390 kernel/fork.c:1348\n exit_mm+0x220/0x310 kernel/exit.c:571\n do_exit+0x9b2/0x28e0 kernel/exit.c:926\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [inline]\n __se_sys_exit_group kernel/exit.c:1097 [inline]\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1097\n x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n Modules linked in:\n CPU: 0 UID: 0 PID: 8442 Comm: syz.5.504 Not tainted 6.12.0-rc6-syzkaller #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n bad_page+0x176/0x1d0 mm/page_alloc.c:501\n free_page_is_bad mm/page_alloc.c:918 [inline]\n free_pages_prepare mm/page_alloc.c:1100 [inline]\n free_unref_page+0xed0/0xf20 mm/page_alloc.c:2638\n kvm_destroy_vm virt/kvm/kvm_main.c:1327 [inline]\n kvm_put_kvm+0xc75/0x1350 virt/kvm/kvm_main.c:1386\n kvm_vcpu_release+0x54/0x60 virt/kvm/kvm_main.c:4143\n __fput+0x23f/0x880 fs/file_table.c:431\n task_work_run+0x24f/0x310 kernel/task_work.c:239\n exit_task_work include/linux/task_work.h:43 [inline]\n do_exit+0xa2f/0x28e0 kernel/exit.c:939\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53105",
"url": "https://www.suse.com/security/cve/CVE-2024-53105"
},
{
"category": "external",
"summary": "SUSE Bug 1234069 for CVE-2024-53105",
"url": "https://bugzilla.suse.com/1234069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53105"
},
{
"cve": "CVE-2024-53111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53111"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mremap: fix address wraparound in move_page_tables()\n\nOn 32-bit platforms, it is possible for the expression `len + old_addr \u003c\nold_end` to be false-positive if `len + old_addr` wraps around. \n`old_addr` is the cursor in the old range up to which page table entries\nhave been moved; so if the operation succeeded, `old_addr` is the *end* of\nthe old region, and adding `len` to it can wrap.\n\nThe overflow causes mremap() to mistakenly believe that PTEs have been\ncopied; the consequence is that mremap() bails out, but doesn\u0027t move the\nPTEs back before the new VMA is unmapped, causing anonymous pages in the\nregion to be lost. So basically if userspace tries to mremap() a\nprivate-anon region and hits this bug, mremap() will return an error and\nthe private-anon region\u0027s contents appear to have been zeroed.\n\nThe idea of this check is that `old_end - len` is the original start\naddress, and writing the check that way also makes it easier to read; so\nfix the check by rearranging the comparison accordingly.\n\n(An alternate fix would be to refactor this function by introducing an\n\"orig_old_start\" variable or such.)\n\n\nTested in a VM with a 32-bit X86 kernel; without the patch:\n\n```\nuser@horn:~/big_mremap$ cat test.c\n#define _GNU_SOURCE\n#include \u003cstdlib.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003cerr.h\u003e\n#include \u003csys/mman.h\u003e\n\n#define ADDR1 ((void*)0x60000000)\n#define ADDR2 ((void*)0x10000000)\n#define SIZE 0x50000000uL\n\nint main(void) {\n unsigned char *p1 = mmap(ADDR1, SIZE, PROT_READ|PROT_WRITE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p1 == MAP_FAILED)\n err(1, \"mmap 1\");\n unsigned char *p2 = mmap(ADDR2, SIZE, PROT_NONE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p2 == MAP_FAILED)\n err(1, \"mmap 2\");\n *p1 = 0x41;\n printf(\"first char is 0x%02hhx\\n\", *p1);\n unsigned char *p3 = mremap(p1, SIZE, SIZE,\n MREMAP_MAYMOVE|MREMAP_FIXED, p2);\n if (p3 == MAP_FAILED) {\n printf(\"mremap() failed; first char is 0x%02hhx\\n\", *p1);\n } else {\n printf(\"mremap() succeeded; first char is 0x%02hhx\\n\", *p3);\n }\n}\nuser@horn:~/big_mremap$ gcc -static -o test test.c\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() failed; first char is 0x00\n```\n\nWith the patch:\n\n```\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() succeeded; first char is 0x41\n```",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53111",
"url": "https://www.suse.com/security/cve/CVE-2024-53111"
},
{
"category": "external",
"summary": "SUSE Bug 1234086 for CVE-2024-53111",
"url": "https://bugzilla.suse.com/1234086"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53111"
},
{
"cve": "CVE-2024-53113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53113"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix NULL pointer dereference in alloc_pages_bulk_noprof\n\nWe triggered a NULL pointer dereference for ac.preferred_zoneref-\u003ezone in\nalloc_pages_bulk_noprof() when the task is migrated between cpusets.\n\nWhen cpuset is enabled, in prepare_alloc_pages(), ac-\u003enodemask may be\n\u0026current-\u003emems_allowed. when first_zones_zonelist() is called to find\npreferred_zoneref, the ac-\u003enodemask may be modified concurrently if the\ntask is migrated between different cpusets. Assuming we have 2 NUMA Node,\nwhen traversing Node1 in ac-\u003ezonelist, the nodemask is 2, and when\ntraversing Node2 in ac-\u003ezonelist, the nodemask is 1. As a result, the\nac-\u003epreferred_zoneref points to NULL zone.\n\nIn alloc_pages_bulk_noprof(), for_each_zone_zonelist_nodemask() finds a\nallowable zone and calls zonelist_node_idx(ac.preferred_zoneref), leading\nto NULL pointer dereference.\n\n__alloc_pages_noprof() fixes this issue by checking NULL pointer in commit\nea57485af8f4 (\"mm, page_alloc: fix check for NULL preferred_zone\") and\ncommit df76cee6bbeb (\"mm, page_alloc: remove redundant checks from alloc\nfastpath\").\n\nTo fix it, check NULL pointer for preferred_zoneref-\u003ezone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53113",
"url": "https://www.suse.com/security/cve/CVE-2024-53113"
},
{
"category": "external",
"summary": "SUSE Bug 1234077 for CVE-2024-53113",
"url": "https://bugzilla.suse.com/1234077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53113"
},
{
"cve": "CVE-2024-53117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Improve MSG_ZEROCOPY error handling\n\nAdd a missing kfree_skb() to prevent memory leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53117",
"url": "https://www.suse.com/security/cve/CVE-2024-53117"
},
{
"category": "external",
"summary": "SUSE Bug 1234079 for CVE-2024-53117",
"url": "https://bugzilla.suse.com/1234079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53117"
},
{
"cve": "CVE-2024-53118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53118"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Fix sk_error_queue memory leak\n\nKernel queues MSG_ZEROCOPY completion notifications on the error queue.\nWhere they remain, until explicitly recv()ed. To prevent memory leaks,\nclean up the queue when the socket is destroyed.\n\nunreferenced object 0xffff8881028beb00 (size 224):\n comm \"vsock_test\", pid 1218, jiffies 4294694897\n hex dump (first 32 bytes):\n 90 b0 21 17 81 88 ff ff 90 b0 21 17 81 88 ff ff ..!.......!.....\n 00 00 00 00 00 00 00 00 00 b0 21 17 81 88 ff ff ..........!.....\n backtrace (crc 6c7031ca):\n [\u003cffffffff81418ef7\u003e] kmem_cache_alloc_node_noprof+0x2f7/0x370\n [\u003cffffffff81d35882\u003e] __alloc_skb+0x132/0x180\n [\u003cffffffff81d2d32b\u003e] sock_omalloc+0x4b/0x80\n [\u003cffffffff81d3a8ae\u003e] msg_zerocopy_realloc+0x9e/0x240\n [\u003cffffffff81fe5cb2\u003e] virtio_transport_send_pkt_info+0x412/0x4c0\n [\u003cffffffff81fe6183\u003e] virtio_transport_stream_enqueue+0x43/0x50\n [\u003cffffffff81fe0813\u003e] vsock_connectible_sendmsg+0x373/0x450\n [\u003cffffffff81d233d5\u003e] ____sys_sendmsg+0x365/0x3a0\n [\u003cffffffff81d246f4\u003e] ___sys_sendmsg+0x84/0xd0\n [\u003cffffffff81d26f47\u003e] __sys_sendmsg+0x47/0x80\n [\u003cffffffff820d3df3\u003e] do_syscall_64+0x93/0x180\n [\u003cffffffff8220012b\u003e] entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53118",
"url": "https://www.suse.com/security/cve/CVE-2024-53118"
},
{
"category": "external",
"summary": "SUSE Bug 1234071 for CVE-2024-53118",
"url": "https://bugzilla.suse.com/1234071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53118"
},
{
"cve": "CVE-2024-53119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53119"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Fix accept_queue memory leak\n\nAs the final stages of socket destruction may be delayed, it is possible\nthat virtio_transport_recv_listen() will be called after the accept_queue\nhas been flushed, but before the SOCK_DONE flag has been set. As a result,\nsockets enqueued after the flush would remain unremoved, leading to a\nmemory leak.\n\nvsock_release\n __vsock_release\n lock\n virtio_transport_release\n virtio_transport_close\n schedule_delayed_work(close_work)\n sk_shutdown = SHUTDOWN_MASK\n(!) flush accept_queue\n release\n virtio_transport_recv_pkt\n vsock_find_bound_socket\n lock\n if flag(SOCK_DONE) return\n virtio_transport_recv_listen\n child = vsock_create_connected\n (!) vsock_enqueue_accept(child)\n release\nclose_work\n lock\n virtio_transport_do_close\n set_flag(SOCK_DONE)\n virtio_transport_remove_sock\n vsock_remove_sock\n vsock_remove_bound\n release\n\nIntroduce a sk_shutdown check to disallow vsock_enqueue_accept() during\nsocket destruction.\n\nunreferenced object 0xffff888109e3f800 (size 2040):\n comm \"kworker/5:2\", pid 371, jiffies 4294940105\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 28 00 0b 40 00 00 00 00 00 00 00 00 00 00 00 00 (..@............\n backtrace (crc 9e5f4e84):\n [\u003cffffffff81418ff1\u003e] kmem_cache_alloc_noprof+0x2c1/0x360\n [\u003cffffffff81d27aa0\u003e] sk_prot_alloc+0x30/0x120\n [\u003cffffffff81d2b54c\u003e] sk_alloc+0x2c/0x4b0\n [\u003cffffffff81fe049a\u003e] __vsock_create.constprop.0+0x2a/0x310\n [\u003cffffffff81fe6d6c\u003e] virtio_transport_recv_pkt+0x4dc/0x9a0\n [\u003cffffffff81fe745d\u003e] vsock_loopback_work+0xfd/0x140\n [\u003cffffffff810fc6ac\u003e] process_one_work+0x20c/0x570\n [\u003cffffffff810fce3f\u003e] worker_thread+0x1bf/0x3a0\n [\u003cffffffff811070dd\u003e] kthread+0xdd/0x110\n [\u003cffffffff81044fdd\u003e] ret_from_fork+0x2d/0x50\n [\u003cffffffff8100785a\u003e] ret_from_fork_asm+0x1a/0x30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53119",
"url": "https://www.suse.com/security/cve/CVE-2024-53119"
},
{
"category": "external",
"summary": "SUSE Bug 1234073 for CVE-2024-53119",
"url": "https://bugzilla.suse.com/1234073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53119"
},
{
"cve": "CVE-2024-53120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53120"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: CT: Fix null-ptr-deref in add rule err flow\n\nIn error flow of mlx5_tc_ct_entry_add_rule(), in case ct_rule_add()\ncallback returns error, zone_rule-\u003eattr is used uninitiated. Fix it to\nuse attr which has the needed pointer value.\n\nKernel log:\n BUG: kernel NULL pointer dereference, address: 0000000000000110\n RIP: 0010:mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n\u2026\n Call Trace:\n \u003cTASK\u003e\n ? __die+0x20/0x70\n ? page_fault_oops+0x150/0x3e0\n ? exc_page_fault+0x74/0x140\n ? asm_exc_page_fault+0x22/0x30\n ? mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n ? mlx5_tc_ct_entry_add_rule+0x1d5/0x2f0 [mlx5_core]\n mlx5_tc_ct_block_flow_offload+0xc6a/0xf90 [mlx5_core]\n ? nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n flow_offload_work_handler+0x142/0x320 [nf_flow_table]\n ? finish_task_switch.isra.0+0x15b/0x2b0\n process_one_work+0x16c/0x320\n worker_thread+0x28c/0x3a0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xb8/0xf0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2d/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53120",
"url": "https://www.suse.com/security/cve/CVE-2024-53120"
},
{
"category": "external",
"summary": "SUSE Bug 1234075 for CVE-2024-53120",
"url": "https://bugzilla.suse.com/1234075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53120"
},
{
"cve": "CVE-2024-53122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53122"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: cope racing subflow creation in mptcp_rcv_space_adjust\n\nAdditional active subflows - i.e. created by the in kernel path\nmanager - are included into the subflow list before starting the\n3whs.\n\nA racing recvmsg() spooling data received on an already established\nsubflow would unconditionally call tcp_cleanup_rbuf() on all the\ncurrent subflows, potentially hitting a divide by zero error on\nthe newly created ones.\n\nExplicitly check that the subflow is in a suitable state before\ninvoking tcp_cleanup_rbuf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53122",
"url": "https://www.suse.com/security/cve/CVE-2024-53122"
},
{
"category": "external",
"summary": "SUSE Bug 1234076 for CVE-2024-53122",
"url": "https://bugzilla.suse.com/1234076"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53122"
},
{
"cve": "CVE-2024-53125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53125"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: sync_linked_regs() must preserve subreg_def\n\nRange propagation must not affect subreg_def marks, otherwise the\nfollowing example is rewritten by verifier incorrectly when\nBPF_F_TEST_RND_HI32 flag is set:\n\n 0: call bpf_ktime_get_ns call bpf_ktime_get_ns\n 1: r0 \u0026= 0x7fffffff after verifier r0 \u0026= 0x7fffffff\n 2: w1 = w0 rewrites w1 = w0\n 3: if w0 \u003c 10 goto +0 --------------\u003e r11 = 0x2f5674a6 (r)\n 4: r1 \u003e\u003e= 32 r11 \u003c\u003c= 32 (r)\n 5: r0 = r1 r1 |= r11 (r)\n 6: exit; if w0 \u003c 0xa goto pc+0\n r1 \u003e\u003e= 32\n r0 = r1\n exit\n\n(or zero extension of w1 at (2) is missing for architectures that\n require zero extension for upper register half).\n\nThe following happens w/o this patch:\n- r0 is marked as not a subreg at (0);\n- w1 is marked as subreg at (2);\n- w1 subreg_def is overridden at (3) by copy_register_state();\n- w1 is read at (5) but mark_insn_zext() does not mark (2)\n for zero extension, because w1 subreg_def is not set;\n- because of BPF_F_TEST_RND_HI32 flag verifier inserts random\n value for hi32 bits of (2) (marked (r));\n- this random value is read at (5).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53125",
"url": "https://www.suse.com/security/cve/CVE-2024-53125"
},
{
"category": "external",
"summary": "SUSE Bug 1234156 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "external",
"summary": "SUSE Bug 1245804 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1245804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53125"
},
{
"cve": "CVE-2024-53126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53126"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: solidrun: Fix UB bug with devres\n\nIn psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to\npcim_iomap_regions() is placed on the stack. Neither\npcim_iomap_regions() nor the functions it calls copy that string.\n\nShould the string later ever be used, this, consequently, causes\nundefined behavior since the stack frame will by then have disappeared.\n\nFix the bug by allocating the strings on the heap through\ndevm_kasprintf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53126",
"url": "https://www.suse.com/security/cve/CVE-2024-53126"
},
{
"category": "external",
"summary": "SUSE Bug 1234158 for CVE-2024-53126",
"url": "https://bugzilla.suse.com/1234158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53126"
},
{
"cve": "CVE-2024-53127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53127"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"\n\nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages\nbigger than 4K\") increased the max_req_size, even for 4K pages, causing\nvarious issues:\n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566\n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100\n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110\n\nAt this stage no fix have been found, so it\u0027s probably better to just\nrevert the change.\n\nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53127",
"url": "https://www.suse.com/security/cve/CVE-2024-53127"
},
{
"category": "external",
"summary": "SUSE Bug 1234153 for CVE-2024-53127",
"url": "https://bugzilla.suse.com/1234153"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53127"
},
{
"cve": "CVE-2024-53129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53129"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/rockchip: vop: Fix a dereferenced before check warning\n\nThe \u0027state\u0027 can\u0027t be NULL, we should check crtc_state.\n\nFix warning:\ndrivers/gpu/drm/rockchip/rockchip_drm_vop.c:1096\nvop_plane_atomic_async_check() warn: variable dereferenced before check\n\u0027state\u0027 (see line 1077)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53129",
"url": "https://www.suse.com/security/cve/CVE-2024-53129"
},
{
"category": "external",
"summary": "SUSE Bug 1234155 for CVE-2024-53129",
"url": "https://bugzilla.suse.com/1234155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53129"
},
{
"cve": "CVE-2024-53130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53130"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint\n\nWhen using the \"block:block_dirty_buffer\" tracepoint, mark_buffer_dirty()\nmay cause a NULL pointer dereference, or a general protection fault when\nKASAN is enabled.\n\nThis happens because, since the tracepoint was added in\nmark_buffer_dirty(), it references the dev_t member bh-\u003eb_bdev-\u003ebd_dev\nregardless of whether the buffer head has a pointer to a block_device\nstructure.\n\nIn the current implementation, nilfs_grab_buffer(), which grabs a buffer\nto read (or create) a block of metadata, including b-tree node blocks,\ndoes not set the block device, but instead does so only if the buffer is\nnot in the \"uptodate\" state for each of its caller block reading\nfunctions. However, if the uptodate flag is set on a folio/page, and the\nbuffer heads are detached from it by try_to_free_buffers(), and new buffer\nheads are then attached by create_empty_buffers(), the uptodate flag may\nbe restored to each buffer without the block device being set to\nbh-\u003eb_bdev, and mark_buffer_dirty() may be called later in that state,\nresulting in the bug mentioned above.\n\nFix this issue by making nilfs_grab_buffer() always set the block device\nof the super block structure to the buffer head, regardless of the state\nof the buffer\u0027s uptodate flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53130",
"url": "https://www.suse.com/security/cve/CVE-2024-53130"
},
{
"category": "external",
"summary": "SUSE Bug 1234219 for CVE-2024-53130",
"url": "https://bugzilla.suse.com/1234219"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53130"
},
{
"cve": "CVE-2024-53131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_touch_buffer tracepoint\n\nPatch series \"nilfs2: fix null-ptr-deref bugs on block tracepoints\".\n\nThis series fixes null pointer dereference bugs that occur when using\nnilfs2 and two block-related tracepoints.\n\n\nThis patch (of 2):\n\nIt has been reported that when using \"block:block_touch_buffer\"\ntracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a\nNULL pointer dereference, or a general protection fault when KASAN is\nenabled.\n\nThis happens because since the tracepoint was added in touch_buffer(), it\nreferences the dev_t member bh-\u003eb_bdev-\u003ebd_dev regardless of whether the\nbuffer head has a pointer to a block_device structure. In the current\nimplementation, the block_device structure is set after the function\nreturns to the caller.\n\nHere, touch_buffer() is used to mark the folio/page that owns the buffer\nhead as accessed, but the common search helper for folio/page used by the\ncaller function was optimized to mark the folio/page as accessed when it\nwas reimplemented a long time ago, eliminating the need to call\ntouch_buffer() here in the first place.\n\nSo this solves the issue by eliminating the touch_buffer() call itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53131",
"url": "https://www.suse.com/security/cve/CVE-2024-53131"
},
{
"category": "external",
"summary": "SUSE Bug 1234220 for CVE-2024-53131",
"url": "https://bugzilla.suse.com/1234220"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53131"
},
{
"cve": "CVE-2024-53133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53133"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Handle dml allocation failure to avoid crash\n\n[Why]\nIn the case where a dml allocation fails for any reason, the\ncurrent state\u0027s dml contexts would no longer be valid. Then\nsubsequent calls dc_state_copy_internal would shallow copy\ninvalid memory and if the new state was released, a double\nfree would occur.\n\n[How]\nReset dml pointers in new_state to NULL and avoid invalid\npointer\n\n(cherry picked from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53133",
"url": "https://www.suse.com/security/cve/CVE-2024-53133"
},
{
"category": "external",
"summary": "SUSE Bug 1234221 for CVE-2024-53133",
"url": "https://bugzilla.suse.com/1234221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53133"
},
{
"cve": "CVE-2024-53134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53134"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx93-blk-ctrl: correct remove path\n\nThe check condition should be \u0027i \u003c bc-\u003eonecell_data.num_domains\u0027, not\n\u0027bc-\u003eonecell_data.num_domains\u0027 which will make the look never finish\nand cause kernel panic.\n\nAlso disable runtime to address\n\"imx93-blk-ctrl 4ac10000.system-controller: Unbalanced pm_runtime_enable!\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53134",
"url": "https://www.suse.com/security/cve/CVE-2024-53134"
},
{
"category": "external",
"summary": "SUSE Bug 1234159 for CVE-2024-53134",
"url": "https://bugzilla.suse.com/1234159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53134"
},
{
"cve": "CVE-2024-53136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: revert \"mm: shmem: fix data-race in shmem_getattr()\"\n\nRevert d949d1d14fa2 (\"mm: shmem: fix data-race in shmem_getattr()\") as\nsuggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over\nNFS.\n\nAs Hugh commented, \"added just to silence a syzbot sanitizer splat: added\nwhere there has never been any practical problem\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53136",
"url": "https://www.suse.com/security/cve/CVE-2024-53136"
},
{
"category": "external",
"summary": "SUSE Bug 1234161 for CVE-2024-53136",
"url": "https://bugzilla.suse.com/1234161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53136"
},
{
"cve": "CVE-2024-53141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: add missing range check in bitmap_ip_uadt\n\nWhen tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,\nthe values of ip and ip_to are slightly swapped. Therefore, the range check\nfor ip should be done later, but this part is missing and it seems that the\nvulnerability occurs.\n\nSo we should add missing range checks and remove unnecessary range checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53141",
"url": "https://www.suse.com/security/cve/CVE-2024-53141"
},
{
"category": "external",
"summary": "SUSE Bug 1234381 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "external",
"summary": "SUSE Bug 1245778 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1245778"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53141"
},
{
"cve": "CVE-2024-53142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53142"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninitramfs: avoid filename buffer overrun\n\nThe initramfs filename field is defined in\nDocumentation/driver-api/early-userspace/buffer-format.rst as:\n\n 37 cpio_file := ALGN(4) + cpio_header + filename + \"\\0\" + ALGN(4) + data\n...\n 55 ============= ================== =========================\n 56 Field name Field size Meaning\n 57 ============= ================== =========================\n...\n 70 c_namesize 8 bytes Length of filename, including final \\0\n\nWhen extracting an initramfs cpio archive, the kernel\u0027s do_name() path\nhandler assumes a zero-terminated path at @collected, passing it\ndirectly to filp_open() / init_mkdir() / init_mknod().\n\nIf a specially crafted cpio entry carries a non-zero-terminated filename\nand is followed by uninitialized memory, then a file may be created with\ntrailing characters that represent the uninitialized memory. The ability\nto create an initramfs entry would imply already having full control of\nthe system, so the buffer overrun shouldn\u0027t be considered a security\nvulnerability.\n\nAppend the output of the following bash script to an existing initramfs\nand observe any created /initramfs_test_fname_overrunAA* path. E.g.\n ./reproducer.sh | gzip \u003e\u003e /myinitramfs\n\nIt\u0027s easiest to observe non-zero uninitialized memory when the output is\ngzipped, as it\u0027ll overflow the heap allocated @out_buf in __gunzip(),\nrather than the initrd_start+initrd_size block.\n\n---- reproducer.sh ----\nnilchar=\"A\"\t# change to \"\\0\" to properly zero terminate / pad\nmagic=\"070701\"\nino=1\nmode=$(( 0100777 ))\nuid=0\ngid=0\nnlink=1\nmtime=1\nfilesize=0\ndevmajor=0\ndevminor=1\nrdevmajor=0\nrdevminor=0\ncsum=0\nfname=\"initramfs_test_fname_overrun\"\nnamelen=$(( ${#fname} + 1 ))\t# plus one to account for terminator\n\nprintf \"%s%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%s\" \\\n\t$magic $ino $mode $uid $gid $nlink $mtime $filesize \\\n\t$devmajor $devminor $rdevmajor $rdevminor $namelen $csum $fname\n\ntermpadlen=$(( 1 + ((4 - ((110 + $namelen) \u0026 3)) % 4) ))\nprintf \"%.s${nilchar}\" $(seq 1 $termpadlen)\n---- reproducer.sh ----\n\nSymlink filename fields handled in do_symlink() won\u0027t overrun past the\ndata segment, due to the explicit zero-termination of the symlink\ntarget.\n\nFix filename buffer overrun by aborting the initramfs FSM if any cpio\nentry doesn\u0027t carry a zero-terminator at the expected (name_len - 1)\noffset.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53142",
"url": "https://www.suse.com/security/cve/CVE-2024-53142"
},
{
"category": "external",
"summary": "SUSE Bug 1232436 for CVE-2024-53142",
"url": "https://bugzilla.suse.com/1232436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53142"
},
{
"cve": "CVE-2024-53144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53144"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\n\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\n\nCVE: CVE-2024-8805",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53144",
"url": "https://www.suse.com/security/cve/CVE-2024-53144"
},
{
"category": "external",
"summary": "SUSE Bug 1234690 for CVE-2024-53144",
"url": "https://bugzilla.suse.com/1234690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53144"
},
{
"cve": "CVE-2024-53146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53146"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent a potential integer overflow\n\nIf the tag length is \u003e= U32_MAX - 3 then the \"length + 4\" addition\ncan result in an integer overflow. Address this by splitting the\ndecoding into several steps so that decode_cb_compound4res() does\nnot have to perform arithmetic on the unsafe length value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53146",
"url": "https://www.suse.com/security/cve/CVE-2024-53146"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234854 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53146"
},
{
"cve": "CVE-2024-53148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53148"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Flush partial mappings in error case\n\nIf some remap_pfn_range() calls succeeded before one failed, we still have\nbuffer pages mapped into the userspace page tables when we drop the buffer\nreference with comedi_buf_map_put(bm). The userspace mappings are only\ncleaned up later in the mmap error path.\n\nFix it by explicitly flushing all mappings in our VMA on the error path.\n\nSee commit 79a61cc3fc04 (\"mm: avoid leaving partial pfn mappings around in\nerror case\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53148",
"url": "https://www.suse.com/security/cve/CVE-2024-53148"
},
{
"category": "external",
"summary": "SUSE Bug 1234832 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "external",
"summary": "SUSE Bug 1234833 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53148"
},
{
"cve": "CVE-2024-53150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix out of bounds reads when finding clock sources\n\nThe current USB-audio driver code doesn\u0027t check bLength of each\ndescriptor at traversing for clock descriptors. That is, when a\ndevice provides a bogus descriptor with a shorter bLength, the driver\nmight hit out-of-bounds reads.\n\nFor addressing it, this patch adds sanity checks to the validator\nfunctions for the clock descriptor traversal. When the descriptor\nlength is shorter than expected, it\u0027s skipped in the loop.\n\nFor the clock source and clock multiplier descriptors, we can just\ncheck bLength against the sizeof() of each descriptor type.\nOTOH, the clock selector descriptor of UAC2 and UAC3 has an array\nof bNrInPins elements and two more fields at its tail, hence those\nhave to be checked in addition to the sizeof() check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53150",
"url": "https://www.suse.com/security/cve/CVE-2024-53150"
},
{
"category": "external",
"summary": "SUSE Bug 1234834 for CVE-2024-53150",
"url": "https://bugzilla.suse.com/1234834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53150"
},
{
"cve": "CVE-2024-53151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Address an integer overflow\n\nDan Carpenter reports:\n\u003e Commit 78147ca8b4a9 (\"svcrdma: Add a \"parsed chunk list\" data\n\u003e structure\") from Jun 22, 2020 (linux-next), leads to the following\n\u003e Smatch static checker warning:\n\u003e\n\u003e\tnet/sunrpc/xprtrdma/svc_rdma_recvfrom.c:498 xdr_check_write_chunk()\n\u003e\twarn: potential user controlled sizeof overflow \u0027segcount * 4 * 4\u0027\n\u003e\n\u003e net/sunrpc/xprtrdma/svc_rdma_recvfrom.c\n\u003e 488 static bool xdr_check_write_chunk(struct svc_rdma_recv_ctxt *rctxt)\n\u003e 489 {\n\u003e 490 u32 segcount;\n\u003e 491 __be32 *p;\n\u003e 492\n\u003e 493 if (xdr_stream_decode_u32(\u0026rctxt-\u003erc_stream, \u0026segcount))\n\u003e ^^^^^^^^\n\u003e\n\u003e 494 return false;\n\u003e 495\n\u003e 496 /* A bogus segcount causes this buffer overflow check to fail. */\n\u003e 497 p = xdr_inline_decode(\u0026rctxt-\u003erc_stream,\n\u003e --\u003e 498 segcount * rpcrdma_segment_maxsz * sizeof(*p));\n\u003e\n\u003e\n\u003e segcount is an untrusted u32. On 32bit systems anything \u003e= SIZE_MAX / 16 will\n\u003e have an integer overflow and some those values will be accepted by\n\u003e xdr_inline_decode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53151",
"url": "https://www.suse.com/security/cve/CVE-2024-53151"
},
{
"category": "external",
"summary": "SUSE Bug 1234829 for CVE-2024-53151",
"url": "https://bugzilla.suse.com/1234829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53151"
},
{
"cve": "CVE-2024-53154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: clk-apple-nco: Add NULL check in applnco_probe\n\nAdd NULL check in applnco_probe, to handle kernel NULL pointer\ndereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53154",
"url": "https://www.suse.com/security/cve/CVE-2024-53154"
},
{
"category": "external",
"summary": "SUSE Bug 1234826 for CVE-2024-53154",
"url": "https://bugzilla.suse.com/1234826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53154"
},
{
"cve": "CVE-2024-53155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53155"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix uninitialized value in ocfs2_file_read_iter()\n\nSyzbot has reported the following KMSAN splat:\n\nBUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80\n ocfs2_file_read_iter+0x9a4/0xf80\n __io_read+0x8d4/0x20f0\n io_read+0x3e/0xf0\n io_issue_sqe+0x42b/0x22c0\n io_wq_submit_work+0xaf9/0xdc0\n io_worker_handle_work+0xd13/0x2110\n io_wq_worker+0x447/0x1410\n ret_from_fork+0x6f/0x90\n ret_from_fork_asm+0x1a/0x30\n\nUninit was created at:\n __alloc_pages_noprof+0x9a7/0xe00\n alloc_pages_mpol_noprof+0x299/0x990\n alloc_pages_noprof+0x1bf/0x1e0\n allocate_slab+0x33a/0x1250\n ___slab_alloc+0x12ef/0x35e0\n kmem_cache_alloc_bulk_noprof+0x486/0x1330\n __io_alloc_req_refill+0x84/0x560\n io_submit_sqes+0x172f/0x2f30\n __se_sys_io_uring_enter+0x406/0x41c0\n __x64_sys_io_uring_enter+0x11f/0x1a0\n x64_sys_call+0x2b54/0x3ba0\n do_syscall_64+0xcd/0x1e0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nSince an instance of \u0027struct kiocb\u0027 may be passed from the block layer\nwith \u0027private\u0027 field uninitialized, introduce \u0027ocfs2_iocb_init_rw_locked()\u0027\nand use it from where \u0027ocfs2_dio_end_io()\u0027 might take care, i.e. in\n\u0027ocfs2_file_read_iter()\u0027 and \u0027ocfs2_file_write_iter()\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53155",
"url": "https://www.suse.com/security/cve/CVE-2024-53155"
},
{
"category": "external",
"summary": "SUSE Bug 1234855 for CVE-2024-53155",
"url": "https://bugzilla.suse.com/1234855"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53155"
},
{
"cve": "CVE-2024-53156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53156"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()\n\nI found the following bug in my fuzzer:\n\n UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51\n index 255 is out of range for type \u0027htc_endpoint [22]\u0027\n CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-dirty #14\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n Workqueue: events request_firmware_work_func\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x180/0x1b0\n __ubsan_handle_out_of_bounds+0xd4/0x130\n htc_issue_send.constprop.0+0x20c/0x230\n ? _raw_spin_unlock_irqrestore+0x3c/0x70\n ath9k_wmi_cmd+0x41d/0x610\n ? mark_held_locks+0x9f/0xe0\n ...\n\nSince this bug has been confirmed to be caused by insufficient verification\nof conn_rsp_epid, I think it would be appropriate to add a range check for\nconn_rsp_epid to htc_connect_service() to prevent the bug from occurring.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53156",
"url": "https://www.suse.com/security/cve/CVE-2024-53156"
},
{
"category": "external",
"summary": "SUSE Bug 1234846 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "external",
"summary": "SUSE Bug 1234847 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234847"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53156"
},
{
"cve": "CVE-2024-53157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53157"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scpi: Check the DVFS OPP count returned by the firmware\n\nFix a kernel crash with the below call trace when the SCPI firmware\nreturns OPP count of zero.\n\ndvfs_info.opp_count may be zero on some platforms during the reboot\ntest, and the kernel will crash after dereferencing the pointer to\nkcalloc(info-\u003ecount, sizeof(*opp), GFP_KERNEL).\n\n | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028\n | Mem abort info:\n | ESR = 0x96000004\n | Exception class = DABT (current EL), IL = 32 bits\n | SET = 0, FnV = 0\n | EA = 0, S1PTW = 0\n | Data abort info:\n | ISV = 0, ISS = 0x00000004\n | CM = 0, WnR = 0\n | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c\n | [0000000000000028] pgd=0000000000000000\n | Internal error: Oops: 96000004 [#1] SMP\n | scpi-hwmon: probe of PHYT000D:00 failed with error -110\n | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c)\n | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1\n | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS\n | pstate: 60000005 (nZCv daif -PAN -UAO)\n | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | lr : clk_register+0x438/0x720\n | Call trace:\n | scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | devm_clk_hw_register+0x50/0xa0\n | scpi_clk_ops_init.isra.2+0xa0/0x138 [clk_scpi]\n | scpi_clocks_probe+0x528/0x70c [clk_scpi]\n | platform_drv_probe+0x58/0xa8\n | really_probe+0x260/0x3d0\n | driver_probe_device+0x12c/0x148\n | device_driver_attach+0x74/0x98\n | __driver_attach+0xb4/0xe8\n | bus_for_each_dev+0x88/0xe0\n | driver_attach+0x30/0x40\n | bus_add_driver+0x178/0x2b0\n | driver_register+0x64/0x118\n | __platform_driver_register+0x54/0x60\n | scpi_clocks_driver_init+0x24/0x1000 [clk_scpi]\n | do_one_initcall+0x54/0x220\n | do_init_module+0x54/0x1c8\n | load_module+0x14a4/0x1668\n | __se_sys_finit_module+0xf8/0x110\n | __arm64_sys_finit_module+0x24/0x30\n | el0_svc_common+0x78/0x170\n | el0_svc_handler+0x38/0x78\n | el0_svc+0x8/0x340\n | Code: 937d7c00 a94153f3 a8c27bfd f9400421 (b8606820)\n | ---[ end trace 06feb22469d89fa8 ]---\n | Kernel panic - not syncing: Fatal exception\n | SMP: stopping secondary CPUs\n | Kernel Offset: disabled\n | CPU features: 0x10,a0002008\n | Memory Limit: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53157",
"url": "https://www.suse.com/security/cve/CVE-2024-53157"
},
{
"category": "external",
"summary": "SUSE Bug 1234827 for CVE-2024-53157",
"url": "https://bugzilla.suse.com/1234827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53157"
},
{
"cve": "CVE-2024-53158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()\n\nThis loop is supposed to break if the frequency returned from\nclk_round_rate() is the same as on the previous iteration. However,\nthat check doesn\u0027t make sense on the first iteration through the loop.\nIt leads to reading before the start of these-\u003eclk_perf_tbl[] array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53158",
"url": "https://www.suse.com/security/cve/CVE-2024-53158"
},
{
"category": "external",
"summary": "SUSE Bug 1234811 for CVE-2024-53158",
"url": "https://bugzilla.suse.com/1234811"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53158"
},
{
"cve": "CVE-2024-53159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53159"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53159",
"url": "https://www.suse.com/security/cve/CVE-2024-53159"
},
{
"category": "external",
"summary": "SUSE Bug 1234848 for CVE-2024-53159",
"url": "https://bugzilla.suse.com/1234848"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53159"
},
{
"cve": "CVE-2024-53160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53160"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu\n\nKCSAN reports a data race when access the krcp-\u003emonitor_work.timer.expires\nvariable in the schedule_delayed_monitor_work() function:\n\n\u003csnip\u003e\nBUG: KCSAN: data-race in __mod_timer / kvfree_call_rcu\n\nread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1:\n schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline]\n kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839\n trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441\n bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203\n generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849\n bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143\n __sys_bpf+0x2e5/0x7a0\n __do_sys_bpf kernel/bpf/syscall.c:5741 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5739 [inline]\n __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739\n x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0:\n __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173\n add_timer_global+0x51/0x70 kernel/time/timer.c:1330\n __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523\n queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552\n queue_delayed_work include/linux/workqueue.h:677 [inline]\n schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline]\n kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310\n worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391\n kthread+0x1d1/0x210 kernel/kthread.c:389\n ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events_unbound kfree_rcu_monitor\n\u003csnip\u003e\n\nkfree_rcu_monitor() rearms the work if a \"krcp\" has to be still\noffloaded and this is done without holding krcp-\u003elock, whereas\nthe kvfree_call_rcu() holds it.\n\nFix it by acquiring the \"krcp-\u003elock\" for kfree_rcu_monitor() so\nboth functions do not race anymore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53160",
"url": "https://www.suse.com/security/cve/CVE-2024-53160"
},
{
"category": "external",
"summary": "SUSE Bug 1234810 for CVE-2024-53160",
"url": "https://bugzilla.suse.com/1234810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53160"
},
{
"cve": "CVE-2024-53161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53161"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/bluefield: Fix potential integer overflow\n\nThe 64-bit argument for the \"get DIMM info\" SMC call consists of mem_ctrl_idx\nleft-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as\n32-bits wide the left-shift operation truncates the upper 16 bits of\ninformation during the calculation of the SMC argument.\n\nThe mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any\npotential integer overflow, i.e. loss of data from upper 16 bits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53161",
"url": "https://www.suse.com/security/cve/CVE-2024-53161"
},
{
"category": "external",
"summary": "SUSE Bug 1234856 for CVE-2024-53161",
"url": "https://bugzilla.suse.com/1234856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53161"
},
{
"cve": "CVE-2024-53162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53162"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat/qat_4xxx - fix off by one in uof_get_name()\n\nThe fw_objs[] array has \"num_objs\" elements so the \u003e needs to be \u003e= to\nprevent an out of bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53162",
"url": "https://www.suse.com/security/cve/CVE-2024-53162"
},
{
"category": "external",
"summary": "SUSE Bug 1234843 for CVE-2024-53162",
"url": "https://bugzilla.suse.com/1234843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53162"
},
{
"cve": "CVE-2024-53164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53164"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ordering of qlen adjustment\n\nChanges to sch-\u003eq.qlen around qdisc_tree_reduce_backlog() need to happen\n_before_ a call to said function because otherwise it may fail to notify\nparent qdiscs when the child is about to become empty.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53164",
"url": "https://www.suse.com/security/cve/CVE-2024-53164"
},
{
"category": "external",
"summary": "SUSE Bug 1234863 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "external",
"summary": "SUSE Bug 1246019 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1246019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53164"
},
{
"cve": "CVE-2024-53166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53166"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix bfqq uaf in bfq_limit_depth()\n\nSet new allocated bfqq to bic or remove freed bfqq from bic are both\nprotected by bfqd-\u003elock, however bfq_limit_depth() is deferencing bfqq\nfrom bic without the lock, this can lead to UAF if the io_context is\nshared by multiple tasks.\n\nFor example, test bfq with io_uring can trigger following UAF in v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in bfqq_group+0x15/0x50\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x80\n print_address_description.constprop.0+0x66/0x300\n print_report+0x3e/0x70\n kasan_report+0xb4/0xf0\n bfqq_group+0x15/0x50\n bfqq_request_over_limit+0x130/0x9a0\n bfq_limit_depth+0x1b5/0x480\n __blk_mq_alloc_requests+0x2b5/0xa00\n blk_mq_get_new_requests+0x11d/0x1d0\n blk_mq_submit_bio+0x286/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __block_write_full_folio+0x3d0/0x640\n writepage_cb+0x3b/0xc0\n write_cache_pages+0x254/0x6c0\n write_cache_pages+0x254/0x6c0\n do_writepages+0x192/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n\nAllocated by task 808602:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n __kasan_slab_alloc+0x83/0x90\n kmem_cache_alloc_node+0x1b1/0x6d0\n bfq_get_queue+0x138/0xfa0\n bfq_get_bfqq_handle_split+0xe3/0x2c0\n bfq_init_rq+0x196/0xbb0\n bfq_insert_request.isra.0+0xb5/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_insert_request+0x15d/0x440\n blk_mq_submit_bio+0x8a4/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __blkdev_direct_IO_async+0x2dd/0x330\n blkdev_write_iter+0x39a/0x450\n io_write+0x22a/0x840\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFreed by task 808589:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x27/0x40\n __kasan_slab_free+0x126/0x1b0\n kmem_cache_free+0x10c/0x750\n bfq_put_queue+0x2dd/0x770\n __bfq_insert_request.isra.0+0x155/0x7a0\n bfq_insert_request.isra.0+0x122/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_dispatch_plug_list+0x528/0x7e0\n blk_mq_flush_plug_list.part.0+0xe5/0x590\n __blk_flush_plug+0x3b/0x90\n blk_finish_plug+0x40/0x60\n do_writepages+0x19d/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFix the problem by protecting bic_to_bfqq() with bfqd-\u003elock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53166",
"url": "https://www.suse.com/security/cve/CVE-2024-53166"
},
{
"category": "external",
"summary": "SUSE Bug 1234884 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "external",
"summary": "SUSE Bug 1234885 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53166"
},
{
"cve": "CVE-2024-53168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 \u003cfa\u003e c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \u003c/TASK\u003e\n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp\u0027s timer handler function causes problems.\n\nTo fix this problem, let\u0027s hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53168",
"url": "https://www.suse.com/security/cve/CVE-2024-53168"
},
{
"category": "external",
"summary": "SUSE Bug 1234887 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "external",
"summary": "SUSE Bug 1243650 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1243650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53168"
},
{
"cve": "CVE-2024-53169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53169"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-fabrics: fix kernel crash while shutting down controller\n\nThe nvme keep-alive operation, which executes at a periodic interval,\ncould potentially sneak in while shutting down a fabric controller.\nThis may lead to a race between the fabric controller admin queue\ndestroy code path (invoked while shutting down controller) and hw/hctx\nqueue dispatcher called from the nvme keep-alive async request queuing\noperation. This race could lead to the kernel crash shown below:\n\nCall Trace:\n autoremove_wake_function+0x0/0xbc (unreliable)\n __blk_mq_sched_dispatch_requests+0x114/0x24c\n blk_mq_sched_dispatch_requests+0x44/0x84\n blk_mq_run_hw_queue+0x140/0x220\n nvme_keep_alive_work+0xc8/0x19c [nvme_core]\n process_one_work+0x200/0x4e0\n worker_thread+0x340/0x504\n kthread+0x138/0x140\n start_kernel_thread+0x14/0x18\n\nWhile shutting down fabric controller, if nvme keep-alive request sneaks\nin then it would be flushed off. The nvme_keep_alive_end_io function is\nthen invoked to handle the end of the keep-alive operation which\ndecrements the admin-\u003eq_usage_counter and assuming this is the last/only\nrequest in the admin queue then the admin-\u003eq_usage_counter becomes zero.\nIf that happens then blk-mq destroy queue operation (blk_mq_destroy_\nqueue()) which could be potentially running simultaneously on another\ncpu (as this is the controller shutdown code path) would forward\nprogress and deletes the admin queue. So, now from this point onward\nwe are not supposed to access the admin queue resources. However the\nissue here\u0027s that the nvme keep-alive thread running hw/hctx queue\ndispatch operation hasn\u0027t yet finished its work and so it could still\npotentially access the admin queue resource while the admin queue had\nbeen already deleted and that causes the above crash.\n\nThe above kernel crash is regression caused due to changes implemented\nin commit a54a93d0e359 (\"nvme: move stopping keep-alive into\nnvme_uninit_ctrl()\"). Ideally we should stop keep-alive before destroyin\ng the admin queue and freeing the admin tagset so that it wouldn\u0027t sneak\nin during the shutdown operation. However we removed the keep alive stop\noperation from the beginning of the controller shutdown code path in commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\")\nand added it under nvme_uninit_ctrl() which executes very late in the\nshutdown code path after the admin queue is destroyed and its tagset is\nremoved. So this change created the possibility of keep-alive sneaking in\nand interfering with the shutdown operation and causing observed kernel\ncrash.\n\nTo fix the observed crash, we decided to move nvme_stop_keep_alive() from\nnvme_uninit_ctrl() to nvme_remove_admin_tag_set(). This change would ensure\nthat we don\u0027t forward progress and delete the admin queue until the keep-\nalive operation is finished (if it\u0027s in-flight) or cancelled and that would\nhelp contain the race condition explained above and hence avoid the crash.\n\nMoving nvme_stop_keep_alive() to nvme_remove_admin_tag_set() instead of\nadding nvme_stop_keep_alive() to the beginning of the controller shutdown\ncode path in nvme_stop_ctrl(), as was the case earlier before commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\"),\nwould help save one callsite of nvme_stop_keep_alive().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53169",
"url": "https://www.suse.com/security/cve/CVE-2024-53169"
},
{
"category": "external",
"summary": "SUSE Bug 1234900 for CVE-2024-53169",
"url": "https://bugzilla.suse.com/1234900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53169"
},
{
"cve": "CVE-2024-53170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix uaf for flush rq while iterating tags\n\nblk_mq_clear_flush_rq_mapping() is not called during scsi probe, by\nchecking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared\nin del_gendisk by commit aec89dc5d421 (\"block: keep q_usage_counter in\natomic mode after del_gendisk\"), hence for disk like scsi, following\nblk_mq_destroy_queue() will not clear flush rq from tags-\u003erqs[] as well,\ncause following uaf that is found by our syzkaller for v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in blk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nRead of size 4 at addr ffff88811c969c20 by task kworker/1:2H/224909\n\nCPU: 1 PID: 224909 Comm: kworker/1:2H Not tainted 6.6.0-ga836a5060850 #32\nWorkqueue: kblockd blk_mq_timeout_work\nCall Trace:\n\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106\nprint_address_description.constprop.0+0x66/0x300 mm/kasan/report.c:364\nprint_report+0x3e/0x70 mm/kasan/report.c:475\nkasan_report+0xb8/0xf0 mm/kasan/report.c:588\nblk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nbt_iter block/blk-mq-tag.c:288 [inline]\n__sbitmap_for_each_set include/linux/sbitmap.h:295 [inline]\nsbitmap_for_each_set include/linux/sbitmap.h:316 [inline]\nbt_for_each+0x455/0x790 block/blk-mq-tag.c:325\nblk_mq_queue_tag_busy_iter+0x320/0x740 block/blk-mq-tag.c:534\nblk_mq_timeout_work+0x1a3/0x7b0 block/blk-mq.c:1673\nprocess_one_work+0x7c4/0x1450 kernel/workqueue.c:2631\nprocess_scheduled_works kernel/workqueue.c:2704 [inline]\nworker_thread+0x804/0xe40 kernel/workqueue.c:2785\nkthread+0x346/0x450 kernel/kthread.c:388\nret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:293\n\nAllocated by task 942:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\n____kasan_kmalloc mm/kasan/common.c:374 [inline]\n__kasan_kmalloc mm/kasan/common.c:383 [inline]\n__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:380\nkasan_kmalloc include/linux/kasan.h:198 [inline]\n__do_kmalloc_node mm/slab_common.c:1007 [inline]\n__kmalloc_node+0x69/0x170 mm/slab_common.c:1014\nkmalloc_node include/linux/slab.h:620 [inline]\nkzalloc_node include/linux/slab.h:732 [inline]\nblk_alloc_flush_queue+0x144/0x2f0 block/blk-flush.c:499\nblk_mq_alloc_hctx+0x601/0x940 block/blk-mq.c:3788\nblk_mq_alloc_and_init_hctx+0x27f/0x330 block/blk-mq.c:4261\nblk_mq_realloc_hw_ctxs+0x488/0x5e0 block/blk-mq.c:4294\nblk_mq_init_allocated_queue+0x188/0x860 block/blk-mq.c:4350\nblk_mq_init_queue_data block/blk-mq.c:4166 [inline]\nblk_mq_init_queue+0x8d/0x100 block/blk-mq.c:4176\nscsi_alloc_sdev+0x843/0xd50 drivers/scsi/scsi_scan.c:335\nscsi_probe_and_add_lun+0x77c/0xde0 drivers/scsi/scsi_scan.c:1189\n__scsi_scan_target+0x1fc/0x5a0 drivers/scsi/scsi_scan.c:1727\nscsi_scan_channel drivers/scsi/scsi_scan.c:1815 [inline]\nscsi_scan_channel+0x14b/0x1e0 drivers/scsi/scsi_scan.c:1791\nscsi_scan_host_selected+0x2fe/0x400 drivers/scsi/scsi_scan.c:1844\nscsi_scan+0x3a0/0x3f0 drivers/scsi/scsi_sysfs.c:151\nstore_scan+0x2a/0x60 drivers/scsi/scsi_sysfs.c:191\ndev_attr_store+0x5c/0x90 drivers/base/core.c:2388\nsysfs_kf_write+0x11c/0x170 fs/sysfs/file.c:136\nkernfs_fop_write_iter+0x3fc/0x610 fs/kernfs/file.c:338\ncall_write_iter include/linux/fs.h:2083 [inline]\nnew_sync_write+0x1b4/0x2d0 fs/read_write.c:493\nvfs_write+0x76c/0xb00 fs/read_write.c:586\nksys_write+0x127/0x250 fs/read_write.c:639\ndo_syscall_x64 arch/x86/entry/common.c:51 [inline]\ndo_syscall_64+0x70/0x120 arch/x86/entry/common.c:81\nentry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nFreed by task 244687:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\nkasan_save_free_info+0x2b/0x50 mm/kasan/generic.c:522\n____kasan_slab_free mm/kasan/common.c:236 [inline]\n__kasan_slab_free+0x12a/0x1b0 mm/kasan/common.c:244\nkasan_slab_free include/linux/kasan.h:164 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53170",
"url": "https://www.suse.com/security/cve/CVE-2024-53170"
},
{
"category": "external",
"summary": "SUSE Bug 1234888 for CVE-2024-53170",
"url": "https://bugzilla.suse.com/1234888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53170"
},
{
"cve": "CVE-2024-53171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53171"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit\n\nAfter an insertion in TNC, the tree might split and cause a node to\nchange its `znode-\u003eparent`. A further deletion of other nodes in the\ntree (which also could free the nodes), the aforementioned node\u0027s\n`znode-\u003ecparent` could still point to a freed node. This\n`znode-\u003ecparent` may not be updated when getting nodes to commit in\n`ubifs_tnc_start_commit()`. This could then trigger a use-after-free\nwhen accessing the `znode-\u003ecparent` in `write_index()` in\n`ubifs_tnc_end_commit()`.\n\nThis can be triggered by running\n\n rm -f /etc/test-file.bin\n dd if=/dev/urandom of=/etc/test-file.bin bs=1M count=60 conv=fsync\n\nin a loop, and with `CONFIG_UBIFS_FS_AUTHENTICATION`. KASAN then\nreports:\n\n BUG: KASAN: use-after-free in ubifs_tnc_end_commit+0xa5c/0x1950\n Write of size 32 at addr ffffff800a3af86c by task ubifs_bgt0_20/153\n\n Call trace:\n dump_backtrace+0x0/0x340\n show_stack+0x18/0x24\n dump_stack_lvl+0x9c/0xbc\n print_address_description.constprop.0+0x74/0x2b0\n kasan_report+0x1d8/0x1f0\n kasan_check_range+0xf8/0x1a0\n memcpy+0x84/0xf4\n ubifs_tnc_end_commit+0xa5c/0x1950\n do_commit+0x4e0/0x1340\n ubifs_bg_thread+0x234/0x2e0\n kthread+0x36c/0x410\n ret_from_fork+0x10/0x20\n\n Allocated by task 401:\n kasan_save_stack+0x38/0x70\n __kasan_kmalloc+0x8c/0xd0\n __kmalloc+0x34c/0x5bc\n tnc_insert+0x140/0x16a4\n ubifs_tnc_add+0x370/0x52c\n ubifs_jnl_write_data+0x5d8/0x870\n do_writepage+0x36c/0x510\n ubifs_writepage+0x190/0x4dc\n __writepage+0x58/0x154\n write_cache_pages+0x394/0x830\n do_writepages+0x1f0/0x5b0\n filemap_fdatawrite_wbc+0x170/0x25c\n file_write_and_wait_range+0x140/0x190\n ubifs_fsync+0xe8/0x290\n vfs_fsync_range+0xc0/0x1e4\n do_fsync+0x40/0x90\n __arm64_sys_fsync+0x34/0x50\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\n Freed by task 403:\n kasan_save_stack+0x38/0x70\n kasan_set_track+0x28/0x40\n kasan_set_free_info+0x28/0x4c\n __kasan_slab_free+0xd4/0x13c\n kfree+0xc4/0x3a0\n tnc_delete+0x3f4/0xe40\n ubifs_tnc_remove_range+0x368/0x73c\n ubifs_tnc_remove_ino+0x29c/0x2e0\n ubifs_jnl_delete_inode+0x150/0x260\n ubifs_evict_inode+0x1d4/0x2e4\n evict+0x1c8/0x450\n iput+0x2a0/0x3c4\n do_unlinkat+0x2cc/0x490\n __arm64_sys_unlinkat+0x90/0x100\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\nThe offending `memcpy()` in `ubifs_copy_hash()` has a use-after-free\nwhen a node becomes root in TNC but still has a `cparent` to an already\nfreed node. More specifically, consider the following TNC:\n\n zroot\n /\n /\n zp1\n /\n /\n zn\n\nInserting a new node `zn_new` with a key smaller then `zn` will trigger\na split in `tnc_insert()` if `zp1` is full:\n\n zroot\n / \\\n / \\\n zp1 zp2\n / \\\n / \\\n zn_new zn\n\n`zn-\u003eparent` has now been moved to `zp2`, *but* `zn-\u003ecparent` still\npoints to `zp1`.\n\nNow, consider a removal of all the nodes _except_ `zn`. Just when\n`tnc_delete()` is about to delete `zroot` and `zp2`:\n\n zroot\n \\\n \\\n zp2\n \\\n \\\n zn\n\n`zroot` and `zp2` get freed and the tree collapses:\n\n zn\n\n`zn` now becomes the new `zroot`.\n\n`get_znodes_to_commit()` will now only find `zn`, the new `zroot`, and\n`write_index()` will check its `znode-\u003ecparent` that wrongly points to\nthe already freed `zp1`. `ubifs_copy_hash()` thus gets wrongly called\nwith `znode-\u003ecparent-\u003ezbranch[znode-\u003eiip].hash` that triggers the\nuse-after-free!\n\nFix this by explicitly setting `znode-\u003ecparent` to `NULL` in\n`get_znodes_to_commit()` for the root node. The search for the dirty\nnodes\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53171",
"url": "https://www.suse.com/security/cve/CVE-2024-53171"
},
{
"category": "external",
"summary": "SUSE Bug 1234889 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "external",
"summary": "SUSE Bug 1236234 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1236234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53171"
},
{
"cve": "CVE-2024-53172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53172"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: fastmap: Fix duplicate slab cache names while attaching\n\nSince commit 4c39529663b9 (\"slab: Warn on duplicate cache names when\nDEBUG_VM=y\"), the duplicate slab cache names can be detected and a\nkernel WARNING is thrown out.\nIn UBI fast attaching process, alloc_ai() could be invoked twice\nwith the same slab cache name \u0027ubi_aeb_slab_cache\u0027, which will trigger\nfollowing warning messages:\n kmem_cache of name \u0027ubi_aeb_slab_cache\u0027 already exists\n WARNING: CPU: 0 PID: 7519 at mm/slab_common.c:107\n __kmem_cache_create_args+0x100/0x5f0\n Modules linked in: ubi(+) nandsim [last unloaded: nandsim]\n CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2\n RIP: 0010:__kmem_cache_create_args+0x100/0x5f0\n Call Trace:\n __kmem_cache_create_args+0x100/0x5f0\n alloc_ai+0x295/0x3f0 [ubi]\n ubi_attach+0x3c3/0xcc0 [ubi]\n ubi_attach_mtd_dev+0x17cf/0x3fa0 [ubi]\n ubi_init+0x3fb/0x800 [ubi]\n do_init_module+0x265/0x7d0\n __x64_sys_finit_module+0x7a/0xc0\n\nThe problem could be easily reproduced by loading UBI device by fastmap\nwith CONFIG_DEBUG_VM=y.\nFix it by using different slab names for alloc_ai() callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53172",
"url": "https://www.suse.com/security/cve/CVE-2024-53172"
},
{
"category": "external",
"summary": "SUSE Bug 1234898 for CVE-2024-53172",
"url": "https://bugzilla.suse.com/1234898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53172"
},
{
"cve": "CVE-2024-53173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53173"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.0: Fix a use-after-free problem in the asynchronous open()\n\nYang Erkun reports that when two threads are opening files at the same\ntime, and are forced to abort before a reply is seen, then the call to\nnfs_release_seqid() in nfs4_opendata_free() can result in a\nuse-after-free of the pointer to the defunct rpc task of the other\nthread.\nThe fix is to ensure that if the RPC call is aborted before the call to\nnfs_wait_on_sequence() is complete, then we must call nfs_release_seqid()\nin nfs4_open_release() before the rpc_task is freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53173",
"url": "https://www.suse.com/security/cve/CVE-2024-53173"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234891 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "external",
"summary": "SUSE Bug 1234892 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53173"
},
{
"cve": "CVE-2024-53174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53174"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: make sure cache entry active before cache_show\n\nThe function `c_show` was called with protection from RCU. This only\nensures that `cp` will not be freed. Therefore, the reference count for\n`cp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `cache_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `cp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 7 PID: 822 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n\nCall Trace:\n \u003cTASK\u003e\n c_show+0x2fc/0x380 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53174",
"url": "https://www.suse.com/security/cve/CVE-2024-53174"
},
{
"category": "external",
"summary": "SUSE Bug 1234899 for CVE-2024-53174",
"url": "https://bugzilla.suse.com/1234899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53174"
},
{
"cve": "CVE-2024-53175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53175"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: fix memleak if msg_init_ns failed in create_ipc_ns\n\nPercpu memory allocation may failed during create_ipc_ns however this\nfail is not handled properly since ipc sysctls and mq sysctls is not\nreleased properly. Fix this by release these two resource when failure.\n\nHere is the kmemleak stack when percpu failed:\n\nunreferenced object 0xffff88819de2a600 (size 512):\n comm \"shmem_2nstest\", pid 120711, jiffies 4300542254\n hex dump (first 32 bytes):\n 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H.....\n 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V.....\n backtrace (crc be7cba35):\n [\u003cffffffff81b43f83\u003e] __kmalloc_node_track_caller_noprof+0x333/0x420\n [\u003cffffffff81a52e56\u003e] kmemdup_noprof+0x26/0x50\n [\u003cffffffff821b2f37\u003e] setup_mq_sysctls+0x57/0x1d0\n [\u003cffffffff821b29cc\u003e] copy_ipcs+0x29c/0x3b0\n [\u003cffffffff815d6a10\u003e] create_new_namespaces+0x1d0/0x920\n [\u003cffffffff815d7449\u003e] copy_namespaces+0x2e9/0x3e0\n [\u003cffffffff815458f3\u003e] copy_process+0x29f3/0x7ff0\n [\u003cffffffff8154b080\u003e] kernel_clone+0xc0/0x650\n [\u003cffffffff8154b6b1\u003e] __do_sys_clone+0xa1/0xe0\n [\u003cffffffff843df8ff\u003e] do_syscall_64+0xbf/0x1c0\n [\u003cffffffff846000b0\u003e] entry_SYSCALL_64_after_hwframe+0x4b/0x53",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53175",
"url": "https://www.suse.com/security/cve/CVE-2024-53175"
},
{
"category": "external",
"summary": "SUSE Bug 1234893 for CVE-2024-53175",
"url": "https://bugzilla.suse.com/1234893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53175"
},
{
"cve": "CVE-2024-53179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53179"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix use-after-free of signing key\n\nCustomers have reported use-after-free in @ses-\u003eauth_key.response with\nSMB2.1 + sign mounts which occurs due to following race:\n\ntask A task B\ncifs_mount()\n dfs_mount_share()\n get_session()\n cifs_mount_get_session() cifs_send_recv()\n cifs_get_smb_ses() compound_send_recv()\n cifs_setup_session() smb2_setup_request()\n kfree_sensitive() smb2_calc_signature()\n crypto_shash_setkey() *UAF*\n\nFix this by ensuring that we have a valid @ses-\u003eauth_key.response by\nchecking whether @ses-\u003eses_status is SES_GOOD or SES_EXITING with\n@ses-\u003eses_lock held. After commit 24a9799aa8ef (\"smb: client: fix UAF\nin smb2_reconnect_server()\"), we made sure to call -\u003elogoff() only\nwhen @ses was known to be good (e.g. valid -\u003eauth_key.response), so\nit\u0027s safe to access signing key when @ses-\u003eses_status == SES_EXITING.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53179",
"url": "https://www.suse.com/security/cve/CVE-2024-53179"
},
{
"category": "external",
"summary": "SUSE Bug 1234921 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "external",
"summary": "SUSE Bug 1234927 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53179"
},
{
"cve": "CVE-2024-53180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53180"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Add sanity NULL check for the default mmap fault handler\n\nA driver might allow the mmap access before initializing its\nruntime-\u003edma_area properly. Add a proper NULL check before passing to\nvirt_to_page() for avoiding a panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53180",
"url": "https://www.suse.com/security/cve/CVE-2024-53180"
},
{
"category": "external",
"summary": "SUSE Bug 1234929 for CVE-2024-53180",
"url": "https://bugzilla.suse.com/1234929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53180"
},
{
"cve": "CVE-2024-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix NULL ptr deref in crypto_aead_setkey()\n\nNeither SMB3.0 or SMB3.02 supports encryption negotiate context, so\nwhen SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response,\nthe client uses AES-128-CCM as the default cipher. See MS-SMB2\n3.3.5.4.\n\nCommit b0abcd65ec54 (\"smb: client: fix UAF in async decryption\") added\na @server-\u003ecipher_type check to conditionally call\nsmb3_crypto_aead_allocate(), but that check would always be false as\n@server-\u003ecipher_type is unset for SMB3.02.\n\nFix the following KASAN splat by setting @server-\u003ecipher_type for\nSMB3.02 as well.\n\nmount.cifs //srv/share /mnt -o vers=3.02,seal,...\n\nBUG: KASAN: null-ptr-deref in crypto_aead_setkey+0x2c/0x130\nRead of size 8 at addr 0000000000000020 by task mount.cifs/1095\nCPU: 1 UID: 0 PID: 1095 Comm: mount.cifs Not tainted 6.12.0 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? crypto_aead_setkey+0x2c/0x130\n kasan_report+0xda/0x110\n ? crypto_aead_setkey+0x2c/0x130\n crypto_aead_setkey+0x2c/0x130\n crypt_message+0x258/0xec0 [cifs]\n ? __asan_memset+0x23/0x50\n ? __pfx_crypt_message+0x10/0x10 [cifs]\n ? mark_lock+0xb0/0x6a0\n ? hlock_class+0x32/0xb0\n ? mark_lock+0xb0/0x6a0\n smb3_init_transform_rq+0x352/0x3f0 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n smb_send_rqst+0x144/0x230 [cifs]\n ? __pfx_smb_send_rqst+0x10/0x10 [cifs]\n ? hlock_class+0x32/0xb0\n ? smb2_setup_request+0x225/0x3a0 [cifs]\n ? __pfx_cifs_compound_last_callback+0x10/0x10 [cifs]\n compound_send_recv+0x59b/0x1140 [cifs]\n ? __pfx_compound_send_recv+0x10/0x10 [cifs]\n ? __create_object+0x5e/0x90\n ? hlock_class+0x32/0xb0\n ? do_raw_spin_unlock+0x9a/0xf0\n cifs_send_recv+0x23/0x30 [cifs]\n SMB2_tcon+0x3ec/0xb30 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? __pfx_lock_release+0x10/0x10\n ? do_raw_spin_trylock+0xc6/0x120\n ? lock_acquire+0x3f/0x90\n ? _get_xid+0x16/0xd0 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n ? __pfx_cifs_get_smb_ses+0x10/0x10 [cifs]\n ? cifs_get_tcp_session+0xaa0/0xca0 [cifs]\n cifs_mount_get_session+0x8a/0x210 [cifs]\n dfs_mount_share+0x1b0/0x11d0 [cifs]\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_dfs_mount_share+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? lock_release+0x203/0x5d0\n cifs_mount+0xb3/0x3d0 [cifs]\n ? do_raw_spin_trylock+0xc6/0x120\n ? __pfx_cifs_mount+0x10/0x10 [cifs]\n ? lock_acquire+0x3f/0x90\n ? find_nls+0x16/0xa0\n ? smb3_update_mnt_flags+0x372/0x3b0 [cifs]\n cifs_smb3_do_mount+0x1e2/0xc80 [cifs]\n ? __pfx_vfs_parse_fs_string+0x10/0x10\n ? __pfx_cifs_smb3_do_mount+0x10/0x10 [cifs]\n smb3_get_tree+0x1bf/0x330 [cifs]\n vfs_get_tree+0x4a/0x160\n path_mount+0x3c1/0xfb0\n ? kasan_quarantine_put+0xc7/0x1d0\n ? __pfx_path_mount+0x10/0x10\n ? kmem_cache_free+0x118/0x3e0\n ? user_path_at+0x74/0xa0\n __x64_sys_mount+0x1a6/0x1e0\n ? __pfx___x64_sys_mount+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53185",
"url": "https://www.suse.com/security/cve/CVE-2024-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1234901 for CVE-2024-53185",
"url": "https://bugzilla.suse.com/1234901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53185"
},
{
"cve": "CVE-2024-53187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53187"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check for overflows in io_pin_pages\n\nWARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144\nCPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0\nCall Trace:\n \u003cTASK\u003e\n __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183\n io_rings_map io_uring/io_uring.c:2611 [inline]\n io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470\n io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692\n io_uring_setup io_uring/io_uring.c:3781 [inline]\n ...\n \u003c/TASK\u003e\n\nio_pin_pages()\u0027s uaddr parameter came directly from the user and can be\ngarbage. Don\u0027t just add size to it as it can overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53187",
"url": "https://www.suse.com/security/cve/CVE-2024-53187"
},
{
"category": "external",
"summary": "SUSE Bug 1234947 for CVE-2024-53187",
"url": "https://bugzilla.suse.com/1234947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53187"
},
{
"cve": "CVE-2024-53188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53188"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix crash when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe function ath12k_dp_cc_cleanup is called to release resources.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nBUG: kernel NULL pointer dereference, address: 0000000000000020\nat RIP: 0010:ath12k_dp_cc_cleanup.part.0+0xb6/0x500 [ath12k]\nCall Trace:\nath12k_dp_cc_cleanup\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set to NULL the released structure in\nath12k_dp_cc_cleanup at the end.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53188",
"url": "https://www.suse.com/security/cve/CVE-2024-53188"
},
{
"category": "external",
"summary": "SUSE Bug 1234948 for CVE-2024-53188",
"url": "https://bugzilla.suse.com/1234948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53188"
},
{
"cve": "CVE-2024-53190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures\n\nSyzkaller reported a hung task with uevent_show() on stack trace. That\nspecific issue was addressed by another commit [0], but even with that\nfix applied (for example, running v6.12-rc5) we face another type of hung\ntask that comes from the same reproducer [1]. By investigating that, we\ncould narrow it to the following path:\n\n(a) Syzkaller emulates a Realtek USB WiFi adapter using raw-gadget and\ndummy_hcd infrastructure.\n\n(b) During the probe of rtl8192cu, the driver ends-up performing an efuse\nread procedure (which is related to EEPROM load IIUC), and here lies the\nissue: the function read_efuse() calls read_efuse_byte() many times, as\nloop iterations depending on the efuse size (in our example, 512 in total).\n\nThis procedure for reading efuse bytes relies in a loop that performs an\nI/O read up to *10k* times in case of failures. We measured the time of\nthe loop inside read_efuse_byte() alone, and in this reproducer (which\ninvolves the dummy_hcd emulation layer), it takes 15 seconds each. As a\nconsequence, we have the driver stuck in its probe routine for big time,\nexposing a stack trace like below if we attempt to reboot the system, for\nexample:\n\ntask:kworker/0:3 state:D stack:0 pid:662 tgid:662 ppid:2 flags:0x00004000\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n __schedule+0xe22/0xeb6\n schedule_timeout+0xe7/0x132\n __wait_for_common+0xb5/0x12e\n usb_start_wait_urb+0xc5/0x1ef\n ? usb_alloc_urb+0x95/0xa4\n usb_control_msg+0xff/0x184\n _usbctrl_vendorreq_sync+0xa0/0x161\n _usb_read_sync+0xb3/0xc5\n read_efuse_byte+0x13c/0x146\n read_efuse+0x351/0x5f0\n efuse_read_all_map+0x42/0x52\n rtl_efuse_shadow_map_update+0x60/0xef\n rtl_get_hwinfo+0x5d/0x1c2\n rtl92cu_read_eeprom_info+0x10a/0x8d5\n ? rtl92c_read_chip_version+0x14f/0x17e\n rtl_usb_probe+0x323/0x851\n usb_probe_interface+0x278/0x34b\n really_probe+0x202/0x4a4\n __driver_probe_device+0x166/0x1b2\n driver_probe_device+0x2f/0xd8\n [...]\n\nWe propose hereby to drastically reduce the attempts of doing the I/O\nreads in case of failures, restricted to USB devices (given that\nthey\u0027re inherently slower than PCIe ones). By retrying up to 10 times\n(instead of 10000), we got reponsiveness in the reproducer, while seems\nreasonable to believe that there\u0027s no sane USB device implementation in\nthe field requiring this amount of retries at every I/O read in order\nto properly work. Based on that assumption, it\u0027d be good to have it\nbackported to stable but maybe not since driver implementation (the 10k\nnumber comes from day 0), perhaps up to 6.x series makes sense.\n\n[0] Commit 15fffc6a5624 (\"driver core: Fix uevent_show() vs driver detach race\")\n\n[1] A note about that: this syzkaller report presents multiple reproducers\nthat differs by the type of emulated USB device. For this specific case,\ncheck the entry from 2024/08/08 06:23 in the list of crashes; the C repro\nis available at https://syzkaller.appspot.com/text?tag=ReproC\u0026x=1521fc83980000.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53190",
"url": "https://www.suse.com/security/cve/CVE-2024-53190"
},
{
"category": "external",
"summary": "SUSE Bug 1234950 for CVE-2024-53190",
"url": "https://bugzilla.suse.com/1234950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-53190"
},
{
"cve": "CVE-2024-53191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53191"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix warning when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe buffers dp-\u003etx_ring[i].tx_status are released.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nWARNING: CPU: 0 PID: 2098 at mm/slub.c:4689 free_large_kmalloc+0x4d/0x80\nCall Trace:\nfree_large_kmalloc\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set the buffers to NULL after releasing in\norder to avoid the double free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53191",
"url": "https://www.suse.com/security/cve/CVE-2024-53191"
},
{
"category": "external",
"summary": "SUSE Bug 1234952 for CVE-2024-53191",
"url": "https://bugzilla.suse.com/1234952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53191"
},
{
"cve": "CVE-2024-53194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53194"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix use-after-free of slot-\u003ebus on hot remove\n\nDennis reports a boot crash on recent Lenovo laptops with a USB4 dock.\n\nSince commit 0fc70886569c (\"thunderbolt: Reset USB4 v2 host router\") and\ncommit 59a54c5f3dbd (\"thunderbolt: Reset topology created by the boot\nfirmware\"), USB4 v2 and v1 Host Routers are reset on probe of the\nthunderbolt driver.\n\nThe reset clears the Presence Detect State and Data Link Layer Link Active\nbits at the USB4 Host Router\u0027s Root Port and thus causes hot removal of the\ndock.\n\nThe crash occurs when pciehp is unbound from one of the dock\u0027s Downstream\nPorts: pciehp creates a pci_slot on bind and destroys it on unbind. The\npci_slot contains a pointer to the pci_bus below the Downstream Port, but\na reference on that pci_bus is never acquired. The pci_bus is destroyed\nbefore the pci_slot, so a use-after-free ensues when pci_slot_release()\naccesses slot-\u003ebus.\n\nIn principle this should not happen because pci_stop_bus_device() unbinds\npciehp (and therefore destroys the pci_slot) before the pci_bus is\ndestroyed by pci_remove_bus_device().\n\nHowever the stacktrace provided by Dennis shows that pciehp is unbound from\npci_remove_bus_device() instead of pci_stop_bus_device(). To understand\nthe significance of this, one needs to know that the PCI core uses a two\nstep process to remove a portion of the hierarchy: It first unbinds all\ndrivers in the sub-hierarchy in pci_stop_bus_device() and then actually\nremoves the devices in pci_remove_bus_device(). There is no precaution to\nprevent driver binding in-between pci_stop_bus_device() and\npci_remove_bus_device().\n\nIn Dennis\u0027 case, it seems removal of the hierarchy by pciehp races with\ndriver binding by pci_bus_add_devices(). pciehp is bound to the\nDownstream Port after pci_stop_bus_device() has run, so it is unbound by\npci_remove_bus_device() instead of pci_stop_bus_device(). Because the\npci_bus has already been destroyed at that point, accesses to it result in\na use-after-free.\n\nOne might conclude that driver binding needs to be prevented after\npci_stop_bus_device() has run. However it seems risky that pci_slot points\nto pci_bus without holding a reference. Solely relying on correct ordering\nof driver unbind versus pci_bus destruction is certainly not defensive\nprogramming.\n\nIf pci_slot has a need to access data in pci_bus, it ought to acquire a\nreference. Amend pci_create_slot() accordingly. Dennis reports that the\ncrash is not reproducible with this change.\n\nAbridged stacktrace:\n\n pcieport 0000:00:07.0: PME: Signaling with IRQ 156\n pcieport 0000:00:07.0: pciehp: Slot #12 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ IbPresDis- LLActRep+\n pci_bus 0000:20: dev 00, created physical slot 12\n pcieport 0000:00:07.0: pciehp: Slot(12): Card not present\n ...\n pcieport 0000:21:02.0: pciehp: pcie_disable_notification: SLOTCTRL d8 write cmd 0\n Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b6b: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 13 UID: 0 PID: 134 Comm: irq/156-pciehp Not tainted 6.11.0-devel+ #1\n RIP: 0010:dev_driver_string+0x12/0x40\n pci_destroy_slot\n pciehp_remove\n pcie_port_remove_service\n device_release_driver_internal\n bus_remove_device\n device_del\n device_unregister\n remove_iter\n device_for_each_child\n pcie_portdrv_remove\n pci_device_remove\n device_release_driver_internal\n bus_remove_device\n device_del\n pci_remove_bus_device (recursive invocation)\n pci_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53194",
"url": "https://www.suse.com/security/cve/CVE-2024-53194"
},
{
"category": "external",
"summary": "SUSE Bug 1235459 for CVE-2024-53194",
"url": "https://bugzilla.suse.com/1235459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53194"
},
{
"cve": "CVE-2024-53195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Get rid of userspace_irqchip_in_use\n\nImproper use of userspace_irqchip_in_use led to syzbot hitting the\nfollowing WARN_ON() in kvm_timer_update_irq():\n\nWARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arch_timer.c:459\nkvm_timer_update_irq+0x21c/0x394\nCall trace:\n kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459\n kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968\n kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264\n kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline]\n kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline]\n kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695\n kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151\n el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe following sequence led to the scenario:\n - Userspace creates a VM and a vCPU.\n - The vCPU is initialized with KVM_ARM_VCPU_PMU_V3 during\n KVM_ARM_VCPU_INIT.\n - Without any other setup, such as vGIC or vPMU, userspace issues\n KVM_RUN on the vCPU. Since the vPMU is requested, but not setup,\n kvm_arm_pmu_v3_enable() fails in kvm_arch_vcpu_run_pid_change().\n As a result, KVM_RUN returns after enabling the timer, but before\n incrementing \u0027userspace_irqchip_in_use\u0027:\n kvm_arch_vcpu_run_pid_change()\n ret = kvm_arm_pmu_v3_enable()\n if (!vcpu-\u003earch.pmu.created)\n return -EINVAL;\n if (ret)\n return ret;\n [...]\n if (!irqchip_in_kernel(kvm))\n static_branch_inc(\u0026userspace_irqchip_in_use);\n - Userspace ignores the error and issues KVM_ARM_VCPU_INIT again.\n Since the timer is already enabled, control moves through the\n following flow, ultimately hitting the WARN_ON():\n kvm_timer_vcpu_reset()\n if (timer-\u003eenabled)\n kvm_timer_update_irq()\n if (!userspace_irqchip())\n ret = kvm_vgic_inject_irq()\n ret = vgic_lazy_init()\n if (unlikely(!vgic_initialized(kvm)))\n if (kvm-\u003earch.vgic.vgic_model !=\n KVM_DEV_TYPE_ARM_VGIC_V2)\n return -EBUSY;\n WARN_ON(ret);\n\nTheoretically, since userspace_irqchip_in_use\u0027s functionality can be\nsimply replaced by \u0027!irqchip_in_kernel()\u0027, get rid of the static key\nto avoid the mismanagement, which also helps with the syzbot issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53195",
"url": "https://www.suse.com/security/cve/CVE-2024-53195"
},
{
"category": "external",
"summary": "SUSE Bug 1234957 for CVE-2024-53195",
"url": "https://bugzilla.suse.com/1234957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53195"
},
{
"cve": "CVE-2024-53196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53196"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Don\u0027t retire aborted MMIO instruction\n\nReturning an abort to the guest for an unsupported MMIO access is a\ndocumented feature of the KVM UAPI. Nevertheless, it\u0027s clear that this\nplumbing has seen limited testing, since userspace can trivially cause a\nWARN in the MMIO return:\n\n WARNING: CPU: 0 PID: 30558 at arch/arm64/include/asm/kvm_emulate.h:536 kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n Call trace:\n kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n kvm_arch_vcpu_ioctl_run+0x98/0x15b4 arch/arm64/kvm/arm.c:1133\n kvm_vcpu_ioctl+0x75c/0xa78 virt/kvm/kvm_main.c:4487\n __do_sys_ioctl fs/ioctl.c:51 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x1e0/0x23c arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151\n el0_svc+0x38/0x68 arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x90/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe splat is complaining that KVM is advancing PC while an exception is\npending, i.e. that KVM is retiring the MMIO instruction despite a\npending synchronous external abort. Womp womp.\n\nFix the glaring UAPI bug by skipping over all the MMIO emulation in\ncase there is a pending synchronous exception. Note that while userspace\nis capable of pending an asynchronous exception (SError, IRQ, or FIQ),\nit is still safe to retire the MMIO instruction in this case as (1) they\nare by definition asynchronous, and (2) KVM relies on hardware support\nfor pending/delivering these exceptions instead of the software state\nmachine for advancing PC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53196",
"url": "https://www.suse.com/security/cve/CVE-2024-53196"
},
{
"category": "external",
"summary": "SUSE Bug 1234906 for CVE-2024-53196",
"url": "https://bugzilla.suse.com/1234906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53196"
},
{
"cve": "CVE-2024-53197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53197"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev-\u003econfig.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53197",
"url": "https://www.suse.com/security/cve/CVE-2024-53197"
},
{
"category": "external",
"summary": "SUSE Bug 1235464 for CVE-2024-53197",
"url": "https://bugzilla.suse.com/1235464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53198"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen: Fix the issue of resource not being properly released in xenbus_dev_probe()\n\nThis patch fixes an issue in the function xenbus_dev_probe(). In the\nxenbus_dev_probe() function, within the if (err) branch at line 313, the\nprogram incorrectly returns err directly without releasing the resources\nallocated by err = drv-\u003eprobe(dev, id). As the return value is non-zero,\nthe upper layers assume the processing logic has failed. However, the probe\noperation was performed earlier without a corresponding remove operation.\nSince the probe actually allocates resources, failing to perform the remove\noperation could lead to problems.\n\nTo fix this issue, we followed the resource release logic of the\nxenbus_dev_remove() function by adding a new block fail_remove before the\nfail_put block. After entering the branch if (err) at line 313, the\nfunction will use a goto statement to jump to the fail_remove block,\nensuring that the previously acquired resources are correctly released,\nthus preventing the reference count leak.\n\nThis bug was identified by an experimental static analysis tool developed\nby our team. The tool specializes in analyzing reference count operations\nand detecting potential issues where resources are not properly managed.\nIn this case, the tool flagged the missing release operation as a\npotential problem, which led to the development of this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53198",
"url": "https://www.suse.com/security/cve/CVE-2024-53198"
},
{
"category": "external",
"summary": "SUSE Bug 1234923 for CVE-2024-53198",
"url": "https://bugzilla.suse.com/1234923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53198"
},
{
"cve": "CVE-2024-53200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53200"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp\n\nThis commit addresses a null pointer dereference issue in\nhwss_setup_dpp(). The issue could occur when pipe_ctx-\u003eplane_state is\nnull. The fix adds a check to ensure `pipe_ctx-\u003eplane_state` is not null\nbefore accessing. This prevents a null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53200",
"url": "https://www.suse.com/security/cve/CVE-2024-53200"
},
{
"category": "external",
"summary": "SUSE Bug 1234968 for CVE-2024-53200",
"url": "https://bugzilla.suse.com/1234968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53200"
},
{
"cve": "CVE-2024-53201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53201"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\n\nThis commit addresses a null pointer dereference issue in\ndcn20_program_pipe(). Previously, commit 8e4ed3cf1642 (\"drm/amd/display:\nAdd null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\")\npartially fixed the null pointer dereference issue. However, in\ndcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and\nplane_state is accessed again through pipe_ctx. Multiple if statements\ndirectly call attributes of plane_state, leading to potential null\npointer dereference issues. This patch adds necessary null checks to\nensure stability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53201",
"url": "https://www.suse.com/security/cve/CVE-2024-53201"
},
{
"category": "external",
"summary": "SUSE Bug 1234969 for CVE-2024-53201",
"url": "https://bugzilla.suse.com/1234969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53201"
},
{
"cve": "CVE-2024-53202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware_loader: Fix possible resource leak in fw_log_firmware_info()\n\nThe alg instance should be released under the exception path, otherwise\nthere may be resource leak here.\n\nTo mitigate this, free the alg instance with crypto_free_shash when kmalloc\nfails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53202",
"url": "https://www.suse.com/security/cve/CVE-2024-53202"
},
{
"category": "external",
"summary": "SUSE Bug 1234970 for CVE-2024-53202",
"url": "https://bugzilla.suse.com/1234970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53202"
},
{
"cve": "CVE-2024-53203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: fix potential array underflow in ucsi_ccg_sync_control()\n\nThe \"command\" variable can be controlled by the user via debugfs. The\nworry is that if con_index is zero then \"\u0026uc-\u003eucsi-\u003econnector[con_index\n- 1]\" would be an array underflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53203",
"url": "https://www.suse.com/security/cve/CVE-2024-53203"
},
{
"category": "external",
"summary": "SUSE Bug 1235001 for CVE-2024-53203",
"url": "https://bugzilla.suse.com/1235001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53203"
},
{
"cve": "CVE-2024-53206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53206"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix use-after-free of nreq in reqsk_timer_handler().\n\nThe cited commit replaced inet_csk_reqsk_queue_drop_and_put() with\n__inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().\n\nThen, oreq should be passed to reqsk_put() instead of req; otherwise\nuse-after-free of nreq could happen when reqsk is migrated but the\nretry attempt failed (e.g. due to timeout).\n\nLet\u0027s pass oreq to reqsk_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53206",
"url": "https://www.suse.com/security/cve/CVE-2024-53206"
},
{
"category": "external",
"summary": "SUSE Bug 1234960 for CVE-2024-53206",
"url": "https://bugzilla.suse.com/1234960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53206"
},
{
"cve": "CVE-2024-53207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53207"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible deadlocks\n\nThis fixes possible deadlocks like the following caused by\nhci_cmd_sync_dequeue causing the destroy function to run:\n\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\n Tainted: G W O 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:kworker/u19:0 state:D stack:0 pid:143 tgid:143 ppid:2 flags:0x00004000\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\n Call Trace:\n \u003cTASK\u003e\n __schedule+0x374/0xaf0\n schedule+0x3c/0xf0\n schedule_preempt_disabled+0x1c/0x30\n __mutex_lock.constprop.0+0x3ef/0x7a0\n __mutex_lock_slowpath+0x13/0x20\n mutex_lock+0x3c/0x50\n mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\n ? kfree+0x211/0x2a0\n hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\n ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\n cmd_complete_rsp+0x26/0x80 [bluetooth]\n mgmt_pending_foreach+0x4d/0x70 [bluetooth]\n __mgmt_power_off+0x8d/0x180 [bluetooth]\n ? _raw_spin_unlock_irq+0x23/0x40\n hci_dev_close_sync+0x445/0x5b0 [bluetooth]\n hci_set_powered_sync+0x149/0x250 [bluetooth]\n set_powered_sync+0x24/0x60 [bluetooth]\n hci_cmd_sync_work+0x90/0x150 [bluetooth]\n process_one_work+0x13e/0x300\n worker_thread+0x2f7/0x420\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x107/0x140\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x3d/0x60\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53207",
"url": "https://www.suse.com/security/cve/CVE-2024-53207"
},
{
"category": "external",
"summary": "SUSE Bug 1234907 for CVE-2024-53207",
"url": "https://bugzilla.suse.com/1234907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53207"
},
{
"cve": "CVE-2024-53208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53208"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync\n\nThis fixes the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\nRead of size 8 at addr ffff888029b4dd18 by task kworker/u9:0/54\n\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc6-syzkaller-01155-gf723224742fc #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:93 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\nq kasan_report+0x143/0x180 mm/kasan/report.c:601\n set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\n hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:328\n process_one_work kernel/workqueue.c:3231 [inline]\n process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312\n worker_thread+0x86d/0xd10 kernel/workqueue.c:3389\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\nAllocated by task 5247:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:370 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387\n kasan_kmalloc include/linux/kasan.h:211 [inline]\n __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4193\n kmalloc_noprof include/linux/slab.h:681 [inline]\n kzalloc_noprof include/linux/slab.h:807 [inline]\n mgmt_pending_new+0x65/0x250 net/bluetooth/mgmt_util.c:269\n mgmt_pending_add+0x36/0x120 net/bluetooth/mgmt_util.c:296\n set_powered+0x3cd/0x5e0 net/bluetooth/mgmt.c:1394\n hci_mgmt_cmd+0xc47/0x11d0 net/bluetooth/hci_sock.c:1712\n hci_sock_sendmsg+0x7b8/0x11c0 net/bluetooth/hci_sock.c:1832\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n sock_write_iter+0x2dd/0x400 net/socket.c:1160\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xa72/0xc90 fs/read_write.c:590\n ksys_write+0x1a0/0x2c0 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 5246:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579\n poison_slab_object+0xe0/0x150 mm/kasan/common.c:240\n __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256\n kasan_slab_free include/linux/kasan.h:184 [inline]\n slab_free_hook mm/slub.c:2256 [inline]\n slab_free mm/slub.c:4477 [inline]\n kfree+0x149/0x360 mm/slub.c:4598\n settings_rsp+0x2bc/0x390 net/bluetooth/mgmt.c:1443\n mgmt_pending_foreach+0xd1/0x130 net/bluetooth/mgmt_util.c:259\n __mgmt_power_off+0x112/0x420 net/bluetooth/mgmt.c:9455\n hci_dev_close_sync+0x665/0x11a0 net/bluetooth/hci_sync.c:5191\n hci_dev_do_close net/bluetooth/hci_core.c:483 [inline]\n hci_dev_close+0x112/0x210 net/bluetooth/hci_core.c:508\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83gv\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53208",
"url": "https://www.suse.com/security/cve/CVE-2024-53208"
},
{
"category": "external",
"summary": "SUSE Bug 1234909 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "external",
"summary": "SUSE Bug 1236244 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1236244"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53208"
},
{
"cve": "CVE-2024-53209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53209"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix receive ring space parameters when XDP is active\n\nThe MTU setting at the time an XDP multi-buffer is attached\ndetermines whether the aggregation ring will be used and the\nrx_skb_func handler. This is done in bnxt_set_rx_skb_mode().\n\nIf the MTU is later changed, the aggregation ring setting may need\nto be changed and it may become out-of-sync with the settings\ninitially done in bnxt_set_rx_skb_mode(). This may result in\nrandom memory corruption and crashes as the HW may DMA data larger\nthan the allocated buffer size, such as:\n\nBUG: kernel NULL pointer dereference, address: 00000000000003c0\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 17 PID: 0 Comm: swapper/17 Kdump: loaded Tainted: G S OE 6.1.0-226bf9805506 #1\nHardware name: Wiwynn Delta Lake PVT BZA.02601.0150/Delta Lake-Class1, BIOS F0E_3A12 08/26/2021\nRIP: 0010:bnxt_rx_pkt+0xe97/0x1ae0 [bnxt_en]\nCode: 8b 95 70 ff ff ff 4c 8b 9d 48 ff ff ff 66 41 89 87 b4 00 00 00 e9 0b f7 ff ff 0f b7 43 0a 49 8b 95 a8 04 00 00 25 ff 0f 00 00 \u003c0f\u003e b7 14 42 48 c1 e2 06 49 03 95 a0 04 00 00 0f b6 42 33f\nRSP: 0018:ffffa19f40cc0d18 EFLAGS: 00010202\nRAX: 00000000000001e0 RBX: ffff8e2c805c6100 RCX: 00000000000007ff\nRDX: 0000000000000000 RSI: ffff8e2c271ab990 RDI: ffff8e2c84f12380\nRBP: ffffa19f40cc0e48 R08: 000000000001000d R09: 974ea2fcddfa4cbf\nR10: 0000000000000000 R11: ffffa19f40cc0ff8 R12: ffff8e2c94b58980\nR13: ffff8e2c952d6600 R14: 0000000000000016 R15: ffff8e2c271ab990\nFS: 0000000000000000(0000) GS:ffff8e3b3f840000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000000003c0 CR3: 0000000e8580a004 CR4: 00000000007706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n __bnxt_poll_work+0x1c2/0x3e0 [bnxt_en]\n\nTo address the issue, we now call bnxt_set_rx_skb_mode() within\nbnxt_change_mtu() to properly set the AGG rings configuration and\nupdate rx_skb_func based on the new MTU value.\nAdditionally, BNXT_FLAG_NO_AGG_RINGS is cleared at the beginning of\nbnxt_set_rx_skb_mode() to make sure it gets set or cleared based on\nthe current MTU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53209",
"url": "https://www.suse.com/security/cve/CVE-2024-53209"
},
{
"category": "external",
"summary": "SUSE Bug 1235002 for CVE-2024-53209",
"url": "https://bugzilla.suse.com/1235002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53209"
},
{
"cve": "CVE-2024-53210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53210"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\n\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\nat exit.\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\niucv_sock_destruct() during socket close. To fix this decrease\nskb refcount by one if MSG_PEEK is set in order to prevent memory\nleak and WARN_ON.\n\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G W 6.10.0-rc7 #1\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\nCall Trace:\n [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\n [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\n [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\n [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\n [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\n [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\n [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\n [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\n [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\n [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\n [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\n [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\n [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\n Last Breaking-Event-Address:\n [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53210",
"url": "https://www.suse.com/security/cve/CVE-2024-53210"
},
{
"category": "external",
"summary": "SUSE Bug 1234971 for CVE-2024-53210",
"url": "https://bugzilla.suse.com/1234971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53210"
},
{
"cve": "CVE-2024-53213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53213"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: lan78xx: Fix double free issue with interrupt buffer allocation\n\nIn lan78xx_probe(), the buffer `buf` was being freed twice: once\nimplicitly through `usb_free_urb(dev-\u003eurb_intr)` with the\n`URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused\na double free issue.\n\nTo resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to\nsimplify the initialization sequence and removed the redundant\n`kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring\nit is correctly managed by `usb_fill_int_urb()` and freed by\n`usb_free_urb()` as intended.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53213",
"url": "https://www.suse.com/security/cve/CVE-2024-53213"
},
{
"category": "external",
"summary": "SUSE Bug 1234973 for CVE-2024-53213",
"url": "https://bugzilla.suse.com/1234973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53213"
},
{
"cve": "CVE-2024-53214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53214"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: Properly hide first-in-list PCIe extended capability\n\nThere are cases where a PCIe extended capability should be hidden from\nthe user. For example, an unknown capability (i.e., capability with ID\ngreater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally\nchosen to be hidden from the user.\n\nHiding a capability is done by virtualizing and modifying the \u0027Next\nCapability Offset\u0027 field of the previous capability so it points to the\ncapability after the one that should be hidden.\n\nThe special case where the first capability in the list should be hidden\nis handled differently because there is no previous capability that can\nbe modified. In this case, the capability ID and version are zeroed\nwhile leaving the next pointer intact. This hides the capability and\nleaves an anchor for the rest of the capability list.\n\nHowever, today, hiding the first capability in the list is not done\nproperly if the capability is unknown, as struct\nvfio_pci_core_device-\u003epci_config_map is set to the capability ID during\ninitialization but the capability ID is not properly checked later when\nused in vfio_config_do_rw(). This leads to the following warning [1] and\nto an out-of-bounds access to ecap_perms array.\n\nFix it by checking cap_id in vfio_config_do_rw(), and if it is greater\nthan PCI_EXT_CAP_ID_MAX, use an alternative struct perm_bits for direct\nread only access instead of the ecap_perms array.\n\nNote that this is safe since the above is the only case where cap_id can\nexceed PCI_EXT_CAP_ID_MAX (except for the special capabilities, which\nare already checked before).\n\n[1]\n\nWARNING: CPU: 118 PID: 5329 at drivers/vfio/pci/vfio_pci_config.c:1900 vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\nCPU: 118 UID: 0 PID: 5329 Comm: simx-qemu-syste Not tainted 6.12.0+ #1\n(snip)\nCall Trace:\n \u003cTASK\u003e\n ? show_regs+0x69/0x80\n ? __warn+0x8d/0x140\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? report_bug+0x18f/0x1a0\n ? handle_bug+0x63/0xa0\n ? exc_invalid_op+0x19/0x70\n ? asm_exc_invalid_op+0x1b/0x20\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? vfio_pci_config_rw+0x244/0x430 [vfio_pci_core]\n vfio_pci_rw+0x101/0x1b0 [vfio_pci_core]\n vfio_pci_core_read+0x1d/0x30 [vfio_pci_core]\n vfio_device_fops_read+0x27/0x40 [vfio]\n vfs_read+0xbd/0x340\n ? vfio_device_fops_unl_ioctl+0xbb/0x740 [vfio]\n ? __rseq_handle_notify_resume+0xa4/0x4b0\n __x64_sys_pread64+0x96/0xc0\n x64_sys_call+0x1c3d/0x20d0\n do_syscall_64+0x4d/0x120\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53214",
"url": "https://www.suse.com/security/cve/CVE-2024-53214"
},
{
"category": "external",
"summary": "SUSE Bug 1235004 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "external",
"summary": "SUSE Bug 1235005 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53214"
},
{
"cve": "CVE-2024-53215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53215"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\n\nThere\u0027s issue as follows:\nRPC: Registered rdma transport module.\nRPC: Registered rdma backchannel transport module.\nRPC: Unregistered rdma transport module.\nRPC: Unregistered rdma backchannel transport module.\nBUG: unable to handle page fault for address: fffffbfff80c609a\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\nCall Trace:\n \u003cTASK\u003e\n __die+0x1f/0x70\n page_fault_oops+0x2cd/0x860\n spurious_kernel_fault+0x36/0x450\n do_kern_addr_fault+0xca/0x100\n exc_page_fault+0x128/0x150\n asm_exc_page_fault+0x26/0x30\n percpu_counter_destroy_many+0xf7/0x2a0\n mmdrop+0x209/0x350\n finish_task_switch.isra.0+0x481/0x840\n schedule_tail+0xe/0xd0\n ret_from_fork+0x23/0x80\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\ndestroy the percpu counters which init in svc_rdma_proc_init().\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\nleakage occurs.\nTo solve above issue just destroy all percpu counters when\nregister_sysctl() return NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53215",
"url": "https://www.suse.com/security/cve/CVE-2024-53215"
},
{
"category": "external",
"summary": "SUSE Bug 1234962 for CVE-2024-53215",
"url": "https://bugzilla.suse.com/1234962"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53215"
},
{
"cve": "CVE-2024-53216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53216"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: release svc_expkey/svc_export with rcu_work\n\nThe last reference for `cache_head` can be reduced to zero in `c_show`\nand `e_show`(using `rcu_read_lock` and `rcu_read_unlock`). Consequently,\n`svc_export_put` and `expkey_put` will be invoked, leading to two\nissues:\n\n1. The `svc_export_put` will directly free ex_uuid. However,\n `e_show`/`c_show` will access `ex_uuid` after `cache_put`, which can\n trigger a use-after-free issue, shown below.\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in svc_export_show+0x362/0x430 [nfsd]\n Read of size 1 at addr ff11000010fdc120 by task cat/870\n\n CPU: 1 UID: 0 PID: 870 Comm: cat Not tainted 6.12.0-rc3+ #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n 1.16.1-2.fc37 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x53/0x70\n print_address_description.constprop.0+0x2c/0x3a0\n print_report+0xb9/0x280\n kasan_report+0xae/0xe0\n svc_export_show+0x362/0x430 [nfsd]\n c_show+0x161/0x390 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Allocated by task 830:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x8f/0xa0\n __kmalloc_node_track_caller_noprof+0x1bc/0x400\n kmemdup_noprof+0x22/0x50\n svc_export_parse+0x8a9/0xb80 [nfsd]\n cache_do_downcall+0x71/0xa0 [sunrpc]\n cache_write_procfs+0x8e/0xd0 [sunrpc]\n proc_reg_write+0xe1/0x140\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 868:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x37/0x50\n kfree+0xf3/0x3e0\n svc_export_put+0x87/0xb0 [nfsd]\n cache_purge+0x17f/0x1f0 [sunrpc]\n nfsd_destroy_serv+0x226/0x2d0 [nfsd]\n nfsd_svc+0x125/0x1e0 [nfsd]\n write_threads+0x16a/0x2a0 [nfsd]\n nfsctl_transaction_write+0x74/0xa0 [nfsd]\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n2. We cannot sleep while using `rcu_read_lock`/`rcu_read_unlock`.\n However, `svc_export_put`/`expkey_put` will call path_put, which\n subsequently triggers a sleeping operation due to the following\n `dput`.\n\n =============================\n WARNING: suspicious RCU usage\n 5.10.0-dirty #141 Not tainted\n -----------------------------\n ...\n Call Trace:\n dump_stack+0x9a/0xd0\n ___might_sleep+0x231/0x240\n dput+0x39/0x600\n path_put+0x1b/0x30\n svc_export_put+0x17/0x80\n e_show+0x1c9/0x200\n seq_read_iter+0x63f/0x7c0\n seq_read+0x226/0x2d0\n vfs_read+0x113/0x2c0\n ksys_read+0xc9/0x170\n do_syscall_64+0x33/0x40\n entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nFix these issues by using `rcu_work` to help release\n`svc_expkey`/`svc_export`. This approach allows for an asynchronous\ncontext to invoke `path_put` and also facilitates the freeing of\n`uuid/exp/key` after an RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53216",
"url": "https://www.suse.com/security/cve/CVE-2024-53216"
},
{
"category": "external",
"summary": "SUSE Bug 1235003 for CVE-2024-53216",
"url": "https://bugzilla.suse.com/1235003"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53216"
},
{
"cve": "CVE-2024-53217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53217"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent NULL dereference in nfsd4_process_cb_update()\n\n@ses is initialized to NULL. If __nfsd4_find_backchannel() finds no\navailable backchannel session, setup_callback_client() will try to\ndereference @ses and segfault.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53217",
"url": "https://www.suse.com/security/cve/CVE-2024-53217"
},
{
"category": "external",
"summary": "SUSE Bug 1234999 for CVE-2024-53217",
"url": "https://bugzilla.suse.com/1234999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53217"
},
{
"cve": "CVE-2024-53222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53222"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: fix NULL pointer in comp_algorithm_show()\n\nLTP reported a NULL pointer dereference as followed:\n\n CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3\n Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : __pi_strcmp+0x24/0x140\n lr : zcomp_available_show+0x60/0x100 [zram]\n sp : ffff800088b93b90\n x29: ffff800088b93b90 x28: 0000000000000001 x27: 0000000000400cc0\n x26: 0000000000000ffe x25: ffff80007b3e2388 x24: 0000000000000000\n x23: ffff80007b3e2390 x22: ffff0004041a9000 x21: ffff80007b3e2900\n x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000\n x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000\n x11: 0000000000000000 x10: ffff80007b3e2900 x9 : ffff80007b3cb280\n x8 : 0101010101010101 x7 : 0000000000000000 x6 : 0000000000000000\n x5 : 0000000000000040 x4 : 0000000000000000 x3 : 00656c722d6f7a6c\n x2 : 0000000000000000 x1 : ffff80007b3e2900 x0 : 0000000000000000\n Call trace:\n __pi_strcmp+0x24/0x140\n comp_algorithm_show+0x40/0x70 [zram]\n dev_attr_show+0x28/0x80\n sysfs_kf_seq_show+0x90/0x140\n kernfs_seq_show+0x34/0x48\n seq_read_iter+0x1d4/0x4e8\n kernfs_fop_read_iter+0x40/0x58\n new_sync_read+0x9c/0x168\n vfs_read+0x1a8/0x1f8\n ksys_read+0x74/0x108\n __arm64_sys_read+0x24/0x38\n invoke_syscall+0x50/0x120\n el0_svc_common.constprop.0+0xc8/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x38/0x138\n el0t_64_sync_handler+0xc0/0xc8\n el0t_64_sync+0x188/0x190\n\nThe zram-\u003ecomp_algs[ZRAM_PRIMARY_COMP] can be NULL in zram_add() if\ncomp_algorithm_set() has not been called. User can access the zram device\nby sysfs after device_add_disk(), so there is a time window to trigger the\nNULL pointer dereference. Move it ahead device_add_disk() to make sure\nwhen user can access the zram device, it is ready. comp_algorithm_set()\nis protected by zram-\u003einit_lock in other places and no such problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53222",
"url": "https://www.suse.com/security/cve/CVE-2024-53222"
},
{
"category": "external",
"summary": "SUSE Bug 1234974 for CVE-2024-53222",
"url": "https://bugzilla.suse.com/1234974"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53222"
},
{
"cve": "CVE-2024-53224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53224"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Move events notifier registration to be after device registration\n\nMove pkey change work initialization and cleanup from device resources\nstage to notifier stage, since this is the stage which handles this work\nevents.\n\nFix a race between the device deregistration and pkey change work by moving\nMLX5_IB_STAGE_DEVICE_NOTIFIER to be after MLX5_IB_STAGE_IB_REG in order to\nensure that the notifier is deregistered before the device during cleanup.\nWhich ensures there are no works that are being executed after the\ndevice has already unregistered which can cause the panic below.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 1 PID: 630071 Comm: kworker/1:2 Kdump: loaded Tainted: G W OE --------- --- 5.14.0-162.6.1.el9_1.x86_64 #1\nHardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS 090008 02/27/2023\nWorkqueue: events pkey_change_handler [mlx5_ib]\nRIP: 0010:setup_qp+0x38/0x1f0 [mlx5_ib]\nCode: ee 41 54 45 31 e4 55 89 f5 53 48 89 fb 48 83 ec 20 8b 77 08 65 48 8b 04 25 28 00 00 00 48 89 44 24 18 48 8b 07 48 8d 4c 24 16 \u003c4c\u003e 8b 38 49 8b 87 80 0b 00 00 4c 89 ff 48 8b 80 08 05 00 00 8b 40\nRSP: 0018:ffffbcc54068be20 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffff954054494128 RCX: ffffbcc54068be36\nRDX: ffff954004934000 RSI: 0000000000000001 RDI: ffff954054494128\nRBP: 0000000000000023 R08: ffff954001be2c20 R09: 0000000000000001\nR10: ffff954001be2c20 R11: ffff9540260133c0 R12: 0000000000000000\nR13: 0000000000000023 R14: 0000000000000000 R15: ffff9540ffcb0905\nFS: 0000000000000000(0000) GS:ffff9540ffc80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000010625c001 CR4: 00000000003706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\nmlx5_ib_gsi_pkey_change+0x20/0x40 [mlx5_ib]\nprocess_one_work+0x1e8/0x3c0\nworker_thread+0x50/0x3b0\n? rescuer_thread+0x380/0x380\nkthread+0x149/0x170\n? set_kthread_struct+0x50/0x50\nret_from_fork+0x22/0x30\nModules linked in: rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) mlx5_fwctl(OE) fwctl(OE) ib_uverbs(OE) mlx5_core(OE) mlxdevm(OE) ib_core(OE) mlx_compat(OE) psample mlxfw(OE) tls knem(OE) netconsole nfsv3 nfs_acl nfs lockd grace fscache netfs qrtr rfkill sunrpc intel_rapl_msr intel_rapl_common rapl hv_balloon hv_utils i2c_piix4 pcspkr joydev fuse ext4 mbcache jbd2 sr_mod sd_mod cdrom t10_pi sg ata_generic pci_hyperv pci_hyperv_intf hyperv_drm drm_shmem_helper drm_kms_helper hv_storvsc syscopyarea hv_netvsc sysfillrect sysimgblt hid_hyperv fb_sys_fops scsi_transport_fc hyperv_keyboard drm ata_piix crct10dif_pclmul crc32_pclmul crc32c_intel libata ghash_clmulni_intel hv_vmbus serio_raw [last unloaded: ib_core]\nCR2: 0000000000000000\n---[ end trace f6f8be4eae12f7bc ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53224",
"url": "https://www.suse.com/security/cve/CVE-2024-53224"
},
{
"category": "external",
"summary": "SUSE Bug 1235009 for CVE-2024-53224",
"url": "https://bugzilla.suse.com/1235009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53224"
},
{
"cve": "CVE-2024-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n error = bfad_im_module_init()\n fc_release_transport(bfad_im_scsi_transport_template);\n if (error)\n goto ext;\n\next:\n bfad_im_module_exit();\n fc_release_transport(bfad_im_scsi_transport_template);\n --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53227",
"url": "https://www.suse.com/security/cve/CVE-2024-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1235011 for CVE-2024-53227",
"url": "https://bugzilla.suse.com/1235011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-53229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53229"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix the qp flush warnings in req\n\nWhen the qp is in error state, the status of WQEs in the queue should be\nset to error. Or else the following will appear.\n\n[ 920.617269] WARNING: CPU: 1 PID: 21 at drivers/infiniband/sw/rxe/rxe_comp.c:756 rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.617744] Modules linked in: rnbd_client(O) rtrs_client(O) rtrs_core(O) rdma_ucm rdma_cm iw_cm ib_cm crc32_generic rdma_rxe ip6_udp_tunnel udp_tunnel ib_uverbs ib_core loop brd null_blk ipv6\n[ 920.618516] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G O 6.1.113-storage+ #65\n[ 920.618986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 920.619396] RIP: 0010:rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.619658] Code: 0f b6 84 24 3a 02 00 00 41 89 84 24 44 04 00 00 e9 2a f7 ff ff 39 ca bb 03 00 00 00 b8 0e 00 00 00 48 0f 45 d8 e9 15 f7 ff ff \u003c0f\u003e 0b e9 cb f8 ff ff 41 bf f5 ff ff ff e9 08 f8 ff ff 49 8d bc 24\n[ 920.620482] RSP: 0018:ffff97b7c00bbc38 EFLAGS: 00010246\n[ 920.620817] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000008\n[ 920.621183] RDX: ffff960dc396ebc0 RSI: 0000000000005400 RDI: ffff960dc4e2fbac\n[ 920.621548] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffffac406450\n[ 920.621884] R10: ffffffffac4060c0 R11: 0000000000000001 R12: ffff960dc4e2f800\n[ 920.622254] R13: ffff960dc4e2f928 R14: ffff97b7c029c580 R15: 0000000000000000\n[ 920.622609] FS: 0000000000000000(0000) GS:ffff960ef7d00000(0000) knlGS:0000000000000000\n[ 920.622979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 920.623245] CR2: 00007fa056965e90 CR3: 00000001107f1000 CR4: 00000000000006e0\n[ 920.623680] Call Trace:\n[ 920.623815] \u003cTASK\u003e\n[ 920.623933] ? __warn+0x79/0xc0\n[ 920.624116] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.624356] ? report_bug+0xfb/0x150\n[ 920.624594] ? handle_bug+0x3c/0x60\n[ 920.624796] ? exc_invalid_op+0x14/0x70\n[ 920.624976] ? asm_exc_invalid_op+0x16/0x20\n[ 920.625203] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.625474] ? rxe_completer+0x329/0xcc0 [rdma_rxe]\n[ 920.625749] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.626037] rxe_requester+0x625/0xde0 [rdma_rxe]\n[ 920.626310] ? rxe_cq_post+0xe2/0x180 [rdma_rxe]\n[ 920.626583] ? do_complete+0x18d/0x220 [rdma_rxe]\n[ 920.626812] ? rxe_completer+0x1a3/0xcc0 [rdma_rxe]\n[ 920.627050] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.627285] tasklet_action_common.constprop.0+0xa4/0x120\n[ 920.627522] handle_softirqs+0xc2/0x250\n[ 920.627728] ? sort_range+0x20/0x20\n[ 920.627942] run_ksoftirqd+0x1f/0x30\n[ 920.628158] smpboot_thread_fn+0xc7/0x1b0\n[ 920.628334] kthread+0xd6/0x100\n[ 920.628504] ? kthread_complete_and_exit+0x20/0x20\n[ 920.628709] ret_from_fork+0x1f/0x30\n[ 920.628892] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53229",
"url": "https://www.suse.com/security/cve/CVE-2024-53229"
},
{
"category": "external",
"summary": "SUSE Bug 1234905 for CVE-2024-53229",
"url": "https://bugzilla.suse.com/1234905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53229"
},
{
"cve": "CVE-2024-53230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference,\nso check NULL for cppc_get_cpu_cost().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53230",
"url": "https://www.suse.com/security/cve/CVE-2024-53230"
},
{
"category": "external",
"summary": "SUSE Bug 1235976 for CVE-2024-53230",
"url": "https://bugzilla.suse.com/1235976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53230"
},
{
"cve": "CVE-2024-53231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53231",
"url": "https://www.suse.com/security/cve/CVE-2024-53231"
},
{
"category": "external",
"summary": "SUSE Bug 1235977 for CVE-2024-53231",
"url": "https://bugzilla.suse.com/1235977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53231"
},
{
"cve": "CVE-2024-53232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Implement blocking domain\n\nThis fixes a crash when surprise hot-unplugging a PCI device. This crash\nhappens because during hot-unplug __iommu_group_set_domain_nofail()\nattaching the default domain fails when the platform no longer\nrecognizes the device as it has already been removed and we end up with\na NULL domain pointer and UAF. This is exactly the case referred to in\nthe second comment in __iommu_device_set_domain() and just as stated\nthere if we can instead attach the blocking domain the UAF is prevented\nas this can handle the already removed device. Implement the blocking\ndomain to use this handling. With this change, the crash is fixed but\nwe still hit a warning attempting to change DMA ownership on a blocked\ndevice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53232",
"url": "https://www.suse.com/security/cve/CVE-2024-53232"
},
{
"category": "external",
"summary": "SUSE Bug 1235050 for CVE-2024-53232",
"url": "https://bugzilla.suse.com/1235050"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53232"
},
{
"cve": "CVE-2024-53233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nunicode: Fix utf8_load() error path\n\nutf8_load() requests the symbol \"utf8_data_table\" and then checks if the\nrequested UTF-8 version is supported. If it\u0027s unsupported, it tries to\nput the data table using symbol_put(). If an unsupported version is\nrequested, symbol_put() fails like this:\n\n kernel BUG at kernel/module/main.c:786!\n RIP: 0010:__symbol_put+0x93/0xb0\n Call Trace:\n \u003cTASK\u003e\n ? __die_body.cold+0x19/0x27\n ? die+0x2e/0x50\n ? do_trap+0xca/0x110\n ? do_error_trap+0x65/0x80\n ? __symbol_put+0x93/0xb0\n ? exc_invalid_op+0x51/0x70\n ? __symbol_put+0x93/0xb0\n ? asm_exc_invalid_op+0x1a/0x20\n ? __pfx_cmp_name+0x10/0x10\n ? __symbol_put+0x93/0xb0\n ? __symbol_put+0x62/0xb0\n utf8_load+0xf8/0x150\n\nThat happens because symbol_put() expects the unique string that\nidentify the symbol, instead of a pointer to the loaded symbol. Fix that\nby using such string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53233",
"url": "https://www.suse.com/security/cve/CVE-2024-53233"
},
{
"category": "external",
"summary": "SUSE Bug 1235046 for CVE-2024-53233",
"url": "https://bugzilla.suse.com/1235046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53233"
},
{
"cve": "CVE-2024-53234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53234"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: handle NONHEAD !delta[1] lclusters gracefully\n\nsyzbot reported a WARNING in iomap_iter_done:\n iomap_fiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80\n ioctl_fiemap fs/ioctl.c:220 [inline]\n\nGenerally, NONHEAD lclusters won\u0027t have delta[1]==0, except for crafted\nimages and filesystems created by pre-1.0 mkfs versions.\n\nPreviously, it would immediately bail out if delta[1]==0, which led to\ninadequate decompressed lengths (thus FIEMAP is impacted). Treat it as\ndelta[1]=1 to work around these legacy mkfs versions.\n\n`lclusterbits \u003e 14` is illegal for compact indexes, error out too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53234",
"url": "https://www.suse.com/security/cve/CVE-2024-53234"
},
{
"category": "external",
"summary": "SUSE Bug 1235045 for CVE-2024-53234",
"url": "https://bugzilla.suse.com/1235045"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53234"
},
{
"cve": "CVE-2024-53236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Free skb when TX metadata options are invalid\n\nWhen a new skb is allocated for transmitting an xsk descriptor, i.e., for\nevery non-multibuf descriptor or the first frag of a multibuf descriptor,\nbut the descriptor is later found to have invalid options set for the TX\nmetadata, the new skb is never freed. This can leak skbs until the send\nbuffer is full which makes sending more packets impossible.\n\nFix this by freeing the skb in the error path if we are currently dealing\nwith the first frag, i.e., an skb allocated in this iteration of\nxsk_build_skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53236",
"url": "https://www.suse.com/security/cve/CVE-2024-53236"
},
{
"category": "external",
"summary": "SUSE Bug 1235000 for CVE-2024-53236",
"url": "https://bugzilla.suse.com/1235000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53236"
},
{
"cve": "CVE-2024-53237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53237"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix use-after-free in device_for_each_child()\n\nSyzbot has reported the following KASAN splat:\n\nBUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0\nRead of size 8 at addr ffff88801f605308 by task kbnepd bnep0/4980\n\nCPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Not tainted 6.12.0-rc4-00161-gae90f6a6170d #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x100/0x190\n ? device_for_each_child+0x18f/0x1a0\n print_report+0x13a/0x4cb\n ? __virt_addr_valid+0x5e/0x590\n ? __phys_addr+0xc6/0x150\n ? device_for_each_child+0x18f/0x1a0\n kasan_report+0xda/0x110\n ? device_for_each_child+0x18f/0x1a0\n ? __pfx_dev_memalloc_noio+0x10/0x10\n device_for_each_child+0x18f/0x1a0\n ? __pfx_device_for_each_child+0x10/0x10\n pm_runtime_set_memalloc_noio+0xf2/0x180\n netdev_unregister_kobject+0x1ed/0x270\n unregister_netdevice_many_notify+0x123c/0x1d80\n ? __mutex_trylock_common+0xde/0x250\n ? __pfx_unregister_netdevice_many_notify+0x10/0x10\n ? trace_contention_end+0xe6/0x140\n ? __mutex_lock+0x4e7/0x8f0\n ? __pfx_lock_acquire.part.0+0x10/0x10\n ? rcu_is_watching+0x12/0xc0\n ? unregister_netdev+0x12/0x30\n unregister_netdevice_queue+0x30d/0x3f0\n ? __pfx_unregister_netdevice_queue+0x10/0x10\n ? __pfx_down_write+0x10/0x10\n unregister_netdev+0x1c/0x30\n bnep_session+0x1fb3/0x2ab0\n ? __pfx_bnep_session+0x10/0x10\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_woken_wake_function+0x10/0x10\n ? __kthread_parkme+0x132/0x200\n ? __pfx_bnep_session+0x10/0x10\n ? kthread+0x13a/0x370\n ? __pfx_bnep_session+0x10/0x10\n kthread+0x2b7/0x370\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x48/0x80\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 4974:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n __kmalloc_noprof+0x1d1/0x440\n hci_alloc_dev_priv+0x1d/0x2820\n __vhci_create_device+0xef/0x7d0\n vhci_write+0x2c7/0x480\n vfs_write+0x6a0/0xfc0\n ksys_write+0x12f/0x260\n do_syscall_64+0xc7/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 4979:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x4f/0x70\n kfree+0x141/0x490\n hci_release_dev+0x4d9/0x600\n bt_host_release+0x6a/0xb0\n device_release+0xa4/0x240\n kobject_put+0x1ec/0x5a0\n put_device+0x1f/0x30\n vhci_release+0x81/0xf0\n __fput+0x3f6/0xb30\n task_work_run+0x151/0x250\n do_exit+0xa79/0x2c30\n do_group_exit+0xd5/0x2a0\n get_signal+0x1fcd/0x2210\n arch_do_signal_or_restart+0x93/0x780\n syscall_exit_to_user_mode+0x140/0x290\n do_syscall_64+0xd4/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nIn \u0027hci_conn_del_sysfs()\u0027, \u0027device_unregister()\u0027 may be called when\nan underlying (kobject) reference counter is greater than 1. This\nmeans that reparenting (happened when the device is actually freed)\nis delayed and, during that delay, parent controller device (hciX)\nmay be deleted. Since the latter may create a dangling pointer to\nfreed parent, avoid that scenario by reparenting to NULL explicitly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53237",
"url": "https://www.suse.com/security/cve/CVE-2024-53237"
},
{
"category": "external",
"summary": "SUSE Bug 1235007 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "external",
"summary": "SUSE Bug 1235008 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53237"
},
{
"cve": "CVE-2024-53239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: Release resources at card release\n\nThe current 6fire code tries to release the resources right after the\ncall of usb6fire_chip_abort(). But at this moment, the card object\nmight be still in use (as we\u0027re calling snd_card_free_when_closed()).\n\nFor avoid potential UAFs, move the release of resources to the card\u0027s\nprivate_free instead of the manual call of usb6fire_chip_destroy() at\nthe USB disconnect callback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53239",
"url": "https://www.suse.com/security/cve/CVE-2024-53239"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235054 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "external",
"summary": "SUSE Bug 1235055 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53239"
},
{
"cve": "CVE-2024-53240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53240"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netfront: fix crash when removing device\n\nWhen removing a netfront device directly after a suspend/resume cycle\nit might happen that the queues have not been setup again, causing a\ncrash during the attempt to stop the queues another time.\n\nFix that by checking the queues are existing before trying to stop\nthem.\n\nThis is XSA-465 / CVE-2024-53240.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53240",
"url": "https://www.suse.com/security/cve/CVE-2024-53240"
},
{
"category": "external",
"summary": "SUSE Bug 1234281 for CVE-2024-53240",
"url": "https://bugzilla.suse.com/1234281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53240"
},
{
"cve": "CVE-2024-53241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53241"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: don\u0027t do PV iret hypercall through hypercall page\n\nInstead of jumping to the Xen hypercall page for doing the iret\nhypercall, directly code the required sequence in xen-asm.S.\n\nThis is done in preparation of no longer using hypercall page at all,\nas it has shown to cause problems with speculation mitigations.\n\nThis is part of XSA-466 / CVE-2024-53241.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53241",
"url": "https://www.suse.com/security/cve/CVE-2024-53241"
},
{
"category": "external",
"summary": "SUSE Bug 1234282 for CVE-2024-53241",
"url": "https://bugzilla.suse.com/1234282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53241"
},
{
"cve": "CVE-2024-53685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: give up on paths longer than PATH_MAX\n\nIf the full path to be built by ceph_mdsc_build_path() happens to be\nlonger than PATH_MAX, then this function will enter an endless (retry)\nloop, effectively blocking the whole task. Most of the machine\nbecomes unusable, making this a very simple and effective DoS\nvulnerability.\n\nI cannot imagine why this retry was ever implemented, but it seems\nrather useless and harmful to me. Let\u0027s remove it and fail with\nENAMETOOLONG instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53685",
"url": "https://www.suse.com/security/cve/CVE-2024-53685"
},
{
"category": "external",
"summary": "SUSE Bug 1235720 for CVE-2024-53685",
"url": "https://bugzilla.suse.com/1235720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53685"
},
{
"cve": "CVE-2024-53690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: prevent use of deleted inode\n\nsyzbot reported a WARNING in nilfs_rmdir. [1]\n\nBecause the inode bitmap is corrupted, an inode with an inode number that\nshould exist as a \".nilfs\" file was reassigned by nilfs_mkdir for \"file0\",\ncausing an inode duplication during execution. And this causes an\nunderflow of i_nlink in rmdir operations.\n\nThe inode is used twice by the same task to unmount and remove directories\n\".nilfs\" and \"file0\", it trigger warning in nilfs_rmdir.\n\nAvoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means\nthat this inode has been deleted, and iput is executed to reclaim it.\n\n[1]\nWARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407\n...\nCall Trace:\n \u003cTASK\u003e\n nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342\n vfs_rmdir+0x3a3/0x510 fs/namei.c:4394\n do_rmdir+0x3b5/0x580 fs/namei.c:4453\n __do_sys_rmdir fs/namei.c:4472 [inline]\n __se_sys_rmdir fs/namei.c:4470 [inline]\n __x64_sys_rmdir+0x47/0x50 fs/namei.c:4470\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53690",
"url": "https://www.suse.com/security/cve/CVE-2024-53690"
},
{
"category": "external",
"summary": "SUSE Bug 1235842 for CVE-2024-53690",
"url": "https://bugzilla.suse.com/1235842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53690"
},
{
"cve": "CVE-2024-54680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-54680"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-54680",
"url": "https://www.suse.com/security/cve/CVE-2024-54680"
},
{
"category": "external",
"summary": "SUSE Bug 1235723 for CVE-2024-54680",
"url": "https://bugzilla.suse.com/1235723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-54680"
},
{
"cve": "CVE-2024-55639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55639"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: renesas: rswitch: avoid use-after-put for a device tree node\n\nThe device tree node saved in the rswitch_device structure is used at\nseveral driver locations. So passing this node to of_node_put() after\nthe first use is wrong.\n\nMove of_node_put() for this node to exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55639",
"url": "https://www.suse.com/security/cve/CVE-2024-55639"
},
{
"category": "external",
"summary": "SUSE Bug 1235737 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "external",
"summary": "SUSE Bug 1235738 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-55639"
},
{
"cve": "CVE-2024-55881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Play nice with protected guests in complete_hypercall_exit()\n\nUse is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit\nhypercall when completing said hypercall. For guests with protected state,\ne.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit\nmode as the vCPU state needed to detect 64-bit mode is unavailable.\n\nHacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE\nhypercall via VMGEXIT trips the WARN:\n\n ------------[ cut here ]------------\n WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm]\n Modules linked in: kvm_amd kvm ... [last unloaded: kvm]\n CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat #470\n Hardware name: Google Astoria/astoria, BIOS 0.20240617.0-0 06/17/2024\n RIP: 0010:complete_hypercall_exit+0x44/0xe0 [kvm]\n Call Trace:\n \u003cTASK\u003e\n kvm_arch_vcpu_ioctl_run+0x2400/0x2720 [kvm]\n kvm_vcpu_ioctl+0x54f/0x630 [kvm]\n __se_sys_ioctl+0x6b/0xc0\n do_syscall_64+0x83/0x160\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55881",
"url": "https://www.suse.com/security/cve/CVE-2024-55881"
},
{
"category": "external",
"summary": "SUSE Bug 1235745 for CVE-2024-55881",
"url": "https://bugzilla.suse.com/1235745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-55881"
},
{
"cve": "CVE-2024-55916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet\n\nIf the KVP (or VSS) daemon starts before the VMBus channel\u0027s ringbuffer is\nfully initialized, we can hit the panic below:\n\nhv_utils: Registering HyperV Utility Driver\nhv_vmbus: registering driver hv_utils\n...\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1\nRIP: 0010:hv_pkt_iter_first+0x12/0xd0\nCall Trace:\n...\n vmbus_recvpacket\n hv_kvp_onchannelcallback\n vmbus_on_event\n tasklet_action_common\n tasklet_action\n handle_softirqs\n irq_exit_rcu\n sysvec_hyperv_stimer0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_hyperv_stimer0\n...\n kvp_register_done\n hvt_op_read\n vfs_read\n ksys_read\n __x64_sys_read\n\nThis can happen because the KVP/VSS channel callback can be invoked\neven before the channel is fully opened:\n1) as soon as hv_kvp_init() -\u003e hvutil_transport_init() creates\n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and\nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the\nfile (which is handled by kvp_on_msg() -\u003ekvp_handle_handshake()) and\nreading the file for the driver\u0027s response, which is handled by\nhvt_op_read(), which calls hvt-\u003eon_read(), i.e. kvp_register_done().\n\n2) the problem with kvp_register_done() is that it can cause the\nchannel callback to be called even before the channel is fully opened,\nand when the channel callback is starting to run, util_probe()-\u003e\nvmbus_open() may have not initialized the ringbuffer yet, so the\ncallback can hit the panic of NULL pointer dereference.\n\nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in\n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we\nunload and reload the driver hv_utils, and run the daemon manually within\nthe 10 seconds.\n\nFix the panic by reordering the steps in util_probe() so the char dev\nentry used by the KVP or VSS daemon is not created until after\nvmbus_open() has completed. This reordering prevents the race condition\nfrom happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55916",
"url": "https://www.suse.com/security/cve/CVE-2024-55916"
},
{
"category": "external",
"summary": "SUSE Bug 1235747 for CVE-2024-55916",
"url": "https://bugzilla.suse.com/1235747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-55916"
},
{
"cve": "CVE-2024-56369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/modes: Avoid divide by zero harder in drm_mode_vrefresh()\n\ndrm_mode_vrefresh() is trying to avoid divide by zero\nby checking whether htotal or vtotal are zero. But we may\nstill end up with a div-by-zero of vtotal*htotal*...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56369",
"url": "https://www.suse.com/security/cve/CVE-2024-56369"
},
{
"category": "external",
"summary": "SUSE Bug 1235750 for CVE-2024-56369",
"url": "https://bugzilla.suse.com/1235750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56369"
},
{
"cve": "CVE-2024-56372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56372"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: fix tun_napi_alloc_frags()\n\nsyzbot reported the following crash [1]\n\nIssue came with the blamed commit. Instead of going through\nall the iov components, we keep using the first one\nand end up with a malformed skb.\n\n[1]\n\nkernel BUG at net/core/skbuff.c:2849 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6230 Comm: syz-executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\n RIP: 0010:__pskb_pull_tail+0x1568/0x1570 net/core/skbuff.c:2848\nCode: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 92 96 74 f8 e9 25 f1 ff ff e8 e8 ae 09 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 d9 ae 09 f8 90 \u003c0f\u003e 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90\nRSP: 0018:ffffc90004cbef30 EFLAGS: 00010293\nRAX: ffffffff8995c347 RBX: 00000000fffffff2 RCX: ffff88802cf45a00\nRDX: 0000000000000000 RSI: 00000000fffffff2 RDI: 0000000000000000\nRBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c\nR10: dffffc0000000000 R11: ffffed100fbe185d R12: ffff888076e85d50\nR13: ffff888076e85c80 R14: ffff888076e85cf4 R15: ffff888076e85c80\nFS: 00007f0dca6ea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f0dca6ead58 CR3: 00000000119da000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_cow_data+0x2da/0xcb0 net/core/skbuff.c:5284\n tipc_aead_decrypt net/tipc/crypto.c:894 [inline]\n tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.c:1844\n tipc_rcv+0x57e/0x12a0 net/tipc/node.c:2109\n tipc_l2_rcv_msg+0x2bd/0x450 net/tipc/bearer.c:668\n __netif_receive_skb_list_ptype net/core/dev.c:5720 [inline]\n __netif_receive_skb_list_core+0x8b7/0x980 net/core/dev.c:5762\n __netif_receive_skb_list net/core/dev.c:5814 [inline]\n netif_receive_skb_list_internal+0xa51/0xe30 net/core/dev.c:5905\n gro_normal_list include/net/gro.h:515 [inline]\n napi_complete_done+0x2b5/0x870 net/core/dev.c:6256\n napi_complete include/linux/netdevice.h:567 [inline]\n tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2057\n do_iter_readv_writev+0x600/0x880\n vfs_writev+0x376/0xba0 fs/read_write.c:1050\n do_writev+0x1b6/0x360 fs/read_write.c:1096\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56372",
"url": "https://www.suse.com/security/cve/CVE-2024-56372"
},
{
"category": "external",
"summary": "SUSE Bug 1235753 for CVE-2024-56372",
"url": "https://bugzilla.suse.com/1235753"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56372"
},
{
"cve": "CVE-2024-56531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56531"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThis patch also splits the code to the disconnect and the free phases;\nthe former is called immediately at the USB disconnect callback while\nthe latter is called from the card destructor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56531",
"url": "https://www.suse.com/security/cve/CVE-2024-56531"
},
{
"category": "external",
"summary": "SUSE Bug 1235057 for CVE-2024-56531",
"url": "https://bugzilla.suse.com/1235057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56531"
},
{
"cve": "CVE-2024-56532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: us122l: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThe loop of us122l-\u003emmap_count check is dropped as well. The check is\nuseless for the asynchronous operation with *_when_closed().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56532",
"url": "https://www.suse.com/security/cve/CVE-2024-56532"
},
{
"category": "external",
"summary": "SUSE Bug 1235059 for CVE-2024-56532",
"url": "https://bugzilla.suse.com/1235059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56533"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56533",
"url": "https://www.suse.com/security/cve/CVE-2024-56533"
},
{
"category": "external",
"summary": "SUSE Bug 1235053 for CVE-2024-56533",
"url": "https://bugzilla.suse.com/1235053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56536"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cw1200: Fix potential NULL dereference\n\nA recent refactoring was identified by static analysis to\ncause a potential NULL dereference, fix this!",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56536",
"url": "https://www.suse.com/security/cve/CVE-2024-56536"
},
{
"category": "external",
"summary": "SUSE Bug 1234911 for CVE-2024-56536",
"url": "https://bugzilla.suse.com/1234911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56536"
},
{
"cve": "CVE-2024-56538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56538"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: zynqmp_kms: Unplug DRM device before removal\n\nPrevent userspace accesses to the DRM device from causing\nuse-after-frees by unplugging the device before we remove it. This\ncauses any further userspace accesses to result in an error without\nfurther calls into this driver\u0027s internals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56538",
"url": "https://www.suse.com/security/cve/CVE-2024-56538"
},
{
"category": "external",
"summary": "SUSE Bug 1235051 for CVE-2024-56538",
"url": "https://bugzilla.suse.com/1235051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56538"
},
{
"cve": "CVE-2024-56539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56539"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()\n\nReplace one-element array with a flexible-array member in `struct\nmwifiex_ie_types_wildcard_ssid_params` to fix the following warning\non a MT8173 Chromebook (mt8173-elm-hana):\n\n[ 356.775250] ------------[ cut here ]------------\n[ 356.784543] memcpy: detected field-spanning write (size 6) of single field \"wildcard_ssid_tlv-\u003essid\" at drivers/net/wireless/marvell/mwifiex/scan.c:904 (size 1)\n[ 356.813403] WARNING: CPU: 3 PID: 742 at drivers/net/wireless/marvell/mwifiex/scan.c:904 mwifiex_scan_networks+0x4fc/0xf28 [mwifiex]\n\nThe \"(size 6)\" above is exactly the length of the SSID of the network\nthis device was connected to. The source of the warning looks like:\n\n ssid_len = user_scan_in-\u003essid_list[i].ssid_len;\n [...]\n memcpy(wildcard_ssid_tlv-\u003essid,\n user_scan_in-\u003essid_list[i].ssid, ssid_len);\n\nThere is a #define WILDCARD_SSID_TLV_MAX_SIZE that uses sizeof() on this\nstruct, but it already didn\u0027t account for the size of the one-element\narray, so it doesn\u0027t need to be changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56539",
"url": "https://www.suse.com/security/cve/CVE-2024-56539"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234963 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "external",
"summary": "SUSE Bug 1234964 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56539"
},
{
"cve": "CVE-2024-56543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56543"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Skip Rx TID cleanup for self peer\n\nDuring peer create, dp setup for the peer is done where Rx TID is\nupdated for all the TIDs. Peer object for self peer will not go through\ndp setup.\n\nWhen core halts, dp cleanup is done for all the peers. While cleanup,\nrx_tid::ab is accessed which causes below stack trace for self peer.\n\nWARNING: CPU: 6 PID: 12297 at drivers/net/wireless/ath/ath12k/dp_rx.c:851\nCall Trace:\n__warn+0x7b/0x1a0\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nreport_bug+0x10b/0x200\nhandle_bug+0x3f/0x70\nexc_invalid_op+0x13/0x60\nasm_exc_invalid_op+0x16/0x20\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nath12k_dp_rx_frags_cleanup+0xca/0xe0 [ath12k]\nath12k_dp_rx_peer_tid_cleanup+0x39/0xa0 [ath12k]\nath12k_mac_peer_cleanup_all+0x61/0x100 [ath12k]\nath12k_core_halt+0x3b/0x100 [ath12k]\nath12k_core_reset+0x494/0x4c0 [ath12k]\n\nsta object in peer will be updated when remote peer is created. Hence\nuse peer::sta to detect the self peer and skip the cleanup.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56543",
"url": "https://www.suse.com/security/cve/CVE-2024-56543"
},
{
"category": "external",
"summary": "SUSE Bug 1235065 for CVE-2024-56543",
"url": "https://bugzilla.suse.com/1235065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56543"
},
{
"cve": "CVE-2024-56546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56546"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()\n\nIf we fail to allocate memory for cb_data by kmalloc, the memory\nallocation for eve_data is never freed, add the missing kfree()\nin the error handling path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56546",
"url": "https://www.suse.com/security/cve/CVE-2024-56546"
},
{
"category": "external",
"summary": "SUSE Bug 1235070 for CVE-2024-56546",
"url": "https://bugzilla.suse.com/1235070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56546"
},
{
"cve": "CVE-2024-56548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56548"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: don\u0027t query the device logical block size multiple times\n\nDevices block sizes may change. One of these cases is a loop device by\nusing ioctl LOOP_SET_BLOCK_SIZE.\n\nWhile this may cause other issues like IO being rejected, in the case of\nhfsplus, it will allocate a block by using that size and potentially write\nout-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the\nlatter function reads a different io_size.\n\nUsing a new min_io_size initally set to sb_min_blocksize works for the\npurposes of the original fix, since it will be set to the max between\nHFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the\nmax between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not\ninitialized.\n\nTested by mounting an hfsplus filesystem with loop block sizes 512, 1024\nand 4096.\n\nThe produced KASAN report before the fix looks like this:\n\n[ 419.944641] ==================================================================\n[ 419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a\n[ 419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678\n[ 419.947612]\n[ 419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84\n[ 419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[ 419.950035] Call Trace:\n[ 419.950384] \u003cTASK\u003e\n[ 419.950676] dump_stack_lvl+0x57/0x78\n[ 419.951212] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.951830] print_report+0x14c/0x49e\n[ 419.952361] ? __virt_addr_valid+0x267/0x278\n[ 419.952979] ? kmem_cache_debug_flags+0xc/0x1d\n[ 419.953561] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.954231] kasan_report+0x89/0xb0\n[ 419.954748] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955367] hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955948] ? __pfx_hfsplus_read_wrapper+0x10/0x10\n[ 419.956618] ? do_raw_spin_unlock+0x59/0x1a9\n[ 419.957214] ? _raw_spin_unlock+0x1a/0x2e\n[ 419.957772] hfsplus_fill_super+0x348/0x1590\n[ 419.958355] ? hlock_class+0x4c/0x109\n[ 419.958867] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.959499] ? __pfx_string+0x10/0x10\n[ 419.960006] ? lock_acquire+0x3e2/0x454\n[ 419.960532] ? bdev_name.constprop.0+0xce/0x243\n[ 419.961129] ? __pfx_bdev_name.constprop.0+0x10/0x10\n[ 419.961799] ? pointer+0x3f0/0x62f\n[ 419.962277] ? __pfx_pointer+0x10/0x10\n[ 419.962761] ? vsnprintf+0x6c4/0xfba\n[ 419.963178] ? __pfx_vsnprintf+0x10/0x10\n[ 419.963621] ? setup_bdev_super+0x376/0x3b3\n[ 419.964029] ? snprintf+0x9d/0xd2\n[ 419.964344] ? __pfx_snprintf+0x10/0x10\n[ 419.964675] ? lock_acquired+0x45c/0x5e9\n[ 419.965016] ? set_blocksize+0x139/0x1c1\n[ 419.965381] ? sb_set_blocksize+0x6d/0xae\n[ 419.965742] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.966179] mount_bdev+0x12f/0x1bf\n[ 419.966512] ? __pfx_mount_bdev+0x10/0x10\n[ 419.966886] ? vfs_parse_fs_string+0xce/0x111\n[ 419.967293] ? __pfx_vfs_parse_fs_string+0x10/0x10\n[ 419.967702] ? __pfx_hfsplus_mount+0x10/0x10\n[ 419.968073] legacy_get_tree+0x104/0x178\n[ 419.968414] vfs_get_tree+0x86/0x296\n[ 419.968751] path_mount+0xba3/0xd0b\n[ 419.969157] ? __pfx_path_mount+0x10/0x10\n[ 419.969594] ? kmem_cache_free+0x1e2/0x260\n[ 419.970311] do_mount+0x99/0xe0\n[ 419.970630] ? __pfx_do_mount+0x10/0x10\n[ 419.971008] __do_sys_mount+0x199/0x1c9\n[ 419.971397] do_syscall_64+0xd0/0x135\n[ 419.971761] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 419.972233] RIP: 0033:0x7c3cb812972e\n[ 419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48\n[ 419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5\n[ 419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e\n[ 419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56548",
"url": "https://www.suse.com/security/cve/CVE-2024-56548"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235073 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "external",
"summary": "SUSE Bug 1235074 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56548"
},
{
"cve": "CVE-2024-56549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56549"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: Fix NULL pointer dereference in object-\u003efile\n\nAt present, the object-\u003efile has the NULL pointer dereference problem in\nondemand-mode. The root cause is that the allocated fd and object-\u003efile\nlifetime are inconsistent, and the user-space invocation to anon_fd uses\nobject-\u003efile. Following is the process that triggers the issue:\n\n\t [write fd]\t\t\t\t[umount]\ncachefiles_ondemand_fd_write_iter\n\t\t\t\t fscache_cookie_state_machine\n\t\t\t\t\t cachefiles_withdraw_cookie\n if (!file) return -ENOBUFS\n\t\t\t\t\t cachefiles_clean_up_object\n\t\t\t\t\t cachefiles_unmark_inode_in_use\n\t\t\t\t\t fput(object-\u003efile)\n\t\t\t\t\t object-\u003efile = NULL\n // file NULL pointer dereference!\n __cachefiles_write(..., file, ...)\n\nFix this issue by add an additional reference count to the object-\u003efile\nbefore write/llseek, and decrement after it finished.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56549",
"url": "https://www.suse.com/security/cve/CVE-2024-56549"
},
{
"category": "external",
"summary": "SUSE Bug 1234912 for CVE-2024-56549",
"url": "https://bugzilla.suse.com/1234912"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56549"
},
{
"cve": "CVE-2024-56551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56551"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix usage slab after free\n\n[ +0.000021] BUG: KASAN: slab-use-after-free in drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000027] Read of size 8 at addr ffff8881b8605f88 by task amd_pci_unplug/2147\n\n[ +0.000023] CPU: 6 PID: 2147 Comm: amd_pci_unplug Not tainted 6.10.0+ #1\n[ +0.000016] Hardware name: ASUS System Product Name/ROG STRIX B550-F GAMING (WI-FI), BIOS 1401 12/03/2020\n[ +0.000016] Call Trace:\n[ +0.000008] \u003cTASK\u003e\n[ +0.000009] dump_stack_lvl+0x76/0xa0\n[ +0.000017] print_report+0xce/0x5f0\n[ +0.000017] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] ? srso_return_thunk+0x5/0x5f\n[ +0.000015] ? kasan_complete_mode_report_info+0x72/0x200\n[ +0.000016] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] kasan_report+0xbe/0x110\n[ +0.000015] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000023] __asan_report_load8_noabort+0x14/0x30\n[ +0.000014] drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000016] ? __pfx_drm_sched_entity_flush+0x10/0x10 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? enable_work+0x124/0x220\n[ +0.000015] ? __pfx_enable_work+0x10/0x10\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? free_large_kmalloc+0x85/0xf0\n[ +0.000016] drm_sched_entity_destroy+0x18/0x30 [gpu_sched]\n[ +0.000020] amdgpu_vce_sw_fini+0x55/0x170 [amdgpu]\n[ +0.000735] ? __kasan_check_read+0x11/0x20\n[ +0.000016] vce_v4_0_sw_fini+0x80/0x110 [amdgpu]\n[ +0.000726] amdgpu_device_fini_sw+0x331/0xfc0 [amdgpu]\n[ +0.000679] ? mutex_unlock+0x80/0xe0\n[ +0.000017] ? __pfx_amdgpu_device_fini_sw+0x10/0x10 [amdgpu]\n[ +0.000662] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? mutex_unlock+0x80/0xe0\n[ +0.000016] amdgpu_driver_release_kms+0x16/0x80 [amdgpu]\n[ +0.000663] drm_minor_release+0xc9/0x140 [drm]\n[ +0.000081] drm_release+0x1fd/0x390 [drm]\n[ +0.000082] __fput+0x36c/0xad0\n[ +0.000018] __fput_sync+0x3c/0x50\n[ +0.000014] __x64_sys_close+0x7d/0xe0\n[ +0.000014] x64_sys_call+0x1bc6/0x2680\n[ +0.000014] do_syscall_64+0x70/0x130\n[ +0.000014] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit_to_user_mode+0x60/0x190\n[ +0.000015] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit+0x43/0x50\n[ +0.000012] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? exc_page_fault+0x7c/0x110\n[ +0.000015] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ +0.000014] RIP: 0033:0x7ffff7b14f67\n[ +0.000013] Code: ff e8 0d 16 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 03 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 73 ba f7 ff\n[ +0.000026] RSP: 002b:00007fffffffe378 EFLAGS: 00000246 ORIG_RAX: 0000000000000003\n[ +0.000019] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffff7b14f67\n[ +0.000014] RDX: 0000000000000000 RSI: 00007ffff7f6f47a RDI: 0000000000000003\n[ +0.000014] RBP: 00007fffffffe3a0 R08: 0000555555569890 R09: 0000000000000000\n[ +0.000014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffffffe5c8\n[ +0.000013] R13: 00005555555552a9 R14: 0000555555557d48 R15: 00007ffff7ffd040\n[ +0.000020] \u003c/TASK\u003e\n\n[ +0.000016] Allocated by task 383 on cpu 7 at 26.880319s:\n[ +0.000014] kasan_save_stack+0x28/0x60\n[ +0.000008] kasan_save_track+0x18/0x70\n[ +0.000007] kasan_save_alloc_info+0x38/0x60\n[ +0.000007] __kasan_kmalloc+0xc1/0xd0\n[ +0.000007] kmalloc_trace_noprof+0x180/0x380\n[ +0.000007] drm_sched_init+0x411/0xec0 [gpu_sched]\n[ +0.000012] amdgpu_device_init+0x695f/0xa610 [amdgpu]\n[ +0.000658] amdgpu_driver_load_kms+0x1a/0x120 [amdgpu]\n[ +0.000662] amdgpu_pci_p\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56551",
"url": "https://www.suse.com/security/cve/CVE-2024-56551"
},
{
"category": "external",
"summary": "SUSE Bug 1235075 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "external",
"summary": "SUSE Bug 1235102 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56551"
},
{
"cve": "CVE-2024-56557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56557"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer\n\nThe AD7923 was updated to support devices with 8 channels, but the size\nof tx_buf and ring_xfer was not increased accordingly, leading to a\npotential buffer overflow in ad7923_update_scan_mode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56557",
"url": "https://www.suse.com/security/cve/CVE-2024-56557"
},
{
"category": "external",
"summary": "SUSE Bug 1235122 for CVE-2024-56557",
"url": "https://bugzilla.suse.com/1235122"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56557"
},
{
"cve": "CVE-2024-56558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56558"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: make sure exp active before svc_export_show\n\nThe function `e_show` was called with protection from RCU. This only\nensures that `exp` will not be freed. Therefore, the reference count for\n`exp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `exp_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `exp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 3 PID: 819 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n...\nCall Trace:\n \u003cTASK\u003e\n e_show+0x20b/0x230 [nfsd]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56558",
"url": "https://www.suse.com/security/cve/CVE-2024-56558"
},
{
"category": "external",
"summary": "SUSE Bug 1235100 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "external",
"summary": "SUSE Bug 1243648 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1243648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56558"
},
{
"cve": "CVE-2024-56562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56562"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()\n\nif (dev-\u003eboardinfo \u0026\u0026 dev-\u003eboardinfo-\u003einit_dyn_addr)\n ^^^ here check \"init_dyn_addr\"\n\ti3c_bus_set_addr_slot_status(\u0026master-\u003ebus, dev-\u003einfo.dyn_addr, ...)\n\t\t\t\t\t\t ^^^^\n\t\t\t\t\t\t\tfree \"dyn_addr\"\nFix copy/paste error \"dyn_addr\" by replacing it with \"init_dyn_addr\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56562",
"url": "https://www.suse.com/security/cve/CVE-2024-56562"
},
{
"category": "external",
"summary": "SUSE Bug 1234930 for CVE-2024-56562",
"url": "https://bugzilla.suse.com/1234930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56562"
},
{
"cve": "CVE-2024-56566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56566"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slub: Avoid list corruption when removing a slab from the full list\n\nBoot with slub_debug=UFPZ.\n\nIf allocated object failed in alloc_consistency_checks, all objects of\nthe slab will be marked as used, and then the slab will be removed from\nthe partial list.\n\nWhen an object belonging to the slab got freed later, the remove_full()\nfunction is called. Because the slab is neither on the partial list nor\non the full list, it eventually lead to a list corruption (actually a\nlist poison being detected).\n\nSo we need to mark and isolate the slab page with metadata corruption,\ndo not put it back in circulation.\n\nBecause the debug caches avoid all the fastpaths, reusing the frozen bit\nto mark slab page with metadata corruption seems to be fine.\n\n[ 4277.385669] list_del corruption, ffffea00044b3e50-\u003enext is LIST_POISON1 (dead000000000100)\n[ 4277.387023] ------------[ cut here ]------------\n[ 4277.387880] kernel BUG at lib/list_debug.c:56!\n[ 4277.388680] invalid opcode: 0000 [#1] PREEMPT SMP PTI\n[ 4277.389562] CPU: 5 PID: 90 Comm: kworker/5:1 Kdump: loaded Tainted: G OE 6.6.1-1 #1\n[ 4277.392113] Workqueue: xfs-inodegc/vda1 xfs_inodegc_worker [xfs]\n[ 4277.393551] RIP: 0010:__list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.394518] Code: 48 91 82 e8 37 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 28 49 91 82 e8 26 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 58 49 91\n[ 4277.397292] RSP: 0018:ffffc90000333b38 EFLAGS: 00010082\n[ 4277.398202] RAX: 000000000000004e RBX: ffffea00044b3e50 RCX: 0000000000000000\n[ 4277.399340] RDX: 0000000000000002 RSI: ffffffff828f8715 RDI: 00000000ffffffff\n[ 4277.400545] RBP: ffffea00044b3e40 R08: 0000000000000000 R09: ffffc900003339f0\n[ 4277.401710] R10: 0000000000000003 R11: ffffffff82d44088 R12: ffff888112cf9910\n[ 4277.402887] R13: 0000000000000001 R14: 0000000000000001 R15: ffff8881000424c0\n[ 4277.404049] FS: 0000000000000000(0000) GS:ffff88842fd40000(0000) knlGS:0000000000000000\n[ 4277.405357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4277.406389] CR2: 00007f2ad0b24000 CR3: 0000000102a3a006 CR4: 00000000007706e0\n[ 4277.407589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 4277.408780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 4277.410000] PKRU: 55555554\n[ 4277.410645] Call Trace:\n[ 4277.411234] \u003cTASK\u003e\n[ 4277.411777] ? die+0x32/0x80\n[ 4277.412439] ? do_trap+0xd6/0x100\n[ 4277.413150] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.414158] ? do_error_trap+0x6a/0x90\n[ 4277.414948] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.415915] ? exc_invalid_op+0x4c/0x60\n[ 4277.416710] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.417675] ? asm_exc_invalid_op+0x16/0x20\n[ 4277.418482] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.419466] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.420410] free_to_partial_list+0x515/0x5e0\n[ 4277.421242] ? xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.422298] xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.423316] ? xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.424383] xfs_bmap_del_extent_delay+0x4fe/0x7d0 [xfs]\n[ 4277.425490] __xfs_bunmapi+0x50d/0x840 [xfs]\n[ 4277.426445] xfs_itruncate_extents_flags+0x13a/0x490 [xfs]\n[ 4277.427553] xfs_inactive_truncate+0xa3/0x120 [xfs]\n[ 4277.428567] xfs_inactive+0x22d/0x290 [xfs]\n[ 4277.429500] xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.430479] process_one_work+0x171/0x340\n[ 4277.431227] worker_thread+0x277/0x390\n[ 4277.431962] ? __pfx_worker_thread+0x10/0x10\n[ 4277.432752] kthread+0xf0/0x120\n[ 4277.433382] ? __pfx_kthread+0x10/0x10\n[ 4277.434134] ret_from_fork+0x2d/0x50\n[ 4277.434837] ? __pfx_kthread+0x10/0x10\n[ 4277.435566] ret_from_fork_asm+0x1b/0x30\n[ 4277.436280] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56566",
"url": "https://www.suse.com/security/cve/CVE-2024-56566"
},
{
"category": "external",
"summary": "SUSE Bug 1235033 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "external",
"summary": "SUSE Bug 1235034 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56566"
},
{
"cve": "CVE-2024-56567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56567"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nad7780: fix division by zero in ad7780_write_raw()\n\nIn the ad7780_write_raw() , val2 can be zero, which might lead to a\ndivision by zero error in DIV_ROUND_CLOSEST(). The ad7780_write_raw()\nis based on iio_info\u0027s write_raw. While val is explicitly declared that\ncan be zero (in read mode), val2 is not specified to be non-zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56567",
"url": "https://www.suse.com/security/cve/CVE-2024-56567"
},
{
"category": "external",
"summary": "SUSE Bug 1234916 for CVE-2024-56567",
"url": "https://bugzilla.suse.com/1234916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56567"
},
{
"cve": "CVE-2024-56568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56568"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Defer probe of clients after smmu device bound\n\nNull pointer dereference occurs due to a race between smmu\ndriver probe and client driver probe, when of_dma_configure()\nfor client is called after the iommu_device_register() for smmu driver\nprobe has executed but before the driver_bound() for smmu driver\nhas been called.\n\nFollowing is how the race occurs:\n\nT1:Smmu device probe\t\tT2: Client device probe\n\nreally_probe()\narm_smmu_device_probe()\niommu_device_register()\n\t\t\t\t\treally_probe()\n\t\t\t\t\tplatform_dma_configure()\n\t\t\t\t\tof_dma_configure()\n\t\t\t\t\tof_dma_configure_id()\n\t\t\t\t\tof_iommu_configure()\n\t\t\t\t\tiommu_probe_device()\n\t\t\t\t\tiommu_init_device()\n\t\t\t\t\tarm_smmu_probe_device()\n\t\t\t\t\tarm_smmu_get_by_fwnode()\n\t\t\t\t\t\tdriver_find_device_by_fwnode()\n\t\t\t\t\t\tdriver_find_device()\n\t\t\t\t\t\tnext_device()\n\t\t\t\t\t\tklist_next()\n\t\t\t\t\t\t /* null ptr\n\t\t\t\t\t\t assigned to smmu */\n\t\t\t\t\t/* null ptr dereference\n\t\t\t\t\t while smmu-\u003estreamid_mask */\ndriver_bound()\n\tklist_add_tail()\n\nWhen this null smmu pointer is dereferenced later in\narm_smmu_probe_device, the device crashes.\n\nFix this by deferring the probe of the client device\nuntil the smmu device has bound to the arm smmu driver.\n\n[will: Add comment]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56568",
"url": "https://www.suse.com/security/cve/CVE-2024-56568"
},
{
"category": "external",
"summary": "SUSE Bug 1235032 for CVE-2024-56568",
"url": "https://bugzilla.suse.com/1235032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56568"
},
{
"cve": "CVE-2024-56569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix regression with module command in stack_trace_filter\n\nWhen executing the following command:\n\n # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter\n\nThe current mod command causes a null pointer dereference. While commit\n0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\")\nhas addressed part of the issue, it left a corner case unhandled, which still\nresults in a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56569",
"url": "https://www.suse.com/security/cve/CVE-2024-56569"
},
{
"category": "external",
"summary": "SUSE Bug 1235031 for CVE-2024-56569",
"url": "https://bugzilla.suse.com/1235031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: Filter invalid inodes with missing lookup function\n\nAdd a check to the ovl_dentry_weird() function to prevent the\nprocessing of directory inodes that lack the lookup function.\nThis is important because such inodes can cause errors in overlayfs\nwhen passed to the lowerstack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56570",
"url": "https://www.suse.com/security/cve/CVE-2024-56570"
},
{
"category": "external",
"summary": "SUSE Bug 1235035 for CVE-2024-56570",
"url": "https://bugzilla.suse.com/1235035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56571"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56571",
"url": "https://www.suse.com/security/cve/CVE-2024-56571"
},
{
"category": "external",
"summary": "SUSE Bug 1235037 for CVE-2024-56571",
"url": "https://bugzilla.suse.com/1235037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56571"
},
{
"cve": "CVE-2024-56572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56572"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()\n\nThe buffer in the loop should be released under the exception path,\notherwise there may be a memory leak here.\n\nTo mitigate this, free the buffer when allegro_alloc_buffer fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56572",
"url": "https://www.suse.com/security/cve/CVE-2024-56572"
},
{
"category": "external",
"summary": "SUSE Bug 1235043 for CVE-2024-56572",
"url": "https://bugzilla.suse.com/1235043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56572"
},
{
"cve": "CVE-2024-56573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56573"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/libstub: Free correct pointer on failure\n\ncmdline_ptr is an out parameter, which is not allocated by the function\nitself, and likely points into the caller\u0027s stack.\n\ncmdline refers to the pool allocation that should be freed when cleaning\nup after a failure, so pass this instead to free_pool().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56573",
"url": "https://www.suse.com/security/cve/CVE-2024-56573"
},
{
"category": "external",
"summary": "SUSE Bug 1235042 for CVE-2024-56573",
"url": "https://bugzilla.suse.com/1235042"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56573"
},
{
"cve": "CVE-2024-56574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56574"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ts2020: fix null-ptr-deref in ts2020_probe()\n\nKASAN reported a null-ptr-deref issue when executing the following\ncommand:\n\n # echo ts2020 0x20 \u003e /sys/bus/i2c/devices/i2c-0/new_device\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]\n RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809\n RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010\n RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6\n R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790\n R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001\n FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n ts2020_probe+0xad/0xe10 [ts2020]\n i2c_device_probe+0x421/0xb40\n really_probe+0x266/0x850\n ...\n\nThe cause of the problem is that when using sysfs to dynamically register\nan i2c device, there is no platform data, but the probe process of ts2020\nneeds to use platform data, resulting in a null pointer being accessed.\n\nSolve this problem by adding checks to platform data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56574",
"url": "https://www.suse.com/security/cve/CVE-2024-56574"
},
{
"category": "external",
"summary": "SUSE Bug 1235040 for CVE-2024-56574",
"url": "https://bugzilla.suse.com/1235040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56575"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Ensure power suppliers be suspended before detach them\n\nThe power suppliers are always requested to suspend asynchronously,\ndev_pm_domain_detach() requires the caller to ensure proper\nsynchronization of this function with power management callbacks.\notherwise the detach may led to kernel panic, like below:\n\n[ 1457.107934] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000040\n[ 1457.116777] Mem abort info:\n[ 1457.119589] ESR = 0x0000000096000004\n[ 1457.123358] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 1457.128692] SET = 0, FnV = 0\n[ 1457.131764] EA = 0, S1PTW = 0\n[ 1457.134920] FSC = 0x04: level 0 translation fault\n[ 1457.139812] Data abort info:\n[ 1457.142707] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 1457.148196] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 1457.153256] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 1457.158563] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001138b6000\n[ 1457.165000] [0000000000000040] pgd=0000000000000000, p4d=0000000000000000\n[ 1457.171792] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 1457.178045] Modules linked in: v4l2_jpeg wave6_vpu_ctrl(-) [last unloaded: mxc_jpeg_encdec]\n[ 1457.186383] CPU: 0 PID: 51938 Comm: kworker/0:3 Not tainted 6.6.36-gd23d64eea511 #66\n[ 1457.194112] Hardware name: NXP i.MX95 19X19 board (DT)\n[ 1457.199236] Workqueue: pm pm_runtime_work\n[ 1457.203247] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 1457.210188] pc : genpd_runtime_suspend+0x20/0x290\n[ 1457.214886] lr : __rpm_callback+0x48/0x1d8\n[ 1457.218968] sp : ffff80008250bc50\n[ 1457.222270] x29: ffff80008250bc50 x28: 0000000000000000 x27: 0000000000000000\n[ 1457.229394] x26: 0000000000000000 x25: 0000000000000008 x24: 00000000000f4240\n[ 1457.236518] x23: 0000000000000000 x22: ffff00008590f0e4 x21: 0000000000000008\n[ 1457.243642] x20: ffff80008099c434 x19: ffff00008590f000 x18: ffffffffffffffff\n[ 1457.250766] x17: 5300326563697665 x16: 645f676e696c6f6f x15: 63343a6d726f6674\n[ 1457.257890] x14: 0000000000000004 x13: 00000000000003a4 x12: 0000000000000002\n[ 1457.265014] x11: 0000000000000000 x10: 0000000000000a60 x9 : ffff80008250bbb0\n[ 1457.272138] x8 : ffff000092937200 x7 : ffff0003fdf6af80 x6 : 0000000000000000\n[ 1457.279262] x5 : 00000000410fd050 x4 : 0000000000200000 x3 : 0000000000000000\n[ 1457.286386] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008590f000\n[ 1457.293510] Call trace:\n[ 1457.295946] genpd_runtime_suspend+0x20/0x290\n[ 1457.300296] __rpm_callback+0x48/0x1d8\n[ 1457.304038] rpm_callback+0x6c/0x78\n[ 1457.307515] rpm_suspend+0x10c/0x570\n[ 1457.311077] pm_runtime_work+0xc4/0xc8\n[ 1457.314813] process_one_work+0x138/0x248\n[ 1457.318816] worker_thread+0x320/0x438\n[ 1457.322552] kthread+0x110/0x114\n[ 1457.325767] ret_from_fork+0x10/0x20",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56575",
"url": "https://www.suse.com/security/cve/CVE-2024-56575"
},
{
"category": "external",
"summary": "SUSE Bug 1235039 for CVE-2024-56575",
"url": "https://bugzilla.suse.com/1235039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56575"
},
{
"cve": "CVE-2024-56576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56576"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: tc358743: Fix crash in the probe error path when using polling\n\nIf an error occurs in the probe() function, we should remove the polling\ntimer that was alarmed earlier, otherwise the timer is called with\narguments that are already freed, which results in a crash.\n\n------------[ cut here ]------------\nWARNING: CPU: 3 PID: 0 at kernel/time/timer.c:1830 __run_timers+0x244/0x268\nModules linked in:\nCPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0 #226\nHardware name: Diasom DS-RK3568-SOM-EVB (DT)\npstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __run_timers+0x244/0x268\nlr : __run_timers+0x1d4/0x268\nsp : ffffff80eff2baf0\nx29: ffffff80eff2bb50 x28: 7fffffffffffffff x27: ffffff80eff2bb00\nx26: ffffffc080f669c0 x25: ffffff80efef6bf0 x24: ffffff80eff2bb00\nx23: 0000000000000000 x22: dead000000000122 x21: 0000000000000000\nx20: ffffff80efef6b80 x19: ffffff80041c8bf8 x18: ffffffffffffffff\nx17: ffffffc06f146000 x16: ffffff80eff27dc0 x15: 000000000000003e\nx14: 0000000000000000 x13: 00000000000054da x12: 0000000000000000\nx11: 00000000000639c0 x10: 000000000000000c x9 : 0000000000000009\nx8 : ffffff80eff2cb40 x7 : ffffff80eff2cb40 x6 : ffffff8002bee480\nx5 : ffffffc080cb2220 x4 : ffffffc080cb2150 x3 : 00000000000f4240\nx2 : 0000000000000102 x1 : ffffff80eff2bb00 x0 : ffffff80041c8bf0\nCall trace:\n __run_timers+0x244/0x268\n timer_expire_remote+0x50/0x68\n tmigr_handle_remote+0x388/0x39c\n run_timer_softirq+0x38/0x44\n handle_softirqs+0x138/0x298\n __do_softirq+0x14/0x20\n ____do_softirq+0x10/0x1c\n call_on_irq_stack+0x24/0x4c\n do_softirq_own_stack+0x1c/0x2c\n irq_exit_rcu+0x9c/0xcc\n el1_interrupt+0x48/0xc0\n el1h_64_irq_handler+0x18/0x24\n el1h_64_irq+0x7c/0x80\n default_idle_call+0x34/0x68\n do_idle+0x23c/0x294\n cpu_startup_entry+0x38/0x3c\n secondary_start_kernel+0x128/0x160\n __secondary_switched+0xb8/0xbc\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56576",
"url": "https://www.suse.com/security/cve/CVE-2024-56576"
},
{
"category": "external",
"summary": "SUSE Bug 1235019 for CVE-2024-56576",
"url": "https://bugzilla.suse.com/1235019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56576"
},
{
"cve": "CVE-2024-56577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56577"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-jpeg: Fix null-ptr-deref during unload module\n\nThe workqueue should be destroyed in mtk_jpeg_core.c since commit\n09aea13ecf6f (\"media: mtk-jpeg: refactor some variables\"), otherwise\nthe below calltrace can be easily triggered.\n\n[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023\n[ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]\n...\n[ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17\n...\n[ 677.882838] pc : destroy_workqueue+0x3c/0x770\n[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.884314] sp : ffff80008ad974f0\n[ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070\n[ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690\n[ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff800000000000\n[ 677.887515] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800085397ac0\n[ 677.888438] x17: 0000000000000000 x16: ffff8000801b87c8 x15: 1ffff000115b2e10\n[ 677.889361] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d\n[ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90\n[ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001\n[ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000\n[ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118\n[ 677.893977] Call trace:\n[ 677.894297] destroy_workqueue+0x3c/0x770\n[ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.895677] devm_action_release+0x50/0x90\n[ 677.896211] release_nodes+0xe8/0x170\n[ 677.896688] devres_release_all+0xf8/0x178\n[ 677.897219] device_unbind_cleanup+0x24/0x170\n[ 677.897785] device_release_driver_internal+0x35c/0x480\n[ 677.898461] device_release_driver+0x20/0x38\n...\n[ 677.912665] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56577",
"url": "https://www.suse.com/security/cve/CVE-2024-56577"
},
{
"category": "external",
"summary": "SUSE Bug 1235112 for CVE-2024-56577",
"url": "https://bugzilla.suse.com/1235112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56577"
},
{
"cve": "CVE-2024-56578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Set video drvdata before register video device\n\nThe video drvdata should be set before the video device is registered,\notherwise video_drvdata() may return NULL in the open() file ops, and led\nto oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56578",
"url": "https://www.suse.com/security/cve/CVE-2024-56578"
},
{
"category": "external",
"summary": "SUSE Bug 1235115 for CVE-2024-56578",
"url": "https://bugzilla.suse.com/1235115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56578"
},
{
"cve": "CVE-2024-56582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56582"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free in btrfs_encoded_read_endio()\n\nShinichiro reported the following use-after free that sometimes is\nhappening in our CI system when running fstests\u0027 btrfs/284 on a TCMU\nrunner device:\n\n BUG: KASAN: slab-use-after-free in lock_release+0x708/0x780\n Read of size 8 at addr ffff888106a83f18 by task kworker/u80:6/219\n\n CPU: 8 UID: 0 PID: 219 Comm: kworker/u80:6 Not tainted 6.12.0-rc6-kts+ #15\n Hardware name: Supermicro Super Server/X11SPi-TF, BIOS 3.3 02/21/2020\n Workqueue: btrfs-endio btrfs_end_bio_work [btrfs]\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x6e/0xa0\n ? lock_release+0x708/0x780\n print_report+0x174/0x505\n ? lock_release+0x708/0x780\n ? __virt_addr_valid+0x224/0x410\n ? lock_release+0x708/0x780\n kasan_report+0xda/0x1b0\n ? lock_release+0x708/0x780\n ? __wake_up+0x44/0x60\n lock_release+0x708/0x780\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_do_raw_spin_lock+0x10/0x10\n ? lock_is_held_type+0x9a/0x110\n _raw_spin_unlock_irqrestore+0x1f/0x60\n __wake_up+0x44/0x60\n btrfs_encoded_read_endio+0x14b/0x190 [btrfs]\n btrfs_check_read_bio+0x8d9/0x1360 [btrfs]\n ? lock_release+0x1b0/0x780\n ? trace_lock_acquire+0x12f/0x1a0\n ? __pfx_btrfs_check_read_bio+0x10/0x10 [btrfs]\n ? process_one_work+0x7e3/0x1460\n ? lock_acquire+0x31/0xc0\n ? process_one_work+0x7e3/0x1460\n process_one_work+0x85c/0x1460\n ? __pfx_process_one_work+0x10/0x10\n ? assign_work+0x16c/0x240\n worker_thread+0x5e6/0xfc0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x2c3/0x3a0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x31/0x70\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\n Allocated by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n btrfs_encoded_read_regular_fill_pages+0x16c/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x70\n __kasan_slab_free+0x4f/0x70\n kfree+0x143/0x490\n btrfs_encoded_read_regular_fill_pages+0x531/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n The buggy address belongs to the object at ffff888106a83f00\n which belongs to the cache kmalloc-rnd-07-96 of size 96\n The buggy address is located 24 bytes inside of\n freed 96-byte region [ffff888106a83f00, ffff888106a83f60)\n\n The buggy address belongs to the physical page:\n page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888106a83800 pfn:0x106a83\n flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff)\n page_type: f5(slab)\n raw: 0017ffffc0000000 ffff888100053680 ffffea0004917200 0000000000000004\n raw: ffff888106a83800 0000000080200019 00000001f5000000 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff888106a83e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a83e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n \u003effff888106a83f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ^\n ffff888106a83f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a84000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ==================================================================\n\nFurther analyzing the trace and \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56582",
"url": "https://www.suse.com/security/cve/CVE-2024-56582"
},
{
"category": "external",
"summary": "SUSE Bug 1235128 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "external",
"summary": "SUSE Bug 1235129 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56582"
},
{
"cve": "CVE-2024-56584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56584"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/tctx: work around xa_store() allocation error issue\n\nsyzbot triggered the following WARN_ON:\n\nWARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51\n\nwhich is the\n\nWARN_ON_ONCE(!xa_empty(\u0026tctx-\u003exa));\n\nsanity check in __io_uring_free() when a io_uring_task is going through\nits final put. The syzbot test case includes injecting memory allocation\nfailures, and it very much looks like xa_store() can fail one of its\nmemory allocations and end up with -\u003ehead being non-NULL even though no\nentries exist in the xarray.\n\nUntil this issue gets sorted out, work around it by attempting to\niterate entries in our xarray, and WARN_ON_ONCE() if one is found.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56584",
"url": "https://www.suse.com/security/cve/CVE-2024-56584"
},
{
"category": "external",
"summary": "SUSE Bug 1235117 for CVE-2024-56584",
"url": "https://bugzilla.suse.com/1235117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56584"
},
{
"cve": "CVE-2024-56587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56587"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex\n\nThere is NULL pointer issue observed if from Process A where hid device\nbeing added which results in adding a led_cdev addition and later a\nanother call to access of led_cdev attribute from Process B can result\nin NULL pointer issue.\n\nUse mutex led_cdev-\u003eled_access to protect access to led-\u003ecdev and its\nattribute inside brightness_show() and max_brightness_show() and also\nupdate the comment for mutex that it should be used to protect the led\nclass device fields.\n\n\tProcess A \t\t\t\tProcess B\n\n kthread+0x114\n worker_thread+0x244\n process_scheduled_works+0x248\n uhid_device_add_worker+0x24\n hid_add_device+0x120\n device_add+0x268\n bus_probe_device+0x94\n device_initial_probe+0x14\n __device_attach+0xfc\n bus_for_each_drv+0x10c\n __device_attach_driver+0x14c\n driver_probe_device+0x3c\n __driver_probe_device+0xa0\n really_probe+0x190\n hid_device_probe+0x130\n ps_probe+0x990\n ps_led_register+0x94\n devm_led_classdev_register_ext+0x58\n led_classdev_register_ext+0x1f8\n device_create_with_groups+0x48\n device_create_groups_vargs+0xc8\n device_add+0x244\n kobject_uevent+0x14\n kobject_uevent_env[jt]+0x224\n mutex_unlock[jt]+0xc4\n __mutex_unlock_slowpath+0xd4\n wake_up_q+0x70\n try_to_wake_up[jt]+0x48c\n preempt_schedule_common+0x28\n __schedule+0x628\n __switch_to+0x174\n\t\t\t\t\t\tel0t_64_sync+0x1a8/0x1ac\n\t\t\t\t\t\tel0t_64_sync_handler+0x68/0xbc\n\t\t\t\t\t\tel0_svc+0x38/0x68\n\t\t\t\t\t\tdo_el0_svc+0x1c/0x28\n\t\t\t\t\t\tel0_svc_common+0x80/0xe0\n\t\t\t\t\t\tinvoke_syscall+0x58/0x114\n\t\t\t\t\t\t__arm64_sys_read+0x1c/0x2c\n\t\t\t\t\t\tksys_read+0x78/0xe8\n\t\t\t\t\t\tvfs_read+0x1e0/0x2c8\n\t\t\t\t\t\tkernfs_fop_read_iter+0x68/0x1b4\n\t\t\t\t\t\tseq_read_iter+0x158/0x4ec\n\t\t\t\t\t\tkernfs_seq_show+0x44/0x54\n\t\t\t\t\t\tsysfs_kf_seq_show+0xb4/0x130\n\t\t\t\t\t\tdev_attr_show+0x38/0x74\n\t\t\t\t\t\tbrightness_show+0x20/0x4c\n\t\t\t\t\t\tdualshock4_led_get_brightness+0xc/0x74\n\n[ 3313.874295][ T4013] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[ 3313.874301][ T4013] Mem abort info:\n[ 3313.874303][ T4013] ESR = 0x0000000096000006\n[ 3313.874305][ T4013] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 3313.874307][ T4013] SET = 0, FnV = 0\n[ 3313.874309][ T4013] EA = 0, S1PTW = 0\n[ 3313.874311][ T4013] FSC = 0x06: level 2 translation fault\n[ 3313.874313][ T4013] Data abort info:\n[ 3313.874314][ T4013] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000\n[ 3313.874316][ T4013] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 3313.874318][ T4013] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 3313.874320][ T4013] user pgtable: 4k pages, 39-bit VAs, pgdp=00000008f2b0a000\n..\n\n[ 3313.874332][ T4013] Dumping ftrace buffer:\n[ 3313.874334][ T4013] (ftrace buffer empty)\n..\n..\n[ dd3313.874639][ T4013] CPU: 6 PID: 4013 Comm: InputReader\n[ 3313.874648][ T4013] pc : dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874653][ T4013] lr : led_update_brightness+0x38/0x60\n[ 3313.874656][ T4013] sp : ffffffc0b910bbd0\n..\n..\n[ 3313.874685][ T4013] Call trace:\n[ 3313.874687][ T4013] dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874690][ T4013] brightness_show+0x20/0x4c\n[ 3313.874692][ T4013] dev_attr_show+0x38/0x74\n[ 3313.874696][ T4013] sysfs_kf_seq_show+0xb4/0x130\n[ 3313.874700][ T4013] kernfs_seq_show+0x44/0x54\n[ 3313.874703][ T4013] seq_read_iter+0x158/0x4ec\n[ 3313.874705][ T4013] kernfs_fop_read_iter+0x68/0x1b4\n[ 3313.874708][ T4013] vfs_read+0x1e0/0x2c8\n[ 3313.874711][ T4013] ksys_read+0x78/0xe8\n[ 3313.874714][ T4013] __arm64_sys_read+0x1c/0x2c\n[ 3313.874718][ T4013] invoke_syscall+0x58/0x114\n[ 3313.874721][ T4013] el0_svc_common+0x80/0xe0\n[ 3313.874724][ T4013] do_el0_svc+0x1c/0x28\n[ 3313.874727][ T4013] el0_svc+0x38/0x68\n[ 3313.874730][ T4013] el0t_64_sync_handler+0x68/0xbc\n[ 3313.874732][ T4013] el0t_64_sync+0x1a8/0x1ac",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56587",
"url": "https://www.suse.com/security/cve/CVE-2024-56587"
},
{
"category": "external",
"summary": "SUSE Bug 1235125 for CVE-2024-56587",
"url": "https://bugzilla.suse.com/1235125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56587"
},
{
"cve": "CVE-2024-56588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56588"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Create all dump files during debugfs initialization\n\nFor the current debugfs of hisi_sas, after user triggers dump, the\ndriver allocate memory space to save the register information and create\ndebugfs files to display the saved information. In this process, the\ndebugfs files created after each dump.\n\nTherefore, when the dump is triggered while the driver is unbind, the\nfollowing hang occurs:\n\n[67840.853907] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[67840.862947] Mem abort info:\n[67840.865855] ESR = 0x0000000096000004\n[67840.869713] EC = 0x25: DABT (current EL), IL = 32 bits\n[67840.875125] SET = 0, FnV = 0\n[67840.878291] EA = 0, S1PTW = 0\n[67840.881545] FSC = 0x04: level 0 translation fault\n[67840.886528] Data abort info:\n[67840.889524] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[67840.895117] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[67840.900284] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[67840.905709] user pgtable: 4k pages, 48-bit VAs, pgdp=0000002803a1f000\n[67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000\n[67840.919177] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[67840.996435] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[67841.003628] pc : down_write+0x30/0x98\n[67841.007546] lr : start_creating.part.0+0x60/0x198\n[67841.012495] sp : ffff8000b979ba20\n[67841.016046] x29: ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40\n[67841.023412] x26: 0000000000000012 x25: ffff20202b355ae8 x24: ffff20202b35a8c8\n[67841.030779] x23: ffffa36877928208 x22: ffffa368b4972240 x21: ffff8000b979bb18\n[67841.038147] x20: ffff00281dc1e3c0 x19: fffffffffffffffe x18: 0000000000000020\n[67841.045515] x17: 0000000000000000 x16: ffffa368b128a530 x15: ffffffffffffffff\n[67841.052888] x14: ffff8000b979bc18 x13: ffffffffffffffff x12: ffff8000b979bb18\n[67841.060263] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa368b1289b18\n[67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6 : 00000000000003a9\n[67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001\n[67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0\n[67841.089759] Call trace:\n[67841.092456] down_write+0x30/0x98\n[67841.096017] start_creating.part.0+0x60/0x198\n[67841.100613] debugfs_create_dir+0x48/0x1f8\n[67841.104950] debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw]\n[67841.111447] debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw]\n[67841.118111] debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw]\n[67841.125115] full_proxy_write+0x68/0xc8\n[67841.129175] vfs_write+0xd8/0x3f0\n[67841.132708] ksys_write+0x70/0x108\n[67841.136317] __arm64_sys_write+0x24/0x38\n[67841.140440] invoke_syscall+0x50/0x128\n[67841.144385] el0_svc_common.constprop.0+0xc8/0xf0\n[67841.149273] do_el0_svc+0x24/0x38\n[67841.152773] el0_svc+0x38/0xd8\n[67841.156009] el0t_64_sync_handler+0xc0/0xc8\n[67841.160361] el0t_64_sync+0x1a4/0x1a8\n[67841.164189] Code: b9000882 d2800002 d2800023 f9800011 (c85ffc05)\n[67841.170443] ---[ end trace 0000000000000000 ]---\n\nTo fix this issue, create all directories and files during debugfs\ninitialization. In this way, the driver only needs to allocate memory\nspace to save information each time the user triggers dumping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56588",
"url": "https://www.suse.com/security/cve/CVE-2024-56588"
},
{
"category": "external",
"summary": "SUSE Bug 1235123 for CVE-2024-56588",
"url": "https://bugzilla.suse.com/1235123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56588"
},
{
"cve": "CVE-2024-56589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56589"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Add cond_resched() for no forced preemption model\n\nFor no forced preemption model kernel, in the scenario where the\nexpander is connected to 12 high performance SAS SSDs, the following\ncall trace may occur:\n\n[ 214.409199][ C240] watchdog: BUG: soft lockup - CPU#240 stuck for 22s! [irq/149-hisi_sa:3211]\n[ 214.568533][ C240] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)\n[ 214.575224][ C240] pc : fput_many+0x8c/0xdc\n[ 214.579480][ C240] lr : fput+0x1c/0xf0\n[ 214.583302][ C240] sp : ffff80002de2b900\n[ 214.587298][ C240] x29: ffff80002de2b900 x28: ffff1082aa412000\n[ 214.593291][ C240] x27: ffff3062a0348c08 x26: ffff80003a9f6000\n[ 214.599284][ C240] x25: ffff1062bbac5c40 x24: 0000000000001000\n[ 214.605277][ C240] x23: 000000000000000a x22: 0000000000000001\n[ 214.611270][ C240] x21: 0000000000001000 x20: 0000000000000000\n[ 214.617262][ C240] x19: ffff3062a41ae580 x18: 0000000000010000\n[ 214.623255][ C240] x17: 0000000000000001 x16: ffffdb3a6efe5fc0\n[ 214.629248][ C240] x15: ffffffffffffffff x14: 0000000003ffffff\n[ 214.635241][ C240] x13: 000000000000ffff x12: 000000000000029c\n[ 214.641234][ C240] x11: 0000000000000006 x10: ffff80003a9f7fd0\n[ 214.647226][ C240] x9 : ffffdb3a6f0482fc x8 : 0000000000000001\n[ 214.653219][ C240] x7 : 0000000000000002 x6 : 0000000000000080\n[ 214.659212][ C240] x5 : ffff55480ee9b000 x4 : fffffde7f94c6554\n[ 214.665205][ C240] x3 : 0000000000000002 x2 : 0000000000000020\n[ 214.671198][ C240] x1 : 0000000000000021 x0 : ffff3062a41ae5b8\n[ 214.677191][ C240] Call trace:\n[ 214.680320][ C240] fput_many+0x8c/0xdc\n[ 214.684230][ C240] fput+0x1c/0xf0\n[ 214.687707][ C240] aio_complete_rw+0xd8/0x1fc\n[ 214.692225][ C240] blkdev_bio_end_io+0x98/0x140\n[ 214.696917][ C240] bio_endio+0x160/0x1bc\n[ 214.701001][ C240] blk_update_request+0x1c8/0x3bc\n[ 214.705867][ C240] scsi_end_request+0x3c/0x1f0\n[ 214.710471][ C240] scsi_io_completion+0x7c/0x1a0\n[ 214.715249][ C240] scsi_finish_command+0x104/0x140\n[ 214.720200][ C240] scsi_softirq_done+0x90/0x180\n[ 214.724892][ C240] blk_mq_complete_request+0x5c/0x70\n[ 214.730016][ C240] scsi_mq_done+0x48/0xac\n[ 214.734194][ C240] sas_scsi_task_done+0xbc/0x16c [libsas]\n[ 214.739758][ C240] slot_complete_v3_hw+0x260/0x760 [hisi_sas_v3_hw]\n[ 214.746185][ C240] cq_thread_v3_hw+0xbc/0x190 [hisi_sas_v3_hw]\n[ 214.752179][ C240] irq_thread_fn+0x34/0xa4\n[ 214.756435][ C240] irq_thread+0xc4/0x130\n[ 214.760520][ C240] kthread+0x108/0x13c\n[ 214.764430][ C240] ret_from_fork+0x10/0x18\n\nThis is because in the hisi_sas driver, both the hardware interrupt\nhandler and the interrupt thread are executed on the same CPU. In the\nperformance test scenario, function irq_wait_for_interrupt() will always\nreturn 0 if lots of interrupts occurs and the CPU will be continuously\nconsumed. As a result, the CPU cannot run the watchdog thread. When the\nwatchdog time exceeds the specified time, call trace occurs.\n\nTo fix it, add cond_resched() to execute the watchdog thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56589",
"url": "https://www.suse.com/security/cve/CVE-2024-56589"
},
{
"category": "external",
"summary": "SUSE Bug 1235241 for CVE-2024-56589",
"url": "https://bugzilla.suse.com/1235241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56589"
},
{
"cve": "CVE-2024-56590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56590"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix not checking skb length on hci_acldata_packet\n\nThis fixes not checking if skb really contains an ACL header otherwise\nthe code may attempt to access some uninitilized/invalid memory past the\nvalid skb-\u003edata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56590",
"url": "https://www.suse.com/security/cve/CVE-2024-56590"
},
{
"category": "external",
"summary": "SUSE Bug 1235038 for CVE-2024-56590",
"url": "https://bugzilla.suse.com/1235038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56590"
},
{
"cve": "CVE-2024-56593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56593"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()\n\nThis patch fixes a NULL pointer dereference bug in brcmfmac that occurs\nwhen a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs\nare sent from the pkt queue.\n\nThe problem is the number of entries in the pre-allocated sgtable, it is\nnents = max(rxglom_size, txglom_size) + max(rxglom_size, txglom_size) \u003e\u003e 4 + 1.\nGiven the default [rt]xglom_size=32 it\u0027s actually 35 which is too small.\nWorst case, the pkt queue can end up with 64 SKBs. This occurs when a new SKB\nis added for each original SKB if tailroom isn\u0027t enough to hold tail_pad.\nAt least one sg entry is needed for each SKB. So, eventually the \"skb_queue_walk loop\"\nin brcmf_sdiod_sglist_rw may run out of sg entries. This makes sg_next return\nNULL and this causes the oops.\n\nThe patch sets nents to max(rxglom_size, txglom_size) * 2 to be able handle\nthe worst-case.\nBtw. this requires only 64-35=29 * 16 (or 20 if CONFIG_NEED_SG_DMA_LENGTH) = 464\nadditional bytes of memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56593",
"url": "https://www.suse.com/security/cve/CVE-2024-56593"
},
{
"category": "external",
"summary": "SUSE Bug 1235252 for CVE-2024-56593",
"url": "https://bugzilla.suse.com/1235252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56594"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: set the right AMDGPU sg segment limitation\n\nThe driver needs to set the correct max_segment_size;\notherwise debug_dma_map_sg() will complain about the\nover-mapping of the AMDGPU sg length as following:\n\nWARNING: CPU: 6 PID: 1964 at kernel/dma/debug.c:1178 debug_dma_map_sg+0x2dc/0x370\n[ 364.049444] Modules linked in: veth amdgpu(OE) amdxcp drm_exec gpu_sched drm_buddy drm_ttm_helper ttm(OE) drm_suballoc_helper drm_display_helper drm_kms_helper i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc amd_atl intel_rapl_msr intel_rapl_common sunrpc sch_fq_codel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd binfmt_misc snd_hda_codec snd_pci_acp6x snd_hda_core snd_acp_config snd_hwdep snd_soc_acpi kvm_amd snd_pcm kvm snd_seq_midi snd_seq_midi_event crct10dif_pclmul ghash_clmulni_intel sha512_ssse3 snd_rawmidi sha256_ssse3 sha1_ssse3 aesni_intel snd_seq nls_iso8859_1 crypto_simd snd_seq_device cryptd snd_timer rapl input_leds snd\n[ 364.049532] ipmi_devintf wmi_bmof ccp serio_raw k10temp sp5100_tco soundcore ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 364.049576] CPU: 6 PID: 1964 Comm: rocminfo Tainted: G OE 6.10.0-custom #492\n[ 364.049579] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 364.049582] RIP: 0010:debug_dma_map_sg+0x2dc/0x370\n[ 364.049585] Code: 89 4d b8 e8 36 b1 86 00 8b 4d b8 48 8b 55 b0 44 8b 45 a8 4c 8b 4d a0 48 89 c6 48 c7 c7 00 4b 74 bc 4c 89 4d b8 e8 b4 73 f3 ff \u003c0f\u003e 0b 4c 8b 4d b8 8b 15 c8 2c b8 01 85 d2 0f 85 ee fd ff ff 8b 05\n[ 364.049588] RSP: 0018:ffff9ca600b57ac0 EFLAGS: 00010286\n[ 364.049590] RAX: 0000000000000000 RBX: ffff88b7c132b0c8 RCX: 0000000000000027\n[ 364.049592] RDX: ffff88bb0f521688 RSI: 0000000000000001 RDI: ffff88bb0f521680\n[ 364.049594] RBP: ffff9ca600b57b20 R08: 000000000000006f R09: ffff9ca600b57930\n[ 364.049596] R10: ffff9ca600b57928 R11: ffffffffbcb46328 R12: 0000000000000000\n[ 364.049597] R13: 0000000000000001 R14: ffff88b7c19c0700 R15: ffff88b7c9059800\n[ 364.049599] FS: 00007fb2d3516e80(0000) GS:ffff88bb0f500000(0000) knlGS:0000000000000000\n[ 364.049601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 364.049603] CR2: 000055610bd03598 CR3: 00000001049f6000 CR4: 0000000000350ef0\n[ 364.049605] Call Trace:\n[ 364.049607] \u003cTASK\u003e\n[ 364.049609] ? show_regs+0x6d/0x80\n[ 364.049614] ? __warn+0x8c/0x140\n[ 364.049618] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049621] ? report_bug+0x193/0x1a0\n[ 364.049627] ? handle_bug+0x46/0x80\n[ 364.049631] ? exc_invalid_op+0x1d/0x80\n[ 364.049635] ? asm_exc_invalid_op+0x1f/0x30\n[ 364.049642] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049647] __dma_map_sg_attrs+0x90/0xe0\n[ 364.049651] dma_map_sgtable+0x25/0x40\n[ 364.049654] amdgpu_bo_move+0x59a/0x850 [amdgpu]\n[ 364.049935] ? srso_return_thunk+0x5/0x5f\n[ 364.049939] ? amdgpu_ttm_tt_populate+0x5d/0xc0 [amdgpu]\n[ 364.050095] ttm_bo_handle_move_mem+0xc3/0x180 [ttm]\n[ 364.050103] ttm_bo_validate+0xc1/0x160 [ttm]\n[ 364.050108] ? amdgpu_ttm_tt_get_user_pages+0xe5/0x1b0 [amdgpu]\n[ 364.050263] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0xa12/0xc90 [amdgpu]\n[ 364.050473] kfd_ioctl_alloc_memory_of_gpu+0x16b/0x3b0 [amdgpu]\n[ 364.050680] kfd_ioctl+0x3c2/0x530 [amdgpu]\n[ 364.050866] ? __pfx_kfd_ioctl_alloc_memory_of_gpu+0x10/0x10 [amdgpu]\n[ 364.05105\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56594",
"url": "https://www.suse.com/security/cve/CVE-2024-56594"
},
{
"category": "external",
"summary": "SUSE Bug 1235413 for CVE-2024-56594",
"url": "https://bugzilla.suse.com/1235413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56595"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add a check to prevent array-index-out-of-bounds in dbAdjTree\n\nWhen the value of lp is 0 at the beginning of the for loop, it will\nbecome negative in the next assignment and we should bail out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56595",
"url": "https://www.suse.com/security/cve/CVE-2024-56595"
},
{
"category": "external",
"summary": "SUSE Bug 1235410 for CVE-2024-56595",
"url": "https://bugzilla.suse.com/1235410"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56595"
},
{
"cve": "CVE-2024-56596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56596"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in jfs_readdir\n\nThe stbl might contain some invalid values. Added a check to\nreturn error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56596",
"url": "https://www.suse.com/security/cve/CVE-2024-56596"
},
{
"category": "external",
"summary": "SUSE Bug 1235458 for CVE-2024-56596",
"url": "https://bugzilla.suse.com/1235458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56596"
},
{
"cve": "CVE-2024-56597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56597"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix shift-out-of-bounds in dbSplit\n\nWhen dmt_budmin is less than zero, it causes errors\nin the later stages. Added a check to return an error beforehand\nin dbAllocCtl itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56597",
"url": "https://www.suse.com/security/cve/CVE-2024-56597"
},
{
"category": "external",
"summary": "SUSE Bug 1235222 for CVE-2024-56597",
"url": "https://bugzilla.suse.com/1235222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56597"
},
{
"cve": "CVE-2024-56598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: array-index-out-of-bounds fix in dtReadFirst\n\nThe value of stbl can be sometimes out of bounds due\nto a bad filesystem. Added a check with appopriate return\nof error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56598",
"url": "https://www.suse.com/security/cve/CVE-2024-56598"
},
{
"category": "external",
"summary": "SUSE Bug 1235220 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "external",
"summary": "SUSE Bug 1235221 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56598"
},
{
"cve": "CVE-2024-56599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56599"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath10k: avoid NULL pointer error during sdio remove\n\nWhen running \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will free sdio\nworkqueue by destroy_workqueue(). But if CONFIG_INIT_ON_FREE_DEFAULT_ON\nis set to yes, kernel panic will happen:\nCall trace:\n destroy_workqueue+0x1c/0x258\n ath10k_sdio_remove+0x84/0x94\n sdio_bus_remove+0x50/0x16c\n device_release_driver_internal+0x188/0x25c\n device_driver_detach+0x20/0x2c\n\nThis is because during \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will call\nath10k_core_destroy() before destroy_workqueue(). wiphy_dev_release()\nwill finally be called in ath10k_core_destroy(). This function will free\nstruct cfg80211_registered_device *rdev and all its members, including\nwiphy, dev and the pointer of sdio workqueue. Then the pointer of sdio\nworkqueue will be set to NULL due to CONFIG_INIT_ON_FREE_DEFAULT_ON.\n\nAfter device release, destroy_workqueue() will use NULL pointer then the\nkernel panic happen.\n\nCall trace:\nath10k_sdio_remove\n -\u003eath10k_core_unregister\n \u2026\u2026\n -\u003eath10k_core_stop\n -\u003eath10k_hif_stop\n -\u003eath10k_sdio_irq_disable\n -\u003eath10k_hif_power_down\n -\u003edel_timer_sync(\u0026ar_sdio-\u003esleep_timer)\n -\u003eath10k_core_destroy\n -\u003eath10k_mac_destroy\n -\u003eieee80211_free_hw\n -\u003ewiphy_free\n \u2026\u2026\n -\u003ewiphy_dev_release\n -\u003edestroy_workqueue\n\nNeed to call destroy_workqueue() before ath10k_core_destroy(), free\nthe work queue buffer first and then free pointer of work queue by\nath10k_core_destroy(). This order matches the error path order in\nath10k_sdio_probe().\n\nNo work will be queued on sdio workqueue between it is destroyed and\nath10k_core_destroy() is called. Based on the call_stack above, the\nreason is:\nOnly ath10k_sdio_sleep_timer_handler(), ath10k_sdio_hif_tx_sg() and\nath10k_sdio_irq_disable() will queue work on sdio workqueue.\nSleep timer will be deleted before ath10k_core_destroy() in\nath10k_hif_power_down().\nath10k_sdio_irq_disable() only be called in ath10k_hif_stop().\nath10k_core_unregister() will call ath10k_hif_power_down() to stop hif\nbus, so ath10k_sdio_hif_tx_sg() won\u0027t be called anymore.\n\nTested-on: QCA6174 hw3.2 SDIO WLAN.RMH.4.4.1-00189",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56599",
"url": "https://www.suse.com/security/cve/CVE-2024-56599"
},
{
"category": "external",
"summary": "SUSE Bug 1235138 for CVE-2024-56599",
"url": "https://bugzilla.suse.com/1235138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56599"
},
{
"cve": "CVE-2024-56600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet6: do not leave a dangling sk pointer in inet6_create()\n\nsock_init_data() attaches the allocated sk pointer to the provided sock\nobject. If inet6_create() fails later, the sk object is released, but the\nsock object retains the dangling sk pointer, which may cause use-after-free\nlater.\n\nClear the sock sk pointer on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56600",
"url": "https://www.suse.com/security/cve/CVE-2024-56600"
},
{
"category": "external",
"summary": "SUSE Bug 1235217 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "external",
"summary": "SUSE Bug 1235218 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56601"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet: do not leave a dangling sk pointer in inet_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If inet_create() fails later, the sk object is freed, but the\nsock object retains the dangling pointer, which may create use-after-free\nlater.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56601",
"url": "https://www.suse.com/security/cve/CVE-2024-56601"
},
{
"category": "external",
"summary": "SUSE Bug 1235230 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "external",
"summary": "SUSE Bug 1235231 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235231"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56602"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: do not leave a dangling sk pointer in ieee802154_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If ieee802154_create() fails later, the allocated sk object is\nfreed, but the dangling pointer remains in the provided sock object, which\nmay allow use-after-free.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56602",
"url": "https://www.suse.com/security/cve/CVE-2024-56602"
},
{
"category": "external",
"summary": "SUSE Bug 1235521 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "external",
"summary": "SUSE Bug 1235522 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2024-56603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56603"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: af_can: do not leave a dangling sk pointer in can_create()\n\nOn error can_create() frees the allocated sk object, but sock_init_data()\nhas already attached it to the provided sock object. This will leave a\ndangling sk pointer in the sock object and may cause use-after-free later.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56603",
"url": "https://www.suse.com/security/cve/CVE-2024-56603"
},
{
"category": "external",
"summary": "SUSE Bug 1235415 for CVE-2024-56603",
"url": "https://bugzilla.suse.com/1235415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56603"
},
{
"cve": "CVE-2024-56604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56604"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()\n\nbt_sock_alloc() attaches allocated sk object to the provided sock object.\nIf rfcomm_dlc_alloc() fails, we release the sk object, but leave the\ndangling pointer in the sock object, which may cause use-after-free.\n\nFix this by swapping calls to bt_sock_alloc() and rfcomm_dlc_alloc().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56604",
"url": "https://www.suse.com/security/cve/CVE-2024-56604"
},
{
"category": "external",
"summary": "SUSE Bug 1235056 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "external",
"summary": "SUSE Bug 1235058 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56604"
},
{
"cve": "CVE-2024-56605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56605"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()\n\nbt_sock_alloc() allocates the sk object and attaches it to the provided\nsock object. On error l2cap_sock_alloc() frees the sk object, but the\ndangling pointer is still attached to the sock object, which may create\nuse-after-free in other code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56605",
"url": "https://www.suse.com/security/cve/CVE-2024-56605"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235061 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "external",
"summary": "SUSE Bug 1235062 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235062"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56605"
},
{
"cve": "CVE-2024-56606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56606"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: avoid erroring out after sock_init_data() in packet_create()\n\nAfter sock_init_data() the allocated sk object is attached to the provided\nsock object. On error, packet_create() frees the sk object leaving the\ndangling pointer in the sock object on return. Some other code may try\nto use this pointer and cause use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56606",
"url": "https://www.suse.com/security/cve/CVE-2024-56606"
},
{
"category": "external",
"summary": "SUSE Bug 1235417 for CVE-2024-56606",
"url": "https://bugzilla.suse.com/1235417"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56607"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()\n\nWhen I try to manually set bitrates:\n\niw wlan0 set bitrates legacy-2.4 1\n\nI get sleeping from invalid context error, see below. Fix that by switching to\nuse recently introduced ieee80211_iterate_stations_mtx().\n\nDo note that WCN6855 firmware is still crashing, I\u0027m not sure if that firmware\neven supports bitrate WMI commands and should we consider disabling\nath12k_mac_op_set_bitrate_mask() for WCN6855? But that\u0027s for another patch.\n\nBUG: sleeping function called from invalid context at drivers/net/wireless/ath/ath12k/wmi.c:420\nin_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 2236, name: iw\npreempt_count: 0, expected: 0\nRCU nest depth: 1, expected: 0\n3 locks held by iw/2236:\n #0: ffffffffabc6f1d8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40\n #1: ffff888138410810 (\u0026rdev-\u003ewiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x54d/0x800 [cfg80211]\n #2: ffffffffab2cfaa0 (rcu_read_lock){....}-{1:2}, at: ieee80211_iterate_stations_atomic+0x2f/0x200 [mac80211]\nCPU: 3 UID: 0 PID: 2236 Comm: iw Not tainted 6.11.0-rc7-wt-ath+ #1772\nHardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xa4/0xe0\n dump_stack+0x10/0x20\n __might_resched+0x363/0x5a0\n ? __alloc_skb+0x165/0x340\n __might_sleep+0xad/0x160\n ath12k_wmi_cmd_send+0xb1/0x3d0 [ath12k]\n ? ath12k_wmi_init_wcn7850+0xa40/0xa40 [ath12k]\n ? __netdev_alloc_skb+0x45/0x7b0\n ? __asan_memset+0x39/0x40\n ? ath12k_wmi_alloc_skb+0xf0/0x150 [ath12k]\n ? reacquire_held_locks+0x4d0/0x4d0\n ath12k_wmi_set_peer_param+0x340/0x5b0 [ath12k]\n ath12k_mac_disable_peer_fixed_rate+0xa3/0x110 [ath12k]\n ? ath12k_mac_vdev_stop+0x4f0/0x4f0 [ath12k]\n ieee80211_iterate_stations_atomic+0xd4/0x200 [mac80211]\n ath12k_mac_op_set_bitrate_mask+0x5d2/0x1080 [ath12k]\n ? ath12k_mac_vif_chan+0x320/0x320 [ath12k]\n drv_set_bitrate_mask+0x267/0x470 [mac80211]\n ieee80211_set_bitrate_mask+0x4cc/0x8a0 [mac80211]\n ? __this_cpu_preempt_check+0x13/0x20\n nl80211_set_tx_bitrate_mask+0x2bc/0x530 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? trace_contention_end+0xef/0x140\n ? rtnl_unlock+0x9/0x10\n ? nl80211_pre_doit+0x557/0x800 [cfg80211]\n genl_family_rcv_msg_doit+0x1f0/0x2e0\n ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250\n ? ns_capable+0x57/0xd0\n genl_family_rcv_msg+0x34c/0x600\n ? genl_family_rcv_msg_dumpit+0x310/0x310\n ? __lock_acquire+0xc62/0x1de0\n ? he_set_mcs_mask.isra.0+0x8d0/0x8d0 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? cfg80211_external_auth_request+0x690/0x690 [cfg80211]\n genl_rcv_msg+0xa0/0x130\n netlink_rcv_skb+0x14c/0x400\n ? genl_family_rcv_msg+0x600/0x600\n ? netlink_ack+0xd70/0xd70\n ? rwsem_optimistic_spin+0x4f0/0x4f0\n ? genl_rcv+0x14/0x40\n ? down_read_killable+0x580/0x580\n ? netlink_deliver_tap+0x13e/0x350\n ? __this_cpu_preempt_check+0x13/0x20\n genl_rcv+0x23/0x40\n netlink_unicast+0x45e/0x790\n ? netlink_attachskb+0x7f0/0x7f0\n netlink_sendmsg+0x7eb/0xdb0\n ? netlink_unicast+0x790/0x790\n ? __this_cpu_preempt_check+0x13/0x20\n ? selinux_socket_sendmsg+0x31/0x40\n ? netlink_unicast+0x790/0x790\n __sock_sendmsg+0xc9/0x160\n ____sys_sendmsg+0x620/0x990\n ? kernel_sendmsg+0x30/0x30\n ? __copy_msghdr+0x410/0x410\n ? __kasan_check_read+0x11/0x20\n ? mark_lock+0xe6/0x1470\n ___sys_sendmsg+0xe9/0x170\n ? copy_msghdr_from_user+0x120/0x120\n ? __lock_acquire+0xc62/0x1de0\n ? do_fault_around+0x2c6/0x4e0\n ? do_user_addr_fault+0x8c1/0xde0\n ? reacquire_held_locks+0x220/0x4d0\n ? do_user_addr_fault+0x8c1/0xde0\n ? __kasan_check_read+0x11/0x20\n ? __fdget+0x4e/0x1d0\n ? sockfd_lookup_light+0x1a/0x170\n __sys_sendmsg+0xd2/0x180\n ? __sys_sendmsg_sock+0x20/0x20\n ? reacquire_held_locks+0x4d0/0x4d0\n ? debug_smp_processor_id+0x17/0x20\n __x64_sys_sendmsg+0x72/0xb0\n ? lockdep_hardirqs_on+0x7d/0x100\n x64_sys_call+0x894/0x9f0\n do_syscall_64+0x64/0x130\n entry_SYSCALL_64_after_\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56607",
"url": "https://www.suse.com/security/cve/CVE-2024-56607"
},
{
"category": "external",
"summary": "SUSE Bug 1235423 for CVE-2024-56607",
"url": "https://bugzilla.suse.com/1235423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56607"
},
{
"cve": "CVE-2024-56608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56608"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027\n\nAn issue was identified in the dcn21_link_encoder_create function where\nan out-of-bounds access could occur when the hpd_source index was used\nto reference the link_enc_hpd_regs array. This array has a fixed size\nand the index was not being checked against the array\u0027s bounds before\naccessing it.\n\nThis fix adds a conditional check to ensure that the hpd_source index is\nwithin the valid range of the link_enc_hpd_regs array. If the index is\nout of bounds, the function now returns NULL to prevent undefined\nbehavior.\n\nReferences:\n\n[ 65.920507] ------------[ cut here ]------------\n[ 65.920510] UBSAN: array-index-out-of-bounds in drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn21/dcn21_resource.c:1312:29\n[ 65.920519] index 7 is out of range for type \u0027dcn10_link_enc_hpd_registers [5]\u0027\n[ 65.920523] CPU: 3 PID: 1178 Comm: modprobe Tainted: G OE 6.8.0-cleanershaderfeatureresetasdntipmi200nv2132 #13\n[ 65.920525] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS WMJ0429N_Weekly_20_04_2 04/29/2020\n[ 65.920527] Call Trace:\n[ 65.920529] \u003cTASK\u003e\n[ 65.920532] dump_stack_lvl+0x48/0x70\n[ 65.920541] dump_stack+0x10/0x20\n[ 65.920543] __ubsan_handle_out_of_bounds+0xa2/0xe0\n[ 65.920549] dcn21_link_encoder_create+0xd9/0x140 [amdgpu]\n[ 65.921009] link_create+0x6d3/0xed0 [amdgpu]\n[ 65.921355] create_links+0x18a/0x4e0 [amdgpu]\n[ 65.921679] dc_create+0x360/0x720 [amdgpu]\n[ 65.921999] ? dmi_matches+0xa0/0x220\n[ 65.922004] amdgpu_dm_init+0x2b6/0x2c90 [amdgpu]\n[ 65.922342] ? console_unlock+0x77/0x120\n[ 65.922348] ? dev_printk_emit+0x86/0xb0\n[ 65.922354] dm_hw_init+0x15/0x40 [amdgpu]\n[ 65.922686] amdgpu_device_init+0x26a8/0x33a0 [amdgpu]\n[ 65.922921] amdgpu_driver_load_kms+0x1b/0xa0 [amdgpu]\n[ 65.923087] amdgpu_pci_probe+0x1b7/0x630 [amdgpu]\n[ 65.923087] local_pci_probe+0x4b/0xb0\n[ 65.923087] pci_device_probe+0xc8/0x280\n[ 65.923087] really_probe+0x187/0x300\n[ 65.923087] __driver_probe_device+0x85/0x130\n[ 65.923087] driver_probe_device+0x24/0x110\n[ 65.923087] __driver_attach+0xac/0x1d0\n[ 65.923087] ? __pfx___driver_attach+0x10/0x10\n[ 65.923087] bus_for_each_dev+0x7d/0xd0\n[ 65.923087] driver_attach+0x1e/0x30\n[ 65.923087] bus_add_driver+0xf2/0x200\n[ 65.923087] driver_register+0x64/0x130\n[ 65.923087] ? __pfx_amdgpu_init+0x10/0x10 [amdgpu]\n[ 65.923087] __pci_register_driver+0x61/0x70\n[ 65.923087] amdgpu_init+0x7d/0xff0 [amdgpu]\n[ 65.923087] do_one_initcall+0x49/0x310\n[ 65.923087] ? kmalloc_trace+0x136/0x360\n[ 65.923087] do_init_module+0x6a/0x270\n[ 65.923087] load_module+0x1fce/0x23a0\n[ 65.923087] init_module_from_file+0x9c/0xe0\n[ 65.923087] ? init_module_from_file+0x9c/0xe0\n[ 65.923087] idempotent_init_module+0x179/0x230\n[ 65.923087] __x64_sys_finit_module+0x5d/0xa0\n[ 65.923087] do_syscall_64+0x76/0x120\n[ 65.923087] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n[ 65.923087] RIP: 0033:0x7f2d80f1e88d\n[ 65.923087] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[ 65.923087] RSP: 002b:00007ffc7bc1aa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139\n[ 65.923087] RAX: ffffffffffffffda RBX: 0000564c9c1db130 RCX: 00007f2d80f1e88d\n[ 65.923087] RDX: 0000000000000000 RSI: 0000564c9c1e5480 RDI: 000000000000000f\n[ 65.923087] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000002\n[ 65.923087] R10: 000000000000000f R11: 0000000000000246 R12: 0000564c9c1e5480\n[ 65.923087] R13: 0000564c9c1db260 R14: 0000000000000000 R15: 0000564c9c1e54b0\n[ 65.923087] \u003c/TASK\u003e\n[ 65.923927] ---[ end trace ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56608",
"url": "https://www.suse.com/security/cve/CVE-2024-56608"
},
{
"category": "external",
"summary": "SUSE Bug 1235487 for CVE-2024-56608",
"url": "https://bugzilla.suse.com/1235487"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56608"
},
{
"cve": "CVE-2024-56609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56609"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb\n\nWhen removing kernel modules by:\n rmmod rtw88_8723cs rtw88_8703b rtw88_8723x rtw88_sdio rtw88_core\n\nDriver uses skb_queue_purge() to purge TX skb, but not report tx status\ncausing \"Have pending ack frames!\" warning. Use ieee80211_purge_tx_queue()\nto correct this.\n\nSince ieee80211_purge_tx_queue() doesn\u0027t take locks, to prevent racing\nbetween TX work and purge TX queue, flush and destroy TX work in advance.\n\n wlan0: deauthenticating from aa:f5:fd:60:4c:a8 by local\n choice (Reason: 3=DEAUTH_LEAVING)\n ------------[ cut here ]------------\n Have pending ack frames!\n WARNING: CPU: 3 PID: 9232 at net/mac80211/main.c:1691\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n CPU: 3 PID: 9232 Comm: rmmod Tainted: G C\n 6.10.1-200.fc40.aarch64 #1\n Hardware name: pine64 Pine64 PinePhone Braveheart\n (1.1)/Pine64 PinePhone Braveheart (1.1), BIOS 2024.01 01/01/2024\n pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n lr : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n sp : ffff80008c1b37b0\n x29: ffff80008c1b37b0 x28: ffff000003be8000 x27: 0000000000000000\n x26: 0000000000000000 x25: ffff000003dc14b8 x24: ffff80008c1b37d0\n x23: ffff000000ff9f80 x22: 0000000000000000 x21: 000000007fffffff\n x20: ffff80007c7e93d8 x19: ffff00006e66f400 x18: 0000000000000000\n x17: ffff7ffffd2b3000 x16: ffff800083fc0000 x15: 0000000000000000\n x14: 0000000000000000 x13: 2173656d61726620 x12: 6b636120676e6964\n x11: 0000000000000000 x10: 000000000000005d x9 : ffff8000802af2b0\n x8 : ffff80008c1b3430 x7 : 0000000000000001 x6 : 0000000000000001\n x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000003be8000\n Call trace:\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n idr_for_each+0x74/0x110\n ieee80211_free_hw+0x44/0xe8 [mac80211]\n rtw_sdio_remove+0x9c/0xc0 [rtw88_sdio]\n sdio_bus_remove+0x44/0x180\n device_remove+0x54/0x90\n device_release_driver_internal+0x1d4/0x238\n driver_detach+0x54/0xc0\n bus_remove_driver+0x78/0x108\n driver_unregister+0x38/0x78\n sdio_unregister_driver+0x2c/0x40\n rtw_8723cs_driver_exit+0x18/0x1000 [rtw88_8723cs]\n __do_sys_delete_module.isra.0+0x190/0x338\n __arm64_sys_delete_module+0x1c/0x30\n invoke_syscall+0x74/0x100\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x158\n el0t_64_sync_handler+0x120/0x138\n el0t_64_sync+0x194/0x198\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56609",
"url": "https://www.suse.com/security/cve/CVE-2024-56609"
},
{
"category": "external",
"summary": "SUSE Bug 1235389 for CVE-2024-56609",
"url": "https://bugzilla.suse.com/1235389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56609"
},
{
"cve": "CVE-2024-56610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56610"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcsan: Turn report_filterlist_lock into a raw_spinlock\n\nRan Xiaokai reports that with a KCSAN-enabled PREEMPT_RT kernel, we can see\nsplats like:\n\n| BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\n| in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/1\n| preempt_count: 10002, expected: 0\n| RCU nest depth: 0, expected: 0\n| no locks held by swapper/1/0.\n| irq event stamp: 156674\n| hardirqs last enabled at (156673): [\u003cffffffff81130bd9\u003e] do_idle+0x1f9/0x240\n| hardirqs last disabled at (156674): [\u003cffffffff82254f84\u003e] sysvec_apic_timer_interrupt+0x14/0xc0\n| softirqs last enabled at (0): [\u003cffffffff81099f47\u003e] copy_process+0xfc7/0x4b60\n| softirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n| Preemption disabled at:\n| [\u003cffffffff814a3e2a\u003e] paint_ptr+0x2a/0x90\n| CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0+ #3\n| Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-0-ga698c8995f-prebuilt.qemu.org 04/01/2014\n| Call Trace:\n| \u003cIRQ\u003e\n| dump_stack_lvl+0x7e/0xc0\n| dump_stack+0x1d/0x30\n| __might_resched+0x1a2/0x270\n| rt_spin_lock+0x68/0x170\n| kcsan_skip_report_debugfs+0x43/0xe0\n| print_report+0xb5/0x590\n| kcsan_report_known_origin+0x1b1/0x1d0\n| kcsan_setup_watchpoint+0x348/0x650\n| __tsan_unaligned_write1+0x16d/0x1d0\n| hrtimer_interrupt+0x3d6/0x430\n| __sysvec_apic_timer_interrupt+0xe8/0x3a0\n| sysvec_apic_timer_interrupt+0x97/0xc0\n| \u003c/IRQ\u003e\n\nOn a detected data race, KCSAN\u0027s reporting logic checks if it should\nfilter the report. That list is protected by the report_filterlist_lock\n*non-raw* spinlock which may sleep on RT kernels.\n\nSince KCSAN may report data races in any context, convert it to a\nraw_spinlock.\n\nThis requires being careful about when to allocate memory for the filter\nlist itself which can be done via KCSAN\u0027s debugfs interface. Concurrent\nmodification of the filter list via debugfs should be rare: the chosen\nstrategy is to optimistically pre-allocate memory before the critical\nsection and discard if unused.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56610",
"url": "https://www.suse.com/security/cve/CVE-2024-56610"
},
{
"category": "external",
"summary": "SUSE Bug 1235390 for CVE-2024-56610",
"url": "https://bugzilla.suse.com/1235390"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56610"
},
{
"cve": "CVE-2024-56611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM\n\nWe currently assume that there is at least one VMA in a MM, which isn\u0027t\ntrue.\n\nSo we might end up having find_vma() return NULL, to then de-reference\nNULL. So properly handle find_vma() returning NULL.\n\nThis fixes the report:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nCPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nRIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]\nRIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194\nCode: ...\nRSP: 0018:ffffc9000375fd08 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000\nRDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044\nRBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1\nR10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003\nR13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8\nFS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709\n __do_sys_migrate_pages mm/mempolicy.c:1727 [inline]\n __se_sys_migrate_pages mm/mempolicy.c:1723 [inline]\n __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n[akpm@linux-foundation.org: add unlikely()]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56611",
"url": "https://www.suse.com/security/cve/CVE-2024-56611"
},
{
"category": "external",
"summary": "SUSE Bug 1235391 for CVE-2024-56611",
"url": "https://bugzilla.suse.com/1235391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56611"
},
{
"cve": "CVE-2024-56614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56614"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix OOB map writes when deleting elements\n\nJordy says:\n\n\"\nIn the xsk_map_delete_elem function an unsigned integer\n(map-\u003emax_entries) is compared with a user-controlled signed integer\n(k). Due to implicit type conversion, a large unsigned value for\nmap-\u003emax_entries can bypass the intended bounds check:\n\n\tif (k \u003e= map-\u003emax_entries)\n\t\treturn -EINVAL;\n\nThis allows k to hold a negative value (between -2147483648 and -2),\nwhich is then used as an array index in m-\u003exsk_map[k], which results\nin an out-of-bounds access.\n\n\tspin_lock_bh(\u0026m-\u003elock);\n\tmap_entry = \u0026m-\u003exsk_map[k]; // Out-of-bounds map_entry\n\told_xs = unrcu_pointer(xchg(map_entry, NULL)); // Oob write\n\tif (old_xs)\n\t\txsk_map_sock_delete(old_xs, map_entry);\n\tspin_unlock_bh(\u0026m-\u003elock);\n\nThe xchg operation can then be used to cause an out-of-bounds write.\nMoreover, the invalid map_entry passed to xsk_map_sock_delete can lead\nto further memory corruption.\n\"\n\nIt indeed results in following splat:\n\n[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108\n[76612.904330] #PF: supervisor write access in kernel mode\n[76612.909639] #PF: error_code(0x0002) - not-present page\n[76612.914855] PGD 0 P4D 0\n[76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP\n[76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470\n[76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60\n[76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff \u003c48\u003e 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31\n[76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246\n[76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000\n[76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000\n[76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007\n[76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8\n[76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0\n[76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000\n[76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0\n[76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[76613.041086] PKRU: 55555554\n[76613.043842] Call Trace:\n[76613.046331] \u003cTASK\u003e\n[76613.048468] ? __die+0x20/0x60\n[76613.051581] ? page_fault_oops+0x15a/0x450\n[76613.055747] ? search_extable+0x22/0x30\n[76613.059649] ? search_bpf_extables+0x5f/0x80\n[76613.063988] ? exc_page_fault+0xa9/0x140\n[76613.067975] ? asm_exc_page_fault+0x22/0x30\n[76613.072229] ? xsk_map_delete_elem+0x2d/0x60\n[76613.076573] ? xsk_map_delete_elem+0x23/0x60\n[76613.080914] __sys_bpf+0x19b7/0x23c0\n[76613.084555] __x64_sys_bpf+0x1a/0x20\n[76613.088194] do_syscall_64+0x37/0xb0\n[76613.091832] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n[76613.096962] RIP: 0033:0x7f80b6d1e88d\n[76613.100592] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[76613.119631] RSP: 002b:00007ffd1ae0ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000141\n[76613.131330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80b6d1e88d\n[76613.142632] RDX: 0000000000000098 RSI: 00007ffd1ae0ad20 RDI: 0000000000000003\n[76613.153967] RBP: 00007ffd1ae0adc0 R08: 0000000000000000 R09: 0000000000000000\n[76613.166030] R10: 00007f80b6f77040 R11: 0000000000000206 R12: 00007ffd1ae0aed8\n[76613.177130] R13: 000055ddf42ce1e9 R14: 000055ddf42d0d98 R15: 00\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56614",
"url": "https://www.suse.com/security/cve/CVE-2024-56614"
},
{
"category": "external",
"summary": "SUSE Bug 1235424 for CVE-2024-56614",
"url": "https://bugzilla.suse.com/1235424"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56614"
},
{
"cve": "CVE-2024-56615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix OOB devmap writes when deleting elements\n\nJordy reported issue against XSKMAP which also applies to DEVMAP - the\nindex used for accessing map entry, due to being a signed integer,\ncauses the OOB writes. Fix is simple as changing the type from int to\nu32, however, when compared to XSKMAP case, one more thing needs to be\naddressed.\n\nWhen map is released from system via dev_map_free(), we iterate through\nall of the entries and an iterator variable is also an int, which\nimplies OOB accesses. Again, change it to be u32.\n\nExample splat below:\n\n[ 160.724676] BUG: unable to handle page fault for address: ffffc8fc2c001000\n[ 160.731662] #PF: supervisor read access in kernel mode\n[ 160.736876] #PF: error_code(0x0000) - not-present page\n[ 160.742095] PGD 0 P4D 0\n[ 160.744678] Oops: Oops: 0000 [#1] PREEMPT SMP\n[ 160.749106] CPU: 1 UID: 0 PID: 520 Comm: kworker/u145:12 Not tainted 6.12.0-rc1+ #487\n[ 160.757050] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[ 160.767642] Workqueue: events_unbound bpf_map_free_deferred\n[ 160.773308] RIP: 0010:dev_map_free+0x77/0x170\n[ 160.777735] Code: 00 e8 fd 91 ed ff e8 b8 73 ed ff 41 83 7d 18 19 74 6e 41 8b 45 24 49 8b bd f8 00 00 00 31 db 85 c0 74 48 48 63 c3 48 8d 04 c7 \u003c48\u003e 8b 28 48 85 ed 74 30 48 8b 7d 18 48 85 ff 74 05 e8 b3 52 fa ff\n[ 160.796777] RSP: 0018:ffffc9000ee1fe38 EFLAGS: 00010202\n[ 160.802086] RAX: ffffc8fc2c001000 RBX: 0000000080000000 RCX: 0000000000000024\n[ 160.809331] RDX: 0000000000000000 RSI: 0000000000000024 RDI: ffffc9002c001000\n[ 160.816576] RBP: 0000000000000000 R08: 0000000000000023 R09: 0000000000000001\n[ 160.823823] R10: 0000000000000001 R11: 00000000000ee6b2 R12: dead000000000122\n[ 160.831066] R13: ffff88810c928e00 R14: ffff8881002df405 R15: 0000000000000000\n[ 160.838310] FS: 0000000000000000(0000) GS:ffff8897e0c40000(0000) knlGS:0000000000000000\n[ 160.846528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 160.852357] CR2: ffffc8fc2c001000 CR3: 0000000005c32006 CR4: 00000000007726f0\n[ 160.859604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 160.866847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 160.874092] PKRU: 55555554\n[ 160.876847] Call Trace:\n[ 160.879338] \u003cTASK\u003e\n[ 160.881477] ? __die+0x20/0x60\n[ 160.884586] ? page_fault_oops+0x15a/0x450\n[ 160.888746] ? search_extable+0x22/0x30\n[ 160.892647] ? search_bpf_extables+0x5f/0x80\n[ 160.896988] ? exc_page_fault+0xa9/0x140\n[ 160.900973] ? asm_exc_page_fault+0x22/0x30\n[ 160.905232] ? dev_map_free+0x77/0x170\n[ 160.909043] ? dev_map_free+0x58/0x170\n[ 160.912857] bpf_map_free_deferred+0x51/0x90\n[ 160.917196] process_one_work+0x142/0x370\n[ 160.921272] worker_thread+0x29e/0x3b0\n[ 160.925082] ? rescuer_thread+0x4b0/0x4b0\n[ 160.929157] kthread+0xd4/0x110\n[ 160.932355] ? kthread_park+0x80/0x80\n[ 160.936079] ret_from_fork+0x2d/0x50\n[ 160.943396] ? kthread_park+0x80/0x80\n[ 160.950803] ret_from_fork_asm+0x11/0x20\n[ 160.958482] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56615",
"url": "https://www.suse.com/security/cve/CVE-2024-56615"
},
{
"category": "external",
"summary": "SUSE Bug 1235426 for CVE-2024-56615",
"url": "https://bugzilla.suse.com/1235426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56616"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix MST sideband message body length check\n\nFix the MST sideband message body length check, which must be at least 1\nbyte accounting for the message body CRC (aka message data CRC) at the\nend of the message.\n\nThis fixes a case where an MST branch device returns a header with a\ncorrect header CRC (indicating a correctly received body length), with\nthe body length being incorrectly set to 0. This will later lead to a\nmemory corruption in drm_dp_sideband_append_payload() and the following\nerrors in dmesg:\n\n UBSAN: array-index-out-of-bounds in drivers/gpu/drm/display/drm_dp_mst_topology.c:786:25\n index -1 is out of range for type \u0027u8 [48]\u0027\n Call Trace:\n drm_dp_sideband_append_payload+0x33d/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]\n\n memcpy: detected field-spanning write (size 18446744073709551615) of single field \"\u0026msg-\u003emsg[msg-\u003ecurlen]\" at drivers/gpu/drm/display/drm_dp_mst_topology.c:791 (size 256)\n Call Trace:\n drm_dp_sideband_append_payload+0x324/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56616",
"url": "https://www.suse.com/security/cve/CVE-2024-56616"
},
{
"category": "external",
"summary": "SUSE Bug 1235427 for CVE-2024-56616",
"url": "https://bugzilla.suse.com/1235427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56616"
},
{
"cve": "CVE-2024-56617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56617"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU\n\nCommit\n\n 5944ce092b97 (\"arch_topology: Build cacheinfo from primary CPU\")\n\nadds functionality that architectures can use to optionally allocate and\nbuild cacheinfo early during boot. Commit\n\n 6539cffa9495 (\"cacheinfo: Add arch specific early level initializer\")\n\nlets secondary CPUs correct (and reallocate memory) cacheinfo data if\nneeded.\n\nIf the early build functionality is not used and cacheinfo does not need\ncorrection, memory for cacheinfo is never allocated. x86 does not use\nthe early build functionality. Consequently, during the cacheinfo CPU\nhotplug callback, last_level_cache_is_valid() attempts to dereference\na NULL pointer:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000100\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEPMT SMP NOPTI\n CPU: 0 PID 19 Comm: cpuhp/0 Not tainted 6.4.0-rc2 #1\n RIP: 0010: last_level_cache_is_valid+0x95/0xe0a\n\nAllocate memory for cacheinfo during the cacheinfo CPU hotplug callback\nif not done earlier.\n\nMoreover, before determining the validity of the last-level cache info,\nensure that it has been allocated. Simply checking for non-zero\ncache_leaves() is not sufficient, as some architectures (e.g., Intel\nprocessors) have non-zero cache_leaves() before allocation.\n\nDereferencing NULL cacheinfo can occur in update_per_cpu_data_slice_size().\nThis function iterates over all online CPUs. However, a CPU may have come\nonline recently, but its cacheinfo may not have been allocated yet.\n\nWhile here, remove an unnecessary indentation in allocate_cache_info().\n\n [ bp: Massage. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56617",
"url": "https://www.suse.com/security/cve/CVE-2024-56617"
},
{
"category": "external",
"summary": "SUSE Bug 1235429 for CVE-2024-56617",
"url": "https://bugzilla.suse.com/1235429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56617"
},
{
"cve": "CVE-2024-56619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()\n\nSyzbot reported that when searching for records in a directory where the\ninode\u0027s i_size is corrupted and has a large value, memory access outside\nthe folio/page range may occur, or a use-after-free bug may be detected if\nKASAN is enabled.\n\nThis is because nilfs_last_byte(), which is called by nilfs_find_entry()\nand others to calculate the number of valid bytes of directory data in a\npage from i_size and the page index, loses the upper 32 bits of the 64-bit\nsize information due to an inappropriate type of local variable to which\nthe i_size value is assigned.\n\nThis caused a large byte offset value due to underflow in the end address\ncalculation in the calling nilfs_find_entry(), resulting in memory access\nthat exceeds the folio/page size.\n\nFix this issue by changing the type of the local variable causing the bit\nloss from \"unsigned int\" to \"u64\". The return value of nilfs_last_byte()\nis also of type \"unsigned int\", but it is truncated so as not to exceed\nPAGE_SIZE and no bit loss occurs, so no change is required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56619",
"url": "https://www.suse.com/security/cve/CVE-2024-56619"
},
{
"category": "external",
"summary": "SUSE Bug 1235224 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "external",
"summary": "SUSE Bug 1235225 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56619"
},
{
"cve": "CVE-2024-56620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56620"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: qcom: Only free platform MSIs when ESI is enabled\n\nOtherwise, it will result in a NULL pointer dereference as below:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000008\nCall trace:\n mutex_lock+0xc/0x54\n platform_device_msi_free_irqs_all+0x14/0x20\n ufs_qcom_remove+0x34/0x48 [ufs_qcom]\n platform_remove+0x28/0x44\n device_remove+0x4c/0x80\n device_release_driver_internal+0xd8/0x178\n driver_detach+0x50/0x9c\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n platform_driver_unregister+0x14/0x20\n ufs_qcom_pltform_exit+0x18/0xb94 [ufs_qcom]\n __arm64_sys_delete_module+0x180/0x260\n invoke_syscall+0x44/0x100\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0xdc\n el0t_64_sync_handler+0xc0/0xc4\n el0t_64_sync+0x190/0x194",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56620",
"url": "https://www.suse.com/security/cve/CVE-2024-56620"
},
{
"category": "external",
"summary": "SUSE Bug 1235227 for CVE-2024-56620",
"url": "https://bugzilla.suse.com/1235227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56620"
},
{
"cve": "CVE-2024-56622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56622"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: sysfs: Prevent div by zero\n\nPrevent a division by 0 when monitoring is not enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56622",
"url": "https://www.suse.com/security/cve/CVE-2024-56622"
},
{
"category": "external",
"summary": "SUSE Bug 1235251 for CVE-2024-56622",
"url": "https://bugzilla.suse.com/1235251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56622"
},
{
"cve": "CVE-2024-56623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread. Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022] ? __dentry_kill+0x121/0x170\n[596663.813030] ? _cond_resched+0x15/0x30\n[596663.813034] ? _cond_resched+0x15/0x30\n[596663.813039] ? wait_for_completion+0x35/0x190\n[596663.813048] ? try_to_wake_up+0x63/0x540\n[596663.813055] free_task+0x5a/0x60\n[596663.813061] kthread_stop+0xf3/0x100\n[596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56623",
"url": "https://www.suse.com/security/cve/CVE-2024-56623"
},
{
"category": "external",
"summary": "SUSE Bug 1235466 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "external",
"summary": "SUSE Bug 1235468 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56625"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: can_set_termination(): allow sleeping GPIOs\n\nIn commit 6e86a1543c37 (\"can: dev: provide optional GPIO based\ntermination support\") GPIO based termination support was added.\n\nFor no particular reason that patch uses gpiod_set_value() to set the\nGPIO. This leads to the following warning, if the systems uses a\nsleeping GPIO, i.e. behind an I2C port expander:\n\n| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c\n| CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c\n\nReplace gpiod_set_value() by gpiod_set_value_cansleep() to allow the\nuse of sleeping GPIOs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56625",
"url": "https://www.suse.com/security/cve/CVE-2024-56625"
},
{
"category": "external",
"summary": "SUSE Bug 1235223 for CVE-2024-56625",
"url": "https://bugzilla.suse.com/1235223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56625"
},
{
"cve": "CVE-2024-56629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56629"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix when get product name maybe null pointer\n\nDue to incorrect dev-\u003eproduct reporting by certain devices, null\npointer dereferences occur when dev-\u003eproduct is empty, leading to\npotential system crashes.\n\nThis issue was found on EXCELSIOR DL37-D05 device with\nLoongson-LS3A6000-7A2000-DL37 motherboard.\n\nKernel logs:\n[ 56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci\n[ 56.671638] usb 4-3: string descriptor 0 read error: -22\n[ 56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07\n[ 56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3\n[ 56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0\n[ 56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80\n[ 56.697732] Oops[#1]:\n[ 56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G OE 6.6.0-loong64-desktop #25.00.2000.015\n[ 56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00 10/11/2024\n[ 56.697739] pc 90000000066e35c8 ra ffff800004f98a80 tp 9000000125478000 sp 900000012547b8a0\n[ 56.697741] a0 0000000000000000 a1 ffff800004818b28 a2 0000000000000000 a3 0000000000000000\n[ 56.697743] a4 900000012547b8f0 a5 0000000000000000 a6 0000000000000000 a7 0000000000000000\n[ 56.697745] t0 ffff800004818b2d t1 0000000000000000 t2 0000000000000003 t3 0000000000000005\n[ 56.697747] t4 0000000000000000 t5 0000000000000000 t6 0000000000000000 t7 0000000000000000\n[ 56.697748] t8 0000000000000000 u0 0000000000000000 s9 0000000000000000 s0 900000011aa48028\n[ 56.697750] s1 0000000000000000 s2 0000000000000000 s3 ffff800004818e80 s4 ffff800004810000\n[ 56.697751] s5 90000001000b98d0 s6 ffff800004811f88 s7 ffff800005470440 s8 0000000000000000\n[ 56.697753] ra: ffff800004f98a80 wacom_update_name+0xe0/0x300 [wacom]\n[ 56.697802] ERA: 90000000066e35c8 strstr+0x28/0x120\n[ 56.697806] CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)\n[ 56.697816] PRMD: 0000000c (PPLV0 +PIE +PWE)\n[ 56.697821] EUEN: 00000000 (-FPE -SXE -ASXE -BTE)\n[ 56.697827] ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)\n[ 56.697831] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)\n[ 56.697835] BADV: 0000000000000000\n[ 56.697836] PRID: 0014d000 (Loongson-64bit, Loongson-3A6000)\n[ 56.697838] Modules linked in: wacom(+) bnep bluetooth rfkill qrtr nls_iso8859_1 nls_cp437 snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_timer snd soundcore input_leds mousedev led_class joydev deepin_netmonitor(OE) fuse nfnetlink dmi_sysfs ip_tables x_tables overlay amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_suballoc_helper i2c_algo_bit drm_ttm_helper r8169 ttm drm_display_helper spi_loongson_pci xhci_pci cec xhci_pci_renesas spi_loongson_core hid_generic realtek gpio_loongson_64bit\n[ 56.697887] Process (udev-worker) (pid: 2742, threadinfo=00000000aee0d8b4, task=00000000a9eff1f3)\n[ 56.697890] Stack : 0000000000000000 ffff800004817e00 0000000000000000 0000251c00000000\n[ 56.697896] 0000000000000000 00000011fffffffd 0000000000000000 0000000000000000\n[ 56.697901] 0000000000000000 1b67a968695184b9 0000000000000000 90000001000b98d0\n[ 56.697906] 90000001000bb8d0 900000011aa48028 0000000000000000 ffff800004f9d74c\n[ 56.697911] 90000001000ba000 ffff800004f9ce58 0000000000000000 ffff800005470440\n[ 56.697916] ffff800004811f88 90000001000b98d0 9000000100da2aa8 90000001000bb8d0\n[ 56.697921] 0000000000000000 90000001000ba000 900000011aa48028 ffff800004f9d74c\n[ 56.697926] ffff8000054704e8 90000001000bb8b8 90000001000ba000 0000000000000000\n[ 56.697931] 90000001000bb8d0 \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56629",
"url": "https://www.suse.com/security/cve/CVE-2024-56629"
},
{
"category": "external",
"summary": "SUSE Bug 1235473 for CVE-2024-56629",
"url": "https://bugzilla.suse.com/1235473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56629"
},
{
"cve": "CVE-2024-56630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: free inode when ocfs2_get_init_inode() fails\n\nsyzbot is reporting busy inodes after unmount, for commit 9c89fe0af826\n(\"ocfs2: Handle error from dquot_initialize()\") forgot to call iput() when\nnew_inode() succeeded and dquot_initialize() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56630",
"url": "https://www.suse.com/security/cve/CVE-2024-56630"
},
{
"category": "external",
"summary": "SUSE Bug 1235479 for CVE-2024-56630",
"url": "https://bugzilla.suse.com/1235479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56631"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Fix slab-use-after-free read in sg_release()\n\nFix a use-after-free bug in sg_release(), detected by syzbot with KASAN:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30\nkernel/locking/lockdep.c:5838\n__mutex_unlock_slowpath+0xe2/0x750 kernel/locking/mutex.c:912\nsg_release+0x1f4/0x2e0 drivers/scsi/sg.c:407\n\nIn sg_release(), the function kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) is\ncalled before releasing the open_rel_lock mutex. The kref_put() call may\ndecrement the reference count of sfp to zero, triggering its cleanup\nthrough sg_remove_sfp(). This cleanup includes scheduling deferred work\nvia sg_remove_sfp_usercontext(), which ultimately frees sfp.\n\nAfter kref_put(), sg_release() continues to unlock open_rel_lock and may\nreference sfp or sdp. If sfp has already been freed, this results in a\nslab-use-after-free error.\n\nMove the kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) call after unlocking the\nopen_rel_lock mutex. This ensures:\n\n - No references to sfp or sdp occur after the reference count is\n decremented.\n\n - Cleanup functions such as sg_remove_sfp() and\n sg_remove_sfp_usercontext() can safely execute without impacting the\n mutex handling in sg_release().\n\nThe fix has been tested and validated by syzbot. This patch closes the\nbug reported at the following syzkaller link and ensures proper\nsequencing of resource cleanup and mutex operations, eliminating the\nrisk of use-after-free errors in sg_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56631",
"url": "https://www.suse.com/security/cve/CVE-2024-56631"
},
{
"category": "external",
"summary": "SUSE Bug 1235480 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "external",
"summary": "SUSE Bug 1235482 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56631"
},
{
"cve": "CVE-2024-56632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix the memleak while create new ctrl failed\n\nNow while we create new ctrl failed, we have not free the\ntagset occupied by admin_q, here try to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56632",
"url": "https://www.suse.com/security/cve/CVE-2024-56632"
},
{
"category": "external",
"summary": "SUSE Bug 1235483 for CVE-2024-56632",
"url": "https://bugzilla.suse.com/1235483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56632"
},
{
"cve": "CVE-2024-56634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56634"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: grgpio: Add NULL check in grgpio_probe\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in grgpio_probe is not checked.\nAdd NULL check in grgpio_probe, to handle kernel NULL\npointer dereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56634",
"url": "https://www.suse.com/security/cve/CVE-2024-56634"
},
{
"category": "external",
"summary": "SUSE Bug 1235486 for CVE-2024-56634",
"url": "https://bugzilla.suse.com/1235486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56634"
},
{
"cve": "CVE-2024-56635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56635"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid potential UAF in default_operstate()\n\nsyzbot reported an UAF in default_operstate() [1]\n\nIssue is a race between device and netns dismantles.\n\nAfter calling __rtnl_unlock() from netdev_run_todo(),\nwe can not assume the netns of each device is still alive.\n\nMake sure the device is not in NETREG_UNREGISTERED state,\nand add an ASSERT_RTNL() before the call to\n__dev_get_by_index().\n\nWe might move this ASSERT_RTNL() in __dev_get_by_index()\nin the future.\n\n[1]\n\nBUG: KASAN: slab-use-after-free in __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\nRead of size 8 at addr ffff888043eba1b0 by task syz.0.0/5339\n\nCPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\n default_operstate net/core/link_watch.c:51 [inline]\n rfc2863_policy+0x224/0x300 net/core/link_watch.c:67\n linkwatch_do_dev+0x3e/0x170 net/core/link_watch.c:170\n netdev_run_todo+0x461/0x1000 net/core/dev.c:10894\n rtnl_unlock net/core/rtnetlink.c:152 [inline]\n rtnl_net_unlock include/linux/rtnetlink.h:133 [inline]\n rtnl_dellink+0x760/0x8d0 net/core/rtnetlink.c:3520\n rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:726\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583\n ___sys_sendmsg net/socket.c:2637 [inline]\n __sys_sendmsg+0x269/0x350 net/socket.c:2669\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f2a3cb80809\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f2a3d9cd058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f2a3cd45fa0 RCX: 00007f2a3cb80809\nRDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008\nRBP: 00007f2a3cbf393e R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007f2a3cd45fa0 R15: 00007ffd03bc65c8\n \u003c/TASK\u003e\n\nAllocated by task 5339:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4314\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kmalloc_array_noprof include/linux/slab.h:945 [inline]\n netdev_create_hash net/core/dev.c:11870 [inline]\n netdev_init+0x10c/0x250 net/core/dev.c:11890\n ops_init+0x31e/0x590 net/core/net_namespace.c:138\n setup_net+0x287/0x9e0 net/core/net_namespace.c:362\n copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500\n create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228\n ksys_unshare+0x57d/0xa70 kernel/fork.c:3314\n __do_sys_unshare kernel/fork.c:3385 [inline]\n __se_sys_unshare kernel/fork.c:3383 [inline]\n __x64_sys_unshare+0x38/0x40 kernel/fork.c:3383\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x8\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56635",
"url": "https://www.suse.com/security/cve/CVE-2024-56635"
},
{
"category": "external",
"summary": "SUSE Bug 1235519 for CVE-2024-56635",
"url": "https://bugzilla.suse.com/1235519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56635"
},
{
"cve": "CVE-2024-56636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56636"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: do not assume mac header is set in geneve_xmit_skb()\n\nWe should not assume mac header is set in output path.\n\nUse skb_eth_hdr() instead of eth_hdr() to fix the issue.\n\nsysbot reported the following :\n\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 skb_mac_header include/linux/skbuff.h:3052 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 eth_hdr include/linux/if_ether.h:24 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nModules linked in:\nCPU: 0 UID: 0 PID: 11635 Comm: syz.4.1423 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_mac_header include/linux/skbuff.h:3052 [inline]\n RIP: 0010:eth_hdr include/linux/if_ether.h:24 [inline]\n RIP: 0010:geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n RIP: 0010:geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nCode: 21 c6 02 e9 35 d4 ff ff e8 a5 48 4c fb 90 0f 0b 90 e9 fd f5 ff ff e8 97 48 4c fb 90 0f 0b 90 e9 d8 f5 ff ff e8 89 48 4c fb 90 \u003c0f\u003e 0b 90 e9 41 e4 ff ff e8 7b 48 4c fb 90 0f 0b 90 e9 cd e7 ff ff\nRSP: 0018:ffffc90003b2f870 EFLAGS: 00010283\nRAX: 000000000000037a RBX: 000000000000ffff RCX: ffffc9000dc3d000\nRDX: 0000000000080000 RSI: ffffffff86428417 RDI: 0000000000000003\nRBP: ffffc90003b2f9f0 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000002 R12: ffff88806603c000\nR13: 0000000000000000 R14: ffff8880685b2780 R15: 0000000000000e23\nFS: 00007fdc2deed6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b30a1dff8 CR3: 0000000056b8c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n __dev_direct_xmit+0x58a/0x720 net/core/dev.c:4490\n dev_direct_xmit include/linux/netdevice.h:3181 [inline]\n packet_xmit+0x1e4/0x360 net/packet/af_packet.c:285\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x2700/0x5660 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x488/0x4f0 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2200\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56636",
"url": "https://www.suse.com/security/cve/CVE-2024-56636"
},
{
"category": "external",
"summary": "SUSE Bug 1235520 for CVE-2024-56636",
"url": "https://bugzilla.suse.com/1235520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56636"
},
{
"cve": "CVE-2024-56637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56637"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: Hold module reference while requesting a module\n\nUser space may unload ip_set.ko while it is itself requesting a set type\nbackend module, leading to a kernel crash. The race condition may be\nprovoked by inserting an mdelay() right after the nfnl_unlock() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56637",
"url": "https://www.suse.com/security/cve/CVE-2024-56637"
},
{
"category": "external",
"summary": "SUSE Bug 1235523 for CVE-2024-56637",
"url": "https://bugzilla.suse.com/1235523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n Workqueue: events smc_lgr_terminate_work [smc]\n RIP: 0010:__flush_work+0x19e/0x1b0\n Call Trace:\n ? __wake_up_common+0x7a/0x190\n ? work_busy+0x80/0x80\n __cancel_work_timer+0xe3/0x160\n smc_close_cancel_work+0x1a/0x70 [smc]\n smc_close_active_abort+0x207/0x360 [smc]\n __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n process_one_work+0x19e/0x340\n worker_thread+0x30/0x370\n ? process_one_work+0x340/0x340\n kthread+0x117/0x130\n ? __kthread_cancel_work+0x50/0x50\n ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn-\u003eclose_work is\nflushed before initialization, resulting in WARN_ON(!work-\u003efunc).\n\n__smc_lgr_terminate | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr-\u003econns_all |\n\\- smc_conn_kill |\n \\- smc_close_active_abort |\n \\- smc_close_cancel_work |\n \\- cancel_work_sync |\n \\- __flush_work |\n\t (close_work) |\n\t | smc_close_init\n\t | \\- INIT_WORK(\u0026close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56641",
"url": "https://www.suse.com/security/cve/CVE-2024-56641"
},
{
"category": "external",
"summary": "SUSE Bug 1235526 for CVE-2024-56641",
"url": "https://bugzilla.suse.com/1235526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56641"
},
{
"cve": "CVE-2024-56642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56642"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free of kernel socket in cleanup_bearer().\n\nsyzkaller reported a use-after-free of UDP kernel socket\nin cleanup_bearer() without repro. [0][1]\n\nWhen bearer_disable() calls tipc_udp_disable(), cleanup\nof the UDP kernel socket is deferred by work calling\ncleanup_bearer().\n\ntipc_exit_net() waits for such works to finish by checking\ntipc_net(net)-\u003ewq_count. However, the work decrements the\ncount too early before releasing the kernel socket,\nunblocking cleanup_net() and resulting in use-after-free.\n\nLet\u0027s move the decrement after releasing the socket in\ncleanup_bearer().\n\n[0]:\nref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at\n sk_alloc+0x438/0x608\n inet_create+0x4c8/0xcb0\n __sock_create+0x350/0x6b8\n sock_create_kern+0x58/0x78\n udp_sock_create4+0x68/0x398\n udp_sock_create+0x88/0xc8\n tipc_udp_enable+0x5e8/0x848\n __tipc_nl_bearer_enable+0x84c/0xed8\n tipc_nl_bearer_enable+0x38/0x60\n genl_family_rcv_msg_doit+0x170/0x248\n genl_rcv_msg+0x400/0x5b0\n netlink_rcv_skb+0x1dc/0x398\n genl_rcv+0x44/0x68\n netlink_unicast+0x678/0x8b0\n netlink_sendmsg+0x5e4/0x898\n ____sys_sendmsg+0x500/0x830\n\n[1]:\nBUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline]\nBUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n udp_hashslot include/net/udp.h:85 [inline]\n udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n sk_common_release+0xaf/0x3f0 net/core/sock.c:3820\n inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437\n inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489\n __sock_release net/socket.c:658 [inline]\n sock_release+0xa0/0x210 net/socket.c:686\n cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\n slab_free_hook mm/slub.c:2269 [inline]\n slab_free mm/slub.c:4580 [inline]\n kmem_cache_free+0x207/0xc40 mm/slub.c:4682\n net_free net/core/net_namespace.c:454 [inline]\n cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: events cleanup_bearer",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56642",
"url": "https://www.suse.com/security/cve/CVE-2024-56642"
},
{
"category": "external",
"summary": "SUSE Bug 1235433 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "external",
"summary": "SUSE Bug 1235434 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56642"
},
{
"cve": "CVE-2024-56643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56643"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: Fix memory leak in dccp_feat_change_recv\n\nIf dccp_feat_push_confirm() fails after new value for SP feature was accepted\nwithout reconciliation (\u0027entry == NULL\u0027 branch), memory allocated for that value\nwith dccp_feat_clone_sp_val() is never freed.\n\nHere is the kmemleak stack for this:\n\nunreferenced object 0xffff88801d4ab488 (size 8):\n comm \"syz-executor310\", pid 1127, jiffies 4295085598 (age 41.666s)\n hex dump (first 8 bytes):\n 01 b4 4a 1d 80 88 ff ff ..J.....\n backtrace:\n [\u003c00000000db7cabfe\u003e] kmemdup+0x23/0x50 mm/util.c:128\n [\u003c0000000019b38405\u003e] kmemdup include/linux/string.h:465 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:371 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:367 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_change_recv net/dccp/feat.c:1145 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_parse_options+0x1196/0x2180 net/dccp/feat.c:1416\n [\u003c00000000b1f6d94a\u003e] dccp_parse_options+0xa2a/0x1260 net/dccp/options.c:125\n [\u003c0000000030d7b621\u003e] dccp_rcv_state_process+0x197/0x13d0 net/dccp/input.c:650\n [\u003c000000001f74c72e\u003e] dccp_v4_do_rcv+0xf9/0x1a0 net/dccp/ipv4.c:688\n [\u003c00000000a6c24128\u003e] sk_backlog_rcv include/net/sock.h:1041 [inline]\n [\u003c00000000a6c24128\u003e] __release_sock+0x139/0x3b0 net/core/sock.c:2570\n [\u003c00000000cf1f3a53\u003e] release_sock+0x54/0x1b0 net/core/sock.c:3111\n [\u003c000000008422fa23\u003e] inet_wait_for_connect net/ipv4/af_inet.c:603 [inline]\n [\u003c000000008422fa23\u003e] __inet_stream_connect+0x5d0/0xf70 net/ipv4/af_inet.c:696\n [\u003c0000000015b6f64d\u003e] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:735\n [\u003c0000000010122488\u003e] __sys_connect_file+0x15c/0x1a0 net/socket.c:1865\n [\u003c00000000b4b70023\u003e] __sys_connect+0x165/0x1a0 net/socket.c:1882\n [\u003c00000000f4cb3815\u003e] __do_sys_connect net/socket.c:1892 [inline]\n [\u003c00000000f4cb3815\u003e] __se_sys_connect net/socket.c:1889 [inline]\n [\u003c00000000f4cb3815\u003e] __x64_sys_connect+0x6e/0xb0 net/socket.c:1889\n [\u003c00000000e7b1e839\u003e] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46\n [\u003c0000000055e91434\u003e] entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nClean up the allocated memory in case of dccp_feat_push_confirm() failure\nand bail out with an error reset code.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56643",
"url": "https://www.suse.com/security/cve/CVE-2024-56643"
},
{
"category": "external",
"summary": "SUSE Bug 1235132 for CVE-2024-56643",
"url": "https://bugzilla.suse.com/1235132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56644"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: release expired exception dst cached in socket\n\nDst objects get leaked in ip6_negative_advice() when this function is\nexecuted for an expired IPv6 route located in the exception table. There\nare several conditions that must be fulfilled for the leak to occur:\n* an ICMPv6 packet indicating a change of the MTU for the path is received,\n resulting in an exception dst being created\n* a TCP connection that uses the exception dst for routing packets must\n start timing out so that TCP begins retransmissions\n* after the exception dst expires, the FIB6 garbage collector must not run\n before TCP executes ip6_negative_advice() for the expired exception dst\n\nWhen TCP executes ip6_negative_advice() for an exception dst that has\nexpired and if no other socket holds a reference to the exception dst, the\nrefcount of the exception dst is 2, which corresponds to the increment\nmade by dst_init() and the increment made by the TCP socket for which the\nconnection is timing out. The refcount made by the socket is never\nreleased. The refcount of the dst is decremented in sk_dst_reset() but\nthat decrement is counteracted by a dst_hold() intentionally placed just\nbefore the sk_dst_reset() in ip6_negative_advice(). After\nip6_negative_advice() has finished, there is no other object tied to the\ndst. The socket lost its reference stored in sk_dst_cache and the dst is\nno longer in the exception table. The exception dst becomes a leaked\nobject.\n\nAs a result of this dst leak, an unbalanced refcount is reported for the\nloopback device of a net namespace being destroyed under kernels that do\nnot contain e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"):\nunregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFix the dst leak by removing the dst_hold() in ip6_negative_advice(). The\npatch that introduced the dst_hold() in ip6_negative_advice() was\n92f1655aa2b22 (\"net: fix __dst_negative_advice() race\"). But 92f1655aa2b22\nmerely refactored the code with regards to the dst refcount so the issue\nwas present even before 92f1655aa2b22. The bug was introduced in\n54c1a859efd9f (\"ipv6: Don\u0027t drop cache route entry unless timer actually\nexpired.\") where the expired cached route is deleted and the sk_dst_cache\nmember of the socket is set to NULL by calling dst_negative_advice() but\nthe refcount belonging to the socket is left unbalanced.\n\nThe IPv4 version - ipv4_negative_advice() - is not affected by this bug.\nWhen the TCP connection times out ipv4_negative_advice() merely resets the\nsk_dst_cache of the socket while decrementing the refcount of the\nexception dst.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56644",
"url": "https://www.suse.com/security/cve/CVE-2024-56644"
},
{
"category": "external",
"summary": "SUSE Bug 1235133 for CVE-2024-56644",
"url": "https://bugzilla.suse.com/1235133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: j1939: j1939_session_new(): fix skb reference counting\n\nSince j1939_session_skb_queue() does an extra skb_get() for each new\nskb, do the same for the initial one in j1939_session_new() to avoid\nrefcount underflow.\n\n[mkl: clean up commit message]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56645",
"url": "https://www.suse.com/security/cve/CVE-2024-56645"
},
{
"category": "external",
"summary": "SUSE Bug 1235134 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "external",
"summary": "SUSE Bug 1235135 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235135"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56645"
},
{
"cve": "CVE-2024-56648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: avoid potential out-of-bound access in fill_frame_info()\n\nsyzbot is able to feed a packet with 14 bytes, pretending\nit is a vlan one.\n\nSince fill_frame_info() is relying on skb-\u003emac_len already,\nextend the check to cover this case.\n\nBUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606\n __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x91ae/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4091 [inline]\n slab_alloc_node mm/slub.c:4134 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1323 [inline]\n alloc_skb_with_frags+0xc8/0xd00 net/core/skbuff.c:6612\n sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2881\n packet_alloc_skb net/packet/af_packet.c:2995 [inline]\n packet_snd net/packet/af_packet.c:3089 [inline]\n packet_sendmsg+0x74c6/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56648",
"url": "https://www.suse.com/security/cve/CVE-2024-56648"
},
{
"category": "external",
"summary": "SUSE Bug 1235451 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "external",
"summary": "SUSE Bug 1235452 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56648"
},
{
"cve": "CVE-2024-56649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: enetc: Do not configure preemptible TCs if SIs do not support\n\nBoth ENETC PF and VF drivers share enetc_setup_tc_mqprio() to configure\nMQPRIO. And enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs()\nto configure preemptible TCs. However, only PF is able to configure\npreemptible TCs. Because only PF has related registers, while VF does not\nhave these registers. So for VF, its hw-\u003eport pointer is NULL. Therefore,\nVF will access an invalid pointer when accessing a non-existent register,\nwhich will cause a crash issue. The simplified log is as follows.\n\nroot@ls1028ardb:~# tc qdisc add dev eno0vf0 parent root handle 100: \\\nmqprio num_tc 4 map 0 0 1 1 2 2 3 3 queues 1@0 1@1 1@2 1@3 hw 1\n[ 187.290775] Unable to handle kernel paging request at virtual address 0000000000001f00\n[ 187.424831] pc : enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.430518] lr : enetc_mm_commit_preemptible_tcs+0x30c/0x400\n[ 187.511140] Call trace:\n[ 187.513588] enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.518918] enetc_setup_tc_mqprio+0x180/0x214\n[ 187.523374] enetc_vf_setup_tc+0x1c/0x30\n[ 187.527306] mqprio_enable_offload+0x144/0x178\n[ 187.531766] mqprio_init+0x3ec/0x668\n[ 187.535351] qdisc_create+0x15c/0x488\n[ 187.539023] tc_modify_qdisc+0x398/0x73c\n[ 187.542958] rtnetlink_rcv_msg+0x128/0x378\n[ 187.547064] netlink_rcv_skb+0x60/0x130\n[ 187.550910] rtnetlink_rcv+0x18/0x24\n[ 187.554492] netlink_unicast+0x300/0x36c\n[ 187.558425] netlink_sendmsg+0x1a8/0x420\n[ 187.606759] ---[ end trace 0000000000000000 ]---\n\nIn addition, some PFs also do not support configuring preemptible TCs,\nsuch as eno1 and eno3 on LS1028A. It won\u0027t crash like it does for VFs,\nbut we should prevent these PFs from accessing these unimplemented\nregisters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56649",
"url": "https://www.suse.com/security/cve/CVE-2024-56649"
},
{
"category": "external",
"summary": "SUSE Bug 1235449 for CVE-2024-56649",
"url": "https://bugzilla.suse.com/1235449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56649"
},
{
"cve": "CVE-2024-56650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix LED ID check in led_tg_check()\n\nSyzbot has reported the following BUG detected by KASAN:\n\nBUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70\nRead of size 1 at addr ffff8881022da0c8 by task repro/5879\n...\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x241/0x360\n ? __pfx_dump_stack_lvl+0x10/0x10\n ? __pfx__printk+0x10/0x10\n ? _printk+0xd5/0x120\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n print_report+0x169/0x550\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x45f/0x530\n ? __phys_addr+0xba/0x170\n ? strlen+0x58/0x70\n kasan_report+0x143/0x180\n ? strlen+0x58/0x70\n strlen+0x58/0x70\n kstrdup+0x20/0x80\n led_tg_check+0x18b/0x3c0\n xt_check_target+0x3bb/0xa40\n ? __pfx_xt_check_target+0x10/0x10\n ? stack_depot_save_flags+0x6e4/0x830\n ? nft_target_init+0x174/0xc30\n nft_target_init+0x82d/0xc30\n ? __pfx_nft_target_init+0x10/0x10\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? rcu_is_watching+0x15/0xb0\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? __kmalloc_noprof+0x21a/0x400\n nf_tables_newrule+0x1860/0x2980\n ? __pfx_nf_tables_newrule+0x10/0x10\n ? __nla_parse+0x40/0x60\n nfnetlink_rcv+0x14e5/0x2ab0\n ? __pfx_validate_chain+0x10/0x10\n ? __pfx_nfnetlink_rcv+0x10/0x10\n ? __lock_acquire+0x1384/0x2050\n ? netlink_deliver_tap+0x2e/0x1b0\n ? __pfx_lock_release+0x10/0x10\n ? netlink_deliver_tap+0x2e/0x1b0\n netlink_unicast+0x7f8/0x990\n ? __pfx_netlink_unicast+0x10/0x10\n ? __virt_addr_valid+0x183/0x530\n ? __check_object_size+0x48e/0x900\n netlink_sendmsg+0x8e4/0xcb0\n ? __pfx_netlink_sendmsg+0x10/0x10\n ? aa_sock_msg_perm+0x91/0x160\n ? __pfx_netlink_sendmsg+0x10/0x10\n __sock_sendmsg+0x223/0x270\n ____sys_sendmsg+0x52a/0x7e0\n ? __pfx_____sys_sendmsg+0x10/0x10\n __sys_sendmsg+0x292/0x380\n ? __pfx___sys_sendmsg+0x10/0x10\n ? lockdep_hardirqs_on_prepare+0x43d/0x780\n ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10\n ? exc_page_fault+0x590/0x8c0\n ? do_syscall_64+0xb6/0x230\n do_syscall_64+0xf3/0x230\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n...\n \u003c/TASK\u003e\n\nSince an invalid (without \u0027\\0\u0027 byte at all) byte sequence may be passed\nfrom userspace, add an extra check to ensure that such a sequence is\nrejected as possible ID and so never passed to \u0027kstrdup()\u0027 and further.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56650",
"url": "https://www.suse.com/security/cve/CVE-2024-56650"
},
{
"category": "external",
"summary": "SUSE Bug 1235430 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "external",
"summary": "SUSE Bug 1235431 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: hi311x: hi3110_can_ist(): fix potential use-after-free\n\nThe commit a22bd630cfff (\"can: hi311x: do not report txerr and rxerr\nduring bus-off\") removed the reporting of rxerr and txerr even in case\nof correct operation (i. e. not bus-off).\n\nThe error count information added to the CAN frame after netif_rx() is\na potential use after free, since there is no guarantee that the skb\nis in the same state. It might be freed or reused.\n\nFix the issue by postponing the netif_rx() call in case of txerr and\nrxerr reporting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56651",
"url": "https://www.suse.com/security/cve/CVE-2024-56651"
},
{
"category": "external",
"summary": "SUSE Bug 1235528 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "external",
"summary": "SUSE Bug 1236570 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1236570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56651"
},
{
"cve": "CVE-2024-56654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56654"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating\n\nThe usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is\nnot safe since for the most part entries fetched this way shall be\ntreated as rcu_dereference:\n\n\tNote that the value returned by rcu_dereference() is valid\n\tonly within the enclosing RCU read-side critical section [1]_.\n\tFor example, the following is **not** legal::\n\n\t\trcu_read_lock();\n\t\tp = rcu_dereference(head.next);\n\t\trcu_read_unlock();\n\t\tx = p-\u003eaddress;\t/* BUG!!! */\n\t\trcu_read_lock();\n\t\ty = p-\u003edata;\t/* BUG!!! */\n\t\trcu_read_unlock();",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56654",
"url": "https://www.suse.com/security/cve/CVE-2024-56654"
},
{
"category": "external",
"summary": "SUSE Bug 1235532 for CVE-2024-56654",
"url": "https://bugzilla.suse.com/1235532"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56654"
},
{
"cve": "CVE-2024-56656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips\n\nThe 5760X (P7) chip\u0027s HW GRO/LRO interface is very similar to that of\nthe previous generation (5750X or P5). However, the aggregation ID\nfields in the completion structures on P7 have been redefined from\n16 bits to 12 bits. The freed up 4 bits are redefined for part of the\nmetadata such as the VLAN ID. The aggregation ID mask was not modified\nwhen adding support for P7 chips. Including the extra 4 bits for the\naggregation ID can potentially cause the driver to store or fetch the\npacket header of GRO/LRO packets in the wrong TPA buffer. It may hit\nthe BUG() condition in __skb_pull() because the SKB contains no valid\npacket header:\n\nkernel BUG at include/linux/skbuff.h:2766!\nOops: invalid opcode: 0000 1 PREEMPT SMP NOPTI\nCPU: 4 UID: 0 PID: 0 Comm: swapper/4 Kdump: loaded Tainted: G OE 6.12.0-rc2+ #7\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: Dell Inc. PowerEdge R760/0VRV9X, BIOS 1.0.1 12/27/2022\nRIP: 0010:eth_type_trans+0xda/0x140\nCode: 80 00 00 00 eb c1 8b 47 70 2b 47 74 48 8b 97 d0 00 00 00 83 f8 01 7e 1b 48 85 d2 74 06 66 83 3a ff 74 09 b8 00 04 00 00 eb a5 \u003c0f\u003e 0b b8 00 01 00 00 eb 9c 48 85 ff 74 eb 31 f6 b9 02 00 00 00 48\nRSP: 0018:ff615003803fcc28 EFLAGS: 00010283\nRAX: 00000000000022d2 RBX: 0000000000000003 RCX: ff2e8c25da334040\nRDX: 0000000000000040 RSI: ff2e8c25c1ce8000 RDI: ff2e8c25869f9000\nRBP: ff2e8c258c31c000 R08: ff2e8c25da334000 R09: 0000000000000001\nR10: ff2e8c25da3342c0 R11: ff2e8c25c1ce89c0 R12: ff2e8c258e0990b0\nR13: ff2e8c25bb120000 R14: ff2e8c25c1ce89c0 R15: ff2e8c25869f9000\nFS: 0000000000000000(0000) GS:ff2e8c34be300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055f05317e4c8 CR3: 000000108bac6006 CR4: 0000000000773ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n ? die+0x33/0x90\n ? do_trap+0xd9/0x100\n ? eth_type_trans+0xda/0x140\n ? do_error_trap+0x65/0x80\n ? eth_type_trans+0xda/0x140\n ? exc_invalid_op+0x4e/0x70\n ? eth_type_trans+0xda/0x140\n ? asm_exc_invalid_op+0x16/0x20\n ? eth_type_trans+0xda/0x140\n bnxt_tpa_end+0x10b/0x6b0 [bnxt_en]\n ? bnxt_tpa_start+0x195/0x320 [bnxt_en]\n bnxt_rx_pkt+0x902/0xd90 [bnxt_en]\n ? __bnxt_tx_int.constprop.0+0x89/0x300 [bnxt_en]\n ? kmem_cache_free+0x343/0x440\n ? __bnxt_tx_int.constprop.0+0x24f/0x300 [bnxt_en]\n __bnxt_poll_work+0x193/0x370 [bnxt_en]\n bnxt_poll_p5+0x9a/0x300 [bnxt_en]\n ? try_to_wake_up+0x209/0x670\n __napi_poll+0x29/0x1b0\n\nFix it by redefining the aggregation ID mask for P5_PLUS chips to be\n12 bits. This will work because the maximum aggregation ID is less\nthan 4096 on all P5_PLUS chips.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56656",
"url": "https://www.suse.com/security/cve/CVE-2024-56656"
},
{
"category": "external",
"summary": "SUSE Bug 1235444 for CVE-2024-56656",
"url": "https://bugzilla.suse.com/1235444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56656"
},
{
"cve": "CVE-2024-56659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56659"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lapb: increase LAPB_HEADER_LEN\n\nIt is unclear if net/lapb code is supposed to be ready for 8021q.\n\nWe can at least avoid crashes like the following :\n\nskbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2\n------------[ cut here ]------------\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc90002ddf638 EFLAGS: 00010282\nRAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600\nRDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000\nRBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60\nR10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140\nR13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016\nFS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n nr_header+0x36/0x320 net/netrom/nr_dev.c:69\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n vlan_dev_hard_header+0x359/0x480 net/8021q/vlan_dev.c:83\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n lapbeth_data_transmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257\n lapb_data_transmit+0x91/0xb0 net/lapb/lapb_iface.c:447\n lapb_transmit_buffer+0x168/0x1f0 net/lapb/lapb_out.c:149\n lapb_establish_data_link+0x84/0xd0\n lapb_device_event+0x4e0/0x670\n notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93\n __dev_notify_flags+0x207/0x400\n dev_change_flags+0xf0/0x1a0 net/core/dev.c:8922\n devinet_ioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188\n inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1003\n sock_do_ioctl+0x158/0x460 net/socket.c:1227\n sock_ioctl+0x626/0x8e0 net/socket.c:1346\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56659",
"url": "https://www.suse.com/security/cve/CVE-2024-56659"
},
{
"category": "external",
"summary": "SUSE Bug 1235439 for CVE-2024-56659",
"url": "https://bugzilla.suse.com/1235439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56659"
},
{
"cve": "CVE-2024-56660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: DR, prevent potential error pointer dereference\n\nThe dr_domain_add_vport_cap() function generally returns NULL on error\nbut sometimes we want it to return ERR_PTR(-EBUSY) so the caller can\nretry. The problem here is that \"ret\" can be either -EBUSY or -ENOMEM\nand if it\u0027s and -ENOMEM then the error pointer is propogated back and\neventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56660",
"url": "https://www.suse.com/security/cve/CVE-2024-56660"
},
{
"category": "external",
"summary": "SUSE Bug 1235437 for CVE-2024-56660",
"url": "https://bugzilla.suse.com/1235437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56660"
},
{
"cve": "CVE-2024-56661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix NULL deref in cleanup_bearer()\n\nsyzbot found [1] that after blamed commit, ub-\u003eubsock-\u003esk\nwas NULL when attempting the atomic_dec() :\n\natomic_dec(\u0026tipc_net(sock_net(ub-\u003eubsock-\u003esk))-\u003ewq_count);\n\nFix this by caching the tipc_net pointer.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\nCPU: 0 UID: 0 PID: 5896 Comm: kworker/0:3 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events cleanup_bearer\n RIP: 0010:read_pnet include/net/net_namespace.h:387 [inline]\n RIP: 0010:sock_net include/net/sock.h:655 [inline]\n RIP: 0010:cleanup_bearer+0x1f7/0x280 net/tipc/udp_media.c:820\nCode: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c f7 99 f6 48 8b 1b 48 83 c3 30 e8 f0 e4 60 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 80 3c 28 00 74 08 48 89 df e8 1a f7 99 f6 49 83 c7 e8 48 8b 1b\nRSP: 0018:ffffc9000410fb70 EFLAGS: 00010206\nRAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88802fe45a00\nRDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000410f900\nRBP: ffff88807e1f0908 R08: ffffc9000410f907 R09: 1ffff92000821f20\nR10: dffffc0000000000 R11: fffff52000821f21 R12: ffff888031d19980\nR13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e1f0918\nFS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556ca050b000 CR3: 0000000031c0c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56661",
"url": "https://www.suse.com/security/cve/CVE-2024-56661"
},
{
"category": "external",
"summary": "SUSE Bug 1234931 for CVE-2024-56661",
"url": "https://bugzilla.suse.com/1234931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl\n\nFix an issue detected by syzbot with KASAN:\n\nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/\ncore.c:416 [inline]\nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0\ndrivers/acpi/nfit/core.c:459\n\nThe issue occurs in cmd_to_func when the call_pkg-\u003end_reserved2\narray is accessed without verifying that call_pkg points to a buffer\nthat is appropriately sized as a struct nd_cmd_pkg. This can lead\nto out-of-bounds access and undefined behavior if the buffer does not\nhave sufficient space.\n\nTo address this, a check was added in acpi_nfit_ctl() to ensure that\nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)\nbefore accessing it. This ensures safe access to the members of\ncall_pkg, including the nd_reserved2 array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56662",
"url": "https://www.suse.com/security/cve/CVE-2024-56662"
},
{
"category": "external",
"summary": "SUSE Bug 1235533 for CVE-2024-56662",
"url": "https://bugzilla.suse.com/1235533"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one\n\nSince the netlink attribute range validation provides inclusive\nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be\nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.\n\nOne crash stack for demonstration:\n==================================================================\nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508\n\nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106\n print_report+0xe0/0x750 mm/kasan/report.c:398\n kasan_report+0x139/0x170 mm/kasan/report.c:495\n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189\n memcpy+0x25/0x60 mm/kasan/shadow.c:65\n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]\n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453\n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756\n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]\n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850\n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508\n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861\n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]\n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352\n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874\n sock_sendmsg_nosec net/socket.c:716 [inline]\n __sock_sendmsg net/socket.c:728 [inline]\n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499\n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553\n __sys_sendmsg net/socket.c:2582 [inline]\n __do_sys_sendmsg net/socket.c:2591 [inline]\n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUpdate the policy to ensure correct validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56663",
"url": "https://www.suse.com/security/cve/CVE-2024-56663"
},
{
"category": "external",
"summary": "SUSE Bug 1235454 for CVE-2024-56663",
"url": "https://bugzilla.suse.com/1235454"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56663"
},
{
"cve": "CVE-2024-56664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix race between element replace and close()\n\nElement replace (with a socket different from the one stored) may race\nwith socket\u0027s close() link popping \u0026 unlinking. __sock_map_delete()\nunconditionally unrefs the (wrong) element:\n\n// set map[0] = s0\nmap_update_elem(map, 0, s0)\n\n// drop fd of s0\nclose(s0)\n sock_map_close()\n lock_sock(sk) (s0!)\n sock_map_remove_links(sk)\n link = sk_psock_link_pop()\n sock_map_unlink(sk, link)\n sock_map_delete_from_link\n // replace map[0] with s1\n map_update_elem(map, 0, s1)\n sock_map_update_elem\n (s1!) lock_sock(sk)\n sock_map_update_common\n psock = sk_psock(sk)\n spin_lock(\u0026stab-\u003elock)\n osk = stab-\u003esks[idx]\n sock_map_add_link(..., \u0026stab-\u003esks[idx])\n sock_map_unref(osk, \u0026stab-\u003esks[idx])\n psock = sk_psock(osk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test(\u0026psock))\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n unlock_sock(sk)\n __sock_map_delete\n spin_lock(\u0026stab-\u003elock)\n sk = *psk // s1 replaced s0; sk == s1\n if (!sk_test || sk_test == sk) // sk_test (s0) != sk (s1); no branch\n sk = xchg(psk, NULL)\n if (sk)\n sock_map_unref(sk, psk) // unref s1; sks[idx] will dangle\n psock = sk_psock(sk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test())\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n release_sock(sk)\n\nThen close(map) enqueues bpf_map_free_deferred, which finally calls\nsock_map_free(). This results in some refcount_t warnings along with\na KASAN splat [1].\n\nFix __sock_map_delete(), do not allow sock_map_unref() on elements that\nmay have been replaced.\n\n[1]:\nBUG: KASAN: slab-use-after-free in sock_map_free+0x10e/0x330\nWrite of size 4 at addr ffff88811f5b9100 by task kworker/u64:12/1063\n\nCPU: 14 UID: 0 PID: 1063 Comm: kworker/u64:12 Not tainted 6.12.0+ #125\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014\nWorkqueue: events_unbound bpf_map_free_deferred\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x68/0x90\n print_report+0x174/0x4f6\n kasan_report+0xb9/0x190\n kasan_check_range+0x10f/0x1e0\n sock_map_free+0x10e/0x330\n bpf_map_free_deferred+0x173/0x320\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 1202:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n __kasan_slab_alloc+0x85/0x90\n kmem_cache_alloc_noprof+0x131/0x450\n sk_prot_alloc+0x5b/0x220\n sk_alloc+0x2c/0x870\n unix_create1+0x88/0x8a0\n unix_create+0xc5/0x180\n __sock_create+0x241/0x650\n __sys_socketpair+0x1ce/0x420\n __x64_sys_socketpair+0x92/0x100\n do_syscall_64+0x93/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 46:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x37/0x60\n __kasan_slab_free+0x4b/0x70\n kmem_cache_free+0x1a1/0x590\n __sk_destruct+0x388/0x5a0\n sk_psock_destroy+0x73e/0xa50\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nThe bu\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56664",
"url": "https://www.suse.com/security/cve/CVE-2024-56664"
},
{
"category": "external",
"summary": "SUSE Bug 1235249 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "external",
"summary": "SUSE Bug 1235250 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56664"
},
{
"cve": "CVE-2024-56665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56665"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog\n\nSyzbot reported [1] crash that happens for following tracing scenario:\n\n - create tracepoint perf event with attr.inherit=1, attach it to the\n process and set bpf program to it\n - attached process forks -\u003e chid creates inherited event\n\n the new child event shares the parent\u0027s bpf program and tp_event\n (hence prog_array) which is global for tracepoint\n\n - exit both process and its child -\u003e release both events\n - first perf_event_detach_bpf_prog call will release tp_event-\u003eprog_array\n and second perf_event_detach_bpf_prog will crash, because\n tp_event-\u003eprog_array is NULL\n\nThe fix makes sure the perf_event_detach_bpf_prog checks prog_array\nis valid before it tries to remove the bpf program from it.\n\n[1] https://lore.kernel.org/bpf/Z1MR6dCIKajNS6nU@krava/T/#m91dbf0688221ec7a7fc95e896a7ef9ff93b0b8ad",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56665",
"url": "https://www.suse.com/security/cve/CVE-2024-56665"
},
{
"category": "external",
"summary": "SUSE Bug 1235489 for CVE-2024-56665",
"url": "https://bugzilla.suse.com/1235489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56665"
},
{
"cve": "CVE-2024-56667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56667"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix NULL pointer dereference in capture_engine\n\nWhen the intel_context structure contains NULL,\nit raises a NULL pointer dereference error in drm_info().\n\n(cherry picked from commit 754302a5bc1bd8fd3b7d85c168b0a1af6d4bba4d)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56667",
"url": "https://www.suse.com/security/cve/CVE-2024-56667"
},
{
"category": "external",
"summary": "SUSE Bug 1235016 for CVE-2024-56667",
"url": "https://bugzilla.suse.com/1235016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56667"
},
{
"cve": "CVE-2024-56670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer\n\nConsidering that in some extreme cases,\nwhen u_serial driver is accessed by multiple threads,\nThread A is executing the open operation and calling the gs_open,\nThread B is executing the disconnect operation and calling the\ngserial_disconnect function,The port-\u003eport_usb pointer will be set to NULL.\n\nE.g.\n Thread A Thread B\n gs_open() gadget_unbind_driver()\n gs_start_io() composite_disconnect()\n gs_start_rx() gserial_disconnect()\n ... ...\n spin_unlock(\u0026port-\u003eport_lock)\n status = usb_ep_queue() spin_lock(\u0026port-\u003eport_lock)\n spin_lock(\u0026port-\u003eport_lock) port-\u003eport_usb = NULL\n gs_free_requests(port-\u003eport_usb-\u003ein) spin_unlock(\u0026port-\u003eport_lock)\n Crash\n\nThis causes thread A to access a null pointer (port-\u003eport_usb is null)\nwhen calling the gs_free_requests function, causing a crash.\n\nIf port_usb is NULL, the release request will be skipped as it\nwill be done by gserial_disconnect.\n\nSo add a null pointer check to gs_start_io before attempting\nto access the value of the pointer port-\u003eport_usb.\n\nCall trace:\n gs_start_io+0x164/0x25c\n gs_open+0x108/0x13c\n tty_open+0x314/0x638\n chrdev_open+0x1b8/0x258\n do_dentry_open+0x2c4/0x700\n vfs_open+0x2c/0x3c\n path_openat+0xa64/0xc60\n do_filp_open+0xb8/0x164\n do_sys_openat2+0x84/0xf0\n __arm64_sys_openat+0x70/0x9c\n invoke_syscall+0x58/0x114\n el0_svc_common+0x80/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x38/0x68",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56670",
"url": "https://www.suse.com/security/cve/CVE-2024-56670"
},
{
"category": "external",
"summary": "SUSE Bug 1235488 for CVE-2024-56670",
"url": "https://bugzilla.suse.com/1235488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56670"
},
{
"cve": "CVE-2024-56672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56672"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: Fix UAF in blkcg_unpin_online()\n\nblkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To\nwalk up, it uses blkcg_parent(blkcg) but it was calling that after\nblkcg_destroy_blkgs(blkcg) which could free the blkcg, leading to the\nfollowing UAF:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in blkcg_unpin_online+0x15a/0x270\n Read of size 8 at addr ffff8881057678c0 by task kworker/9:1/117\n\n CPU: 9 UID: 0 PID: 117 Comm: kworker/9:1 Not tainted 6.13.0-rc1-work-00182-gb8f52214c61a-dirty #48\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 02/02/2022\n Workqueue: cgwb_release cgwb_release_workfn\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x27/0x80\n print_report+0x151/0x710\n kasan_report+0xc0/0x100\n blkcg_unpin_online+0x15a/0x270\n cgwb_release_workfn+0x194/0x480\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n ...\n Freed by task 1944:\n kasan_save_track+0x2b/0x70\n kasan_save_free_info+0x3c/0x50\n __kasan_slab_free+0x33/0x50\n kfree+0x10c/0x330\n css_free_rwork_fn+0xe6/0xb30\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n\nNote that the UAF is not easy to trigger as the free path is indirected\nbehind a couple RCU grace periods and a work item execution. I could only\ntrigger it with artifical msleep() injected in blkcg_unpin_online().\n\nFix it by reading the parent pointer before destroying the blkcg\u0027s blkg\u0027s.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56672",
"url": "https://www.suse.com/security/cve/CVE-2024-56672"
},
{
"category": "external",
"summary": "SUSE Bug 1235534 for CVE-2024-56672",
"url": "https://bugzilla.suse.com/1235534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56672"
},
{
"cve": "CVE-2024-56675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors\n\nUprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU\nprotection. But it is possible to attach a non-sleepable BPF program to a\nuprobe, and non-sleepable BPF programs are freed via normal RCU (see\n__bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal\nRCU grace period does not imply a tasks-trace-RCU grace period.\n\nFix it by explicitly waiting for a tasks-trace-RCU grace period after\nremoving the attachment of a bpf_prog to a perf_event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56675",
"url": "https://www.suse.com/security/cve/CVE-2024-56675"
},
{
"category": "external",
"summary": "SUSE Bug 1235555 for CVE-2024-56675",
"url": "https://bugzilla.suse.com/1235555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56675"
},
{
"cve": "CVE-2024-56677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56677"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()\n\nDuring early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE,\nsince pageblock_order is still zero and it gets initialized\nlater during initmem_init() e.g.\nsetup_arch() -\u003e initmem_init() -\u003e sparse_init() -\u003e set_pageblock_order()\n\nOne such use case where this causes issue is -\nearly_setup() -\u003e early_init_devtree() -\u003e fadump_reserve_mem() -\u003e fadump_cma_init()\n\nThis causes CMA memory alignment check to be bypassed in\ncma_init_reserved_mem(). Then later cma_activate_area() can hit\na VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1)) if the reserved memory\narea was not pageblock_order aligned.\n\nFix it by moving the fadump_cma_init() after initmem_init(),\nwhere other such cma reservations also gets called.\n\n\u003cstack trace\u003e\n==============\npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10010\nflags: 0x13ffff800000000(node=1|zone=0|lastcpupid=0x7ffff) CMA\nraw: 013ffff800000000 5deadbeef0000100 5deadbeef0000122 0000000000000000\nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1))\n------------[ cut here ]------------\nkernel BUG at mm/page_alloc.c:778!\n\nCall Trace:\n__free_one_page+0x57c/0x7b0 (unreliable)\nfree_pcppages_bulk+0x1a8/0x2c8\nfree_unref_page_commit+0x3d4/0x4e4\nfree_unref_page+0x458/0x6d0\ninit_cma_reserved_pageblock+0x114/0x198\ncma_init_reserved_areas+0x270/0x3e0\ndo_one_initcall+0x80/0x2f8\nkernel_init_freeable+0x33c/0x530\nkernel_init+0x34/0x26c\nret_from_kernel_user_thread+0x14/0x1c",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56677",
"url": "https://www.suse.com/security/cve/CVE-2024-56677"
},
{
"category": "external",
"summary": "SUSE Bug 1235494 for CVE-2024-56677",
"url": "https://bugzilla.suse.com/1235494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56677"
},
{
"cve": "CVE-2024-56678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/mm/fault: Fix kfence page fault reporting\n\ncopy_from_kernel_nofault() can be called when doing read of /proc/kcore.\n/proc/kcore can have some unmapped kfence objects which when read via\ncopy_from_kernel_nofault() can cause page faults. Since *_nofault()\nfunctions define their own fixup table for handling fault, use that\ninstead of asking kfence to handle such faults.\n\nHence we search the exception tables for the nip which generated the\nfault. If there is an entry then we let the fixup table handler handle the\npage fault by returning an error from within ___do_page_fault().\n\nThis can be easily triggered if someone tries to do dd from /proc/kcore.\neg. dd if=/proc/kcore of=/dev/null bs=1M\n\nSome example false negatives:\n\n ===============================\n BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0\n Invalid read at 0xc0000000fdff0000:\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec\n\n BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0\n Use-after-free read at 0xc0000000fe050000 (in kfence-#2):\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56678",
"url": "https://www.suse.com/security/cve/CVE-2024-56678"
},
{
"category": "external",
"summary": "SUSE Bug 1235495 for CVE-2024-56678",
"url": "https://bugzilla.suse.com/1235495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56678"
},
{
"cve": "CVE-2024-56679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56679"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56679",
"url": "https://www.suse.com/security/cve/CVE-2024-56679"
},
{
"category": "external",
"summary": "SUSE Bug 1235498 for CVE-2024-56679",
"url": "https://bugzilla.suse.com/1235498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56679"
},
{
"cve": "CVE-2024-56681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: bcm - add error check in the ahash_hmac_init function\n\nThe ahash_init functions may return fails. The ahash_hmac_init should\nnot return ok when ahash_init returns error. For an example, ahash_init\nwill return -ENOMEM when allocation memory is error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56681",
"url": "https://www.suse.com/security/cve/CVE-2024-56681"
},
{
"category": "external",
"summary": "SUSE Bug 1235557 for CVE-2024-56681",
"url": "https://bugzilla.suse.com/1235557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56683"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hdmi: Avoid hang with debug registers when suspended\n\nTrying to read /sys/kernel/debug/dri/1/hdmi1_regs\nwhen the hdmi is disconnected results in a fatal system hang.\n\nThis is due to the pm suspend code disabling the dvp clock.\nThat is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG,\nwhich results in accesses hanging AXI bus.\n\nProtect against this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56683",
"url": "https://www.suse.com/security/cve/CVE-2024-56683"
},
{
"category": "external",
"summary": "SUSE Bug 1235497 for CVE-2024-56683",
"url": "https://bugzilla.suse.com/1235497"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56683"
},
{
"cve": "CVE-2024-56687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: musb: Fix hardware lockup on first Rx endpoint request\n\nThere is a possibility that a request\u0027s callback could be invoked from\nusb_ep_queue() (call trace below, supplemented with missing calls):\n\nreq-\u003ecomplete from usb_gadget_giveback_request\n\t(drivers/usb/gadget/udc/core.c:999)\nusb_gadget_giveback_request from musb_g_giveback\n\t(drivers/usb/musb/musb_gadget.c:147)\nmusb_g_giveback from rxstate\n\t(drivers/usb/musb/musb_gadget.c:784)\nrxstate from musb_ep_restart\n\t(drivers/usb/musb/musb_gadget.c:1169)\nmusb_ep_restart from musb_ep_restart_resume_work\n\t(drivers/usb/musb/musb_gadget.c:1176)\nmusb_ep_restart_resume_work from musb_queue_resume_work\n\t(drivers/usb/musb/musb_core.c:2279)\nmusb_queue_resume_work from musb_gadget_queue\n\t(drivers/usb/musb/musb_gadget.c:1241)\nmusb_gadget_queue from usb_ep_queue\n\t(drivers/usb/gadget/udc/core.c:300)\n\nAccording to the docstring of usb_ep_queue(), this should not happen:\n\n\"Note that @req\u0027s -\u003ecomplete() callback must never be called from within\nusb_ep_queue() as that can create deadlock situations.\"\n\nIn fact, a hardware lockup might occur in the following sequence:\n\n1. The gadget is initialized using musb_gadget_enable().\n2. Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an\n interrupt.\n3. If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an\n empty queue (next_request() returns NULL). The interrupt flag has\n already been cleared by the glue layer handler, but the RXPKTRDY flag\n remains set.\n4. The first request is enqueued using usb_ep_queue(), leading to the call\n of req-\u003ecomplete(), as shown in the call trace above.\n5. If the callback enables IRQs and another packet is waiting, step (3)\n repeats. The request queue is empty because usb_g_giveback() removes the\n request before invoking the callback.\n6. The endpoint remains locked up, as the interrupt triggered by hardware\n setting the RXPKTRDY flag has been handled, but the flag itself remains\n set.\n\nFor this scenario to occur, it is only necessary for IRQs to be enabled at\nsome point during the complete callback. This happens with the USB Ethernet\ngadget, whose rx_complete() callback calls netif_rx(). If called in the\ntask context, netif_rx() disables the bottom halves (BHs). When the BHs are\nre-enabled, IRQs are also enabled to allow soft IRQs to be processed. The\ngadget itself is initialized at module load (or at boot if built-in), but\nthe first request is enqueued when the network interface is brought up,\ntriggering rx_complete() in the task context via ioctl(). If a packet\narrives while the interface is down, it can prevent the interface from\nreceiving any further packets from the USB host.\n\nThe situation is quite complicated with many parties involved. This\nparticular issue can be resolved in several possible ways:\n\n1. Ensure that callbacks never enable IRQs. This would be difficult to\n enforce, as discovering how netif_rx() interacts with interrupts was\n already quite challenging and u_ether is not the only function driver.\n Similar \"bugs\" could be hidden in other drivers as well.\n2. Disable MUSB interrupts in musb_g_giveback() before calling the callback\n and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(),\n for example). This would ensure that MUSB interrupts are not handled\n during the callback, even if IRQs are enabled. In fact, it would allow\n IRQs to be enabled when releasing the lock. However, this feels like an\n inelegant hack.\n3. Modify the interrupt handler to clear the RXPKTRDY flag if the request\n queue is empty. While this approach also feels like a hack, it wastes\n CPU time by attempting to handle incoming packets when the software is\n not ready to process them.\n4. Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart().\n This ensures that the hardware can receive packets when there is at\n least one request in the queue. Once I\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56687",
"url": "https://www.suse.com/security/cve/CVE-2024-56687"
},
{
"category": "external",
"summary": "SUSE Bug 1235537 for CVE-2024-56687",
"url": "https://bugzilla.suse.com/1235537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56687"
},
{
"cve": "CVE-2024-56688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56688"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport\n\nSince transport-\u003esock has been set to NULL during reset transport,\nXPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the\nxs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request()\nto dereference the transport-\u003esock that has been set to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56688",
"url": "https://www.suse.com/security/cve/CVE-2024-56688"
},
{
"category": "external",
"summary": "SUSE Bug 1235538 for CVE-2024-56688",
"url": "https://bugzilla.suse.com/1235538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56688"
},
{
"cve": "CVE-2024-56690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY\n\nSince commit 8f4f68e788c3 (\"crypto: pcrypt - Fix hungtask for\nPADATA_RESET\"), the pcrypt encryption and decryption operations return\n-EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is\ngenerated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns\n-EAGAIN, the unnecessary panic will occur when panic_on_warn set 1.\nFix this issue by calling crypto layer directly without parallelization\nin that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56690",
"url": "https://www.suse.com/security/cve/CVE-2024-56690"
},
{
"category": "external",
"summary": "SUSE Bug 1235428 for CVE-2024-56690",
"url": "https://bugzilla.suse.com/1235428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56690"
},
{
"cve": "CVE-2024-56691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56691"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56691",
"url": "https://www.suse.com/security/cve/CVE-2024-56691"
},
{
"category": "external",
"summary": "SUSE Bug 1235425 for CVE-2024-56691",
"url": "https://bugzilla.suse.com/1235425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56691"
},
{
"cve": "CVE-2024-56693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56693"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbrd: defer automatic disk creation until module initialization succeeds\n\nMy colleague Wupeng found the following problems during fault injection:\n\nBUG: unable to handle page fault for address: fffffbfff809d073\nPGD 6e648067 P4D 123ec8067 PUD 123ec4067 PMD 100e38067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nCPU: 5 UID: 0 PID: 755 Comm: modprobe Not tainted 6.12.0-rc3+ #17\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:__asan_load8+0x4c/0xa0\n...\nCall Trace:\n \u003cTASK\u003e\n blkdev_put_whole+0x41/0x70\n bdev_release+0x1a3/0x250\n blkdev_release+0x11/0x20\n __fput+0x1d7/0x4a0\n task_work_run+0xfc/0x180\n syscall_exit_to_user_mode+0x1de/0x1f0\n do_syscall_64+0x6b/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nloop_init() is calling loop_add() after __register_blkdev() succeeds and\nis ignoring disk_add() failure from loop_add(), for loop_add() failure\nis not fatal and successfully created disks are already visible to\nbdev_open().\n\nbrd_init() is currently calling brd_alloc() before __register_blkdev()\nsucceeds and is releasing successfully created disks when brd_init()\nreturns an error. This can cause UAF for the latter two case:\n\ncase 1:\n T1:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n add_disk\n disk_scan_partitions\n bdev_file_open_by_dev // alloc file\n fput // won\u0027t free until back to userspace\n brd_alloc(1) // failed since mem alloc error inject\n // error path for modprobe will release code segment\n // back to userspace\n __fput\n blkdev_release\n bdev_release\n blkdev_put_whole\n bdev-\u003ebd_disk-\u003efops-\u003erelease // fops is freed now, UAF!\n\ncase 2:\n T1: T2:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n open(/dev/ram0)\n brd_alloc(1) // fail\n // error path for modprobe\n\n close(/dev/ram0)\n ...\n /* UAF! */\n bdev-\u003ebd_disk-\u003efops-\u003erelease\n\nFix this problem by following what loop_init() does. Besides,\nreintroduce brd_devices_mutex to help serialize modifications to\nbrd_list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56693",
"url": "https://www.suse.com/security/cve/CVE-2024-56693"
},
{
"category": "external",
"summary": "SUSE Bug 1235418 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "external",
"summary": "SUSE Bug 1235419 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56693"
},
{
"cve": "CVE-2024-56694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix recursive lock when verdict program return SK_PASS\n\nWhen the stream_verdict program returns SK_PASS, it places the received skb\ninto its own receive queue, but a recursive lock eventually occurs, leading\nto an operating system deadlock. This issue has been present since v6.9.\n\n\u0027\u0027\u0027\nsk_psock_strp_data_ready\n write_lock_bh(\u0026sk-\u003esk_callback_lock)\n strp_data_ready\n strp_read_sock\n read_sock -\u003e tcp_read_sock\n strp_recv\n cb.rcv_msg -\u003e sk_psock_strp_read\n # now stream_verdict return SK_PASS without peer sock assign\n __SK_PASS = sk_psock_map_verd(SK_PASS, NULL)\n sk_psock_verdict_apply\n sk_psock_skb_ingress_self\n sk_psock_skb_ingress_enqueue\n sk_psock_data_ready\n read_lock_bh(\u0026sk-\u003esk_callback_lock) \u003c= dead lock\n\n\u0027\u0027\u0027\n\nThis topic has been discussed before, but it has not been fixed.\nPrevious discussion:\nhttps://lore.kernel.org/all/6684a5864ec86_403d20898@john.notmuch",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56694",
"url": "https://www.suse.com/security/cve/CVE-2024-56694"
},
{
"category": "external",
"summary": "SUSE Bug 1235412 for CVE-2024-56694",
"url": "https://bugzilla.suse.com/1235412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56694"
},
{
"cve": "CVE-2024-56698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56698"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Fix looping of queued SG entries\n\nThe dwc3_request-\u003enum_queued_sgs is decremented on completion. If a\npartially completed request is handled, then the\ndwc3_request-\u003enum_queued_sgs no longer reflects the total number of\nnum_queued_sgs (it would be cleared).\n\nCorrectly check the number of request SG entries remained to be prepare\nand queued. Failure to do this may cause null pointer dereference when\naccessing non-existent SG entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56698",
"url": "https://www.suse.com/security/cve/CVE-2024-56698"
},
{
"category": "external",
"summary": "SUSE Bug 1235491 for CVE-2024-56698",
"url": "https://bugzilla.suse.com/1235491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56698"
},
{
"cve": "CVE-2024-56700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56700"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: wl128x: Fix atomicity violation in fmc_send_cmd()\n\nAtomicity violation occurs when the fmc_send_cmd() function is executed\nsimultaneously with the modification of the fmdev-\u003eresp_skb value.\nConsider a scenario where, after passing the validity check within the\nfunction, a non-null fmdev-\u003eresp_skb variable is assigned a null value.\nThis results in an invalid fmdev-\u003eresp_skb variable passing the validity\ncheck. As seen in the later part of the function, skb = fmdev-\u003eresp_skb;\nwhen the invalid fmdev-\u003eresp_skb passes the check, a null pointer\ndereference error may occur at line 478, evt_hdr = (void *)skb-\u003edata;\n\nTo address this issue, it is recommended to include the validity check of\nfmdev-\u003eresp_skb within the locked section of the function. This\nmodification ensures that the value of fmdev-\u003eresp_skb does not change\nduring the validation process, thereby maintaining its validity.\n\nThis possible bug is found by an experimental static analysis tool\ndeveloped by our team. This tool analyzes the locking APIs\nto extract function pairs that can be concurrently executed, and then\nanalyzes the instructions in the paired functions to identify possible\nconcurrency bugs including data races and atomicity violations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56700",
"url": "https://www.suse.com/security/cve/CVE-2024-56700"
},
{
"category": "external",
"summary": "SUSE Bug 1235500 for CVE-2024-56700",
"url": "https://bugzilla.suse.com/1235500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix dtl_access_lock to be a rw_semaphore\n\nThe dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because\nthe code calls kmalloc() while holding it, which can sleep:\n\n # echo 1 \u003e /proc/powerpc/vcpudispatch_stats\n BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 199, name: sh\n preempt_count: 1, expected: 0\n 3 locks held by sh/199:\n #0: c00000000a0743f8 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x324/0x438\n #1: c0000000028c7058 (dtl_enable_mutex){+.+.}-{3:3}, at: vcpudispatch_stats_write+0xd4/0x5f4\n #2: c0000000028c70b8 (dtl_access_lock){+.+.}-{2:2}, at: vcpudispatch_stats_write+0x220/0x5f4\n CPU: 0 PID: 199 Comm: sh Not tainted 6.10.0-rc4 #152\n Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1202 0xf000005 of:SLOF,HEAD hv:linux,kvm pSeries\n Call Trace:\n dump_stack_lvl+0x130/0x148 (unreliable)\n __might_resched+0x174/0x410\n kmem_cache_alloc_noprof+0x340/0x3d0\n alloc_dtl_buffers+0x124/0x1ac\n vcpudispatch_stats_write+0x2a8/0x5f4\n proc_reg_write+0xf4/0x150\n vfs_write+0xfc/0x438\n ksys_write+0x88/0x148\n system_call_exception+0x1c4/0x5a0\n system_call_common+0xf4/0x258",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56701",
"url": "https://www.suse.com/security/cve/CVE-2024-56701"
},
{
"category": "external",
"summary": "SUSE Bug 1235496 for CVE-2024-56701",
"url": "https://bugzilla.suse.com/1235496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56701"
},
{
"cve": "CVE-2024-56704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56704"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p/xen: fix release of IRQ\n\nKernel logs indicate an IRQ was double-freed.\n\nPass correct device ID during IRQ release.\n\n[Dominique: remove confusing variable reset to 0]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56704",
"url": "https://www.suse.com/security/cve/CVE-2024-56704"
},
{
"category": "external",
"summary": "SUSE Bug 1235584 for CVE-2024-56704",
"url": "https://bugzilla.suse.com/1235584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56704"
},
{
"cve": "CVE-2024-56705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56705"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Add check for rgby_data memory allocation failure\n\nIn ia_css_3a_statistics_allocate(), there is no check on the allocation\nresult of the rgby_data memory. If rgby_data is not successfully\nallocated, it may trigger the assert(host_stats-\u003ergby_data) assertion in\nia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56705",
"url": "https://www.suse.com/security/cve/CVE-2024-56705"
},
{
"category": "external",
"summary": "SUSE Bug 1235568 for CVE-2024-56705",
"url": "https://bugzilla.suse.com/1235568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56705"
},
{
"cve": "CVE-2024-56707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56707"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c\n\nAdd error pointer checks after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56707",
"url": "https://www.suse.com/security/cve/CVE-2024-56707"
},
{
"category": "external",
"summary": "SUSE Bug 1235545 for CVE-2024-56707",
"url": "https://bugzilla.suse.com/1235545"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56707"
},
{
"cve": "CVE-2024-56708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56708"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/igen6: Avoid segmentation fault on module unload\n\nThe segmentation fault happens because:\n\nDuring modprobe:\n1. In igen6_probe(), igen6_pvt will be allocated with kzalloc()\n2. In igen6_register_mci(), mci-\u003epvt_info will point to\n \u0026igen6_pvt-\u003eimc[mc]\n\nDuring rmmod:\n1. In mci_release() in edac_mc.c, it will kfree(mci-\u003epvt_info)\n2. In igen6_remove(), it will kfree(igen6_pvt);\n\nFix this issue by setting mci-\u003epvt_info to NULL to avoid the double\nkfree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56708",
"url": "https://www.suse.com/security/cve/CVE-2024-56708"
},
{
"category": "external",
"summary": "SUSE Bug 1235564 for CVE-2024-56708",
"url": "https://bugzilla.suse.com/1235564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56708"
},
{
"cve": "CVE-2024-56709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check if iowq is killed before queuing\n\ntask work can be executed after the task has gone through io_uring\ntermination, whether it\u0027s the final task_work run or the fallback path.\nIn this case, task work will find -\u003eio_wq being already killed and\nnull\u0027ed, which is a problem if it then tries to forward the request to\nio_queue_iowq(). Make io_queue_iowq() fail requests in this case.\n\nNote that it also checks PF_KTHREAD, because the user can first close\na DEFER_TASKRUN ring and shortly after kill the task, in which case\n-\u003eiowq check would race.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56709",
"url": "https://www.suse.com/security/cve/CVE-2024-56709"
},
{
"category": "external",
"summary": "SUSE Bug 1235552 for CVE-2024-56709",
"url": "https://bugzilla.suse.com/1235552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56709"
},
{
"cve": "CVE-2024-56712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56712"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: fix memory leak on last export_udmabuf() error path\n\nIn export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a\ndma_buf owning the udmabuf has already been created; but the error handling\nin udmabuf_create() will tear down the udmabuf without doing anything about\nthe containing dma_buf.\n\nThis leaves a dma_buf in memory that contains a dangling pointer; though\nthat doesn\u0027t seem to lead to anything bad except a memory leak.\n\nFix it by moving the dma_buf_fd() call out of export_udmabuf() so that we\ncan give it different error handling.\n\nNote that the shape of this code changed a lot in commit 5e72b2b41a21\n(\"udmabuf: convert udmabuf driver to use folios\"); but the memory leak\nseems to have existed since the introduction of udmabuf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56712",
"url": "https://www.suse.com/security/cve/CVE-2024-56712"
},
{
"category": "external",
"summary": "SUSE Bug 1235565 for CVE-2024-56712",
"url": "https://bugzilla.suse.com/1235565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56712"
},
{
"cve": "CVE-2024-56715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56715"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nionic: Fix netdev notifier unregister on failure\n\nIf register_netdev() fails, then the driver leaks the netdev notifier.\nFix this by calling ionic_lif_unregister() on register_netdev()\nfailure. This will also call ionic_lif_unregister_phc() if it has\nalready been registered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56715",
"url": "https://www.suse.com/security/cve/CVE-2024-56715"
},
{
"category": "external",
"summary": "SUSE Bug 1235612 for CVE-2024-56715",
"url": "https://bugzilla.suse.com/1235612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56715"
},
{
"cve": "CVE-2024-56716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56716"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: prevent bad user input in nsim_dev_health_break_write()\n\nIf either a zero count or a large one is provided, kernel can crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56716",
"url": "https://www.suse.com/security/cve/CVE-2024-56716"
},
{
"category": "external",
"summary": "SUSE Bug 1235587 for CVE-2024-56716",
"url": "https://bugzilla.suse.com/1235587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56716"
},
{
"cve": "CVE-2024-56722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix cpu stuck caused by printings during reset\n\nDuring reset, cmd to destroy resources such as qp, cq, and mr may fail,\nand error logs will be printed. When a large number of resources are\ndestroyed, there will be lots of printings, and it may lead to a cpu\nstuck.\n\nDelete some unnecessary printings and replace other printing functions\nin these paths with the ratelimited version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56722",
"url": "https://www.suse.com/security/cve/CVE-2024-56722"
},
{
"category": "external",
"summary": "SUSE Bug 1235570 for CVE-2024-56722",
"url": "https://bugzilla.suse.com/1235570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56722"
},
{
"cve": "CVE-2024-56723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56723"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56723",
"url": "https://www.suse.com/security/cve/CVE-2024-56723"
},
{
"category": "external",
"summary": "SUSE Bug 1235571 for CVE-2024-56723",
"url": "https://bugzilla.suse.com/1235571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56723"
},
{
"cve": "CVE-2024-56724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56724"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56724",
"url": "https://www.suse.com/security/cve/CVE-2024-56724"
},
{
"category": "external",
"summary": "SUSE Bug 1235577 for CVE-2024-56724",
"url": "https://bugzilla.suse.com/1235577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56724"
},
{
"cve": "CVE-2024-56725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56725"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56725",
"url": "https://www.suse.com/security/cve/CVE-2024-56725"
},
{
"category": "external",
"summary": "SUSE Bug 1235578 for CVE-2024-56725",
"url": "https://bugzilla.suse.com/1235578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56725"
},
{
"cve": "CVE-2024-56726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56726"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56726",
"url": "https://www.suse.com/security/cve/CVE-2024-56726"
},
{
"category": "external",
"summary": "SUSE Bug 1235582 for CVE-2024-56726",
"url": "https://bugzilla.suse.com/1235582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56726"
},
{
"cve": "CVE-2024-56727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56727"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c\n\nAdding error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56727",
"url": "https://www.suse.com/security/cve/CVE-2024-56727"
},
{
"category": "external",
"summary": "SUSE Bug 1235583 for CVE-2024-56727",
"url": "https://bugzilla.suse.com/1235583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56727"
},
{
"cve": "CVE-2024-56728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56728"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56728",
"url": "https://www.suse.com/security/cve/CVE-2024-56728"
},
{
"category": "external",
"summary": "SUSE Bug 1235656 for CVE-2024-56728",
"url": "https://bugzilla.suse.com/1235656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56728"
},
{
"cve": "CVE-2024-56729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56729"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: Initialize cfid-\u003etcon before performing network ops\n\nAvoid leaking a tcon ref when a lease break races with opening the\ncached directory. Processing the leak break might take a reference to\nthe tcon in cached_dir_lease_break() and then fail to release the ref in\ncached_dir_offload_close, since cfid-\u003etcon is still NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56729",
"url": "https://www.suse.com/security/cve/CVE-2024-56729"
},
{
"category": "external",
"summary": "SUSE Bug 1235503 for CVE-2024-56729",
"url": "https://bugzilla.suse.com/1235503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56729"
},
{
"cve": "CVE-2024-56739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: check if __rtc_read_time was successful in rtc_timer_do_work()\n\nIf the __rtc_read_time call fails,, the struct rtc_time tm; may contain\nuninitialized data, or an illegal date/time read from the RTC hardware.\n\nWhen calling rtc_tm_to_ktime later, the result may be a very large value\n(possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue,\nthey will continually expire, may causing kernel softlockup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56739",
"url": "https://www.suse.com/security/cve/CVE-2024-56739"
},
{
"category": "external",
"summary": "SUSE Bug 1235611 for CVE-2024-56739",
"url": "https://bugzilla.suse.com/1235611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56741"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56741",
"url": "https://www.suse.com/security/cve/CVE-2024-56741"
},
{
"category": "external",
"summary": "SUSE Bug 1235502 for CVE-2024-56741",
"url": "https://bugzilla.suse.com/1235502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56741"
},
{
"cve": "CVE-2024-56745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56745"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reset_method_store() memory leak\n\nIn reset_method_store(), a string is allocated via kstrndup() and assigned\nto the local \"options\". options is then used in with strsep() to find\nspaces:\n\n while ((name = strsep(\u0026options, \" \")) != NULL) {\n\nIf there are no remaining spaces, then options is set to NULL by strsep(),\nso the subsequent kfree(options) doesn\u0027t free the memory allocated via\nkstrndup().\n\nFix by using a separate tmp_options to iterate with strsep() so options is\npreserved.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56745",
"url": "https://www.suse.com/security/cve/CVE-2024-56745"
},
{
"category": "external",
"summary": "SUSE Bug 1235563 for CVE-2024-56745",
"url": "https://bugzilla.suse.com/1235563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56745"
},
{
"cve": "CVE-2024-56746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56746"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()\n\nWhen information such as info-\u003escreen_base is not ready, calling\nsh7760fb_free_mem() does not release memory correctly. Call\ndma_free_coherent() instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56746",
"url": "https://www.suse.com/security/cve/CVE-2024-56746"
},
{
"category": "external",
"summary": "SUSE Bug 1235622 for CVE-2024-56746",
"url": "https://bugzilla.suse.com/1235622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56746"
},
{
"cve": "CVE-2024-56747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()\n\nHook \"qedi_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56747",
"url": "https://www.suse.com/security/cve/CVE-2024-56747"
},
{
"category": "external",
"summary": "SUSE Bug 1234934 for CVE-2024-56747",
"url": "https://bugzilla.suse.com/1234934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()\n\nHook \"qed_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56748",
"url": "https://www.suse.com/security/cve/CVE-2024-56748"
},
{
"category": "external",
"summary": "SUSE Bug 1235627 for CVE-2024-56748",
"url": "https://bugzilla.suse.com/1235627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56752"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()\n\nWhen the call to gf100_grctx_generate() fails, unlock gr-\u003efecs.mutex\nbefore returning the error.\n\nFixes smatch warning:\n\ndrivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480 gf100_gr_chan_new() warn: inconsistent returns \u0027\u0026gr-\u003efecs.mutex\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56752",
"url": "https://www.suse.com/security/cve/CVE-2024-56752"
},
{
"category": "external",
"summary": "SUSE Bug 1234937 for CVE-2024-56752",
"url": "https://bugzilla.suse.com/1234937"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56752"
},
{
"cve": "CVE-2024-56754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56754"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: caam - Fix the pointer passed to caam_qi_shutdown()\n\nThe type of the last parameter given to devm_add_action_or_reset() is\n\"struct caam_drv_private *\", but in caam_qi_shutdown(), it is casted to\n\"struct device *\".\n\nPass the correct parameter to devm_add_action_or_reset() so that the\nresources are released as expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56754",
"url": "https://www.suse.com/security/cve/CVE-2024-56754"
},
{
"category": "external",
"summary": "SUSE Bug 1234918 for CVE-2024-56754",
"url": "https://bugzilla.suse.com/1234918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56754"
},
{
"cve": "CVE-2024-56755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56755"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING\n\nIn fscache_create_volume(), there is a missing memory barrier between the\nbit-clearing operation and the wake-up operation. This may cause a\nsituation where, after a wake-up, the bit-clearing operation hasn\u0027t been\ndetected yet, leading to an indefinite wait. The triggering process is as\nfollows:\n\n [cookie1] [cookie2] [volume_work]\nfscache_perform_lookup\n fscache_create_volume\n fscache_perform_lookup\n fscache_create_volume\n\t\t\t fscache_create_volume_work\n cachefiles_acquire_volume\n clear_and_wake_up_bit\n test_and_set_bit\n test_and_set_bit\n goto maybe_wait\n goto no_wait\n\nIn the above process, cookie1 and cookie2 has the same volume. When cookie1\nenters the -no_wait- process, it will clear the bit and wake up the waiting\nprocess. If a barrier is missing, it may cause cookie2 to remain in the\n-wait- process indefinitely.\n\nIn commit 3288666c7256 (\"fscache: Use clear_and_wake_up_bit() in\nfscache_create_volume_work()\"), barriers were added to similar operations\nin fscache_create_volume_work(), but fscache_create_volume() was missed.\n\nBy combining the clear and wake operations into clear_and_wake_up_bit() to\nfix this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56755",
"url": "https://www.suse.com/security/cve/CVE-2024-56755"
},
{
"category": "external",
"summary": "SUSE Bug 1234920 for CVE-2024-56755",
"url": "https://bugzilla.suse.com/1234920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56755"
},
{
"cve": "CVE-2024-56756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56756"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix freeing of the HMB descriptor table\n\nThe HMB descriptor table is sized to the maximum number of descriptors\nthat could be used for a given device, but __nvme_alloc_host_mem could\nbreak out of the loop earlier on memory allocation failure and end up\nusing less descriptors than planned for, which leads to an incorrect\nsize passed to dma_free_coherent.\n\nIn practice this was not showing up because the number of descriptors\ntends to be low and the dma coherent allocator always allocates and\nfrees at least a page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56756",
"url": "https://www.suse.com/security/cve/CVE-2024-56756"
},
{
"category": "external",
"summary": "SUSE Bug 1234922 for CVE-2024-56756",
"url": "https://bugzilla.suse.com/1234922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56756"
},
{
"cve": "CVE-2024-56759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free when COWing tree bock and tracing is enabled\n\nWhen a COWing a tree block, at btrfs_cow_block(), and we have the\ntracepoint trace_btrfs_cow_block() enabled and preemption is also enabled\n(CONFIG_PREEMPT=y), we can trigger a use-after-free in the COWed extent\nbuffer while inside the tracepoint code. This is because in some paths\nthat call btrfs_cow_block(), such as btrfs_search_slot(), we are holding\nthe last reference on the extent buffer @buf so btrfs_force_cow_block()\ndrops the last reference on the @buf extent buffer when it calls\nfree_extent_buffer_stale(buf), which schedules the release of the extent\nbuffer with RCU. This means that if we are on a kernel with preemption,\nthe current task may be preempted before calling trace_btrfs_cow_block()\nand the extent buffer already released by the time trace_btrfs_cow_block()\nis called, resulting in a use-after-free.\n\nFix this by moving the trace_btrfs_cow_block() from btrfs_cow_block() to\nbtrfs_force_cow_block() before the COWed extent buffer is freed.\nThis also has a side effect of invoking the tracepoint in the tree defrag\ncode, at defrag.c:btrfs_realloc_node(), since btrfs_force_cow_block() is\ncalled there, but this is fine and it was actually missing there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56759",
"url": "https://www.suse.com/security/cve/CVE-2024-56759"
},
{
"category": "external",
"summary": "SUSE Bug 1235645 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "external",
"summary": "SUSE Bug 1236569 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1236569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56759"
},
{
"cve": "CVE-2024-56760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/MSI: Handle lack of irqdomain gracefully\n\nAlexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a\nRISCV platform which does not provide PCI/MSI support:\n\n WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32\n __pci_enable_msix_range+0x30c/0x596\n pci_msi_setup_msi_irqs+0x2c/0x32\n pci_alloc_irq_vectors_affinity+0xb8/0xe2\n\nRISCV uses hierarchical interrupt domains and correctly does not implement\nthe legacy fallback. The warning triggers from the legacy fallback stub.\n\nThat warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent\ndomain is associated with the device or not. There is a check for MSI-X,\nwhich has a legacy assumption. But that legacy fallback assumption is only\nvalid when legacy support is enabled, but otherwise the check should simply\nreturn -ENOTSUPP.\n\nLoongarch tripped over the same problem and blindly enabled legacy support\nwithout implementing the legacy fallbacks. There are weak implementations\nwhich return an error, so the problem was papered over.\n\nCorrect pci_msi_domain_supports() to evaluate the legacy mode and add\nthe missing supported check into the MSI enable path to complete it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56760",
"url": "https://www.suse.com/security/cve/CVE-2024-56760"
},
{
"category": "external",
"summary": "SUSE Bug 1235616 for CVE-2024-56760",
"url": "https://bugzilla.suse.com/1235616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56760"
},
{
"cve": "CVE-2024-56763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent bad count for tracing_cpumask_write\n\nIf a large count is provided, it will trigger a warning in bitmap_parse_user.\nAlso check zero for it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56763",
"url": "https://www.suse.com/security/cve/CVE-2024-56763"
},
{
"category": "external",
"summary": "SUSE Bug 1235638 for CVE-2024-56763",
"url": "https://bugzilla.suse.com/1235638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56763"
},
{
"cve": "CVE-2024-56765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/vas: Add close() callback in vas_vm_ops struct\n\nThe mapping VMA address is saved in VAS window struct when the\npaste address is mapped. This VMA address is used during migration\nto unmap the paste address if the window is active. The paste\naddress mapping will be removed when the window is closed or with\nthe munmap(). But the VMA address in the VAS window is not updated\nwith munmap() which is causing invalid access during migration.\n\nThe KASAN report shows:\n[16386.254991] BUG: KASAN: slab-use-after-free in reconfig_close_windows+0x1a0/0x4e8\n[16386.255043] Read of size 8 at addr c00000014a819670 by task drmgr/696928\n\n[16386.255096] CPU: 29 UID: 0 PID: 696928 Comm: drmgr Kdump: loaded Tainted: G B 6.11.0-rc5-nxgzip #2\n[16386.255128] Tainted: [B]=BAD_PAGE\n[16386.255148] Hardware name: IBM,9080-HEX Power11 (architected) 0x820200 0xf000007 of:IBM,FW1110.00 (NH1110_016) hv:phyp pSeries\n[16386.255181] Call Trace:\n[16386.255202] [c00000016b297660] [c0000000018ad0ac] dump_stack_lvl+0x84/0xe8 (unreliable)\n[16386.255246] [c00000016b297690] [c0000000006e8a90] print_report+0x19c/0x764\n[16386.255285] [c00000016b297760] [c0000000006e9490] kasan_report+0x128/0x1f8\n[16386.255309] [c00000016b297880] [c0000000006eb5c8] __asan_load8+0xac/0xe0\n[16386.255326] [c00000016b2978a0] [c00000000013f898] reconfig_close_windows+0x1a0/0x4e8\n[16386.255343] [c00000016b297990] [c000000000140e58] vas_migration_handler+0x3a4/0x3fc\n[16386.255368] [c00000016b297a90] [c000000000128848] pseries_migrate_partition+0x4c/0x4c4\n...\n\n[16386.256136] Allocated by task 696554 on cpu 31 at 16377.277618s:\n[16386.256149] kasan_save_stack+0x34/0x68\n[16386.256163] kasan_save_track+0x34/0x80\n[16386.256175] kasan_save_alloc_info+0x58/0x74\n[16386.256196] __kasan_slab_alloc+0xb8/0xdc\n[16386.256209] kmem_cache_alloc_noprof+0x200/0x3d0\n[16386.256225] vm_area_alloc+0x44/0x150\n[16386.256245] mmap_region+0x214/0x10c4\n[16386.256265] do_mmap+0x5fc/0x750\n[16386.256277] vm_mmap_pgoff+0x14c/0x24c\n[16386.256292] ksys_mmap_pgoff+0x20c/0x348\n[16386.256303] sys_mmap+0xd0/0x160\n...\n\n[16386.256350] Freed by task 0 on cpu 31 at 16386.204848s:\n[16386.256363] kasan_save_stack+0x34/0x68\n[16386.256374] kasan_save_track+0x34/0x80\n[16386.256384] kasan_save_free_info+0x64/0x10c\n[16386.256396] __kasan_slab_free+0x120/0x204\n[16386.256415] kmem_cache_free+0x128/0x450\n[16386.256428] vm_area_free_rcu_cb+0xa8/0xd8\n[16386.256441] rcu_do_batch+0x2c8/0xcf0\n[16386.256458] rcu_core+0x378/0x3c4\n[16386.256473] handle_softirqs+0x20c/0x60c\n[16386.256495] do_softirq_own_stack+0x6c/0x88\n[16386.256509] do_softirq_own_stack+0x58/0x88\n[16386.256521] __irq_exit_rcu+0x1a4/0x20c\n[16386.256533] irq_exit+0x20/0x38\n[16386.256544] interrupt_async_exit_prepare.constprop.0+0x18/0x2c\n...\n\n[16386.256717] Last potentially related work creation:\n[16386.256729] kasan_save_stack+0x34/0x68\n[16386.256741] __kasan_record_aux_stack+0xcc/0x12c\n[16386.256753] __call_rcu_common.constprop.0+0x94/0xd04\n[16386.256766] vm_area_free+0x28/0x3c\n[16386.256778] remove_vma+0xf4/0x114\n[16386.256797] do_vmi_align_munmap.constprop.0+0x684/0x870\n[16386.256811] __vm_munmap+0xe0/0x1f8\n[16386.256821] sys_munmap+0x54/0x6c\n[16386.256830] system_call_exception+0x1a0/0x4a0\n[16386.256841] system_call_vectored_common+0x15c/0x2ec\n\n[16386.256868] The buggy address belongs to the object at c00000014a819670\n which belongs to the cache vm_area_struct of size 168\n[16386.256887] The buggy address is located 0 bytes inside of\n freed 168-byte region [c00000014a819670, c00000014a819718)\n\n[16386.256915] The buggy address belongs to the physical page:\n[16386.256928] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a81\n[16386.256950] memcg:c0000000ba430001\n[16386.256961] anon flags: 0x43ffff800000000(node=4|zone=0|lastcpupid=0x7ffff)\n[16386.256975] page_type: 0xfdffffff(slab)\n[16386\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56765",
"url": "https://www.suse.com/security/cve/CVE-2024-56765"
},
{
"category": "external",
"summary": "SUSE Bug 1235643 for CVE-2024-56765",
"url": "https://bugzilla.suse.com/1235643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56765"
},
{
"cve": "CVE-2024-56766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56766"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc(). Calling kfree(user) will lead to a\ndouble free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56766",
"url": "https://www.suse.com/security/cve/CVE-2024-56766"
},
{
"category": "external",
"summary": "SUSE Bug 1235219 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "external",
"summary": "SUSE Bug 1240426 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1240426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56766"
},
{
"cve": "CVE-2024-56767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56767"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset\n\nThe at_xdmac_memset_create_desc may return NULL, which will lead to a\nnull pointer dereference. For example, the len input is error, or the\natchan-\u003efree_descs_list is empty and memory is exhausted. Therefore, add\ncheck to avoid this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56767",
"url": "https://www.suse.com/security/cve/CVE-2024-56767"
},
{
"category": "external",
"summary": "SUSE Bug 1235160 for CVE-2024-56767",
"url": "https://bugzilla.suse.com/1235160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56767"
},
{
"cve": "CVE-2024-56769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg\n\nSyzbot reports [1] an uninitialized value issue found by KMSAN in\ndib3000_read_reg().\n\nLocal u8 rb[2] is used in i2c_transfer() as a read buffer; in case\nthat call fails, the buffer may end up with some undefined values.\n\nSince no elaborate error handling is expected in dib3000_write_reg(),\nsimply zero out rb buffer to mitigate the problem.\n\n[1] Syzkaller report\ndvb-usb: bulk message failed: -22 (6/0)\n=====================================================\nBUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31\n dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290\n dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline]\n dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]\n dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310\n dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110\n...\nLocal variable rb created at:\n dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54\n dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56769",
"url": "https://www.suse.com/security/cve/CVE-2024-56769"
},
{
"category": "external",
"summary": "SUSE Bug 1235155 for CVE-2024-56769",
"url": "https://bugzilla.suse.com/1235155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56769"
},
{
"cve": "CVE-2024-56774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56774"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: add a sanity check for btrfs root in btrfs_search_slot()\n\nSyzbot reports a null-ptr-deref in btrfs_search_slot().\n\nThe reproducer is using rescue=ibadroots, and the extent tree root is\ncorrupted thus the extent tree is NULL.\n\nWhen scrub tries to search the extent tree to gather the needed extent\ninfo, btrfs_search_slot() doesn\u0027t check if the target root is NULL or\nnot, resulting the null-ptr-deref.\n\nAdd sanity check for btrfs root before using it in btrfs_search_slot().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56774",
"url": "https://www.suse.com/security/cve/CVE-2024-56774"
},
{
"category": "external",
"summary": "SUSE Bug 1235653 for CVE-2024-56774",
"url": "https://bugzilla.suse.com/1235653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56774"
},
{
"cve": "CVE-2024-56775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56775"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix handling of plane refcount\n\n[Why]\nThe mechanism to backup and restore plane states doesn\u0027t maintain\nrefcount, which can cause issues if the refcount of the plane changes\nin between backup and restore operations, such as memory leaks if the\nrefcount was supposed to go down, or double frees / invalid memory\naccesses if the refcount was supposed to go up.\n\n[How]\nCache and re-apply current refcount when restoring plane states.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56775",
"url": "https://www.suse.com/security/cve/CVE-2024-56775"
},
{
"category": "external",
"summary": "SUSE Bug 1235657 for CVE-2024-56775",
"url": "https://bugzilla.suse.com/1235657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56775"
},
{
"cve": "CVE-2024-56776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56776"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56776",
"url": "https://www.suse.com/security/cve/CVE-2024-56776"
},
{
"category": "external",
"summary": "SUSE Bug 1235647 for CVE-2024-56776",
"url": "https://bugzilla.suse.com/1235647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56776"
},
{
"cve": "CVE-2024-56777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56777"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56777",
"url": "https://www.suse.com/security/cve/CVE-2024-56777"
},
{
"category": "external",
"summary": "SUSE Bug 1235641 for CVE-2024-56777",
"url": "https://bugzilla.suse.com/1235641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56777"
},
{
"cve": "CVE-2024-56778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56778",
"url": "https://www.suse.com/security/cve/CVE-2024-56778"
},
{
"category": "external",
"summary": "SUSE Bug 1235635 for CVE-2024-56778",
"url": "https://bugzilla.suse.com/1235635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56778"
},
{
"cve": "CVE-2024-56779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\n\nThe action force umount(umount -f) will attempt to kill all rpc_task even\numount operation may ultimately fail if some files remain open.\nConsequently, if an action attempts to open a file, it can potentially\nsend two rpc_task to nfs server.\n\n NFS CLIENT\nthread1 thread2\nopen(\"file\")\n...\nnfs4_do_open\n _nfs4_do_open\n _nfs4_open_and_get_state\n _nfs4_proc_open\n nfs4_run_open_task\n /* rpc_task1 */\n rpc_run_task\n rpc_wait_for_completion_task\n\n umount -f\n nfs_umount_begin\n rpc_killall_tasks\n rpc_signal_task\n rpc_task1 been wakeup\n and return -512\n _nfs4_do_open // while loop\n ...\n nfs4_run_open_task\n /* rpc_task2 */\n rpc_run_task\n rpc_wait_for_completion_task\n\nWhile processing an open request, nfsd will first attempt to find or\nallocate an nfs4_openowner. If it finds an nfs4_openowner that is not\nmarked as NFS4_OO_CONFIRMED, this nfs4_openowner will released. Since\ntwo rpc_task can attempt to open the same file simultaneously from the\nclient to server, and because two instances of nfsd can run\nconcurrently, this situation can lead to lots of memory leak.\nAdditionally, when we echo 0 to /proc/fs/nfsd/threads, warning will be\ntriggered.\n\n NFS SERVER\nnfsd1 nfsd2 echo 0 \u003e /proc/fs/nfsd/threads\n\nnfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // alloc oo1, stateid1\n nfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // find oo1, without NFS4_OO_CONFIRMED\n release_openowner\n unhash_openowner_locked\n list_del_init(\u0026oo-\u003eoo_perclient)\n // cannot find this oo\n // from client, LEAK!!!\n alloc_stateowner // alloc oo2\n\n nfsd4_process_open2\n init_open_stateid\n // associate oo1\n // with stateid1, stateid1 LEAK!!!\n nfs4_get_vfs_file\n // alloc nfsd_file1 and nfsd_file_mark1\n // all LEAK!!!\n\n nfsd4_process_open2\n ...\n\n write_threads\n ...\n nfsd_destroy_serv\n nfsd_shutdown_net\n nfs4_state_shutdown_net\n nfs4_state_destroy_net\n destroy_client\n __destroy_client\n // won\u0027t find oo1!!!\n nfsd_shutdown_generic\n nfsd_file_cache_shutdown\n kmem_cache_destroy\n for nfsd_file_slab\n and nfsd_file_mark_slab\n // bark since nfsd_file1\n // and nfsd_file_mark1\n // still alive\n\n=======================================================================\nBUG nfsd_file (Not tainted): Objects remaining in nfsd_file on\n__kmem_cache_shutdown()\n-----------------------------------------------------------------------\n\nSlab 0xffd4000004438a80 objects=34 used=1 fp=0xff11000110e2ad28\nflags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff)\nCPU: 4 UID: 0 PID: 757 Comm: sh Not tainted 6.12.0-rc6+ #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dum\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56779",
"url": "https://www.suse.com/security/cve/CVE-2024-56779"
},
{
"category": "external",
"summary": "SUSE Bug 1235632 for CVE-2024-56779",
"url": "https://bugzilla.suse.com/1235632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: flush quota_release_work upon quota writeback\n\nOne of the paths quota writeback is called from is:\n\nfreeze_super()\n sync_filesystem()\n ext4_sync_fs()\n dquot_writeback_dquots()\n\nSince we currently don\u0027t always flush the quota_release_work queue in\nthis path, we can end up with the following race:\n\n 1. dquot are added to releasing_dquots list during regular operations.\n 2. FS Freeze starts, however, this does not flush the quota_release_work queue.\n 3. Freeze completes.\n 4. Kernel eventually tries to flush the workqueue while FS is frozen which\n hits a WARN_ON since transaction gets started during frozen state:\n\n ext4_journal_check_start+0x28/0x110 [ext4] (unreliable)\n __ext4_journal_start_sb+0x64/0x1c0 [ext4]\n ext4_release_dquot+0x90/0x1d0 [ext4]\n quota_release_workfn+0x43c/0x4d0\n\nWhich is the following line:\n\n WARN_ON(sb-\u003es_writers.frozen == SB_FREEZE_COMPLETE);\n\nWhich ultimately results in generic/390 failing due to dmesg\nnoise. This was detected on powerpc machine 15 cores.\n\nTo avoid this, make sure to flush the workqueue during\ndquot_writeback_dquots() so we dont have any pending workitems after\nfreeze.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56780",
"url": "https://www.suse.com/security/cve/CVE-2024-56780"
},
{
"category": "external",
"summary": "SUSE Bug 1235650 for CVE-2024-56780",
"url": "https://bugzilla.suse.com/1235650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-56787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56787"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: imx8m: Probe the SoC driver as platform driver\n\nWith driver_async_probe=* on kernel command line, the following trace is\nproduced because on i.MX8M Plus hardware because the soc-imx8m.c driver\ncalls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock\ndriver is not yet probed. This was not detected during regular testing\nwithout driver_async_probe.\n\nConvert the SoC code to platform driver and instantiate a platform device\nin its current device_initcall() to probe the platform driver. Rework\n.soc_revision callback to always return valid error code and return SoC\nrevision via parameter. This way, if anything in the .soc_revision callback\nreturn -EPROBE_DEFER, it gets propagated to .probe and the .probe will get\nretried later.\n\n\"\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180\nCPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603\nHardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : imx8mm_soc_revision+0xdc/0x180\nlr : imx8mm_soc_revision+0xd0/0x180\nsp : ffff8000821fbcc0\nx29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120\nx26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311\nx23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb\nx20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff\nx17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8\nx14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801\nx11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c\nx8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3\nx5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000\nx2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb\nCall trace:\n imx8mm_soc_revision+0xdc/0x180\n imx8_soc_init+0xb0/0x1e0\n do_one_initcall+0x94/0x1a8\n kernel_init_freeable+0x240/0x2a8\n kernel_init+0x28/0x140\n ret_from_fork+0x10/0x20\n---[ end trace 0000000000000000 ]---\nSoC: i.MX8MP revision 1.1\n\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56787",
"url": "https://www.suse.com/security/cve/CVE-2024-56787"
},
{
"category": "external",
"summary": "SUSE Bug 1235663 for CVE-2024-56787",
"url": "https://bugzilla.suse.com/1235663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56787"
},
{
"cve": "CVE-2024-57791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check return value of sock_recvmsg when draining clc data\n\nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the\nlength of msg should be received from network and the value should not be\nfully trusted as it is from the network. Once the value of length exceeds\nthe value of buflen in function smc_clc_wait_msg it may run into deadloop\nwhen trying to drain the remaining data exceeding buflen.\n\nThis patch checks the return value of sock_recvmsg when draining data in\ncase of deadloop in draining.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57791",
"url": "https://www.suse.com/security/cve/CVE-2024-57791"
},
{
"category": "external",
"summary": "SUSE Bug 1235759 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "external",
"summary": "SUSE Bug 1235760 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235760"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57791"
},
{
"cve": "CVE-2024-57792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57792"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57792",
"url": "https://www.suse.com/security/cve/CVE-2024-57792"
},
{
"category": "external",
"summary": "SUSE Bug 1235764 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "external",
"summary": "SUSE Bug 1236568 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1236568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57792"
},
{
"cve": "CVE-2024-57793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57793"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors\n\nIn CoCo VMs it is possible for the untrusted host to cause\nset_memory_decrypted() to fail such that an error is returned\nand the resulting memory is shared. Callers need to take care\nto handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional\nor security issues.\n\nLeak the decrypted memory when set_memory_decrypted() fails,\nand don\u0027t need to print an error since set_memory_decrypted()\nwill call WARN_ONCE().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57793",
"url": "https://www.suse.com/security/cve/CVE-2024-57793"
},
{
"category": "external",
"summary": "SUSE Bug 1235768 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "external",
"summary": "SUSE Bug 1235769 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57793"
},
{
"cve": "CVE-2024-57795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Remove the direct link to net_device\n\nThe similar patch in siw is in the link:\nhttps://git.kernel.org/rdma/rdma/c/16b87037b48889\n\nThis problem also occurred in RXE. The following analyze this problem.\nIn the following Call Traces:\n\"\nBUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\nRead of size 4 at addr ffff8880554640b0 by task kworker/1:4/5295\n\nCPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted\n6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0\nHardware name: Google Compute Engine/Google Compute Engine,\nBIOS Google 09/13/2024\nWorkqueue: infiniband ib_cache_event_task\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\n rxe_query_port+0x12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60\n __ib_query_port drivers/infiniband/core/device.c:2111 [inline]\n ib_query_port+0x168/0x7d0 drivers/infiniband/core/device.c:2143\n ib_cache_update+0x1a9/0xb80 drivers/infiniband/core/cache.c:1494\n ib_cache_event_task+0xf3/0x1e0 drivers/infiniband/core/cache.c:1568\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f2/0x390 kernel/kthread.c:389\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\"\n\n1). In the link [1],\n\n\"\n infiniband syz2: set down\n\"\n\nThis means that on 839.350575, the event ib_cache_event_task was sent andi\nqueued in ib_wq.\n\n2). In the link [1],\n\n\"\n team0 (unregistering): Port device team_slave_0 removed\n\"\n\nIt indicates that before 843.251853, the net device should be freed.\n\n3). In the link [1],\n\n\"\n BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0\n\"\n\nThis means that on 850.559070, this slab-use-after-free problem occurred.\n\nIn all, on 839.350575, the event ib_cache_event_task was sent and queued\nin ib_wq,\n\nbefore 843.251853, the net device veth was freed.\n\non 850.559070, this event was executed, and the mentioned freed net device\nwas called. Thus, the above call trace occurred.\n\n[1] https://syzkaller.appspot.com/x/log.txt?x=12e7025f980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57795",
"url": "https://www.suse.com/security/cve/CVE-2024-57795"
},
{
"category": "external",
"summary": "SUSE Bug 1235906 for CVE-2024-57795",
"url": "https://bugzilla.suse.com/1235906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57795"
},
{
"cve": "CVE-2024-57798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57798"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()\n\nWhile receiving an MST up request message from one thread in\ndrm_dp_mst_handle_up_req(), the MST topology could be removed from\nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing\nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.\nThis could lead to a NULL deref/use-after-free of mst_primary in\ndrm_dp_mst_handle_up_req().\n\nAvoid the above by holding a reference for mst_primary in\ndrm_dp_mst_handle_up_req() while it\u0027s used.\n\nv2: Fix kfreeing the request if getting an mst_primary reference fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57798",
"url": "https://www.suse.com/security/cve/CVE-2024-57798"
},
{
"category": "external",
"summary": "SUSE Bug 1235818 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "external",
"summary": "SUSE Bug 1235819 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57798"
},
{
"cve": "CVE-2024-57801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Skip restore TC rules for vport rep without loaded flag\n\nDuring driver unload, unregister_netdev is called after unloading\nvport rep. So, the mlx5e_rep_priv is already freed while trying to get\nrpriv-\u003enetdev, or walk rpriv-\u003etc_ht, which results in use-after-free.\nSo add the checking to make sure access the data of vport rep which is\nstill loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57801",
"url": "https://www.suse.com/security/cve/CVE-2024-57801"
},
{
"category": "external",
"summary": "SUSE Bug 1235940 for CVE-2024-57801",
"url": "https://bugzilla.suse.com/1235940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57801"
},
{
"cve": "CVE-2024-57802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: check buffer length before accessing it\n\nSyzkaller reports an uninit value read from ax25cmp when sending raw message\nthrough ieee802154 implementation.\n\n=====================================================\nBUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601\n nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774\n nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\n xmit_one net/core/dev.c:3548 [inline]\n dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564\n __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\n raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x318/0x740 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1286 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2780\n sock_alloc_send_skb include/net/sock.h:1884 [inline]\n raw_sendmsg+0x36d/0xc10 net/ieee802154/socket.c:282\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nCPU: 0 PID: 5037 Comm: syz-executor166 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\n=====================================================\n\nThis issue occurs because the skb buffer is too small, and it\u0027s actual\nallocation is aligned. This hides an actual issue, which is that nr_route_frame\ndoes not validate the buffer size before using it.\n\nFix this issue by checking skb-\u003elen before accessing any fields in skb-\u003edata.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57802",
"url": "https://www.suse.com/security/cve/CVE-2024-57802"
},
{
"category": "external",
"summary": "SUSE Bug 1235941 for CVE-2024-57802",
"url": "https://bugzilla.suse.com/1235941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57802"
},
{
"cve": "CVE-2024-57804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57804"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs\n\nThe driver, through the SAS transport, exposes a sysfs interface to\nenable/disable PHYs in a controller/expander setup. When multiple PHYs\nare disabled and enabled in rapid succession, the persistent and current\nconfig pages related to SAS IO unit/SAS Expander pages could get\ncorrupted.\n\nUse separate memory for each config request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57804",
"url": "https://www.suse.com/security/cve/CVE-2024-57804"
},
{
"category": "external",
"summary": "SUSE Bug 1235779 for CVE-2024-57804",
"url": "https://bugzilla.suse.com/1235779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57804"
},
{
"cve": "CVE-2024-57809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: imx6: Fix suspend/resume support on i.MX6QDL\n\nThe suspend/resume functionality is currently broken on the i.MX6QDL\nplatform, as documented in the NXP errata (ERR005723):\n\n https://www.nxp.com/docs/en/errata/IMX6DQCE.pdf\n\nThis patch addresses the issue by sharing most of the suspend/resume\nsequences used by other i.MX devices, while avoiding modifications to\ncritical registers that disrupt the PCIe functionality. It targets the\nsame problem as the following downstream commit:\n\n https://github.com/nxp-imx/linux-imx/commit/4e92355e1f79d225ea842511fcfd42b343b32995\n\nUnlike the downstream commit, this patch also resets the connected PCIe\ndevice if possible. Without this reset, certain drivers, such as ath10k\nor iwlwifi, will crash on resume. The device reset is also done by the\ndriver on other i.MX platforms, making this patch consistent with\nexisting practices.\n\nUpon resuming, the kernel will hang and display an error. Here\u0027s an\nexample of the error encountered with the ath10k driver:\n\n ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible\n Unhandled fault: imprecise external abort (0x1406) at 0x0106f944\n\nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a\nPCIe device is connected.\n\n[kwilczynski: commit log, added tag for stable releases]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57809",
"url": "https://www.suse.com/security/cve/CVE-2024-57809"
},
{
"category": "external",
"summary": "SUSE Bug 1235793 for CVE-2024-57809",
"url": "https://bugzilla.suse.com/1235793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57809"
},
{
"cve": "CVE-2024-57838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Mark IRQ entries to fix stack depot warnings\n\nThe stack depot filters out everything outside of the top interrupt\ncontext as an uninteresting or irrelevant part of the stack traces. This\nhelps with stack trace de-duplication, avoiding an explosion of saved\nstack traces that share the same IRQ context code path but originate\nfrom different randomly interrupted points, eventually exhausting the\nstack depot.\n\nFiltering uses in_irqentry_text() to identify functions within the\n.irqentry.text and .softirqentry.text sections, which then become the\nlast stack trace entries being saved.\n\nWhile __do_softirq() is placed into the .softirqentry.text section by\ncommon code, populating .irqentry.text is architecture-specific.\n\nCurrently, the .irqentry.text section on s390 is empty, which prevents\nstack depot filtering and de-duplication and could result in warnings\nlike:\n\nStack depot reached limit capacity\nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8\n\nwith PREEMPT and KASAN enabled.\n\nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into\nthe .irqentry.text section and updating the kprobes blacklist to include\nthe .irqentry.text section.\n\nThis is done only for asynchronous interrupts and explicitly not for\nprogram checks, which are synchronous and where the context beyond the\nprogram check is important to preserve. Despite machine checks being\nsomewhat in between, they are extremely rare, and preserving context\nwhen possible is also of value.\n\nSVCs and Restart Interrupts are not relevant, one being always at the\nboundary to user space and the other being a one-time thing.\n\nIRQ entries filtering is also optionally used in ftrace function graph,\nwhere the same logic applies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57838",
"url": "https://www.suse.com/security/cve/CVE-2024-57838"
},
{
"category": "external",
"summary": "SUSE Bug 1235798 for CVE-2024-57838",
"url": "https://bugzilla.suse.com/1235798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57838"
},
{
"cve": "CVE-2024-57849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_sf: Handle CPU hotplug remove during sampling\n\nCPU hotplug remove handling triggers the following function\ncall sequence:\n\n CPUHP_AP_PERF_S390_SF_ONLINE --\u003e s390_pmu_sf_offline_cpu()\n ...\n CPUHP_AP_PERF_ONLINE --\u003e perf_event_exit_cpu()\n\nThe s390 CPUMF sampling CPU hotplug handler invokes:\n\n s390_pmu_sf_offline_cpu()\n +--\u003e cpusf_pmu_setup()\n +--\u003e setup_pmc_cpu()\n +--\u003e deallocate_buffers()\n\nThis function de-allocates all sampling data buffers (SDBs) allocated\nfor that CPU at event initialization. It also clears the\nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.\n\nWith the event still being active on the removed CPU, the CPU event\nhotplug support in kernel performance subsystem triggers the\nfollowing function calls on the removed CPU:\n\n perf_event_exit_cpu()\n +--\u003e perf_event_exit_cpu_context()\n +--\u003e __perf_event_exit_context()\n\t +--\u003e __perf_remove_from_context()\n\t +--\u003e event_sched_out()\n\t +--\u003e cpumsf_pmu_del()\n\t +--\u003e cpumsf_pmu_stop()\n +--\u003e hw_perf_event_update()\n\nto stop and remove the event. During removal of the event, the\nsampling device driver tries to read out the remaining samples from\nthe sample data buffers (SDBs). But they have already been freed\n(and may have been re-assigned). This may lead to a use after free\nsituation in which case the samples are most likely invalid. In the\nbest case the memory has not been reassigned and still contains\nvalid data.\n\nRemedy this situation and check if the CPU is still in reserved\nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been\nreleased an contain valid data. This is always the case when\nthe event is removed (and no CPU hotplug off occured).\nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57849",
"url": "https://www.suse.com/security/cve/CVE-2024-57849"
},
{
"category": "external",
"summary": "SUSE Bug 1235814 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "external",
"summary": "SUSE Bug 1235815 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57849"
},
{
"cve": "CVE-2024-57850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: Prevent rtime decompress memory corruption\n\nThe rtime decompression routine does not fully check bounds during the\nentirety of the decompression pass and can corrupt memory outside the\ndecompression buffer if the compressed data is corrupted. This adds the\nrequired check to prevent this failure mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57850",
"url": "https://www.suse.com/security/cve/CVE-2024-57850"
},
{
"category": "external",
"summary": "SUSE Bug 1235812 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "external",
"summary": "SUSE Bug 1235813 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57850"
},
{
"cve": "CVE-2024-57857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Remove direct link to net_device\n\nDo not manage a per device direct link to net_device. Rely\non associated ib_devices net_device management, not doubling\nthe effort locally. A badly managed local link to net_device\nwas causing a \u0027KASAN: slab-use-after-free\u0027 exception during\nsiw_query_port() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57857",
"url": "https://www.suse.com/security/cve/CVE-2024-57857"
},
{
"category": "external",
"summary": "SUSE Bug 1235946 for CVE-2024-57857",
"url": "https://bugzilla.suse.com/1235946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57857"
},
{
"cve": "CVE-2024-57874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57874"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL\n\nCurrently tagged_addr_ctrl_set() doesn\u0027t initialize the temporary \u0027ctrl\u0027\nvariable, and a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently tagged_addr_ctrl_set() will consume an\narbitrary value, potentially leaking up to 64 bits of memory from the\nkernel stack. The read is limited to a specific slot on the stack, and\nthe issue does not provide a write mechanism.\n\nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and\nrejects other values, a partial SETREGSET attempt will randomly succeed\nor fail depending on the value of the uninitialized value, and the\nexposure is significantly limited.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\nvalue of the tagged address ctrl will be retained.\n\nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the\nuser_aarch64_view used by a native AArch64 task to manipulate another\nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error\nvalue when called for a compat task, tagged_addr_ctrl_get() and\ntagged_addr_ctrl_set() should never observe an error value from\nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that\nsuch an error would be unexpected, and error handlnig is not missing in\neither case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57874",
"url": "https://www.suse.com/security/cve/CVE-2024-57874"
},
{
"category": "external",
"summary": "SUSE Bug 1235808 for CVE-2024-57874",
"url": "https://bugzilla.suse.com/1235808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-57874"
},
{
"cve": "CVE-2024-57876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57876"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix resetting msg rx state after topology removal\n\nIf the MST topology is removed during the reception of an MST down reply\nor MST up request sideband message, the\ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset\nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with\nthe reading/parsing of the message from another thread via\ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is\npossible since the reader/parser doesn\u0027t hold any lock while accessing\nthe reception state. This in turn can lead to a memory corruption in the\nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST\nsideband message body length check\").\n\nFix the above by resetting the message reception state if needed before\nreading/parsing a message. Another solution would be to hold the\ndrm_dp_mst_topology_mgr::lock for the whole duration of the message\nreception/parsing in drm_dp_mst_handle_down_rep() and\ndrm_dp_mst_handle_up_req(), however this would require a bigger change.\nSince the fix is also needed for stable, opting for the simpler solution\nin this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57876",
"url": "https://www.suse.com/security/cve/CVE-2024-57876"
},
{
"category": "external",
"summary": "SUSE Bug 1235806 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "external",
"summary": "SUSE Bug 1235807 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57876"
},
{
"cve": "CVE-2024-57884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()\n\nThe task sometimes continues looping in throttle_direct_reclaim() because\nallow_direct_reclaim(pgdat) keeps returning false. \n\n #0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac\n #1 [ffff80002cb6f900] __schedule at ffff800008abbd1c\n #2 [ffff80002cb6f990] schedule at ffff800008abc50c\n #3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550\n #4 [ffff80002cb6fa20] try_to_free_pages at ffff800008277b68\n #5 [ffff80002cb6fae0] __alloc_pages_nodemask at ffff8000082c4660\n #6 [ffff80002cb6fc50] alloc_pages_vma at ffff8000082e4a98\n #7 [ffff80002cb6fca0] do_anonymous_page at ffff80000829f5a8\n #8 [ffff80002cb6fce0] __handle_mm_fault at ffff8000082a5974\n #9 [ffff80002cb6fd90] handle_mm_fault at ffff8000082a5bd4\n\nAt this point, the pgdat contains the following two zones:\n\n NODE: 4 ZONE: 0 ADDR: ffff00817fffe540 NAME: \"DMA32\"\n SIZE: 20480 MIN/LOW/HIGH: 11/28/45\n VM_STAT:\n NR_FREE_PAGES: 359\n NR_ZONE_INACTIVE_ANON: 18813\n NR_ZONE_ACTIVE_ANON: 0\n NR_ZONE_INACTIVE_FILE: 50\n NR_ZONE_ACTIVE_FILE: 0\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\n NODE: 4 ZONE: 1 ADDR: ffff00817fffec00 NAME: \"Normal\"\n SIZE: 8454144 PRESENT: 98304 MIN/LOW/HIGH: 68/166/264\n VM_STAT:\n NR_FREE_PAGES: 146\n NR_ZONE_INACTIVE_ANON: 94668\n NR_ZONE_ACTIVE_ANON: 3\n NR_ZONE_INACTIVE_FILE: 735\n NR_ZONE_ACTIVE_FILE: 78\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\nIn allow_direct_reclaim(), while processing ZONE_DMA32, the sum of\ninactive/active file-backed pages calculated in zone_reclaimable_pages()\nbased on the result of zone_page_state_snapshot() is zero. \n\nAdditionally, since this system lacks swap, the calculation of inactive/\nactive anonymous pages is skipped.\n\n crash\u003e p nr_swap_pages\n nr_swap_pages = $1937 = {\n counter = 0\n }\n\nAs a result, ZONE_DMA32 is deemed unreclaimable and skipped, moving on to\nthe processing of the next zone, ZONE_NORMAL, despite ZONE_DMA32 having\nfree pages significantly exceeding the high watermark.\n\nThe problem is that the pgdat-\u003ekswapd_failures hasn\u0027t been incremented.\n\n crash\u003e px ((struct pglist_data *) 0xffff00817fffe540)-\u003ekswapd_failures\n $1935 = 0x0\n\nThis is because the node deemed balanced. The node balancing logic in\nbalance_pgdat() evaluates all zones collectively. If one or more zones\n(e.g., ZONE_DMA32) have enough free pages to meet their watermarks, the\nentire node is deemed balanced. This causes balance_pgdat() to exit early\nbefore incrementing the kswapd_failures, as it considers the overall\nmemory state acceptable, even though some zones (like ZONE_NORMAL) remain\nunder significant pressure.\n\n\nThe patch ensures that zone_reclaimable_pages() includes free pages\n(NR_FREE_PAGES) in its calculation when no other reclaimable pages are\navailable (e.g., file-backed or anonymous pages). This change prevents\nzones like ZONE_DMA32, which have sufficient free pages, from being\nmistakenly deemed unreclaimable. By doing so, the patch ensures proper\nnode balancing, avoids masking pressure on other zones like ZONE_NORMAL,\nand prevents infinite loops in throttle_direct_reclaim() caused by\nallow_direct_reclaim(pgdat) repeatedly returning false.\n\n\nThe kernel hangs due to a task stuck in throttle_direct_reclaim(), caused\nby a node being incorrectly deemed balanced despite pressure in certain\nzones, such as ZONE_NORMAL. This issue arises from\nzone_reclaimable_pages\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57884",
"url": "https://www.suse.com/security/cve/CVE-2024-57884"
},
{
"category": "external",
"summary": "SUSE Bug 1235948 for CVE-2024-57884",
"url": "https://bugzilla.suse.com/1235948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57884"
},
{
"cve": "CVE-2024-57887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()\n\nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and\nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue\nby dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()\nin error path of probe() and also in the remove().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57887",
"url": "https://www.suse.com/security/cve/CVE-2024-57887"
},
{
"category": "external",
"summary": "SUSE Bug 1235952 for CVE-2024-57887",
"url": "https://bugzilla.suse.com/1235952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57887"
},
{
"cve": "CVE-2024-57888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57888"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker\n\nAfter commit\n746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")\namdgpu started seeing the following warning:\n\n [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu]\n...\n [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched]\n...\n [ ] Call Trace:\n [ ] \u003cTASK\u003e\n...\n [ ] ? check_flush_dependency+0xf5/0x110\n...\n [ ] cancel_delayed_work_sync+0x6e/0x80\n [ ] amdgpu_gfx_off_ctrl+0xab/0x140 [amdgpu]\n [ ] amdgpu_ring_alloc+0x40/0x50 [amdgpu]\n [ ] amdgpu_ib_schedule+0xf4/0x810 [amdgpu]\n [ ] ? drm_sched_run_job_work+0x22c/0x430 [gpu_sched]\n [ ] amdgpu_job_run+0xaa/0x1f0 [amdgpu]\n [ ] drm_sched_run_job_work+0x257/0x430 [gpu_sched]\n [ ] process_one_work+0x217/0x720\n...\n [ ] \u003c/TASK\u003e\n\nThe intent of the verifcation done in check_flush_depedency is to ensure\nforward progress during memory reclaim, by flagging cases when either a\nmemory reclaim process, or a memory reclaim work item is flushed from a\ncontext not marked as memory reclaim safe.\n\nThis is correct when flushing, but when called from the\ncancel(_delayed)_work_sync() paths it is a false positive because work is\neither already running, or will not be running at all. Therefore\ncancelling it is safe and we can relax the warning criteria by letting the\nhelper know of the calling context.\n\nReferences: 746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57888",
"url": "https://www.suse.com/security/cve/CVE-2024-57888"
},
{
"category": "external",
"summary": "SUSE Bug 1235918 for CVE-2024-57888",
"url": "https://bugzilla.suse.com/1235918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57888"
},
{
"cve": "CVE-2024-57890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping. Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap. The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it\u0027s fine on\n64bit systems.\n\nThis patch does two things. First, I\u0027ve re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math. Then I\u0027ve modified\nall the callers to use size_mul() for the multiplications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57890",
"url": "https://www.suse.com/security/cve/CVE-2024-57890"
},
{
"category": "external",
"summary": "SUSE Bug 1235919 for CVE-2024-57890",
"url": "https://bugzilla.suse.com/1235919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57890"
},
{
"cve": "CVE-2024-57892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57892"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv\n\nWhen mounting ocfs2 and then remounting it as read-only, a\nslab-use-after-free occurs after the user uses a syscall to\nquota_getnextquota. Specifically, sb_dqinfo(sb, type)-\u003edqi_priv is the\ndangling pointer.\n\nDuring the remounting process, the pointer dqi_priv is freed but is never\nset as null leaving it to be accessed. Additionally, the read-only option\nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the\nDQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the\nnext quota, the function ocfs2_get_next_id is called and only checks the\nquota usage flags and not the quota suspended flags.\n\nTo fix this, I set dqi_priv to null when it is freed after remounting with\nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.\n\n[akpm@linux-foundation.org: coding-style cleanups]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57892",
"url": "https://www.suse.com/security/cve/CVE-2024-57892"
},
{
"category": "external",
"summary": "SUSE Bug 1235964 for CVE-2024-57892",
"url": "https://bugzilla.suse.com/1235964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57892"
},
{
"cve": "CVE-2024-57893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix races at processing SysEx messages\n\nOSS sequencer handles the SysEx messages split in 6 bytes packets, and\nALSA sequencer OSS layer tries to combine those. It stores the data\nin the internal buffer and this access is racy as of now, which may\nlead to the out-of-bounds access.\n\nAs a temporary band-aid fix, introduce a mutex for serializing the\nprocess of the SysEx message packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57893",
"url": "https://www.suse.com/security/cve/CVE-2024-57893"
},
{
"category": "external",
"summary": "SUSE Bug 1235920 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "external",
"summary": "SUSE Bug 1235921 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57893"
},
{
"cve": "CVE-2024-57896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57896",
"url": "https://www.suse.com/security/cve/CVE-2024-57896"
},
{
"category": "external",
"summary": "SUSE Bug 1235965 for CVE-2024-57896",
"url": "https://bugzilla.suse.com/1235965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57896"
},
{
"cve": "CVE-2024-57897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Correct the migration DMA map direction\n\nThe SVM DMA device map direction should be set the same as\nthe DMA unmap setting, otherwise the DMA core will report\nthe following warning.\n\nBefore finialize this solution, there\u0027re some discussion on\nthe DMA mapping type(stream-based or coherent) in this KFD\nmigration case, followed by https://lore.kernel.org/all/04d4ab32\n-45a1-4b88-86ee-fb0f35a0ca40@amd.com/T/.\n\nAs there\u0027s no dma_sync_single_for_*() in the DMA buffer accessed\nthat because this migration operation should be sync properly and\nautomatically. Give that there\u0027s might not be a performance problem\nin various cache sync policy of DMA sync. Therefore, in order to\nsimplify the DMA direction setting alignment, let\u0027s set the DMA map\ndirection as BIDIRECTIONAL.\n\n[ 150.834218] WARNING: CPU: 8 PID: 1812 at kernel/dma/debug.c:1028 check_unmap+0x1cc/0x930\n[ 150.834225] Modules linked in: amdgpu(OE) amdxcp drm_exec(OE) gpu_sched drm_buddy(OE) drm_ttm_helper(OE) ttm(OE) drm_suballoc_helper(OE) drm_display_helper(OE) drm_kms_helper(OE) i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc sch_fq_codel intel_rapl_msr amd_atl intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd snd_pci_acp6x snd_hda_codec snd_acp_config snd_hda_core snd_hwdep snd_soc_acpi kvm_amd sunrpc snd_pcm kvm binfmt_misc snd_seq_midi crct10dif_pclmul snd_seq_midi_event ghash_clmulni_intel sha512_ssse3 snd_rawmidi nls_iso8859_1 sha256_ssse3 sha1_ssse3 snd_seq aesni_intel snd_seq_device crypto_simd snd_timer cryptd input_leds\n[ 150.834310] wmi_bmof serio_raw k10temp rapl snd sp5100_tco ipmi_devintf soundcore ccp ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport efi_pstore drm(OE) ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 150.834354] CPU: 8 PID: 1812 Comm: rocrtst64 Tainted: G OE 6.10.0-custom #492\n[ 150.834358] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 150.834360] RIP: 0010:check_unmap+0x1cc/0x930\n[ 150.834363] Code: c0 4c 89 4d c8 e8 34 bf 86 00 4c 8b 4d c8 4c 8b 45 c0 48 8b 4d b8 48 89 c6 41 57 4c 89 ea 48 c7 c7 80 49 b4 84 e8 b4 81 f3 ff \u003c0f\u003e 0b 48 c7 c7 04 83 ac 84 e8 76 ba fc ff 41 8b 76 4c 49 8d 7e 50\n[ 150.834365] RSP: 0018:ffffaac5023739e0 EFLAGS: 00010086\n[ 150.834368] RAX: 0000000000000000 RBX: ffffffff8566a2e0 RCX: 0000000000000027\n[ 150.834370] RDX: ffff8f6a8f621688 RSI: 0000000000000001 RDI: ffff8f6a8f621680\n[ 150.834372] RBP: ffffaac502373a30 R08: 00000000000000c9 R09: ffffaac502373850\n[ 150.834373] R10: ffffaac502373848 R11: ffffffff84f46328 R12: ffffaac502373a40\n[ 150.834375] R13: ffff8f6741045330 R14: ffff8f6741a77700 R15: ffffffff84ac831b\n[ 150.834377] FS: 00007faf0fc94c00(0000) GS:ffff8f6a8f600000(0000) knlGS:0000000000000000\n[ 150.834379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 150.834381] CR2: 00007faf0b600020 CR3: 000000010a52e000 CR4: 0000000000350ef0\n[ 150.834383] Call Trace:\n[ 150.834385] \u003cTASK\u003e\n[ 150.834387] ? show_regs+0x6d/0x80\n[ 150.834393] ? __warn+0x8c/0x140\n[ 150.834397] ? check_unmap+0x1cc/0x930\n[ 150.834400] ? report_bug+0x193/0x1a0\n[ 150.834406] ? handle_bug+0x46/0x80\n[ 150.834410] ? exc_invalid_op+0x1d/0x80\n[ 150.834413] ? asm_exc_invalid_op+0x1f/0x30\n[ 150.834420] ? check_unmap+0x1cc/0x930\n[ 150.834425] debug_dma_unmap_page+0x86/0x90\n[ 150.834431] ? srso_return_thunk+0x5/0x5f\n[ 150.834435] \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57897",
"url": "https://www.suse.com/security/cve/CVE-2024-57897"
},
{
"category": "external",
"summary": "SUSE Bug 1235969 for CVE-2024-57897",
"url": "https://bugzilla.suse.com/1235969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57897"
},
{
"cve": "CVE-2024-57899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, \u0026bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n ? show_regs+0x54/0x58\n ? __warn+0x6b/0xd4\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? report_bug+0x113/0x150\n ? exc_overflow+0x30/0x30\n ? handle_bug+0x27/0x44\n ? exc_invalid_op+0x18/0x50\n ? handle_exception+0xf6/0xf6\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n ? process_one_work+0xf1/0x1fc\n ? worker_thread+0x2c0/0x3b4\n ? kthread+0xc7/0xf0\n ? mod_delayed_work_on+0x4c/0x4c\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork+0x24/0x38\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork_asm+0xf/0x14\n ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57899",
"url": "https://www.suse.com/security/cve/CVE-2024-57899"
},
{
"category": "external",
"summary": "SUSE Bug 1235924 for CVE-2024-57899",
"url": "https://bugzilla.suse.com/1235924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57899"
},
{
"cve": "CVE-2024-57903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_REUSEPORT to inet sockets\n\nAfter blamed commit, crypto sockets could accidentally be destroyed\nfrom RCU call back, as spotted by zyzbot [1].\n\nTrying to acquire a mutex in RCU callback is not allowed.\n\nRestrict SO_REUSEPORT socket option to inet sockets.\n\nv1 of this patch supported TCP, UDP and SCTP sockets,\nbut fcnal-test.sh test needed RAW and ICMP support.\n\n[1]\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1\npreempt_count: 100, expected: 0\nRCU nest depth: 0, expected: 0\n1 lock held by ksoftirqd/1/24:\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823\nPreemption disabled at:\n [\u003cffffffff8161c8c8\u003e] softirq_handle_begin kernel/softirq.c:402 [inline]\n [\u003cffffffff8161c8c8\u003e] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537\nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n __might_resched+0x5d4/0x780 kernel/sched/core.c:8758\n __mutex_lock_common kernel/locking/mutex.c:562 [inline]\n __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735\n crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179\n aead_release+0x3d/0x50 crypto/algif_aead.c:489\n alg_do_release crypto/af_alg.c:118 [inline]\n alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502\n __sk_destruct+0x58/0x5f0 net/core/sock.c:2260\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:950\n smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57903",
"url": "https://www.suse.com/security/cve/CVE-2024-57903"
},
{
"category": "external",
"summary": "SUSE Bug 1235967 for CVE-2024-57903",
"url": "https://bugzilla.suse.com/1235967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57903"
},
{
"cve": "CVE-2024-57904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: at91: call input_free_device() on allocated iio_dev\n\nCurrent implementation of at91_ts_register() calls input_free_deivce()\non st-\u003ets_input, however, the err label can be reached before the\nallocated iio_dev is stored to st-\u003ets_input. Thus call\ninput_free_device() on input instead of st-\u003ets_input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57904",
"url": "https://www.suse.com/security/cve/CVE-2024-57904"
},
{
"category": "external",
"summary": "SUSE Bug 1236078 for CVE-2024-57904",
"url": "https://bugzilla.suse.com/1236078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57904"
},
{
"cve": "CVE-2024-57906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads8688: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57906",
"url": "https://www.suse.com/security/cve/CVE-2024-57906"
},
{
"category": "external",
"summary": "SUSE Bug 1236088 for CVE-2024-57906",
"url": "https://bugzilla.suse.com/1236088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-57906"
},
{
"cve": "CVE-2024-57907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe \u0027data\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57907",
"url": "https://www.suse.com/security/cve/CVE-2024-57907"
},
{
"category": "external",
"summary": "SUSE Bug 1236090 for CVE-2024-57907",
"url": "https://bugzilla.suse.com/1236090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-57907"
},
{
"cve": "CVE-2024-57908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57908",
"url": "https://www.suse.com/security/cve/CVE-2024-57908"
},
{
"category": "external",
"summary": "SUSE Bug 1236091 for CVE-2024-57908",
"url": "https://bugzilla.suse.com/1236091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57908"
},
{
"cve": "CVE-2024-57910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57910"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: vcnl4035: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to userspace from a\ntriggered buffer, but it does not set an initial value for the single\ndata element, which is an u16 aligned to 8 bytes. That leaves at least\n4 bytes uninitialized even after writing an integer value with\nregmap_read().\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57910",
"url": "https://www.suse.com/security/cve/CVE-2024-57910"
},
{
"category": "external",
"summary": "SUSE Bug 1236097 for CVE-2024-57910",
"url": "https://bugzilla.suse.com/1236097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57910"
},
{
"cve": "CVE-2024-57911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n\nThe \u0027data\u0027 array is allocated via kmalloc() and it is used to push data\nto user space from a triggered buffer, but it does not set values for\ninactive channels, as it only uses iio_for_each_active_channel()\nto assign new values.\n\nUse kzalloc for the memory allocation to avoid pushing uninitialized\ninformation to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57911",
"url": "https://www.suse.com/security/cve/CVE-2024-57911"
},
{
"category": "external",
"summary": "SUSE Bug 1236098 for CVE-2024-57911",
"url": "https://bugzilla.suse.com/1236098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57911"
},
{
"cve": "CVE-2024-57912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe \u0027sample\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57912",
"url": "https://www.suse.com/security/cve/CVE-2024-57912"
},
{
"category": "external",
"summary": "SUSE Bug 1236101 for CVE-2024-57912",
"url": "https://bugzilla.suse.com/1236101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57912"
},
{
"cve": "CVE-2024-57913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n\nThis commit addresses an issue related to below kernel panic where\npanic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON\nin functionsfs_bind, which easily leads to the following scenarios.\n\n1.adb_write in adbd 2. UDC write via configfs\n =================\t =====================\n\n-\u003eusb_ffs_open_thread() -\u003eUDC write\n -\u003eopen_functionfs() -\u003econfigfs_write_iter()\n -\u003eadb_open() -\u003egadget_dev_desc_UDC_store()\n -\u003eadb_write() -\u003eusb_gadget_register_driver_owner\n -\u003edriver_register()\n-\u003eStartMonitor() -\u003ebus_add_driver()\n -\u003eadb_read() -\u003egadget_bind_driver()\n\u003ctimes-out without BIND event\u003e -\u003econfigfs_composite_bind()\n -\u003eusb_add_function()\n-\u003eopen_functionfs() -\u003effs_func_bind()\n -\u003eadb_open() -\u003efunctionfs_bind()\n \u003cffs-\u003estate !=FFS_ACTIVE\u003e\n\nThe adb_open, adb_read, and adb_write operations are invoked from the\ndaemon, but trying to bind the function is a process that is invoked by\nUDC write through configfs, which opens up the possibility of a race\ncondition between the two paths. In this race scenario, the kernel panic\noccurs due to the WARN_ON from functionfs_bind when panic_on_warn is\nenabled. This commit fixes the kernel panic by removing the unnecessary\nWARN_ON.\n\nKernel panic - not syncing: kernel: panic_on_warn set ...\n[ 14.542395] Call trace:\n[ 14.542464] ffs_func_bind+0x1c8/0x14a8\n[ 14.542468] usb_add_function+0xcc/0x1f0\n[ 14.542473] configfs_composite_bind+0x468/0x588\n[ 14.542478] gadget_bind_driver+0x108/0x27c\n[ 14.542483] really_probe+0x190/0x374\n[ 14.542488] __driver_probe_device+0xa0/0x12c\n[ 14.542492] driver_probe_device+0x3c/0x220\n[ 14.542498] __driver_attach+0x11c/0x1fc\n[ 14.542502] bus_for_each_dev+0x104/0x160\n[ 14.542506] driver_attach+0x24/0x34\n[ 14.542510] bus_add_driver+0x154/0x270\n[ 14.542514] driver_register+0x68/0x104\n[ 14.542518] usb_gadget_register_driver_owner+0x48/0xf4\n[ 14.542523] gadget_dev_desc_UDC_store+0xf8/0x144\n[ 14.542526] configfs_write_iter+0xf0/0x138",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57913",
"url": "https://www.suse.com/security/cve/CVE-2024-57913"
},
{
"category": "external",
"summary": "SUSE Bug 1236102 for CVE-2024-57913",
"url": "https://bugzilla.suse.com/1236102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57913"
},
{
"cve": "CVE-2024-57915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57915"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57915",
"url": "https://www.suse.com/security/cve/CVE-2024-57915"
},
{
"category": "external",
"summary": "SUSE Bug 1236120 for CVE-2024-57915",
"url": "https://bugzilla.suse.com/1236120"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57915"
},
{
"cve": "CVE-2024-57916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n\nResolve kernel panic caused by improper handling of IRQs while\naccessing GPIO values. This is done by replacing generic_handle_irq with\nhandle_nested_irq.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57916",
"url": "https://www.suse.com/security/cve/CVE-2024-57916"
},
{
"category": "external",
"summary": "SUSE Bug 1236125 for CVE-2024-57916",
"url": "https://bugzilla.suse.com/1236125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57916"
},
{
"cve": "CVE-2024-57917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntopology: Keep the cpumask unchanged when printing cpumap\n\nDuring fuzz testing, the following warning was discovered:\n\n different return values (15 and 11) from vsnprintf(\"%*pbl\n \", ...)\n\n test:keyward is WARNING in kvasprintf\n WARNING: CPU: 55 PID: 1168477 at lib/kasprintf.c:30 kvasprintf+0x121/0x130\n Call Trace:\n kvasprintf+0x121/0x130\n kasprintf+0xa6/0xe0\n bitmap_print_to_buf+0x89/0x100\n core_siblings_list_read+0x7e/0xb0\n kernfs_file_read_iter+0x15b/0x270\n new_sync_read+0x153/0x260\n vfs_read+0x215/0x290\n ksys_read+0xb9/0x160\n do_syscall_64+0x56/0x100\n entry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nThe call trace shows that kvasprintf() reported this warning during the\nprinting of core_siblings_list. kvasprintf() has several steps:\n\n (1) First, calculate the length of the resulting formatted string.\n\n (2) Allocate a buffer based on the returned length.\n\n (3) Then, perform the actual string formatting.\n\n (4) Check whether the lengths of the formatted strings returned in\n steps (1) and (2) are consistent.\n\nIf the core_cpumask is modified between steps (1) and (3), the lengths\nobtained in these two steps may not match. Indeed our test includes cpu\nhotplugging, which should modify core_cpumask while printing.\n\nTo fix this issue, cache the cpumask into a temporary variable before\ncalling cpumap_print_{list, cpumask}_to_buf(), to keep it unchanged\nduring the printing process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57917",
"url": "https://www.suse.com/security/cve/CVE-2024-57917"
},
{
"category": "external",
"summary": "SUSE Bug 1236127 for CVE-2024-57917",
"url": "https://bugzilla.suse.com/1236127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57917"
},
{
"cve": "CVE-2024-57922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57922",
"url": "https://www.suse.com/security/cve/CVE-2024-57922"
},
{
"category": "external",
"summary": "SUSE Bug 1236080 for CVE-2024-57922",
"url": "https://bugzilla.suse.com/1236080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57922"
},
{
"cve": "CVE-2024-57926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57926"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err\n\nThe pointer need to be set to NULL, otherwise KASAN complains about\nuse-after-free. Because in mtk_drm_bind, all private\u0027s drm are set\nas follows.\n\nprivate-\u003eall_drm_private[i]-\u003edrm = drm;\n\nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns\nfailure. However, the shutdown path still accesses the previous allocated\nmemory in drm_atomic_helper_shutdown.\n\n[ 84.874820] watchdog: watchdog0: watchdog did not stop!\n[ 86.512054] ==================================================================\n[ 86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1\n[ 86.515213]\n[ 86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55\n[ 86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022\n[ 86.517960] Call trace:\n[ 86.518333] show_stack+0x20/0x38 (C)\n[ 86.518891] dump_stack_lvl+0x90/0xd0\n[ 86.519443] print_report+0xf8/0x5b0\n[ 86.519985] kasan_report+0xb4/0x100\n[ 86.520526] __asan_report_load8_noabort+0x20/0x30\n[ 86.521240] drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.521966] mtk_drm_shutdown+0x54/0x80\n[ 86.522546] platform_shutdown+0x64/0x90\n[ 86.523137] device_shutdown+0x260/0x5b8\n[ 86.523728] kernel_restart+0x78/0xf0\n[ 86.524282] __do_sys_reboot+0x258/0x2f0\n[ 86.524871] __arm64_sys_reboot+0x90/0xd8\n[ 86.525473] invoke_syscall+0x74/0x268\n[ 86.526041] el0_svc_common.constprop.0+0xb0/0x240\n[ 86.526751] do_el0_svc+0x4c/0x70\n[ 86.527251] el0_svc+0x4c/0xc0\n[ 86.527719] el0t_64_sync_handler+0x144/0x168\n[ 86.528367] el0t_64_sync+0x198/0x1a0\n[ 86.528920]\n[ 86.529157] The buggy address belongs to the physical page:\n[ 86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc\n[ 86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)\n[ 86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000\n[ 86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000\n[ 86.534511] page dumped because: kasan: bad access detected\n[ 86.535323]\n[ 86.535559] Memory state around the buggy address:\n[ 86.536265] ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.537314] ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.538363] \u003effff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.544733] ^\n[ 86.551057] ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.557510] ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.563928] ==================================================================\n[ 86.571093] Disabling lock debugging due to kernel taint\n[ 86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b\n[ 86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57926",
"url": "https://www.suse.com/security/cve/CVE-2024-57926"
},
{
"category": "external",
"summary": "SUSE Bug 1236082 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "external",
"summary": "SUSE Bug 1236084 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57926"
},
{
"cve": "CVE-2024-57929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: fix releasing a faulty array block twice in dm_array_cursor_end\n\nWhen dm_bm_read_lock() fails due to locking or checksum errors, it\nreleases the faulty block implicitly while leaving an invalid output\npointer behind. The caller of dm_bm_read_lock() should not operate on\nthis invalid dm_block pointer, or it will lead to undefined result.\nFor example, the dm_array_cursor incorrectly caches the invalid pointer\non reading a faulty array block, causing a double release in\ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().\n\nReproduce steps:\n\n1. initialize a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. wipe the second array block offline\n\ndmsteup remove cache cmeta cdata corig\nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock\n\n3. try reopen the cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10\ndevice-mapper: block manager: array validator check failed for block 10\ndevice-mapper: array: get_ablock failed\ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed\n------------[ cut here ]------------\nkernel BUG at drivers/md/dm-bufio.c:638!\n\nFix by setting the cached block pointer to NULL on errors.\n\nIn addition to the reproducer described above, this fix can be\nverified using the \"array_cursor/damaged\" test in dm-unit:\n dm-unit run /pdata/array_cursor/damaged --kernel-dir \u003cKERNEL_DIR\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57929",
"url": "https://www.suse.com/security/cve/CVE-2024-57929"
},
{
"category": "external",
"summary": "SUSE Bug 1236096 for CVE-2024-57929",
"url": "https://bugzilla.suse.com/1236096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57929"
},
{
"cve": "CVE-2024-57931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: ignore unknown extended permissions\n\nWhen evaluating extended permissions, ignore unknown permissions instead\nof calling BUG(). This commit ensures that future permissions can be\nadded without interfering with older kernels.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57931",
"url": "https://www.suse.com/security/cve/CVE-2024-57931"
},
{
"category": "external",
"summary": "SUSE Bug 1236192 for CVE-2024-57931",
"url": "https://bugzilla.suse.com/1236192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57931"
},
{
"cve": "CVE-2024-57932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv-\u003enum_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57932",
"url": "https://www.suse.com/security/cve/CVE-2024-57932"
},
{
"category": "external",
"summary": "SUSE Bug 1236190 for CVE-2024-57932",
"url": "https://bugzilla.suse.com/1236190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57932"
},
{
"cve": "CVE-2024-57933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XSK operations on the existence of queues\n\nThis patch predicates the enabling and disabling of XSK pools on the\nexistence of queues. As it stands, if the interface is down, disabling\nor enabling XSK pools would result in a crash, as the RX queue pointer\nwould be NULL. XSK pool registration will occur as part of the next\ninterface up.\n\nSimilarly, xsk_wakeup needs be guarded against queues disappearing\nwhile the function is executing, so a check against the\nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the\ndisabling of the bit and the synchronize_net() in gve_turndown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57933",
"url": "https://www.suse.com/security/cve/CVE-2024-57933"
},
{
"category": "external",
"summary": "SUSE Bug 1236178 for CVE-2024-57933",
"url": "https://bugzilla.suse.com/1236178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57933"
},
{
"cve": "CVE-2024-57935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57935",
"url": "https://www.suse.com/security/cve/CVE-2024-57935"
},
{
"category": "external",
"summary": "SUSE Bug 1236180 for CVE-2024-57935",
"url": "https://bugzilla.suse.com/1236180"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57935"
},
{
"cve": "CVE-2024-57936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Fix max SGEs for the Work Request\n\nGen P7 supports up to 13 SGEs for now. WQE software structure\ncan hold only 6 now. Since the max send sge is reported as\n13, the stack can give requests up to 13 SGEs. This is causing\ntraffic failures and system crashes.\n\nUse the define for max SGE supported for variable size. This\nwill work for both static and variable WQEs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57936",
"url": "https://www.suse.com/security/cve/CVE-2024-57936"
},
{
"category": "external",
"summary": "SUSE Bug 1236181 for CVE-2024-57936",
"url": "https://bugzilla.suse.com/1236181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57936"
},
{
"cve": "CVE-2024-57938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()\n\nWhile by default max_autoclose equals to INT_MAX / HZ, one may set\nnet.sctp.max_autoclose to UINT_MAX. There is code in\nsctp_association_init() that can consequently trigger overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57938",
"url": "https://www.suse.com/security/cve/CVE-2024-57938"
},
{
"category": "external",
"summary": "SUSE Bug 1236182 for CVE-2024-57938",
"url": "https://bugzilla.suse.com/1236182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57938"
},
{
"cve": "CVE-2024-57940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix the infinite loop in exfat_readdir()\n\nIf the file system is corrupted so that a cluster is linked to\nitself in the cluster chain, and there is an unused directory\nentry in the cluster, \u0027dentry\u0027 will not be incremented, causing\ncondition \u0027dentry \u003c max_dentries\u0027 unable to prevent an infinite\nloop.\n\nThis infinite loop causes s_lock not to be released, and other\ntasks will hang, such as exfat_sync_fs().\n\nThis commit stops traversing the cluster chain when there is unused\ndirectory entry in the cluster to avoid this infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57940",
"url": "https://www.suse.com/security/cve/CVE-2024-57940"
},
{
"category": "external",
"summary": "SUSE Bug 1236227 for CVE-2024-57940",
"url": "https://bugzilla.suse.com/1236227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57940"
},
{
"cve": "CVE-2024-57946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: don\u0027t keep queue frozen during system suspend\n\nCommit 4ce6e2db00de (\"virtio-blk: Ensure no requests in virtqueues before\ndeleting vqs.\") replaces queue quiesce with queue freeze in virtio-blk\u0027s\nPM callbacks. And the motivation is to drain inflight IOs before suspending.\n\nblock layer\u0027s queue freeze looks very handy, but it is also easy to cause\ndeadlock, such as, any attempt to call into bio_queue_enter() may run into\ndeadlock if the queue is frozen in current context. There are all kinds\nof -\u003esuspend() called in suspend context, so keeping queue frozen in the\nwhole suspend context isn\u0027t one good idea. And Marek reported lockdep\nwarning[1] caused by virtio-blk\u0027s freeze queue in virtblk_freeze().\n\n[1] https://lore.kernel.org/linux-block/ca16370e-d646-4eee-b9cc-87277c89c43c@samsung.com/\n\nGiven the motivation is to drain in-flight IOs, it can be done by calling\nfreeze \u0026 unfreeze, meantime restore to previous behavior by keeping queue\nquiesced during suspend.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57946",
"url": "https://www.suse.com/security/cve/CVE-2024-57946"
},
{
"category": "external",
"summary": "SUSE Bug 1236247 for CVE-2024-57946",
"url": "https://bugzilla.suse.com/1236247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57946"
},
{
"cve": "CVE-2024-8805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-8805"
}
],
"notes": [
{
"category": "general",
"text": "BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-8805",
"url": "https://www.suse.com/security/cve/CVE-2024-8805"
},
{
"category": "external",
"summary": "SUSE Bug 1230697 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "external",
"summary": "SUSE Bug 1240804 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1240804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-8805"
},
{
"cve": "CVE-2025-21632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Ensure shadow stack is active before \"getting\" registers\n\nThe x86 shadow stack support has its own set of registers. Those registers\nare XSAVE-managed, but they are \"supervisor state components\" which means\nthat userspace can not touch them with XSAVE/XRSTOR. It also means that\nthey are not accessible from the existing ptrace ABI for XSAVE state.\nThus, there is a new ptrace get/set interface for it.\n\nThe regset code that ptrace uses provides an -\u003eactive() handler in\naddition to the get/set ones. For shadow stack this -\u003eactive() handler\nverifies that shadow stack is enabled via the ARCH_SHSTK_SHSTK bit in the\nthread struct. The -\u003eactive() handler is checked from some call sites of\nthe regset get/set handlers, but not the ptrace ones. This was not\nunderstood when shadow stack support was put in place.\n\nAs a result, both the set/get handlers can be called with\nXFEATURE_CET_USER in its init state, which would cause get_xsave_addr() to\nreturn NULL and trigger a WARN_ON(). The ssp_set() handler luckily has an\nssp_active() check to avoid surprising the kernel with shadow stack\nbehavior when the kernel is not ready for it (ARCH_SHSTK_SHSTK==0). That\ncheck just happened to avoid the warning.\n\nBut the -\u003eget() side wasn\u0027t so lucky. It can be called with shadow stacks\ndisabled, triggering the warning in practice, as reported by Christina\nSchimpe:\n\nWARNING: CPU: 5 PID: 1773 at arch/x86/kernel/fpu/regset.c:198 ssp_get+0x89/0xa0\n[...]\nCall Trace:\n\u003cTASK\u003e\n? show_regs+0x6e/0x80\n? ssp_get+0x89/0xa0\n? __warn+0x91/0x150\n? ssp_get+0x89/0xa0\n? report_bug+0x19d/0x1b0\n? handle_bug+0x46/0x80\n? exc_invalid_op+0x1d/0x80\n? asm_exc_invalid_op+0x1f/0x30\n? __pfx_ssp_get+0x10/0x10\n? ssp_get+0x89/0xa0\n? ssp_get+0x52/0xa0\n__regset_get+0xad/0xf0\ncopy_regset_to_user+0x52/0xc0\nptrace_regset+0x119/0x140\nptrace_request+0x13c/0x850\n? wait_task_inactive+0x142/0x1d0\n? do_syscall_64+0x6d/0x90\narch_ptrace+0x102/0x300\n[...]\n\nEnsure that shadow stacks are active in a thread before looking them up\nin the XSAVE buffer. Since ARCH_SHSTK_SHSTK and user_ssp[SHSTK_EN] are\nset at the same time, the active check ensures that there will be\nsomething to find in the XSAVE buffer.\n\n[ dhansen: changelog/subject tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21632",
"url": "https://www.suse.com/security/cve/CVE-2025-21632"
},
{
"category": "external",
"summary": "SUSE Bug 1236106 for CVE-2025-21632",
"url": "https://bugzilla.suse.com/1236106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21632"
},
{
"cve": "CVE-2025-21645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it\n\nWakeup for IRQ1 should be disabled only in cases where i8042 had\nactually enabled it, otherwise \"wake_depth\" for this IRQ will try to\ndrop below zero and there will be an unpleasant WARN() logged:\n\nkernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug\nkernel: ------------[ cut here ]------------\nkernel: Unbalanced IRQ 1 wake disable\nkernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0\n\nThe PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops\nwhich sets amd_pmc_suspend_handler() to the .suspend, .freeze, and\n.poweroff handlers. i8042_pm_suspend(), however, is only set as\nthe .suspend handler.\n\nFix the issue by call PMC suspend handler only from the same set of\ndev_pm_ops handlers as i8042_pm_suspend(), which currently means just\nthe .suspend handler.\n\nTo reproduce this issue try hibernating (S4) the machine after a fresh boot\nwithout putting it into s2idle first.\n\n[ij: edited the commit message.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21645",
"url": "https://www.suse.com/security/cve/CVE-2025-21645"
},
{
"category": "external",
"summary": "SUSE Bug 1236131 for CVE-2025-21645",
"url": "https://bugzilla.suse.com/1236131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21645"
},
{
"cve": "CVE-2025-21646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21646"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the maximum cell name length\n\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\nproblem occurs if someone actually does that: kafs tries to create a\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\nwith a warning:\n\n WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\n\nbecause procfs limits the maximum filename length to 255.\n\nHowever, the DNS limits the maximum lookup length and, by extension, the\nmaximum cell name, to 255 less two (length count and trailing NUL).\n\nFix this by limiting the maximum acceptable cellname length to 253. This\nalso allows us to be sure we can create the \"/afs/.\u003ccell\u003e/\" mountpoint too.\n\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\nexceeds 253.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21646",
"url": "https://www.suse.com/security/cve/CVE-2025-21646"
},
{
"category": "external",
"summary": "SUSE Bug 1236168 for CVE-2025-21646",
"url": "https://bugzilla.suse.com/1236168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21646"
},
{
"cve": "CVE-2025-21649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is sent on HIP08 devices\n\nCurrently, HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL. But the tx process would still try to set hardware time\nstamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.\n\n[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge]\n[ 128.292938] sp : ffff800059b93140\n[ 128.297200] x29: ffff800059b93140 x28: 0000000000003280\n[ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080\n[ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001\n[ 128.315969] x23: 0000000000000000 x22: 0000000000000194\n[ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000\n[ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000\n[ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24\n[ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000\n[ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368\n[ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02\n[ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0\n[ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000\n[ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff\n[ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294\n[ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080\n[ 128.390626] Call trace:\n[ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3]\n[ 128.405468] xmit_one.constprop.0+0xc4/0x200\n[ 128.410600] dev_hard_start_xmit+0x54/0xf0\n[ 128.415556] sch_direct_xmit+0xe8/0x634\n[ 128.420246] __dev_queue_xmit+0x224/0xc70\n[ 128.425101] dev_queue_xmit+0x1c/0x40\n[ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch]\n[ 128.435409] do_output+0x60/0x17c [openvswitch]\n[ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch]\n[ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch]\n[ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch]\n[ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch]\n[ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch]\n[ 128.471460] xmit_one.constprop.0+0xc4/0x200\n[ 128.476561] dev_hard_start_xmit+0x54/0xf0\n[ 128.481489] __dev_queue_xmit+0x968/0xc70\n[ 128.486330] dev_queue_xmit+0x1c/0x40\n[ 128.490856] ip_finish_output2+0x250/0x570\n[ 128.495810] __ip_finish_output+0x170/0x1e0\n[ 128.500832] ip_finish_output+0x3c/0xf0\n[ 128.505504] ip_output+0xbc/0x160\n[ 128.509654] ip_send_skb+0x58/0xd4\n[ 128.513892] udp_send_skb+0x12c/0x354\n[ 128.518387] udp_sendmsg+0x7a8/0x9c0\n[ 128.522793] inet_sendmsg+0x4c/0x8c\n[ 128.527116] __sock_sendmsg+0x48/0x80\n[ 128.531609] __sys_sendto+0x124/0x164\n[ 128.536099] __arm64_sys_sendto+0x30/0x5c\n[ 128.540935] invoke_syscall+0x50/0x130\n[ 128.545508] el0_svc_common.constprop.0+0x10c/0x124\n[ 128.551205] do_el0_svc+0x34/0xdc\n[ 128.555347] el0_svc+0x20/0x30\n[ 128.559227] el0_sync_handler+0xb8/0xc0\n[ 128.563883] el0_sync+0x160/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21649",
"url": "https://www.suse.com/security/cve/CVE-2025-21649"
},
{
"category": "external",
"summary": "SUSE Bug 1236143 for CVE-2025-21649",
"url": "https://bugzilla.suse.com/1236143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21649"
},
{
"cve": "CVE-2025-21650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue\n\nThe TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs\n1024-1279 are in different BAR space addresses. However,\nhclge_fetch_pf_reg does not distinguish the tqp space information when\nreading the tqp space information. When the number of TQPs is greater\nthan 1024, access bar space overwriting occurs.\nThe problem of different segments has been considered during the\ninitialization of tqp.io_base. Therefore, tqp.io_base is directly used\nwhen the queue is read in hclge_fetch_pf_reg.\n\nThe error message:\n\nUnable to handle kernel paging request at virtual address ffff800037200000\npc : hclge_fetch_pf_reg+0x138/0x250 [hclge]\nlr : hclge_get_regs+0x84/0x1d0 [hclge]\nCall trace:\n hclge_fetch_pf_reg+0x138/0x250 [hclge]\n hclge_get_regs+0x84/0x1d0 [hclge]\n hns3_get_regs+0x2c/0x50 [hns3]\n ethtool_get_regs+0xf4/0x270\n dev_ethtool+0x674/0x8a0\n dev_ioctl+0x270/0x36c\n sock_do_ioctl+0x110/0x2a0\n sock_ioctl+0x2ac/0x530\n __arm64_sys_ioctl+0xa8/0x100\n invoke_syscall+0x4c/0x124\n el0_svc_common.constprop.0+0x140/0x15c\n do_el0_svc+0x30/0xd0\n el0_svc+0x1c/0x2c\n el0_sync_handler+0xb0/0xb4\n el0_sync+0x168/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21650",
"url": "https://www.suse.com/security/cve/CVE-2025-21650"
},
{
"category": "external",
"summary": "SUSE Bug 1236144 for CVE-2025-21650",
"url": "https://bugzilla.suse.com/1236144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21650"
},
{
"cve": "CVE-2025-21651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: don\u0027t auto enable misc vector\n\nCurrently, there is a time window between misc irq enabled\nand service task inited. If an interrupte is reported at\nthis time, it will cause warning like below:\n\n[ 16.324639] Call trace:\n[ 16.324641] __queue_delayed_work+0xb8/0xe0\n[ 16.324643] mod_delayed_work_on+0x78/0xd0\n[ 16.324655] hclge_errhand_task_schedule+0x58/0x90 [hclge]\n[ 16.324662] hclge_misc_irq_handle+0x168/0x240 [hclge]\n[ 16.324666] __handle_irq_event_percpu+0x64/0x1e0\n[ 16.324667] handle_irq_event+0x80/0x170\n[ 16.324670] handle_fasteoi_edge_irq+0x110/0x2bc\n[ 16.324671] __handle_domain_irq+0x84/0xfc\n[ 16.324673] gic_handle_irq+0x88/0x2c0\n[ 16.324674] el1_irq+0xb8/0x140\n[ 16.324677] arch_cpu_idle+0x18/0x40\n[ 16.324679] default_idle_call+0x5c/0x1bc\n[ 16.324682] cpuidle_idle_call+0x18c/0x1c4\n[ 16.324684] do_idle+0x174/0x17c\n[ 16.324685] cpu_startup_entry+0x30/0x6c\n[ 16.324687] secondary_start_kernel+0x1a4/0x280\n[ 16.324688] ---[ end trace 6aa0bff672a964aa ]---\n\nSo don\u0027t auto enable misc vector when request irq..",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21651",
"url": "https://www.suse.com/security/cve/CVE-2025-21651"
},
{
"category": "external",
"summary": "SUSE Bug 1236145 for CVE-2025-21651",
"url": "https://bugzilla.suse.com/1236145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21651"
},
{
"cve": "CVE-2025-21652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21652"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Fix use-after-free in ipvlan_get_iflink().\n\nsyzbot presented an use-after-free report [0] regarding ipvlan and\nlinkwatch.\n\nipvlan does not hold a refcnt of the lower device unlike vlan and\nmacvlan.\n\nIf the linkwatch work is triggered for the ipvlan dev, the lower dev\nmight have already been freed, resulting in UAF of ipvlan-\u003ephy_dev in\nipvlan_get_iflink().\n\nWe can delay the lower dev unregistration like vlan and macvlan by\nholding the lower dev\u0027s refcnt in dev-\u003enetdev_ops-\u003endo_init() and\nreleasing it in dev-\u003epriv_destructor().\n\nJakub pointed out calling .ndo_XXX after unregister_netdevice() has\nreturned is error prone and suggested [1] addressing this UAF in the\ncore by taking commit 750e51603395 (\"net: avoid potential UAF in\ndefault_operstate()\") further.\n\nLet\u0027s assume unregistering devices DOWN and use RCU protection in\ndefault_operstate() not to race with the device unregistration.\n\n[0]:\nBUG: KASAN: slab-use-after-free in ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\nRead of size 4 at addr ffff0000d768c0e0 by task kworker/u8:35/6944\n\nCPU: 0 UID: 0 PID: 6944 Comm: kworker/u8:35 Not tainted 6.13.0-rc2-g9bc5c9515b48 #12 4c3cb9e8b4565456f6a355f312ff91f4f29b3c47\nHardware name: linux,dummy-virt (DT)\nWorkqueue: events_unbound linkwatch_event\nCall trace:\n show_stack+0x38/0x50 arch/arm64/kernel/stacktrace.c:484 (C)\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xbc/0x108 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x16c/0x6f0 mm/kasan/report.c:489\n kasan_report+0xc0/0x120 mm/kasan/report.c:602\n __asan_report_load4_noabort+0x20/0x30 mm/kasan/report_generic.c:380\n ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\n dev_get_iflink+0x7c/0xd8 net/core/dev.c:674\n default_operstate net/core/link_watch.c:45 [inline]\n rfc2863_policy+0x144/0x360 net/core/link_watch.c:72\n linkwatch_do_dev+0x60/0x228 net/core/link_watch.c:175\n __linkwatch_run_queue+0x2f4/0x5b8 net/core/link_watch.c:239\n linkwatch_event+0x64/0xa8 net/core/link_watch.c:282\n process_one_work+0x700/0x1398 kernel/workqueue.c:3229\n process_scheduled_works kernel/workqueue.c:3310 [inline]\n worker_thread+0x8c4/0xe10 kernel/workqueue.c:3391\n kthread+0x2b0/0x360 kernel/kthread.c:389\n ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862\n\nAllocated by task 9303:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x30/0x68 mm/kasan/common.c:68\n kasan_save_alloc_info+0x44/0x58 mm/kasan/generic.c:568\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x84/0xa0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4283 [inline]\n __kmalloc_node_noprof+0x2a0/0x560 mm/slub.c:4289\n __kvmalloc_node_noprof+0x9c/0x230 mm/util.c:650\n alloc_netdev_mqs+0xb4/0x1118 net/core/dev.c:11209\n rtnl_create_link+0x2b8/0xb60 net/core/rtnetlink.c:3595\n rtnl_newlink_create+0x19c/0x868 net/core/rtnetlink.c:3771\n __rtnl_newlink net/core/rtnetlink.c:3896 [inline]\n rtnl_newlink+0x122c/0x15c0 net/core/rtnetlink.c:4011\n rtnetlink_rcv_msg+0x61c/0x918 net/core/rtnetlink.c:6901\n netlink_rcv_skb+0x1dc/0x398 net/netlink/af_netlink.c:2542\n rtnetlink_rcv+0x34/0x50 net/core/rtnetlink.c:6928\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x618/0x838 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x5fc/0x8b0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x2ec/0x438 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __arm64_sys_sendto+0xe4/0x110 net/socket.c:2200\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x90/0x278 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x13c/0x250 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x54/0x70 arch/arm64/kernel/syscall.c:151\n el\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21652",
"url": "https://www.suse.com/security/cve/CVE-2025-21652"
},
{
"category": "external",
"summary": "SUSE Bug 1236160 for CVE-2025-21652",
"url": "https://bugzilla.suse.com/1236160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21652"
},
{
"cve": "CVE-2025-21653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute\n\nsyzbot found that TCA_FLOW_RSHIFT attribute was not validated.\nRight shitfing a 32bit integer is undefined for large shift values.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_flow.c:329:23\nshift exponent 9445 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: ipv6_addrconf addrconf_dad_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468\n flow_classify+0x24d5/0x25b0 net/sched/cls_flow.c:329\n tc_classify include/net/tc_wrapper.h:197 [inline]\n __tcf_classify net/sched/cls_api.c:1771 [inline]\n tcf_classify+0x420/0x1160 net/sched/cls_api.c:1867\n sfb_classify net/sched/sch_sfb.c:260 [inline]\n sfb_enqueue+0x3ad/0x18b0 net/sched/sch_sfb.c:318\n dev_qdisc_enqueue+0x4b/0x290 net/core/dev.c:3793\n __dev_xmit_skb net/core/dev.c:3889 [inline]\n __dev_queue_xmit+0xf0e/0x3f50 net/core/dev.c:4400\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n neigh_hh_output include/net/neighbour.h:523 [inline]\n neigh_output include/net/neighbour.h:537 [inline]\n ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236\n iptunnel_xmit+0x55d/0x9b0 net/ipv4/ip_tunnel_core.c:82\n udp_tunnel_xmit_skb+0x262/0x3b0 net/ipv4/udp_tunnel_core.c:173\n geneve_xmit_skb drivers/net/geneve.c:916 [inline]\n geneve_xmit+0x21dc/0x2d00 drivers/net/geneve.c:1039\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606\n __dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4434",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21653",
"url": "https://www.suse.com/security/cve/CVE-2025-21653"
},
{
"category": "external",
"summary": "SUSE Bug 1236161 for CVE-2025-21653",
"url": "https://bugzilla.suse.com/1236161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21653"
},
{
"cve": "CVE-2025-21655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21655"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/eventfd: ensure io_eventfd_signal() defers another RCU period\n\nio_eventfd_do_signal() is invoked from an RCU callback, but when\ndropping the reference to the io_ev_fd, it calls io_eventfd_free()\ndirectly if the refcount drops to zero. This isn\u0027t correct, as any\npotential freeing of the io_ev_fd should be deferred another RCU grace\nperiod.\n\nJust call io_eventfd_put() rather than open-code the dec-and-test and\nfree, which will correctly defer it another RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21655",
"url": "https://www.suse.com/security/cve/CVE-2025-21655"
},
{
"category": "external",
"summary": "SUSE Bug 1236163 for CVE-2025-21655",
"url": "https://bugzilla.suse.com/1236163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21655"
},
{
"cve": "CVE-2025-21656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur\n\nscsi_execute_cmd() function can return both negative (linux codes) and\npositive (scsi_cmnd result field) error codes.\n\nCurrently the driver just passes error codes of scsi_execute_cmd() to\nhwmon core, which is incorrect because hwmon only checks for negative\nerror codes. This leads to hwmon reporting uninitialized data to\nuserspace in case of SCSI errors (for example if the disk drive was\ndisconnected).\n\nThis patch checks scsi_execute_cmd() output and returns -EIO if it\u0027s\nerror code is positive.\n\n[groeck: Avoid inline variable declaration for portability]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21656",
"url": "https://www.suse.com/security/cve/CVE-2025-21656"
},
{
"category": "external",
"summary": "SUSE Bug 1236248 for CVE-2025-21656",
"url": "https://bugzilla.suse.com/1236248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2025-21656"
},
{
"cve": "CVE-2025-21662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix variable not being completed when function returns\n\nWhen cmd_alloc_index(), fails cmd_work_handler() needs\nto complete ent-\u003eslotted before returning early.\nOtherwise the task which issued the command may hang:\n\n mlx5_core 0000:01:00.0: cmd_work_handler:877:(pid 3880418): failed to allocate command entry\n INFO: task kworker/13:2:4055883 blocked for more than 120 seconds.\n Not tainted 4.19.90-25.44.v2101.ky10.aarch64 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n kworker/13:2 D 0 4055883 2 0x00000228\n Workqueue: events mlx5e_tx_dim_work [mlx5_core]\n Call trace:\n __switch_to+0xe8/0x150\n __schedule+0x2a8/0x9b8\n schedule+0x2c/0x88\n schedule_timeout+0x204/0x478\n wait_for_common+0x154/0x250\n wait_for_completion+0x28/0x38\n cmd_exec+0x7a0/0xa00 [mlx5_core]\n mlx5_cmd_exec+0x54/0x80 [mlx5_core]\n mlx5_core_modify_cq+0x6c/0x80 [mlx5_core]\n mlx5_core_modify_cq_moderation+0xa0/0xb8 [mlx5_core]\n mlx5e_tx_dim_work+0x54/0x68 [mlx5_core]\n process_one_work+0x1b0/0x448\n worker_thread+0x54/0x468\n kthread+0x134/0x138\n ret_from_fork+0x10/0x18",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21662",
"url": "https://www.suse.com/security/cve/CVE-2025-21662"
},
{
"category": "external",
"summary": "SUSE Bug 1236198 for CVE-2025-21662",
"url": "https://bugzilla.suse.com/1236198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21662"
},
{
"cve": "CVE-2025-21663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: dwmac-tegra: Read iommu stream id from device tree\n\nNvidia\u0027s Tegra MGBE controllers require the IOMMU \"Stream ID\" (SID) to be\nwritten to the MGBE_WRAP_AXI_ASID0_CTRL register.\n\nThe current driver is hard coded to use MGBE0\u0027s SID for all controllers.\nThis causes softirq time outs and kernel panics when using controllers\nother than MGBE0.\n\nExample dmesg errors when an ethernet cable is connected to MGBE1:\n\n[ 116.133290] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 121.851283] tegra-mgbe 6910000.ethernet eth1: NETDEV WATCHDOG: CPU: 5: transmit queue 0 timed out 5690 ms\n[ 121.851782] tegra-mgbe 6910000.ethernet eth1: Reset adapter.\n[ 121.892464] tegra-mgbe 6910000.ethernet eth1: Register MEM_TYPE_PAGE_POOL RxQ-0\n[ 121.905920] tegra-mgbe 6910000.ethernet eth1: PHY [stmmac-1:00] driver [Aquantia AQR113] (irq=171)\n[ 121.907356] tegra-mgbe 6910000.ethernet eth1: Enabling Safety Features\n[ 121.907578] tegra-mgbe 6910000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported\n[ 121.908399] tegra-mgbe 6910000.ethernet eth1: registered PTP clock\n[ 121.908582] tegra-mgbe 6910000.ethernet eth1: configuring for phy/10gbase-r link mode\n[ 125.961292] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 181.921198] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:\n[ 181.921404] rcu: \t7-....: (1 GPs behind) idle=540c/1/0x4000000000000002 softirq=1748/1749 fqs=2337\n[ 181.921684] rcu: \t(detected by 4, t=6002 jiffies, g=1357, q=1254 ncpus=8)\n[ 181.921878] Sending NMI from CPU 4 to CPUs 7:\n[ 181.921886] NMI backtrace for cpu 7\n[ 181.922131] CPU: 7 UID: 0 PID: 0 Comm: swapper/7 Kdump: loaded Not tainted 6.13.0-rc3+ #6\n[ 181.922390] Hardware name: NVIDIA CTI Forge + Orin AGX/Jetson, BIOS 202402.1-Unknown 10/28/2024\n[ 181.922658] pstate: 40400009 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 181.922847] pc : handle_softirqs+0x98/0x368\n[ 181.922978] lr : __do_softirq+0x18/0x20\n[ 181.923095] sp : ffff80008003bf50\n[ 181.923189] x29: ffff80008003bf50 x28: 0000000000000008 x27: 0000000000000000\n[ 181.923379] x26: ffffce78ea277000 x25: 0000000000000000 x24: 0000001c61befda0\n[ 181.924486] x23: 0000000060400009 x22: ffffce78e99918bc x21: ffff80008018bd70\n[ 181.925568] x20: ffffce78e8bb00d8 x19: ffff80008018bc20 x18: 0000000000000000\n[ 181.926655] x17: ffff318ebe7d3000 x16: ffff800080038000 x15: 0000000000000000\n[ 181.931455] x14: ffff000080816680 x13: ffff318ebe7d3000 x12: 000000003464d91d\n[ 181.938628] x11: 0000000000000040 x10: ffff000080165a70 x9 : ffffce78e8bb0160\n[ 181.945804] x8 : ffff8000827b3160 x7 : f9157b241586f343 x6 : eeb6502a01c81c74\n[ 181.953068] x5 : a4acfcdd2e8096bb x4 : ffffce78ea277340 x3 : 00000000ffffd1e1\n[ 181.960329] x2 : 0000000000000101 x1 : ffffce78ea277340 x0 : ffff318ebe7d3000\n[ 181.967591] Call trace:\n[ 181.970043] handle_softirqs+0x98/0x368 (P)\n[ 181.974240] __do_softirq+0x18/0x20\n[ 181.977743] ____do_softirq+0x14/0x28\n[ 181.981415] call_on_irq_stack+0x24/0x30\n[ 181.985180] do_softirq_own_stack+0x20/0x30\n[ 181.989379] __irq_exit_rcu+0x114/0x140\n[ 181.993142] irq_exit_rcu+0x14/0x28\n[ 181.996816] el1_interrupt+0x44/0xb8\n[ 182.000316] el1h_64_irq_handler+0x14/0x20\n[ 182.004343] el1h_64_irq+0x80/0x88\n[ 182.007755] cpuidle_enter_state+0xc4/0x4a8 (P)\n[ 182.012305] cpuidle_enter+0x3c/0x58\n[ 182.015980] cpuidle_idle_call+0x128/0x1c0\n[ 182.020005] do_idle+0xe0/0xf0\n[ 182.023155] cpu_startup_entry+0x3c/0x48\n[ 182.026917] secondary_start_kernel+0xdc/0x120\n[ 182.031379] __secondary_switched+0x74/0x78\n[ 212.971162] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 7-.... } 6103 jiffies s: 417 root: 0x80/.\n[ 212.985935] rcu: blocking rcu_node structures (internal RCU debug):\n[ 212.992758] Sending NMI from CPU 0 to CPUs 7:\n[ 212.998539] NMI backtrace for cpu 7\n[ 213.004304] CPU: 7 UID: 0 PI\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21663",
"url": "https://www.suse.com/security/cve/CVE-2025-21663"
},
{
"category": "external",
"summary": "SUSE Bug 1236260 for CVE-2025-21663",
"url": "https://bugzilla.suse.com/1236260"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21663"
},
{
"cve": "CVE-2025-21664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm thin: make get_first_thin use rcu-safe list first function\n\nThe documentation in rculist.h explains the absence of list_empty_rcu()\nand cautions programmers against relying on a list_empty() -\u003e\nlist_first() sequence in RCU safe code. This is because each of these\nfunctions performs its own READ_ONCE() of the list head. This can lead\nto a situation where the list_empty() sees a valid list entry, but the\nsubsequent list_first() sees a different view of list head state after a\nmodification.\n\nIn the case of dm-thin, this author had a production box crash from a GP\nfault in the process_deferred_bios path. This function saw a valid list\nhead in get_first_thin() but when it subsequently dereferenced that and\nturned it into a thin_c, it got the inside of the struct pool, since the\nlist was now empty and referring to itself. The kernel on which this\noccurred printed both a warning about a refcount_t being saturated, and\na UBSAN error for an out-of-bounds cpuid access in the queued spinlock,\nprior to the fault itself. When the resulting kdump was examined, it\nwas possible to see another thread patiently waiting in thin_dtr\u0027s\nsynchronize_rcu.\n\nThe thin_dtr call managed to pull the thin_c out of the active thins\nlist (and have it be the last entry in the active_thins list) at just\nthe wrong moment which lead to this crash.\n\nFortunately, the fix here is straight forward. Switch get_first_thin()\nfunction to use list_first_or_null_rcu() which performs just a single\nREAD_ONCE() and returns NULL if the list is already empty.\n\nThis was run against the devicemapper test suite\u0027s thin-provisioning\nsuites for delete and suspend and no regressions were observed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21664",
"url": "https://www.suse.com/security/cve/CVE-2025-21664"
},
{
"category": "external",
"summary": "SUSE Bug 1236262 for CVE-2025-21664",
"url": "https://bugzilla.suse.com/1236262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21664"
},
{
"cve": "CVE-2025-21674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21674"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel\n\nAttempt to enable IPsec packet offload in tunnel mode in debug kernel\ngenerates the following kernel panic, which is happening due to two\nissues:\n1. In SA add section, the should be _bh() variant when marking SA mode.\n2. There is not needed flush_workqueue in SA delete routine. It is not\nneeded as at this stage as it is removed from SADB and the running work\nwill be canceled later in SA free.\n\n =====================================================\n WARNING: SOFTIRQ-safe -\u003e SOFTIRQ-unsafe lock order detected\n 6.12.0+ #4 Not tainted\n -----------------------------------------------------\n charon/1337 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:\n ffff88810f365020 (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}, at: mlx5e_xfrm_del_state+0xca/0x1e0 [mlx5_core]\n\n and this task is already holding:\n ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n which would create a new lock dependency:\n (\u0026x-\u003elock){+.-.}-{3:3} -\u003e (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n but this new dependency connects a SOFTIRQ-irq-safe lock:\n (\u0026x-\u003elock){+.-.}-{3:3}\n\n ... which became SOFTIRQ-irq-safe at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n hrtimer_run_softirq+0x146/0x2e0\n handle_softirqs+0x266/0x860\n irq_exit_rcu+0x115/0x1a0\n sysvec_apic_timer_interrupt+0x6e/0x90\n asm_sysvec_apic_timer_interrupt+0x16/0x20\n default_idle+0x13/0x20\n default_idle_call+0x67/0xa0\n do_idle+0x2da/0x320\n cpu_startup_entry+0x50/0x60\n start_secondary+0x213/0x2a0\n common_startup_64+0x129/0x138\n\n to a SOFTIRQ-irq-unsafe lock:\n (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n ... which became SOFTIRQ-irq-unsafe at:\n ...\n lock_acquire+0x1be/0x520\n _raw_spin_lock+0x2c/0x40\n xa_set_mark+0x70/0x110\n mlx5e_xfrm_add_state+0xe48/0x2290 [mlx5_core]\n xfrm_dev_state_add+0x3bb/0xd70\n xfrm_add_sa+0x2451/0x4a90\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n other info that might help us debug this:\n\n Possible interrupt unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026xa-\u003exa_lock#24);\n local_irq_disable();\n lock(\u0026x-\u003elock);\n lock(\u0026xa-\u003exa_lock#24);\n \u003cInterrupt\u003e\n lock(\u0026x-\u003elock);\n\n *** DEADLOCK ***\n\n 2 locks held by charon/1337:\n #0: ffffffff87f8f858 (\u0026net-\u003exfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x5e/0x90\n #1: ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n\n the dependencies between SOFTIRQ-irq-safe lock and the holding lock:\n -\u003e (\u0026x-\u003elock){+.-.}-{3:3} ops: 29 {\n HARDIRQ-ON-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_alloc_spi+0xc0/0xe60\n xfrm_alloc_userspi+0x5f6/0xbc0\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n IN-SOFTIRQ-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21674",
"url": "https://www.suse.com/security/cve/CVE-2025-21674"
},
{
"category": "external",
"summary": "SUSE Bug 1236688 for CVE-2025-21674",
"url": "https://bugzilla.suse.com/1236688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21674"
},
{
"cve": "CVE-2025-21676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21676"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: handle page_pool_dev_alloc_pages error\n\nThe fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did\nnot handle the case when it returned NULL. There was a WARN_ON(!new_page)\nbut it would still proceed to use the NULL pointer and then crash.\n\nThis case does seem somewhat rare but when the system is under memory\npressure it can happen. One case where I can duplicate this with some\nfrequency is when writing over a smbd share to a SATA HDD attached to an\nimx6q.\n\nSetting /proc/sys/vm/min_free_kbytes to higher values also seems to solve\nthe problem for my test case. But it still seems wrong that the fec driver\nignores the memory allocation error and can crash.\n\nThis commit handles the allocation error by dropping the current packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21676",
"url": "https://www.suse.com/security/cve/CVE-2025-21676"
},
{
"category": "external",
"summary": "SUSE Bug 1236696 for CVE-2025-21676",
"url": "https://bugzilla.suse.com/1236696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21676"
},
{
"cve": "CVE-2025-21682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21682"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: bnxt: always recalculate features after XDP clearing, fix null-deref\n\nRecalculate features when XDP is detached.\n\nBefore:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: off [requested on]\n\nAfter:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: on\n\nThe fact that HW-GRO doesn\u0027t get re-enabled automatically is just\na minor annoyance. The real issue is that the features will randomly\ncome back during another reconfiguration which just happens to invoke\nnetdev_update_features(). The driver doesn\u0027t handle reconfiguring\ntwo things at a time very robustly.\n\nStarting with commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") we only reconfigure the RSS hash table\nif the \"effective\" number of Rx rings has changed. If HW-GRO is\nenabled \"effective\" number of rings is 2x what user sees.\nSo if we are in the bad state, with HW-GRO re-enablement \"pending\"\nafter XDP off, and we lower the rings by / 2 - the HW-GRO rings\ndoing 2x and the ethtool -L doing / 2 may cancel each other out,\nand the:\n\n if (old_rx_rings != bp-\u003ehw_resc.resv_rx_rings \u0026\u0026\n\ncondition in __bnxt_reserve_rings() will be false.\nThe RSS map won\u0027t get updated, and we\u0027ll crash with:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000168\n RIP: 0010:__bnxt_hwrm_vnic_set_rss+0x13a/0x1a0\n bnxt_hwrm_vnic_rss_cfg_p5+0x47/0x180\n __bnxt_setup_vnic_p5+0x58/0x110\n bnxt_init_nic+0xb72/0xf50\n __bnxt_open_nic+0x40d/0xab0\n bnxt_open_nic+0x2b/0x60\n ethtool_set_channels+0x18c/0x1d0\n\nAs we try to access a freed ring.\n\nThe issue is present since XDP support was added, really, but\nprior to commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") it wasn\u0027t causing major issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21682",
"url": "https://www.suse.com/security/cve/CVE-2025-21682"
},
{
"category": "external",
"summary": "SUSE Bug 1236703 for CVE-2025-21682",
"url": "https://bugzilla.suse.com/1236703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.1:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-devel-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.1:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.1:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.1:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.1:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21682"
}
]
}
suse-su-2025:0289-1
Vulnerability from csaf_suse
Published
2025-01-29 16:11
Modified
2025-01-29 16:11
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
- CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).
- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
- CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
- CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
- CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).
- CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
- CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
- CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).
- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
- CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
- CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).
- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
- CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
- CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
- CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
- CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).
- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
- CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).
- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
- CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).
- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).
- CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).
- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).
- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
- CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
The following non-security bugs were fixed:
- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).
- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).
- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).
- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).
- ACPI: resource: Fix memory resource type union access (git-fixes).
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).
- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).
- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).
- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).
- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).
- ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).
- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).
- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes).
- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes).
- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: seq: Check UMP support for midi_version change (git-fixes).
- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).
- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).
- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).
- ALSA: seq: ump: Use guard() for locking (stable-fixes).
- ALSA: ump: Use guard() for locking (stable-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).
- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).
- ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes).
- ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes).
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes).
- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).
- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).
- ASoC: amd: yc: Fix the wrong return value (git-fixes).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).
- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).
- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).
- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).
- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).
- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).
- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).
- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).
- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).
- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).
- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).
- Bluetooth: iso: Fix recursive locking warning (git-fixes).
- Disable ceph (jsc#PED-7242)
- Documentation/virt/kvm: Document on Trust Domain Extensions(TDX) (jsc#PED-6143).
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).
- Drop uvcvideo fix due to regression (bsc#1235894)
- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).
- HID: wacom: fix when get product name maybe null pointer (git-fixes).
- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).
- KVM: Fix conflict of IOCTL definition of KVM_MEMORY_MAPPING (jsc#PED-6143).
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).
- KVM: TDX: Add KVM Exit for TDX TDG.VP.VMCALL (jsc#PED-6143).
- KVM: TDX: Add TSX_CTRL msr into uret_msrs list (jsc#PED-6143).
- KVM: TDX: Add a method to ignore dirty logging (jsc#PED-6143).
- KVM: TDX: Add a method to ignore for TDX to ignore hypercall patch (jsc#PED-6143).
- KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (jsc#PED-6143).
- KVM: TDX: Add a place holder to handle TDX VM exit (jsc#PED-6143).
- KVM: TDX: Add accessors VMX VMCS helpers (jsc#PED-6143).
- KVM: TDX: Add helper function to read TDX metadata in array (jsc#PED-6143).
- KVM: TDX: Add helper functions to allocate/free TDX private host key id (jsc#PED-6143).
- KVM: TDX: Add is_private check for mmu_alloc_root (jsc#PED-6143).
- KVM: TDX: Add load_mmu_pgd method for TDX (jsc#PED-6143).
- KVM: TDX: Add methods to ignore VMX preemption timer (jsc#PED-6143).
- KVM: TDX: Add methods to ignore accesses to TSC (jsc#PED-6143).
- KVM: TDX: Add methods to ignore guest instruction emulation (jsc#PED-6143).
- KVM: TDX: Add methods to ignore virtual apic related operation (jsc#PED-6143).
- KVM: TDX: Add support for find pending IRQ in a protected local APIC (jsc#PED-6143).
- KVM: TDX: Complete interrupts after tdexit (jsc#PED-6143).
- KVM: TDX: Create initial guest memory (jsc#PED-6143).
- KVM: TDX: Do TDX specific vcpu initialization (jsc#PED-6143).
- KVM: TDX: Do not use NO_RBP_MOD for backward compatibility (jsc#PED-6143).
- KVM: TDX: Emulate Xen MTRR disablement (jsc#PED-6143).
- KVM: TDX: Extend memory measurement with initial guest memory (jsc#PED-6143).
- KVM: TDX: Finalize VM initialization (jsc#PED-6143).
- KVM: TDX: Fix incompatibility with QEMU definition (jsc#PED-6143).
- KVM: TDX: Fix is_private for page fault handler (jsc#PED-6143).
- KVM: TDX: Get system-wide info about TDX module on initialization (jsc#PED-6143).
- KVM: TDX: Handle EXIT_REASON_OTHER_SMI with MSMI (jsc#PED-6143).
- KVM: TDX: Handle MSR IA32_FEAT_CTL MSR and IA32_MCG_EXT_CTL (jsc#PED-6143).
- KVM: TDX: Handle MSR MTRRCap and MTRRDefType access (jsc#PED-6143).
- KVM: TDX: Handle TDG.VP.VMCALL<GetTdVmCallInfo> hypercall (jsc#PED-6143).
- KVM: TDX: Handle TDX PV CPUID hypercall (jsc#PED-6143).
- KVM: TDX: Handle TDX PV HLT hypercall (jsc#PED-6143).
- KVM: TDX: Handle TDX PV MMIO hypercall (jsc#PED-6143).
- KVM: TDX: Handle TDX PV port io hypercall (jsc#PED-6143).
- KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (jsc#PED-6143).
- KVM: TDX: Handle vmentry failure for INTEL TD guest (jsc#PED-6143).
- KVM: TDX: Ignore setting up mce (jsc#PED-6143).
- KVM: TDX: Implement TDX vcpu enter/exit path (jsc#PED-6143).
- KVM: TDX: Implement callbacks for MSR operations for TDX (jsc#PED-6143).
- KVM: TDX: Implement interrupt injection (jsc#PED-6143).
- KVM: TDX: Implement methods to inject NMI (jsc#PED-6143).
- KVM: TDX: Inhibit APICv for TDX guest (jsc#PED-6143).
- KVM: TDX: MTRR: implement get_mt_mask() for TDX (jsc#PED-6143).
- KVM: TDX: Make KVM_CAP_MAX_VCPUS backend specific (jsc#PED-6143).
- KVM: TDX: Make pmu_intel.c ignore guest TD case (jsc#PED-6143).
- KVM: TDX: Refuse to unplug the last cpu on the package (jsc#PED-6143).
- KVM: TDX: Require TDP MMU and mmio caching for TDX (jsc#PED-6143).
- KVM: TDX: Retry seamcall when TDX_OPERAND_BUSY with operand SEPT (jsc#PED-6143).
- KVM: TDX: Return -EINTR for KVM_MEMORY_MAPPING when signal pending (jsc#PED-6143).
- KVM: TDX: Silently discard SMI request (jsc#PED-6143).
- KVM: TDX: Silently ignore INIT/SIPI (jsc#PED-6143).
- KVM: TDX: TDP MMU TDX support (jsc#PED-6143).
- KVM: TDX: create/destroy VM structure (jsc#PED-6143).
- KVM: TDX: create/free TDX vcpu structure (jsc#PED-6143).
- KVM: TDX: handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (jsc#PED-6143).
- KVM: TDX: handle EXIT_REASON_OTHER_SMI (jsc#PED-6143).
- KVM: TDX: handle KVM hypercall with TDG.VP.VMCALL (jsc#PED-6143).
- KVM: TDX: handle ept violation/misconfig exit (jsc#PED-6143).
- KVM: TDX: handle vcpu migration over logical processor (jsc#PED-6143).
- KVM: TDX: initialize VM with TDX specific parameters (jsc#PED-6143).
- KVM: TDX: remove use of struct vcpu_vmx from posted_interrupt.c (jsc#PED-6143).
- KVM: TDX: restore debug store when TD exit (jsc#PED-6143).
- KVM: TDX: restore host xsave state when exit from the guest TD (jsc#PED-6143).
- KVM: TDX: restore user ret MSRs (jsc#PED-6143).
- KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (jsc#PED-6143).
- KVM: TDX: x86: Add ioctl to get TDX systemwide parameters (jsc#PED-6143).
- KVM: VMX: Move NMI/exception handler to common helper (jsc#PED-6143).
- KVM: VMX: Split out guts of EPT violation to common/exposed function (jsc#PED-6143).
- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).
- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).
- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).
- KVM: x86/mmu: Add a new is_private member for union kvm_mmu_page_role (jsc#PED-6143).
- KVM: x86/mmu: Add a private pointer to struct kvm_mmu_page (jsc#PED-6143).
- KVM: x86/mmu: Add address conversion functions for TDX shared bit of GPA (jsc#PED-6143).
- KVM: x86/mmu: Alloc TDP MMU roots while holding mmu_lock for read (jsc#PED-6143).
- KVM: x86/mmu: Allow passing '-1' for 'all' as_id for TDP MMU iterators (jsc#PED-6143).
- KVM: x86/mmu: Check for usable TDP MMU root while holding mmu_lock for read (jsc#PED-6143).
- KVM: x86/mmu: Disallow fast page fault on private GPA (jsc#PED-6143).
- KVM: x86/mmu: Do not do TLB flush when zappings SPTEs in invalid roots (jsc#PED-6143).
- KVM: x86/mmu: Do not enable page track for TD guest (jsc#PED-6143).
- KVM: x86/mmu: Free TDP MMU roots while holding mmy_lock for read (jsc#PED-6143).
- KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update (git-fixes).
- KVM: x86/mmu: Skip invalid TDP MMU roots when write-protecting SPTEs (jsc#PED-6143).
- KVM: x86/mmu: Skip invalid roots when zapping leaf SPTEs for GFN range (jsc#PED-6143).
- KVM: x86/mmu: Zap invalidated TDP MMU roots at 4KiB granularity (jsc#PED-6143).
- KVM: x86/tdp_mmu: Apply mmu notifier callback to only shared GPA (jsc#PED-6143).
- KVM: x86/tdp_mmu: Do not zap private pages for unsupported cases (jsc#PED-6143).
- KVM: x86/tdp_mmu: Fix to return original flush on unsupported cases (jsc#PED-6143).
- KVM: x86/tdp_mmu: Init role member of struct kvm_mmu_page at allocation (jsc#PED-6143).
- KVM: x86/tdp_mmu: Support TDX private mapping for TDP MMU (jsc#PED-6143).
- KVM: x86: Add a switch_db_regs flag to handle TDX's auto-switched behavior (jsc#PED-6143).
- KVM: x86: Add hooks in kvm_arch_vcpu_memory_mapping() (jsc#PED-6143).
- KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (jsc#PED-6143).
- KVM: x86: Assume timer IRQ was injected if APIC state is proteced (jsc#PED-6143).
- KVM: x86: Split core of hypercall emulation to helper function (jsc#PED-6143).
- KVM: x86: design documentation on TDX support of x86 KVM TDP MMU (jsc#PED-6143).
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).
- NFSD: Async COPY result needs to return a write verifier (git-fixes).
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).
- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).
- NFSD: Prevent a potential integer overflow (git-fixes).
- NFSD: Remove a never-true comparison (git-fixes).
- NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (git-fixes).
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).
- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).
- PCI/AER: Disable AER service on suspend (stable-fixes).
- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (stable-fixes).
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).
- PCI: Add T_PERST_CLK_US macro (git-fixes).
- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).
- PCI: Fix use-after-free of slot->bus on hot remove (stable-fixes).
- PCI: Use preserve_config in place of pci_flags (stable-fixes).
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).
- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).
- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).
- PCI: j721e: Add per platform maximum lane settings (stable-fixes).
- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).
- PCI: j721e: Add suspend and resume support (git-fixes).
- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).
- PCI: qcom: Add support for IPQ9574 (stable-fixes).
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).
- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).
- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)
- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)
- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)
- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)
- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)
- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)
- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)
- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)
- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)
- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)
- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)
- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)
- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)
- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)
- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)
- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)
- RDMA/rtrs: Ensure 'ib_sge list' is accessible (git-fixes)
- RDMA/uverbs: Prevent integer overflow issue (git-fixes)
- RFC: KVM: x86, TDX: Add check for KVM_SET_CPUID2 (jsc#PED-6143).
- RFC: KVM: x86: Add x86 callback to check cpuid (jsc#PED-6143).
- Revert 'block/mq-deadline: use correct way to throttling write requests' (bsc#1234146).
- Revert 'btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)'
- Revert 'igb: Disable threaded IRQ for igb_msix_other' (git-fixes).
- Revert 'mm, kmsan: fix infinite recursion due to RCU critical section' (bsc#1230413)
- Revert 'mm/sparsemem: fix race in accessing memory_section->usage' (bsc#1230413)
- Revert 'mm: prevent derefencing NULL ptr in pfn_section_valid()' (bsc#1230413)
- Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (git-fixes).
- Revert 'unicode: Do not special case ignorable code points' (stable-fixes).
- Revert 'arm64: Kconfig: Make SME depend on BROKEN for now'
- SUNRPC: make sure cache entry active before cache_show (git-fixes).
- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).
- USB: core: Disable LPM only for non-suspended ports (git-fixes).
- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).
- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).
- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).
- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
- USB: serial: option: add Neoway N723-EA support (stable-fixes).
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).
- USB: serial: option: add TCL IK512 MBIM & ECM (stable-fixes).
- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).
- USB: usblp: return error when setting unsupported protocol (git-fixes).
- VM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (jsc#PED-6143).
- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).
- accel/habanalabs: fix debugfs files permissions (stable-fixes).
- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).
- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).
- afs: Automatically generate trace tag enums (git-fixes).
- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).
- afs: Fix the maximum cell name length (git-fixes).
- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).
- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).
- arch: Remove cmpxchg_double (bsc#1220773).
- arch: consolidate arch_irq_work_raise prototypes (git-fixes).
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)
- arm64: Force position-independent veneers (git-fixes).
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes).
- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes)
- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes)
- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes)
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes)
- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).
- arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes)
- arm64: dts: imx93: add nvmem property for eqos (git-fixes)
- arm64: dts: imx93: add nvmem property for fec1 (git-fixes)
- arm64: dts: imx93: add ocotp node (git-fixes)
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes)
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes)
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes)
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes)
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes)
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes)
- arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes)
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes)
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes)
- arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes)
- arm64: dts: rockchip: remove num-slots property from (git-fixes)
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes)
- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)
- arm64: smccc: replace custom COUNT_ARGS() & CONCATENATE() (git-fixes)
- arm64: tegra: Move AGX Orin nodes to correct location (git-fixes)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).
- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).
- batman-adv: Do not send uninitialized TT changes (git-fixes).
- batman-adv: Remove uninitialized data in full table TT response (git-fixes).
- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).
- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).
- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).
- blk-throttle: fix lockdep warning of 'cgroup_mutex or RCU read lock required!' (bsc#1234140).
- blk-wbt-Fix-detection-of-dirty-throttled-tasks.patch: Update tags
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).
- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).
- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).
- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).
- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).
- block/mq-deadline: Fix the tag reservation code (bsc#1234148).
- block: Call .limit_depth() after .hctx has been set (bsc#1234148).
- block: Fix where bio IO priority gets set (bsc#1234145).
- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).
- block: update the stable_writes flag in bdev_add (bsc#1234141).
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)
- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).
- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).
- bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes)
- bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes)
- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).
- bpf: verifier: prevent userspace memory access (git-fixes).
- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).
- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).
- can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes).
- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).
- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).
- can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes).
- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes).
- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).
- can: j1939: fix error in J1939 documentation (stable-fixes).
- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).
- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).
- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes).
- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes).
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).
- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
- cleanup: Add conditional guard support (stable-fixes).
- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).
- cleanup: Remove address space of returned pointer (git-fixes).
- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).
- clocksource/drivers:sp804: Make user selectable (git-fixes).
- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).
- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).
- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).
- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).
- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).
- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).
- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).
- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).
- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).
- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).
- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).
- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).
- crypto: x86/sha256 - Add parentheses around macros' single arguments (stable-fixes).
- cyrpto/b128ops: Remove struct u128 (bsc#1220773).
- devlink: Fix length of eswitch inline-mode (git-fixes).
- dlm: fix possible lkb_resource null dereference (git-fixes).
- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).
- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).
- dma-fence: Fix reference leak on fence merge failure path (git-fixes).
- dma-fence: Use kernel's sort for merging fences (git-fixes).
- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).
- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).
- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).
- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).
- dmaengine: tegra: Return correct DMA status when paused (git-fixes).
- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).
- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).
- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).
- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).
- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).
- drm/amd/display: Fix DSC-re-computing (stable-fixes).
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).
- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).
- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).
- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).
- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).
- drm/amdgpu/pm: Remove gpu_od if it's an empty directory (stable-fixes).
- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).
- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).
- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).
- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).
- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).
- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).
- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).
- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).
- drm/amdgpu: do not access invalid sched (git-fixes).
- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).
- drm/amdgpu: fix usage slab after free (stable-fixes).
- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).
- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).
- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).
- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).
- drm/amdkfd: Use device based logging for errors (stable-fixes).
- drm/amdkfd: Use the correct wptr size (stable-fixes).
- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).
- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).
- drm/bridge: it6505: Enable module autoloading (stable-fixes).
- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).
- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).
- drm/display: Fix building with GCC 15 (stable-fixes).
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).
- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).
- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).
- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).
- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).
- drm/i915/dg1: Fix power gate sequence (git-fixes).
- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).
- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).
- drm/mcde: Enable module autoloading (stable-fixes).
- drm/mediatek: Add return value check when reading DPCD (git-fixes).
- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).
- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).
- drm/mediatek: Fix mode valid issue for dp (git-fixes).
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (git-fixes).
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).
- drm/mediatek: stop selecting foreign drivers (git-fixes).
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).
- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).
- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).
- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).
- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).
- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).
- drm/radeon: change rdev->ddev to rdev_to_drm(rdev) (stable-fixes).
- drm/sched: memset() 'job' in drm_sched_job_init() (stable-fixes).
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).
- drm/v3d: Enable Performance Counters before clearing them (git-fixes).
- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).
- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).
- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).
- drm/vmwgfx: Add new keep_resv BO param (git-fixes).
- drm: adv7511: Drop dsi single lane support (git-fixes).
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).
- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- erofs: avoid debugging output for (de)compressed data (git-fixes).
- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).
- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).
- exfat: fix the infinite loop in exfat_readdir() (git-fixes).
- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).
- ext4: add a new helper to check if es must be kept (bsc#1234170).
- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).
- ext4: add missed brelse in update_backups (bsc#1234171).
- ext4: allow for the last group to be marked as trimmed (bsc#1234278).
- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).
- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).
- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).
- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).
- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).
- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).
- ext4: check the extent status again before inserting delalloc block (bsc#1234186).
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).
- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).
- ext4: correct best extent lstart adjustment logic (bsc#1234179).
- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).
- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).
- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).
- ext4: correct the start block of counting reserved clusters (bsc#1234169).
- ext4: do not let fstrim block system suspend (https://bugzilla.kernel.org/show_bug.cgi?id=216322 bsc#1234166).
- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).
- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).
- ext4: factor out a common helper to query extent map (bsc#1234186).
- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix potential unnitialized variable (bsc#1234183).
- ext4: fix race between writepages and remount (bsc#1234168).
- ext4: fix rec_len verify error (bsc#1234167).
- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).
- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).
- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).
- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).
- ext4: make ext4_es_insert_extent() return void (bsc#1234170).
- ext4: make ext4_es_remove_extent() return void (bsc#1234170).
- ext4: make ext4_zeroout_es() return void (bsc#1234170).
- ext4: make sure allocate pending entry not fail (bsc#1234170).
- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).
- ext4: move 'ix' sanity check to corrent position (bsc#1234174).
- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).
- ext4: nested locking for xattr inode (bsc#1234189).
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).
- ext4: refactor ext4_da_map_blocks() (bsc#1234178).
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).
- ext4: remove the redundant folio_wait_stable() (bsc#1234184).
- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).
- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).
- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).
- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).
- filemap: Fix bounds checking in filemap_read() (bsc#1234209).
- filemap: add a per-mapping stable writes flag (bsc#1234141).
- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).
- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).
- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).
- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).
- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).
- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).
- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).
- gpio: grgpio: use a helper variable to store the address of ofdev->dev (stable-fixes).
- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
- hfsplus: do not query the device logical block size multiple times (git-fixes).
- hvc/xen: fix console unplug (git-fixes).
- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).
- hvc/xen: fix event channel handling for secondary consoles (git-fixes).
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).
- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).
- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).
- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).
- hwmon: (tmp513) Do not use 'proxy' headers (stable-fixes).
- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).
- hwmon: (tmp513) Fix division of negative numbers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).
- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).
- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).
- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).
- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
- i2c: i801: Add support for Intel Panther Lake (stable-fixes).
- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).
- i2c: microchip-core: actually use repeated sends (git-fixes).
- i2c: microchip-core: fix 'ghost' detections (git-fixes).
- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).
- i2c: pnx: Fix timeout in wait functions (git-fixes).
- i2c: rcar: fix NACK handling when being a target (git-fixes).
- i2c: riic: Always round-up when calculating bus period (git-fixes).
- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).
- i40e: Fix handling changed priv flags (git-fixes).
- i915/guc: Accumulate active runtime on gt reset (git-fixes).
- i915/guc: Ensure busyness counter increases motonically (git-fixes).
- i915/guc: Reset engine utilization buffer before registration (git-fixes).
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).
- ice: Unbind the workqueue (bsc#1234989)
- ice: change q_index variable type to s16 to store -1 value (git-fixes).
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).
- ice: fix PHY Clock Recovery availability check (git-fixes).
- idpf: add support for SW triggered interrupts (bsc#1235507).
- idpf: enable WB_ON_ITR (bsc#1235507).
- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).
- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).
- iio: adc: ad7124: Disable all channels at probe time (git-fixes).
- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).
- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).
- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).
- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).
- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).
- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).
- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).
- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).
- instrumentation: Wire up cmpxchg128() (bsc#1220773).
- io_uring/rw: avoid punting to io-wq directly (git-fixes).
- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).
- io_uring: Fix registered ring file refcount leak (git-fixes).
- io_uring: always lock __io_cqring_overflow_flush (git-fixes).
- io_uring: check if iowq is killed before queuing (git-fixes).
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).
- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).
- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).
- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).
- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).
- jffs2: Fix rtime decompressor (git-fixes).
- jffs2: Prevent rtime decompress memory corruption (git-fixes).
- jffs2: fix use of uninitialized variable (git-fixes).
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).
- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).
- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).
- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).
- jfs: xattr: check invalid xattr size more strictly (git-fixes).
- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).
- kABI: Fix kABI after TDX KVM backports (jsc#PED-6143).
- kABI: Restore exported __arm_smccc_sve_check (git-fixes)
- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)
- kasan: make report_lock a raw spinlock (git-fixes).
- kdb: Fix buffer overflow during tab-complete (bsc#1234652).
- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).
- kdb: Merge identical case statements in kdb_read() (bsc#1234657).
- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).
- kdb: Use format-strings rather than '\0' injection in kdb_read() (bsc#1234654).
- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).
- kdb: address -Wformat-security warnings (bsc#1234659).
- kgdb: Flush console before entering kgdb on panic (bsc#1234651).
- leds: class: Protect brightness_show() with led_cdev->led_access mutex (stable-fixes).
- lib/stackdepot: print disabled message only if truly disabled (git-fixes).
- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).
- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).
- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).
- mac80211: fix user-power when emulating chanctx (stable-fixes).
- mailbox: pcc: Add support for platform notification handling (stable-fixes).
- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).
- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).
- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).
- memory-failure: use a folio in me_huge_page() (git-fixes).
- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).
- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).
- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).
- mm/memory-failure: check the mapcount of the precise page (git-fixes).
- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).
- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).
- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).
- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).
- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).
- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).
- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).
- mm/migrate: putback split folios when numa hint migration fails (git-fixes).
- mm/migrate: split source folio if it is on deferred split list (git-fixes).
- mm/page_owner: remove free_ts from page_owner output (git-fixes).
- mm/readahead: do not allow order-1 folio (bsc#1234205).
- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).
- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).
- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).
- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).
- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).
- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).
- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).
- mmc: core: Further prevent card detect during shutdown (git-fixes).
- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).
- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).
- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).
- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).
- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).
- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).
- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).
- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).
- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).
- net/ipv6: release expired exception dst cached in socket (bsc#1216813).
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).
- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).
- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).
- net/qed: allow old cards not supporting 'num_images' to work (git-fixes).
- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).
- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).
- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).
- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).
- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
- netdevsim: copy addresses for both in and out paths (git-fixes).
- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).
- nfsd: make sure exp active before svc_export_show (git-fixes).
- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).
- nfsd: restore callback functionality for NFSv4.0 (git-fixes).
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).
- nilfs2: prevent use of deleted inode (git-fixes).
- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).
- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).
- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).
- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).
- nvme: apple: fix device reference counting (git-fixes).
- nvme: fix metadata handling in nvme-passthrough (git-fixes).
- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).
- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).
- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).
- of: address: Report error on resource bounds overflow (stable-fixes).
- parisc: Raise minimal GCC version (bsc#1220773).
- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).
- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).
- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).
- percpu: Wire up cmpxchg128 (bsc#1220773).
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).
- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).
- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).
- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).
- phy: usb: Toggle the PHY power during init (git-fixes).
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).
- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).
- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).
- pinmux: Use sequential access to access desc->pinmux data (stable-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).
- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).
- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).
- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).
- platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed (stable-fixes).
- power: supply: gpio-charger: Fix set charge current limits (git-fixes).
- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199).
- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).
- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).
- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199).
- powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199).
- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).
- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).
- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).
- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).
- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).
- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).
- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).
- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199).
- powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).
- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).
- quota: explicitly forbid quota files from being encrypted (bsc#1234196).
- quota: flush quota_release_work upon quota writeback (bsc#1234195).
- quota: simplify drop_dquot_ref() (bsc#1234197).
- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).
- regmap: Use correct format specifier for logging range errors (stable-fixes).
- regmap: detach regmap from dev on regmap_exit (git-fixes).
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).
- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).
- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).
- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).
- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).
- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).
- s390/facility: Disable compile time optimization for decompressor code (git-fixes).
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).
- s390/pageattr: Implement missing kernel_page_present() (git-fixes).
- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)
- scatterlist: fix incorrect func name in kernel-doc (git-fixes).
- sched/numa: fix memory leak due to the overwritten vma->numab_state (git fixes (sched/numa)).
- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).
- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).
- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).
- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).
- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).
- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).
- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).
- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).
- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).
- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).
- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).
- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).
- scsi: qla2xxx: Remove the unused 'del_list_entry' field in struct fc_port (bsc#1235406).
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).
- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).
- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).
- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).
- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).
- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).
- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).
- serial: 8250_fintek: Add support for F81216E (stable-fixes).
- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).
- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).
- serial: amba-pl011: Use port lock wrappers (stable-fixes).
- serial: amba-pl011: fix build regression (git-fixes).
- serial: do not use uninitialized value in uart_poll_init() (git-fixes).
- serial: imx: only set receiver level if it is zero (git-fixes).
- serial: imx: set receiver level before starting uart (git-fixes).
- serial: qcom-geni: Do not cancel/abort if we can't get the port lock (git-fixes).
- serial: qcom-geni: disable interrupts during console writes (git-fixes).
- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).
- serial: qcom-geni: fix console corruption (git-fixes).
- serial: qcom-geni: fix dma rx cancellation (git-fixes).
- serial: qcom-geni: fix false console tx restart (git-fixes).
- serial: qcom-geni: fix fifo polling timeout (git-fixes).
- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).
- serial: qcom-geni: fix polled console corruption (git-fixes).
- serial: qcom-geni: fix polled console initialisation (git-fixes).
- serial: qcom-geni: fix receiver enable (git-fixes).
- serial: qcom-geni: fix shutdown race (git-fixes).
- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).
- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).
- serial: qcom-geni: revert broken hibernation support (git-fixes).
- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).
- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).
- slub: Replace cmpxchg_double() (bsc#1220773).
- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).
- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]
- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).
- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).
- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).
- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).
- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).
- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).
- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).
- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).
- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).
- spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).
- staging: iio: ad9832: Correct phase range check (git-fixes).
- staging: iio: ad9834: Correct phase range check (git-fixes).
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).
- svcrdma: Address an integer overflow (git-fixes).
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).
- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).
- swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (git-fixes).
- tdx: following fixup for mapping_level porting conflict (jsc#PED-6143).
- tdx: init has_private_mem during tdx init (jsc#PED-6143).
- the end of (the first phase of) TDX KVM patch series (jsc#PED-6143).
- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).
- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).
- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).
- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
- tools: hv: change permissions of NetworkManager configuration file (git-fixes).
- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)
- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).
- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).
- types: Introduce [us]128 (bsc#1220773).
- ubifs: Correct the total block count by deducting journal reservation (git-fixes).
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).
- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).
- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).
- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).
- udf: refactor inode_bmap() to handle error (bsc#1234242).
- udf: refactor udf_current_aext() to handle error (bsc#1234240).
- udf: refactor udf_next_aext() to handle error (bsc#1234241).
- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).
- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).
- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).
- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).
- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).
- usb: dwc2: Fix HCD port connection race (git-fixes).
- usb: dwc2: Fix HCD resume (git-fixes).
- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (git-fixes).
- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).
- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).
- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).
- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).
- usb: fix reference leak in usb_new_device() (git-fixes).
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).
- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).
- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).
- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).
- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).
- usb: typec: use cleanup facility for 'altmodes_node' (stable-fixes).
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).
- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).
- vdpa: solidrun: Fix UB bug with devres (git-fixes).
- vfs: fix readahead(2) on block devices (bsc#1234201).
- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).
- watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes).
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).
- watchdog: rti: of: honor timeout-sec property (git-fixes).
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).
- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).
- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).
- wifi: ath5k: add PCI ID for SX76X (git-fixes).
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).
- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).
- wifi: cw1200: Fix potential NULL dereference (git-fixes).
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).
- wifi: mac80211: Add non-atomic station iterator (stable-fixes).
- wifi: mac80211: clean up 'ret' in sta_link_apply_parameters() (stable-fixes).
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).
- wifi: mac80211: fix station NSS capability initialization order (git-fixes).
- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).
- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).
- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).
- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).
- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).
- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).
- x86/kexec: Reset TDX private memory on platforms with TDX erratum (jsc#PED-6143).
- x86/kexec: do unconditional WBINVD for bare-metal in relocate_kernel() (jsc#PED-6143).
- x86/kexec: do unconditional WBINVD for bare-metal in stop_this_cpu() (jsc#PED-6143).
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
- x86/virt/tdx: Add TDX memory reset notifier to reset other private pages (jsc#PED-6143).
- x86/virt/tdx: Exclude memory region hole within CMR as TDMR's reserved area (jsc#PED-6143).
- x86/virt/tdx: Explicitly save/restore RBP for seamcall_saved_ret() (jsc#PED-6143).
- x86/virt/tdx: Get information about TDX module and TDX-capable memory (jsc#PED-6143).
- xfs: do not allocate COW extents when unsharing a hole (git-fixes).
- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).
- xfs: remove unknown compat feature check in superblock write validation (git-fixes).
- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).
- xfs: sb_spino_align is not verified (git-fixes).
- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).
- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).
- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).
Patchnames
SUSE-2025-289,SUSE-SLE-Module-Confidential-Computing-15-SP6-2025-289
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section-\u003eusage (bsc#1221326).\n- CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events (bsc#1220355).\n- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).\n- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).\n- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).\n- CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).\n- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).\n- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).\n- CVE-2024-44996: vsock: fix recursive -\u003erecvmsg calls (bsc#1230205).\n- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).\n- CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing driver (bsc#1230557).\n- CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).\n- CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).\n- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).\n- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).\n- CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).\n- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).\n- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).\n- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).\n- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).\n- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).\n- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).\n- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).\n- CVE-2024-50252: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (bsc#1233201).\n- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).\n- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).\n- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).\n- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).\n- CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).\n- CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).\n- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).\n- CVE-2024-53043: mctp i2c: handle NULL header address (bsc#1233523).\n- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).\n- CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).\n- CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).\n- CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).\n- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).\n- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).\n- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).\n- CVE-2024-53099: bpf: Check validity of link-\u003etype in bpf_link_show_fdinfo() (bsc#1233772).\n- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).\n- CVE-2024-53110: vp_vdpa: fix id_table array not null terminated error (bsc#1234085).\n- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).\n- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).\n- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).\n- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).\n- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).\n- CVE-2024-53121: net/mlx5: fs, lock FTE when checking if active (bsc#1234078).\n- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).\n- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).\n- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).\n- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).\n- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)\n- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).\n- CVE-2024-53138: net/mlx5e: kTLS, Fix incorrect page refcounting (bsc#1234223).\n- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).\n- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).\n- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).\n- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).\n- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).\n- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).\n- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).\n- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).\n- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).\n- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).\n- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).\n- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).\n- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).\n- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).\n- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).\n- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).\n- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).\n- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).\n- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).\n- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).\n- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).\n- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).\n- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).\n- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).\n- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).\n- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object-\u003efile (bsc#1234912).\n- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).\n- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).\n- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).\n- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).\n- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).\n- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).\n- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).\n- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).\n- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).\n- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).\n- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).\n- CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).\n- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).\n- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).\n- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).\n- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).\n- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).\n- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).\n- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).\n- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).\n- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).\n- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).\n- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).\n- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).\n- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).\n- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).\n- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).\n- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).\n- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).\n- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).\n- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).\n- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).\n- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).\n- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).\n- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).\n- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).\n- CVE-2024-56729: smb: Initialize cfid-\u003etcon before performing network ops (bsc#1235503).\n- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).\n- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).\n- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).\n- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).\n- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).\n- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).\n- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).\n- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).\n- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).\n- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).\n- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).\n- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).\n- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).\n- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).\n- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).\n- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).\n- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).\n- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).\n- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).\n- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).\n- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before \u0027getting\u0027 registers (bsc#1236106).\n- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).\n- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).\n- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).\n- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).\n\nThe following non-security bugs were fixed:\n\n- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).\n- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).\n- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).\n- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).\n- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).\n- ACPI: resource: Fix memory resource type union access (git-fixes).\n- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).\n- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).\n- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).\n- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).\n- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).\n- ALSA: hda/conexant: fix Z60MR100 startup pop issue (stable-fixes).\n- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).\n- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).\n- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).\n- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).\n- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).\n- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).\n- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (stable-fixes).\n- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).\n- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).\n- ALSA: line6: Fix racy access to midibuf (stable-fixes).\n- ALSA: seq: Check UMP support for midi_version change (git-fixes).\n- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).\n- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).\n- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).\n- ALSA: seq: ump: Use guard() for locking (stable-fixes).\n- ALSA: ump: Use guard() for locking (stable-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).\n- ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).\n- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).\n- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).\n- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).\n- ALSA: usb-audio: add mixer mapping for Corsair HS80 (stable-fixes).\n- ASoC: Intel: avs: da7219: Remove suspend_pre() and resume_post() (stable-fixes).\n- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).\n- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).\n- ASoC: SOF: Remove libraries from topology lookups (git-fixes).\n- ASoC: SOF: ipc3-topology: fix resource leaks in sof_ipc3_widget_setup_comp_dai() (git-fixes).\n- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).\n- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).\n- ASoC: amd: yc: Fix the wrong return value (git-fixes).\n- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).\n- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).\n- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).\n- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).\n- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).\n- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).\n- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).\n- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).\n- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec (git-fixes).\n- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).\n- ASoC: nau8822: Lower debug print priority (stable-fixes).\n- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).\n- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).\n- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).\n- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).\n- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).\n- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).\n- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).\n- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).\n- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).\n- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test (bsc#1230557)\n- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).\n- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).\n- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).\n- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).\n- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).\n- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).\n- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).\n- Bluetooth: iso: Fix recursive locking warning (git-fixes).\n- Disable ceph (jsc#PED-7242)\n- Documentation/virt/kvm: Document on Trust Domain Extensions(TDX) (jsc#PED-6143).\n- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).\n- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).\n- Drop uvcvideo fix due to regression (bsc#1235894)\n- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).\n- HID: wacom: fix when get product name maybe null pointer (git-fixes).\n- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).\n- KVM: Fix conflict of IOCTL definition of KVM_MEMORY_MAPPING (jsc#PED-6143).\n- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).\n- KVM: TDX: Add KVM Exit for TDX TDG.VP.VMCALL (jsc#PED-6143).\n- KVM: TDX: Add TSX_CTRL msr into uret_msrs list (jsc#PED-6143).\n- KVM: TDX: Add a method to ignore dirty logging (jsc#PED-6143).\n- KVM: TDX: Add a method to ignore for TDX to ignore hypercall patch (jsc#PED-6143).\n- KVM: TDX: Add a place holder for handler of TDX hypercalls (TDG.VP.VMCALL) (jsc#PED-6143).\n- KVM: TDX: Add a place holder to handle TDX VM exit (jsc#PED-6143).\n- KVM: TDX: Add accessors VMX VMCS helpers (jsc#PED-6143).\n- KVM: TDX: Add helper function to read TDX metadata in array (jsc#PED-6143).\n- KVM: TDX: Add helper functions to allocate/free TDX private host key id (jsc#PED-6143).\n- KVM: TDX: Add is_private check for mmu_alloc_root (jsc#PED-6143).\n- KVM: TDX: Add load_mmu_pgd method for TDX (jsc#PED-6143).\n- KVM: TDX: Add methods to ignore VMX preemption timer (jsc#PED-6143).\n- KVM: TDX: Add methods to ignore accesses to TSC (jsc#PED-6143).\n- KVM: TDX: Add methods to ignore guest instruction emulation (jsc#PED-6143).\n- KVM: TDX: Add methods to ignore virtual apic related operation (jsc#PED-6143).\n- KVM: TDX: Add support for find pending IRQ in a protected local APIC (jsc#PED-6143).\n- KVM: TDX: Complete interrupts after tdexit (jsc#PED-6143).\n- KVM: TDX: Create initial guest memory (jsc#PED-6143).\n- KVM: TDX: Do TDX specific vcpu initialization (jsc#PED-6143).\n- KVM: TDX: Do not use NO_RBP_MOD for backward compatibility (jsc#PED-6143).\n- KVM: TDX: Emulate Xen MTRR disablement (jsc#PED-6143).\n- KVM: TDX: Extend memory measurement with initial guest memory (jsc#PED-6143).\n- KVM: TDX: Finalize VM initialization (jsc#PED-6143).\n- KVM: TDX: Fix incompatibility with QEMU definition (jsc#PED-6143).\n- KVM: TDX: Fix is_private for page fault handler (jsc#PED-6143).\n- KVM: TDX: Get system-wide info about TDX module on initialization (jsc#PED-6143).\n- KVM: TDX: Handle EXIT_REASON_OTHER_SMI with MSMI (jsc#PED-6143).\n- KVM: TDX: Handle MSR IA32_FEAT_CTL MSR and IA32_MCG_EXT_CTL (jsc#PED-6143).\n- KVM: TDX: Handle MSR MTRRCap and MTRRDefType access (jsc#PED-6143).\n- KVM: TDX: Handle TDG.VP.VMCALL\u0026lt;GetTdVmCallInfo\u003e hypercall (jsc#PED-6143).\n- KVM: TDX: Handle TDX PV CPUID hypercall (jsc#PED-6143).\n- KVM: TDX: Handle TDX PV HLT hypercall (jsc#PED-6143).\n- KVM: TDX: Handle TDX PV MMIO hypercall (jsc#PED-6143).\n- KVM: TDX: Handle TDX PV port io hypercall (jsc#PED-6143).\n- KVM: TDX: Handle TDX PV rdmsr/wrmsr hypercall (jsc#PED-6143).\n- KVM: TDX: Handle vmentry failure for INTEL TD guest (jsc#PED-6143).\n- KVM: TDX: Ignore setting up mce (jsc#PED-6143).\n- KVM: TDX: Implement TDX vcpu enter/exit path (jsc#PED-6143).\n- KVM: TDX: Implement callbacks for MSR operations for TDX (jsc#PED-6143).\n- KVM: TDX: Implement interrupt injection (jsc#PED-6143).\n- KVM: TDX: Implement methods to inject NMI (jsc#PED-6143).\n- KVM: TDX: Inhibit APICv for TDX guest (jsc#PED-6143).\n- KVM: TDX: MTRR: implement get_mt_mask() for TDX (jsc#PED-6143).\n- KVM: TDX: Make KVM_CAP_MAX_VCPUS backend specific (jsc#PED-6143).\n- KVM: TDX: Make pmu_intel.c ignore guest TD case (jsc#PED-6143).\n- KVM: TDX: Refuse to unplug the last cpu on the package (jsc#PED-6143).\n- KVM: TDX: Require TDP MMU and mmio caching for TDX (jsc#PED-6143).\n- KVM: TDX: Retry seamcall when TDX_OPERAND_BUSY with operand SEPT (jsc#PED-6143).\n- KVM: TDX: Return -EINTR for KVM_MEMORY_MAPPING when signal pending (jsc#PED-6143).\n- KVM: TDX: Silently discard SMI request (jsc#PED-6143).\n- KVM: TDX: Silently ignore INIT/SIPI (jsc#PED-6143).\n- KVM: TDX: TDP MMU TDX support (jsc#PED-6143).\n- KVM: TDX: create/destroy VM structure (jsc#PED-6143).\n- KVM: TDX: create/free TDX vcpu structure (jsc#PED-6143).\n- KVM: TDX: handle EXCEPTION_NMI and EXTERNAL_INTERRUPT (jsc#PED-6143).\n- KVM: TDX: handle EXIT_REASON_OTHER_SMI (jsc#PED-6143).\n- KVM: TDX: handle KVM hypercall with TDG.VP.VMCALL (jsc#PED-6143).\n- KVM: TDX: handle ept violation/misconfig exit (jsc#PED-6143).\n- KVM: TDX: handle vcpu migration over logical processor (jsc#PED-6143).\n- KVM: TDX: initialize VM with TDX specific parameters (jsc#PED-6143).\n- KVM: TDX: remove use of struct vcpu_vmx from posted_interrupt.c (jsc#PED-6143).\n- KVM: TDX: restore debug store when TD exit (jsc#PED-6143).\n- KVM: TDX: restore host xsave state when exit from the guest TD (jsc#PED-6143).\n- KVM: TDX: restore user ret MSRs (jsc#PED-6143).\n- KVM: TDX: vcpu_run: save/restore host state(host kernel gs) (jsc#PED-6143).\n- KVM: TDX: x86: Add ioctl to get TDX systemwide parameters (jsc#PED-6143).\n- KVM: VMX: Move NMI/exception handler to common helper (jsc#PED-6143).\n- KVM: VMX: Split out guts of EPT violation to common/exposed function (jsc#PED-6143).\n- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).\n- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).\n- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).\n- KVM: x86/mmu: Add a new is_private member for union kvm_mmu_page_role (jsc#PED-6143).\n- KVM: x86/mmu: Add a private pointer to struct kvm_mmu_page (jsc#PED-6143).\n- KVM: x86/mmu: Add address conversion functions for TDX shared bit of GPA (jsc#PED-6143).\n- KVM: x86/mmu: Alloc TDP MMU roots while holding mmu_lock for read (jsc#PED-6143).\n- KVM: x86/mmu: Allow passing \u0027-1\u0027 for \u0027all\u0027 as_id for TDP MMU iterators (jsc#PED-6143).\n- KVM: x86/mmu: Check for usable TDP MMU root while holding mmu_lock for read (jsc#PED-6143).\n- KVM: x86/mmu: Disallow fast page fault on private GPA (jsc#PED-6143).\n- KVM: x86/mmu: Do not do TLB flush when zappings SPTEs in invalid roots (jsc#PED-6143).\n- KVM: x86/mmu: Do not enable page track for TD guest (jsc#PED-6143).\n- KVM: x86/mmu: Free TDP MMU roots while holding mmy_lock for read (jsc#PED-6143).\n- KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update (git-fixes).\n- KVM: x86/mmu: Skip invalid TDP MMU roots when write-protecting SPTEs (jsc#PED-6143).\n- KVM: x86/mmu: Skip invalid roots when zapping leaf SPTEs for GFN range (jsc#PED-6143).\n- KVM: x86/mmu: Zap invalidated TDP MMU roots at 4KiB granularity (jsc#PED-6143).\n- KVM: x86/tdp_mmu: Apply mmu notifier callback to only shared GPA (jsc#PED-6143).\n- KVM: x86/tdp_mmu: Do not zap private pages for unsupported cases (jsc#PED-6143).\n- KVM: x86/tdp_mmu: Fix to return original flush on unsupported cases (jsc#PED-6143).\n- KVM: x86/tdp_mmu: Init role member of struct kvm_mmu_page at allocation (jsc#PED-6143).\n- KVM: x86/tdp_mmu: Support TDX private mapping for TDP MMU (jsc#PED-6143).\n- KVM: x86: Add a switch_db_regs flag to handle TDX\u0027s auto-switched behavior (jsc#PED-6143).\n- KVM: x86: Add hooks in kvm_arch_vcpu_memory_mapping() (jsc#PED-6143).\n- KVM: x86: Allow to update cached values in kvm_user_return_msrs w/o wrmsr (jsc#PED-6143).\n- KVM: x86: Assume timer IRQ was injected if APIC state is proteced (jsc#PED-6143).\n- KVM: x86: Split core of hypercall emulation to helper function (jsc#PED-6143).\n- KVM: x86: design documentation on TDX support of x86 KVM TDP MMU (jsc#PED-6143).\n- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).\n- NFSD: Async COPY result needs to return a write verifier (git-fixes).\n- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).\n- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).\n- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).\n- NFSD: Prevent a potential integer overflow (git-fixes).\n- NFSD: Remove a never-true comparison (git-fixes).\n- NFSD: initialize copy-\u003ecp_clp early in nfsd4_copy for use by trace point (git-fixes).\n- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).\n- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).\n- PCI/AER: Disable AER service on suspend (stable-fixes).\n- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).\n- PCI: Add \u0027reset_subordinate\u0027 to reset hierarchy below bridge (stable-fixes).\n- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).\n- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).\n- PCI: Add T_PERST_CLK_US macro (git-fixes).\n- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).\n- PCI: Fix use-after-free of slot-\u003ebus on hot remove (stable-fixes).\n- PCI: Use preserve_config in place of pci_flags (stable-fixes).\n- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).\n- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).\n- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).\n- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).\n- PCI: j721e: Add per platform maximum lane settings (stable-fixes).\n- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).\n- PCI: j721e: Add suspend and resume support (git-fixes).\n- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).\n- PCI: qcom: Add support for IPQ9574 (stable-fixes).\n- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).\n- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).\n- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).\n- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)\n- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)\n- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)\n- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)\n- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)\n- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)\n- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)\n- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)\n- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)\n- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)\n- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)\n- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)\n- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)\n- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)\n- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)\n- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)\n- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)\n- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)\n- RDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible (git-fixes)\n- RDMA/uverbs: Prevent integer overflow issue (git-fixes)\n- RFC: KVM: x86, TDX: Add check for KVM_SET_CPUID2 (jsc#PED-6143).\n- RFC: KVM: x86: Add x86 callback to check cpuid (jsc#PED-6143).\n- Revert \u0027block/mq-deadline: use correct way to throttling write requests\u0027 (bsc#1234146).\n- Revert \u0027btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\u0027\n- Revert \u0027igb: Disable threaded IRQ for igb_msix_other\u0027 (git-fixes).\n- Revert \u0027mm, kmsan: fix infinite recursion due to RCU critical section\u0027 (bsc#1230413)\n- Revert \u0027mm/sparsemem: fix race in accessing memory_section-\u003eusage\u0027 (bsc#1230413)\n- Revert \u0027mm: prevent derefencing NULL ptr in pfn_section_valid()\u0027 (bsc#1230413)\n- Revert \u0027mtd: spi-nor: core: replace dummy buswidth from addr to data\u0027 (git-fixes).\n- Revert \u0027unicode: Do not special case ignorable code points\u0027 (stable-fixes).\n- Revert \u0027arm64: Kconfig: Make SME depend on BROKEN for now\u0027\n- SUNRPC: make sure cache entry active before cache_show (git-fixes).\n- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).\n- USB: core: Disable LPM only for non-suspended ports (git-fixes).\n- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).\n- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).\n- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).\n- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).\n- USB: serial: option: add Neoway N723-EA support (stable-fixes).\n- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).\n- USB: serial: option: add TCL IK512 MBIM \u0026 ECM (stable-fixes).\n- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).\n- USB: usblp: return error when setting unsupported protocol (git-fixes).\n- VM: TDX: Add place holder for TDX VM specific mem_enc_op ioctl (jsc#PED-6143).\n- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).\n- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).\n- accel/habanalabs: fix debugfs files permissions (stable-fixes).\n- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).\n- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).\n- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).\n- afs: Automatically generate trace tag enums (git-fixes).\n- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).\n- afs: Fix the maximum cell name length (git-fixes).\n- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).\n- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).\n- arch: Remove cmpxchg_double (bsc#1220773).\n- arch: consolidate arch_irq_work_raise prototypes (git-fixes).\n- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)\n- arm64: Force position-independent veneers (git-fixes).\n- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes).\n- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes)\n- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay (git-fixes)\n- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs (git-fixes)\n- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).\n- arm64: dts: imx8qxp: Add VPU subsystem file (git-fixes)\n- arm64: dts: imx93: add nvmem property for eqos (git-fixes)\n- arm64: dts: imx93: add nvmem property for fec1 (git-fixes)\n- arm64: dts: imx93: add ocotp node (git-fixes)\n- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus (git-fixes)\n- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes)\n- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo (git-fixes)\n- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on (git-fixes)\n- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 (git-fixes)\n- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node (git-fixes)\n- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma (git-fixes)\n- arm64: dts: rockchip: Remove hdmi\u0027s 2nd interrupt on rk3328 (git-fixes)\n- arm64: dts: rockchip: Remove undocumented supports-emmc property (git-fixes)\n- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).\n- arm64: dts: rockchip: fix i2c2 pinctrl-names property on (git-fixes)\n- arm64: dts: rockchip: remove num-slots property from (git-fixes)\n- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone (git-fixes)\n- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (git-fixes)\n- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).\n- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (git-fixes)\n- arm64: smccc: replace custom COUNT_ARGS() \u0026 CONCATENATE() (git-fixes)\n- arm64: tegra: Move AGX Orin nodes to correct location (git-fixes)\n- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (git-fixes)\n- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).\n- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).\n- batman-adv: Do not send uninitialized TT changes (git-fixes).\n- batman-adv: Remove uninitialized data in full table TT response (git-fixes).\n- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).\n- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).\n- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).\n- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).\n- blk-throttle: fix lockdep warning of \u0027cgroup_mutex or RCU read lock required!\u0027 (bsc#1234140).\n- blk-wbt-Fix-detection-of-dirty-throttled-tasks.patch: Update tags\n- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).\n- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).\n- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).\n- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).\n- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).\n- block/mq-deadline: Fix the tag reservation code (bsc#1234148).\n- block: Call .limit_depth() after .hctx has been set (bsc#1234148).\n- block: Fix where bio IO priority gets set (bsc#1234145).\n- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).\n- block: update the stable_writes flag in bdev_add (bsc#1234141).\n- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)\n- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).\n- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).\n- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).\n- bpf, arm64: Fix address emission with tag-based KASAN enabled (git-fixes)\n- bpf, arm64: Remove garbage frame for struct_ops trampoline (git-fixes)\n- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).\n- bpf: verifier: prevent userspace memory access (git-fixes).\n- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).\n- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (git-fixes).\n- can: dev: can_set_termination(): allow sleeping GPIOs (git-fixes).\n- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).\n- can: hi311x: hi3110_can_ist(): fix potential use-after-free (git-fixes).\n- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics (git-fixes).\n- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: j1939: fix error in J1939 documentation (stable-fixes).\n- can: j1939: j1939_session_new(): fix skb reference counting (git-fixes).\n- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6 (git-fixes).\n- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics (git-fixes).\n- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (git-fixes).\n- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (git-fixes).\n- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).\n- cleanup: Add conditional guard support (stable-fixes).\n- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).\n- cleanup: Remove address space of returned pointer (git-fixes).\n- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).\n- clocksource/drivers:sp804: Make user selectable (git-fixes).\n- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).\n- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).\n- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).\n- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).\n- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).\n- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).\n- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).\n- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).\n- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).\n- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).\n- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).\n- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).\n- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).\n- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).\n- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).\n- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).\n- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).\n- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).\n- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).\n- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).\n- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).\n- crypto: x86/sha256 - Add parentheses around macros\u0027 single arguments (stable-fixes).\n- cyrpto/b128ops: Remove struct u128 (bsc#1220773).\n- devlink: Fix length of eswitch inline-mode (git-fixes).\n- dlm: fix possible lkb_resource null dereference (git-fixes).\n- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).\n- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).\n- dma-fence: Fix reference leak on fence merge failure path (git-fixes).\n- dma-fence: Use kernel\u0027s sort for merging fences (git-fixes).\n- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).\n- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).\n- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).\n- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).\n- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).\n- dmaengine: tegra: Return correct DMA status when paused (git-fixes).\n- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).\n- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).\n- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).\n- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).\n- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).\n- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).\n- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).\n- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).\n- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).\n- drm/amd/display: Fix DSC-re-computing (stable-fixes).\n- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).\n- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).\n- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).\n- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).\n- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).\n- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).\n- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).\n- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).\n- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).\n- drm/amdgpu/pm: Remove gpu_od if it\u0027s an empty directory (stable-fixes).\n- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).\n- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).\n- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).\n- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).\n- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).\n- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).\n- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).\n- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).\n- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).\n- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).\n- drm/amdgpu: do not access invalid sched (git-fixes).\n- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).\n- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).\n- drm/amdgpu: fix usage slab after free (stable-fixes).\n- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).\n- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).\n- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).\n- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).\n- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).\n- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).\n- drm/amdkfd: Use device based logging for errors (stable-fixes).\n- drm/amdkfd: Use the correct wptr size (stable-fixes).\n- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).\n- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).\n- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).\n- drm/bridge: it6505: Enable module autoloading (stable-fixes).\n- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).\n- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).\n- drm/display: Fix building with GCC 15 (stable-fixes).\n- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).\n- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).\n- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).\n- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).\n- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).\n- drm/i915/dg1: Fix power gate sequence (git-fixes).\n- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).\n- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).\n- drm/mcde: Enable module autoloading (stable-fixes).\n- drm/mediatek: Add return value check when reading DPCD (git-fixes).\n- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).\n- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).\n- drm/mediatek: Fix mode valid issue for dp (git-fixes).\n- drm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err (git-fixes).\n- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).\n- drm/mediatek: stop selecting foreign drivers (git-fixes).\n- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).\n- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).\n- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).\n- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).\n- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).\n- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).\n- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).\n- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).\n- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).\n- drm/radeon: change rdev-\u003eddev to rdev_to_drm(rdev) (stable-fixes).\n- drm/sched: memset() \u0027job\u0027 in drm_sched_job_init() (stable-fixes).\n- drm/sti: Add __iomem for mixer_dbg_mxn\u0027s parameter (git-fixes).\n- drm/v3d: Enable Performance Counters before clearing them (git-fixes).\n- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).\n- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).\n- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).\n- drm/vmwgfx: Add new keep_resv BO param (git-fixes).\n- drm: adv7511: Drop dsi single lane support (git-fixes).\n- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).\n- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- erofs: avoid debugging output for (de)compressed data (git-fixes).\n- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).\n- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).\n- exfat: fix the infinite loop in exfat_readdir() (git-fixes).\n- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).\n- ext4: add a new helper to check if es must be kept (bsc#1234170).\n- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).\n- ext4: add missed brelse in update_backups (bsc#1234171).\n- ext4: allow for the last group to be marked as trimmed (bsc#1234278).\n- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).\n- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).\n- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).\n- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).\n- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).\n- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).\n- ext4: check the extent status again before inserting delalloc block (bsc#1234186).\n- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).\n- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).\n- ext4: correct best extent lstart adjustment logic (bsc#1234179).\n- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).\n- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).\n- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).\n- ext4: correct the start block of counting reserved clusters (bsc#1234169).\n- ext4: do not let fstrim block system suspend (https://bugzilla.kernel.org/show_bug.cgi?id=216322 bsc#1234166).\n- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).\n- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).\n- ext4: factor out a common helper to query extent map (bsc#1234186).\n- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).\n- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).\n- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).\n- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).\n- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).\n- ext4: fix potential unnitialized variable (bsc#1234183).\n- ext4: fix race between writepages and remount (bsc#1234168).\n- ext4: fix rec_len verify error (bsc#1234167).\n- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).\n- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).\n- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).\n- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).\n- ext4: make ext4_es_insert_extent() return void (bsc#1234170).\n- ext4: make ext4_es_remove_extent() return void (bsc#1234170).\n- ext4: make ext4_zeroout_es() return void (bsc#1234170).\n- ext4: make sure allocate pending entry not fail (bsc#1234170).\n- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).\n- ext4: move \u0027ix\u0027 sanity check to corrent position (bsc#1234174).\n- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).\n- ext4: nested locking for xattr inode (bsc#1234189).\n- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).\n- ext4: refactor ext4_da_map_blocks() (bsc#1234178).\n- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).\n- ext4: remove the redundant folio_wait_stable() (bsc#1234184).\n- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).\n- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).\n- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).\n- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).\n- filemap: Fix bounds checking in filemap_read() (bsc#1234209).\n- filemap: add a per-mapping stable writes flag (bsc#1234141).\n- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).\n- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).\n- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).\n- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).\n- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).\n- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).\n- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).\n- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).\n- gpio: grgpio: use a helper variable to store the address of ofdev-\u003edev (stable-fixes).\n- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).\n- hfsplus: do not query the device logical block size multiple times (git-fixes).\n- hvc/xen: fix console unplug (git-fixes).\n- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).\n- hvc/xen: fix event channel handling for secondary consoles (git-fixes).\n- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).\n- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).\n- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).\n- hwmon: (tmp513) Do not use \u0027proxy\u0027 headers (stable-fixes).\n- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).\n- hwmon: (tmp513) Fix division of negative numbers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).\n- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).\n- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).\n- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).\n- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).\n- i2c: i801: Add support for Intel Panther Lake (stable-fixes).\n- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).\n- i2c: microchip-core: actually use repeated sends (git-fixes).\n- i2c: microchip-core: fix \u0027ghost\u0027 detections (git-fixes).\n- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).\n- i2c: pnx: Fix timeout in wait functions (git-fixes).\n- i2c: rcar: fix NACK handling when being a target (git-fixes).\n- i2c: riic: Always round-up when calculating bus period (git-fixes).\n- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).\n- i40e: Fix handling changed priv flags (git-fixes).\n- i915/guc: Accumulate active runtime on gt reset (git-fixes).\n- i915/guc: Ensure busyness counter increases motonically (git-fixes).\n- i915/guc: Reset engine utilization buffer before registration (git-fixes).\n- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (git-fixes).\n- ice: Unbind the workqueue (bsc#1234989)\n- ice: change q_index variable type to s16 to store -1 value (git-fixes).\n- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).\n- ice: fix PHY Clock Recovery availability check (git-fixes).\n- idpf: add support for SW triggered interrupts (bsc#1235507).\n- idpf: enable WB_ON_ITR (bsc#1235507).\n- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).\n- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).\n- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).\n- iio: adc: ad7124: Disable all channels at probe time (git-fixes).\n- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).\n- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).\n- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).\n- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).\n- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).\n- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).\n- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).\n- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).\n- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).\n- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).\n- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).\n- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).\n- instrumentation: Wire up cmpxchg128() (bsc#1220773).\n- io_uring/rw: avoid punting to io-wq directly (git-fixes).\n- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).\n- io_uring: Fix registered ring file refcount leak (git-fixes).\n- io_uring: always lock __io_cqring_overflow_flush (git-fixes).\n- io_uring: check if iowq is killed before queuing (git-fixes).\n- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).\n- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).\n- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).\n- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).\n- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).\n- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).\n- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).\n- jffs2: Fix rtime decompressor (git-fixes).\n- jffs2: Prevent rtime decompress memory corruption (git-fixes).\n- jffs2: fix use of uninitialized variable (git-fixes).\n- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).\n- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).\n- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).\n- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).\n- jfs: xattr: check invalid xattr size more strictly (git-fixes).\n- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).\n- kABI: Fix kABI after TDX KVM backports (jsc#PED-6143).\n- kABI: Restore exported __arm_smccc_sve_check (git-fixes)\n- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)\n- kasan: make report_lock a raw spinlock (git-fixes).\n- kdb: Fix buffer overflow during tab-complete (bsc#1234652).\n- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).\n- kdb: Merge identical case statements in kdb_read() (bsc#1234657).\n- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).\n- kdb: Use format-strings rather than \u0027\\0\u0027 injection in kdb_read() (bsc#1234654).\n- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).\n- kdb: address -Wformat-security warnings (bsc#1234659).\n- kgdb: Flush console before entering kgdb on panic (bsc#1234651).\n- leds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex (stable-fixes).\n- lib/stackdepot: print disabled message only if truly disabled (git-fixes).\n- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).\n- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).\n- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).\n- mac80211: fix user-power when emulating chanctx (stable-fixes).\n- mailbox: pcc: Add support for platform notification handling (stable-fixes).\n- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).\n- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).\n- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).\n- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).\n- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).\n- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).\n- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).\n- memory-failure: use a folio in me_huge_page() (git-fixes).\n- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).\n- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).\n- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).\n- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).\n- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).\n- mm/memory-failure: check the mapcount of the precise page (git-fixes).\n- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).\n- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).\n- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).\n- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).\n- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).\n- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).\n- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).\n- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).\n- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).\n- mm/migrate: putback split folios when numa hint migration fails (git-fixes).\n- mm/migrate: split source folio if it is on deferred split list (git-fixes).\n- mm/page_owner: remove free_ts from page_owner output (git-fixes).\n- mm/readahead: do not allow order-1 folio (bsc#1234205).\n- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).\n- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).\n- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).\n- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).\n- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).\n- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).\n- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).\n- mmc: core: Further prevent card detect during shutdown (git-fixes).\n- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).\n- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).\n- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).\n- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).\n- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).\n- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).\n- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).\n- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).\n- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).\n- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).\n- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).\n- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).\n- net/ipv6: release expired exception dst cached in socket (bsc#1216813).\n- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).\n- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).\n- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).\n- net/qed: allow old cards not supporting \u0027num_images\u0027 to work (git-fixes).\n- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).\n- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).\n- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).\n- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).\n- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).\n- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).\n- netdevsim: copy addresses for both in and out paths (git-fixes).\n- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).\n- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).\n- nfsd: make sure exp active before svc_export_show (git-fixes).\n- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).\n- nfsd: restore callback functionality for NFSv4.0 (git-fixes).\n- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).\n- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).\n- nilfs2: prevent use of deleted inode (git-fixes).\n- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).\n- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).\n- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).\n- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: apple: fix device reference counting (git-fixes).\n- nvme: fix metadata handling in nvme-passthrough (git-fixes).\n- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).\n- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).\n- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).\n- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).\n- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).\n- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).\n- of: address: Report error on resource bounds overflow (stable-fixes).\n- parisc: Raise minimal GCC version (bsc#1220773).\n- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).\n- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).\n- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).\n- percpu: Wire up cmpxchg128 (bsc#1220773).\n- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).\n- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).\n- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).\n- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).\n- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).\n- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).\n- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).\n- phy: usb: Toggle the PHY power during init (git-fixes).\n- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).\n- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).\n- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).\n- pinmux: Use sequential access to access desc-\u003epinmux data (stable-fixes).\n- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).\n- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).\n- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).\n- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).\n- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).\n- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).\n- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).\n- platform/x86: thinkpad_acpi: Fix for ThinkPad\u0027s with ECFW showing incorrect fan speed (stable-fixes).\n- power: supply: gpio-charger: Fix set charge current limits (git-fixes).\n- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (bsc#1215199).\n- powerpc/atomic: Use YZ constraints for DS-form instructions (bsc#1194869).\n- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).\n- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() (bsc#1215199).\n- powerpc/fadump: Refactor and prepare fadump_cma_init for late init (bsc#1215199).\n- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).\n- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).\n- powerpc/kexec: Fix return of uninitialized variable (bsc#1194869).\n- powerpc/mm/fault: Fix kfence page fault reporting (bsc#1194869).\n- powerpc/mm: Fix boot crash with FLATMEM (bsc#1194869).\n- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (bsc#1194869).\n- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).\n- powerpc/powernv: Free name on error in opal_event_init() (bsc#1194869).\n- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).\n- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).\n- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (bsc#1194869).\n- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (bsc#1194869).\n- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct (bsc#1215199).\n- powerpc/vdso: Inconditionally use CFUNC macro (bsc#1215199).\n- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).\n- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).\n- quota: explicitly forbid quota files from being encrypted (bsc#1234196).\n- quota: flush quota_release_work upon quota writeback (bsc#1234195).\n- quota: simplify drop_dquot_ref() (bsc#1234197).\n- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).\n- regmap: Use correct format specifier for logging range errors (stable-fixes).\n- regmap: detach regmap from dev on regmap_exit (git-fixes).\n- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).\n- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).\n- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).\n- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).\n- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).\n- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).\n- s390/facility: Disable compile time optimization for decompressor code (git-fixes).\n- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).\n- s390/pageattr: Implement missing kernel_page_present() (git-fixes).\n- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)\n- scatterlist: fix incorrect func name in kernel-doc (git-fixes).\n- sched/numa: fix memory leak due to the overwritten vma-\u003enumab_state (git fixes (sched/numa)).\n- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).\n- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).\n- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).\n- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).\n- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).\n- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).\n- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).\n- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).\n- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).\n- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).\n- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).\n- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).\n- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).\n- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).\n- scsi: qla2xxx: Remove the unused \u0027del_list_entry\u0027 field in struct fc_port (bsc#1235406).\n- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).\n- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).\n- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).\n- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).\n- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).\n- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).\n- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).\n- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).\n- serial: 8250_fintek: Add support for F81216E (stable-fixes).\n- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).\n- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).\n- serial: amba-pl011: Use port lock wrappers (stable-fixes).\n- serial: amba-pl011: fix build regression (git-fixes).\n- serial: do not use uninitialized value in uart_poll_init() (git-fixes).\n- serial: imx: only set receiver level if it is zero (git-fixes).\n- serial: imx: set receiver level before starting uart (git-fixes).\n- serial: qcom-geni: Do not cancel/abort if we can\u0027t get the port lock (git-fixes).\n- serial: qcom-geni: disable interrupts during console writes (git-fixes).\n- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).\n- serial: qcom-geni: fix console corruption (git-fixes).\n- serial: qcom-geni: fix dma rx cancellation (git-fixes).\n- serial: qcom-geni: fix false console tx restart (git-fixes).\n- serial: qcom-geni: fix fifo polling timeout (git-fixes).\n- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).\n- serial: qcom-geni: fix polled console corruption (git-fixes).\n- serial: qcom-geni: fix polled console initialisation (git-fixes).\n- serial: qcom-geni: fix receiver enable (git-fixes).\n- serial: qcom-geni: fix shutdown race (git-fixes).\n- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).\n- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).\n- serial: qcom-geni: revert broken hibernation support (git-fixes).\n- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).\n- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).\n- slub: Replace cmpxchg_double() (bsc#1220773).\n- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).\n- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]\n- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).\n- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).\n- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).\n- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).\n- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).\n- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).\n- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).\n- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).\n- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).\n- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).\n- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).\n- spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).\n- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).\n- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).\n- staging: iio: ad9832: Correct phase range check (git-fixes).\n- staging: iio: ad9834: Correct phase range check (git-fixes).\n- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).\n- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).\n- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).\n- svcrdma: Address an integer overflow (git-fixes).\n- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).\n- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).\n- swiotlb: Reinstate page-alignment for mappings \u003e= PAGE_SIZE (git-fixes).\n- tdx: following fixup for mapping_level porting conflict (jsc#PED-6143).\n- tdx: init has_private_mem during tdx init (jsc#PED-6143).\n- the end of (the first phase of) TDX KVM patch series (jsc#PED-6143).\n- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).\n- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).\n- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).\n- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).\n- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).\n- tools: hv: change permissions of NetworkManager configuration file (git-fixes).\n- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)\n- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).\n- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).\n- types: Introduce [us]128 (bsc#1220773).\n- ubifs: Correct the total block count by deducting journal reservation (git-fixes).\n- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).\n- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).\n- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).\n- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).\n- udf: refactor inode_bmap() to handle error (bsc#1234242).\n- udf: refactor udf_current_aext() to handle error (bsc#1234240).\n- udf: refactor udf_next_aext() to handle error (bsc#1234241).\n- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).\n- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).\n- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).\n- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).\n- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).\n- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).\n- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).\n- usb: dwc2: Fix HCD port connection race (git-fixes).\n- usb: dwc2: Fix HCD resume (git-fixes).\n- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).\n- usb: dwc2: hcd: Fix GetPortStatus \u0026 SetPortFeature (git-fixes).\n- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).\n- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).\n- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).\n- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).\n- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).\n- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).\n- usb: fix reference leak in usb_new_device() (git-fixes).\n- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).\n- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).\n- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).\n- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).\n- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).\n- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).\n- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).\n- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).\n- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).\n- usb: typec: use cleanup facility for \u0027altmodes_node\u0027 (stable-fixes).\n- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).\n- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).\n- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).\n- vdpa: solidrun: Fix UB bug with devres (git-fixes).\n- vfs: fix readahead(2) on block devices (bsc#1234201).\n- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).\n- watchdog: apple: Actually flush writes after requesting watchdog restart (git-fixes).\n- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (git-fixes).\n- watchdog: rti: of: honor timeout-sec property (git-fixes).\n- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).\n- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).\n- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).\n- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).\n- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).\n- wifi: ath5k: add PCI ID for SX76X (git-fixes).\n- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).\n- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).\n- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).\n- wifi: mac80211: Add non-atomic station iterator (stable-fixes).\n- wifi: mac80211: clean up \u0027ret\u0027 in sta_link_apply_parameters() (stable-fixes).\n- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).\n- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).\n- wifi: mac80211: fix station NSS capability initialization order (git-fixes).\n- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).\n- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).\n- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).\n- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).\n- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).\n- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).\n- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).\n- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).\n- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).\n- x86/kexec: Reset TDX private memory on platforms with TDX erratum (jsc#PED-6143).\n- x86/kexec: do unconditional WBINVD for bare-metal in relocate_kernel() (jsc#PED-6143).\n- x86/kexec: do unconditional WBINVD for bare-metal in stop_this_cpu() (jsc#PED-6143).\n- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).\n- x86/virt/tdx: Add TDX memory reset notifier to reset other private pages (jsc#PED-6143).\n- x86/virt/tdx: Exclude memory region hole within CMR as TDMR\u0027s reserved area (jsc#PED-6143).\n- x86/virt/tdx: Explicitly save/restore RBP for seamcall_saved_ret() (jsc#PED-6143).\n- x86/virt/tdx: Get information about TDX module and TDX-capable memory (jsc#PED-6143).\n- xfs: do not allocate COW extents when unsharing a hole (git-fixes).\n- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).\n- xfs: remove unknown compat feature check in superblock write validation (git-fixes).\n- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).\n- xfs: sb_spino_align is not verified (git-fixes).\n- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).\n- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).\n- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2025-289,SUSE-SLE-Module-Confidential-Computing-15-SP6-2025-289",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0289-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:0289-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:0289-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-January/020239.html"
},
{
"category": "self",
"summary": "SUSE Bug 1012628",
"url": "https://bugzilla.suse.com/1012628"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1214954",
"url": "https://bugzilla.suse.com/1214954"
},
{
"category": "self",
"summary": "SUSE Bug 1215199",
"url": "https://bugzilla.suse.com/1215199"
},
{
"category": "self",
"summary": "SUSE Bug 1216813",
"url": "https://bugzilla.suse.com/1216813"
},
{
"category": "self",
"summary": "SUSE Bug 1218470",
"url": "https://bugzilla.suse.com/1218470"
},
{
"category": "self",
"summary": "SUSE Bug 1220355",
"url": "https://bugzilla.suse.com/1220355"
},
{
"category": "self",
"summary": "SUSE Bug 1220711",
"url": "https://bugzilla.suse.com/1220711"
},
{
"category": "self",
"summary": "SUSE Bug 1220773",
"url": "https://bugzilla.suse.com/1220773"
},
{
"category": "self",
"summary": "SUSE Bug 1221326",
"url": "https://bugzilla.suse.com/1221326"
},
{
"category": "self",
"summary": "SUSE Bug 1224095",
"url": "https://bugzilla.suse.com/1224095"
},
{
"category": "self",
"summary": "SUSE Bug 1224726",
"url": "https://bugzilla.suse.com/1224726"
},
{
"category": "self",
"summary": "SUSE Bug 1225743",
"url": "https://bugzilla.suse.com/1225743"
},
{
"category": "self",
"summary": "SUSE Bug 1225758",
"url": "https://bugzilla.suse.com/1225758"
},
{
"category": "self",
"summary": "SUSE Bug 1225820",
"url": "https://bugzilla.suse.com/1225820"
},
{
"category": "self",
"summary": "SUSE Bug 1225897",
"url": "https://bugzilla.suse.com/1225897"
},
{
"category": "self",
"summary": "SUSE Bug 1227445",
"url": "https://bugzilla.suse.com/1227445"
},
{
"category": "self",
"summary": "SUSE Bug 1228526",
"url": "https://bugzilla.suse.com/1228526"
},
{
"category": "self",
"summary": "SUSE Bug 1228592",
"url": "https://bugzilla.suse.com/1228592"
},
{
"category": "self",
"summary": "SUSE Bug 1229809",
"url": "https://bugzilla.suse.com/1229809"
},
{
"category": "self",
"summary": "SUSE Bug 1229833",
"url": "https://bugzilla.suse.com/1229833"
},
{
"category": "self",
"summary": "SUSE Bug 1230205",
"url": "https://bugzilla.suse.com/1230205"
},
{
"category": "self",
"summary": "SUSE Bug 1230413",
"url": "https://bugzilla.suse.com/1230413"
},
{
"category": "self",
"summary": "SUSE Bug 1230557",
"url": "https://bugzilla.suse.com/1230557"
},
{
"category": "self",
"summary": "SUSE Bug 1230697",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "self",
"summary": "SUSE Bug 1230807",
"url": "https://bugzilla.suse.com/1230807"
},
{
"category": "self",
"summary": "SUSE Bug 1230827",
"url": "https://bugzilla.suse.com/1230827"
},
{
"category": "self",
"summary": "SUSE Bug 1231016",
"url": "https://bugzilla.suse.com/1231016"
},
{
"category": "self",
"summary": "SUSE Bug 1231854",
"url": "https://bugzilla.suse.com/1231854"
},
{
"category": "self",
"summary": "SUSE Bug 1231909",
"url": "https://bugzilla.suse.com/1231909"
},
{
"category": "self",
"summary": "SUSE Bug 1231963",
"url": "https://bugzilla.suse.com/1231963"
},
{
"category": "self",
"summary": "SUSE Bug 1232087",
"url": "https://bugzilla.suse.com/1232087"
},
{
"category": "self",
"summary": "SUSE Bug 1232157",
"url": "https://bugzilla.suse.com/1232157"
},
{
"category": "self",
"summary": "SUSE Bug 1232158",
"url": "https://bugzilla.suse.com/1232158"
},
{
"category": "self",
"summary": "SUSE Bug 1232166",
"url": "https://bugzilla.suse.com/1232166"
},
{
"category": "self",
"summary": "SUSE Bug 1232193",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "self",
"summary": "SUSE Bug 1232198",
"url": "https://bugzilla.suse.com/1232198"
},
{
"category": "self",
"summary": "SUSE Bug 1232201",
"url": "https://bugzilla.suse.com/1232201"
},
{
"category": "self",
"summary": "SUSE Bug 1232418",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "self",
"summary": "SUSE Bug 1232419",
"url": "https://bugzilla.suse.com/1232419"
},
{
"category": "self",
"summary": "SUSE Bug 1232420",
"url": "https://bugzilla.suse.com/1232420"
},
{
"category": "self",
"summary": "SUSE Bug 1232421",
"url": "https://bugzilla.suse.com/1232421"
},
{
"category": "self",
"summary": "SUSE Bug 1232436",
"url": "https://bugzilla.suse.com/1232436"
},
{
"category": "self",
"summary": "SUSE Bug 1232882",
"url": "https://bugzilla.suse.com/1232882"
},
{
"category": "self",
"summary": "SUSE Bug 1233038",
"url": "https://bugzilla.suse.com/1233038"
},
{
"category": "self",
"summary": "SUSE Bug 1233055",
"url": "https://bugzilla.suse.com/1233055"
},
{
"category": "self",
"summary": "SUSE Bug 1233070",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "self",
"summary": "SUSE Bug 1233096",
"url": "https://bugzilla.suse.com/1233096"
},
{
"category": "self",
"summary": "SUSE Bug 1233112",
"url": "https://bugzilla.suse.com/1233112"
},
{
"category": "self",
"summary": "SUSE Bug 1233200",
"url": "https://bugzilla.suse.com/1233200"
},
{
"category": "self",
"summary": "SUSE Bug 1233201",
"url": "https://bugzilla.suse.com/1233201"
},
{
"category": "self",
"summary": "SUSE Bug 1233204",
"url": "https://bugzilla.suse.com/1233204"
},
{
"category": "self",
"summary": "SUSE Bug 1233239",
"url": "https://bugzilla.suse.com/1233239"
},
{
"category": "self",
"summary": "SUSE Bug 1233259",
"url": "https://bugzilla.suse.com/1233259"
},
{
"category": "self",
"summary": "SUSE Bug 1233260",
"url": "https://bugzilla.suse.com/1233260"
},
{
"category": "self",
"summary": "SUSE Bug 1233324",
"url": "https://bugzilla.suse.com/1233324"
},
{
"category": "self",
"summary": "SUSE Bug 1233328",
"url": "https://bugzilla.suse.com/1233328"
},
{
"category": "self",
"summary": "SUSE Bug 1233461",
"url": "https://bugzilla.suse.com/1233461"
},
{
"category": "self",
"summary": "SUSE Bug 1233467",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "self",
"summary": "SUSE Bug 1233468",
"url": "https://bugzilla.suse.com/1233468"
},
{
"category": "self",
"summary": "SUSE Bug 1233469",
"url": "https://bugzilla.suse.com/1233469"
},
{
"category": "self",
"summary": "SUSE Bug 1233485",
"url": "https://bugzilla.suse.com/1233485"
},
{
"category": "self",
"summary": "SUSE Bug 1233488",
"url": "https://bugzilla.suse.com/1233488"
},
{
"category": "self",
"summary": "SUSE Bug 1233523",
"url": "https://bugzilla.suse.com/1233523"
},
{
"category": "self",
"summary": "SUSE Bug 1233546",
"url": "https://bugzilla.suse.com/1233546"
},
{
"category": "self",
"summary": "SUSE Bug 1233547",
"url": "https://bugzilla.suse.com/1233547"
},
{
"category": "self",
"summary": "SUSE Bug 1233550",
"url": "https://bugzilla.suse.com/1233550"
},
{
"category": "self",
"summary": "SUSE Bug 1233558",
"url": "https://bugzilla.suse.com/1233558"
},
{
"category": "self",
"summary": "SUSE Bug 1233568",
"url": "https://bugzilla.suse.com/1233568"
},
{
"category": "self",
"summary": "SUSE Bug 1233637",
"url": "https://bugzilla.suse.com/1233637"
},
{
"category": "self",
"summary": "SUSE Bug 1233638",
"url": "https://bugzilla.suse.com/1233638"
},
{
"category": "self",
"summary": "SUSE Bug 1233642",
"url": "https://bugzilla.suse.com/1233642"
},
{
"category": "self",
"summary": "SUSE Bug 1233772",
"url": "https://bugzilla.suse.com/1233772"
},
{
"category": "self",
"summary": "SUSE Bug 1233837",
"url": "https://bugzilla.suse.com/1233837"
},
{
"category": "self",
"summary": "SUSE Bug 1234024",
"url": "https://bugzilla.suse.com/1234024"
},
{
"category": "self",
"summary": "SUSE Bug 1234069",
"url": "https://bugzilla.suse.com/1234069"
},
{
"category": "self",
"summary": "SUSE Bug 1234071",
"url": "https://bugzilla.suse.com/1234071"
},
{
"category": "self",
"summary": "SUSE Bug 1234073",
"url": "https://bugzilla.suse.com/1234073"
},
{
"category": "self",
"summary": "SUSE Bug 1234075",
"url": "https://bugzilla.suse.com/1234075"
},
{
"category": "self",
"summary": "SUSE Bug 1234076",
"url": "https://bugzilla.suse.com/1234076"
},
{
"category": "self",
"summary": "SUSE Bug 1234077",
"url": "https://bugzilla.suse.com/1234077"
},
{
"category": "self",
"summary": "SUSE Bug 1234078",
"url": "https://bugzilla.suse.com/1234078"
},
{
"category": "self",
"summary": "SUSE Bug 1234079",
"url": "https://bugzilla.suse.com/1234079"
},
{
"category": "self",
"summary": "SUSE Bug 1234085",
"url": "https://bugzilla.suse.com/1234085"
},
{
"category": "self",
"summary": "SUSE Bug 1234086",
"url": "https://bugzilla.suse.com/1234086"
},
{
"category": "self",
"summary": "SUSE Bug 1234139",
"url": "https://bugzilla.suse.com/1234139"
},
{
"category": "self",
"summary": "SUSE Bug 1234140",
"url": "https://bugzilla.suse.com/1234140"
},
{
"category": "self",
"summary": "SUSE Bug 1234141",
"url": "https://bugzilla.suse.com/1234141"
},
{
"category": "self",
"summary": "SUSE Bug 1234142",
"url": "https://bugzilla.suse.com/1234142"
},
{
"category": "self",
"summary": "SUSE Bug 1234143",
"url": "https://bugzilla.suse.com/1234143"
},
{
"category": "self",
"summary": "SUSE Bug 1234144",
"url": "https://bugzilla.suse.com/1234144"
},
{
"category": "self",
"summary": "SUSE Bug 1234145",
"url": "https://bugzilla.suse.com/1234145"
},
{
"category": "self",
"summary": "SUSE Bug 1234146",
"url": "https://bugzilla.suse.com/1234146"
},
{
"category": "self",
"summary": "SUSE Bug 1234147",
"url": "https://bugzilla.suse.com/1234147"
},
{
"category": "self",
"summary": "SUSE Bug 1234148",
"url": "https://bugzilla.suse.com/1234148"
},
{
"category": "self",
"summary": "SUSE Bug 1234149",
"url": "https://bugzilla.suse.com/1234149"
},
{
"category": "self",
"summary": "SUSE Bug 1234150",
"url": "https://bugzilla.suse.com/1234150"
},
{
"category": "self",
"summary": "SUSE Bug 1234153",
"url": "https://bugzilla.suse.com/1234153"
},
{
"category": "self",
"summary": "SUSE Bug 1234155",
"url": "https://bugzilla.suse.com/1234155"
},
{
"category": "self",
"summary": "SUSE Bug 1234156",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "self",
"summary": "SUSE Bug 1234158",
"url": "https://bugzilla.suse.com/1234158"
},
{
"category": "self",
"summary": "SUSE Bug 1234159",
"url": "https://bugzilla.suse.com/1234159"
},
{
"category": "self",
"summary": "SUSE Bug 1234160",
"url": "https://bugzilla.suse.com/1234160"
},
{
"category": "self",
"summary": "SUSE Bug 1234161",
"url": "https://bugzilla.suse.com/1234161"
},
{
"category": "self",
"summary": "SUSE Bug 1234162",
"url": "https://bugzilla.suse.com/1234162"
},
{
"category": "self",
"summary": "SUSE Bug 1234163",
"url": "https://bugzilla.suse.com/1234163"
},
{
"category": "self",
"summary": "SUSE Bug 1234164",
"url": "https://bugzilla.suse.com/1234164"
},
{
"category": "self",
"summary": "SUSE Bug 1234165",
"url": "https://bugzilla.suse.com/1234165"
},
{
"category": "self",
"summary": "SUSE Bug 1234166",
"url": "https://bugzilla.suse.com/1234166"
},
{
"category": "self",
"summary": "SUSE Bug 1234167",
"url": "https://bugzilla.suse.com/1234167"
},
{
"category": "self",
"summary": "SUSE Bug 1234168",
"url": "https://bugzilla.suse.com/1234168"
},
{
"category": "self",
"summary": "SUSE Bug 1234169",
"url": "https://bugzilla.suse.com/1234169"
},
{
"category": "self",
"summary": "SUSE Bug 1234170",
"url": "https://bugzilla.suse.com/1234170"
},
{
"category": "self",
"summary": "SUSE Bug 1234171",
"url": "https://bugzilla.suse.com/1234171"
},
{
"category": "self",
"summary": "SUSE Bug 1234172",
"url": "https://bugzilla.suse.com/1234172"
},
{
"category": "self",
"summary": "SUSE Bug 1234173",
"url": "https://bugzilla.suse.com/1234173"
},
{
"category": "self",
"summary": "SUSE Bug 1234174",
"url": "https://bugzilla.suse.com/1234174"
},
{
"category": "self",
"summary": "SUSE Bug 1234175",
"url": "https://bugzilla.suse.com/1234175"
},
{
"category": "self",
"summary": "SUSE Bug 1234176",
"url": "https://bugzilla.suse.com/1234176"
},
{
"category": "self",
"summary": "SUSE Bug 1234177",
"url": "https://bugzilla.suse.com/1234177"
},
{
"category": "self",
"summary": "SUSE Bug 1234178",
"url": "https://bugzilla.suse.com/1234178"
},
{
"category": "self",
"summary": "SUSE Bug 1234179",
"url": "https://bugzilla.suse.com/1234179"
},
{
"category": "self",
"summary": "SUSE Bug 1234180",
"url": "https://bugzilla.suse.com/1234180"
},
{
"category": "self",
"summary": "SUSE Bug 1234181",
"url": "https://bugzilla.suse.com/1234181"
},
{
"category": "self",
"summary": "SUSE Bug 1234182",
"url": "https://bugzilla.suse.com/1234182"
},
{
"category": "self",
"summary": "SUSE Bug 1234183",
"url": "https://bugzilla.suse.com/1234183"
},
{
"category": "self",
"summary": "SUSE Bug 1234184",
"url": "https://bugzilla.suse.com/1234184"
},
{
"category": "self",
"summary": "SUSE Bug 1234185",
"url": "https://bugzilla.suse.com/1234185"
},
{
"category": "self",
"summary": "SUSE Bug 1234186",
"url": "https://bugzilla.suse.com/1234186"
},
{
"category": "self",
"summary": "SUSE Bug 1234187",
"url": "https://bugzilla.suse.com/1234187"
},
{
"category": "self",
"summary": "SUSE Bug 1234188",
"url": "https://bugzilla.suse.com/1234188"
},
{
"category": "self",
"summary": "SUSE Bug 1234189",
"url": "https://bugzilla.suse.com/1234189"
},
{
"category": "self",
"summary": "SUSE Bug 1234190",
"url": "https://bugzilla.suse.com/1234190"
},
{
"category": "self",
"summary": "SUSE Bug 1234191",
"url": "https://bugzilla.suse.com/1234191"
},
{
"category": "self",
"summary": "SUSE Bug 1234192",
"url": "https://bugzilla.suse.com/1234192"
},
{
"category": "self",
"summary": "SUSE Bug 1234193",
"url": "https://bugzilla.suse.com/1234193"
},
{
"category": "self",
"summary": "SUSE Bug 1234194",
"url": "https://bugzilla.suse.com/1234194"
},
{
"category": "self",
"summary": "SUSE Bug 1234195",
"url": "https://bugzilla.suse.com/1234195"
},
{
"category": "self",
"summary": "SUSE Bug 1234196",
"url": "https://bugzilla.suse.com/1234196"
},
{
"category": "self",
"summary": "SUSE Bug 1234197",
"url": "https://bugzilla.suse.com/1234197"
},
{
"category": "self",
"summary": "SUSE Bug 1234198",
"url": "https://bugzilla.suse.com/1234198"
},
{
"category": "self",
"summary": "SUSE Bug 1234199",
"url": "https://bugzilla.suse.com/1234199"
},
{
"category": "self",
"summary": "SUSE Bug 1234200",
"url": "https://bugzilla.suse.com/1234200"
},
{
"category": "self",
"summary": "SUSE Bug 1234201",
"url": "https://bugzilla.suse.com/1234201"
},
{
"category": "self",
"summary": "SUSE Bug 1234203",
"url": "https://bugzilla.suse.com/1234203"
},
{
"category": "self",
"summary": "SUSE Bug 1234204",
"url": "https://bugzilla.suse.com/1234204"
},
{
"category": "self",
"summary": "SUSE Bug 1234205",
"url": "https://bugzilla.suse.com/1234205"
},
{
"category": "self",
"summary": "SUSE Bug 1234207",
"url": "https://bugzilla.suse.com/1234207"
},
{
"category": "self",
"summary": "SUSE Bug 1234208",
"url": "https://bugzilla.suse.com/1234208"
},
{
"category": "self",
"summary": "SUSE Bug 1234209",
"url": "https://bugzilla.suse.com/1234209"
},
{
"category": "self",
"summary": "SUSE Bug 1234219",
"url": "https://bugzilla.suse.com/1234219"
},
{
"category": "self",
"summary": "SUSE Bug 1234220",
"url": "https://bugzilla.suse.com/1234220"
},
{
"category": "self",
"summary": "SUSE Bug 1234221",
"url": "https://bugzilla.suse.com/1234221"
},
{
"category": "self",
"summary": "SUSE Bug 1234223",
"url": "https://bugzilla.suse.com/1234223"
},
{
"category": "self",
"summary": "SUSE Bug 1234237",
"url": "https://bugzilla.suse.com/1234237"
},
{
"category": "self",
"summary": "SUSE Bug 1234238",
"url": "https://bugzilla.suse.com/1234238"
},
{
"category": "self",
"summary": "SUSE Bug 1234239",
"url": "https://bugzilla.suse.com/1234239"
},
{
"category": "self",
"summary": "SUSE Bug 1234240",
"url": "https://bugzilla.suse.com/1234240"
},
{
"category": "self",
"summary": "SUSE Bug 1234241",
"url": "https://bugzilla.suse.com/1234241"
},
{
"category": "self",
"summary": "SUSE Bug 1234242",
"url": "https://bugzilla.suse.com/1234242"
},
{
"category": "self",
"summary": "SUSE Bug 1234243",
"url": "https://bugzilla.suse.com/1234243"
},
{
"category": "self",
"summary": "SUSE Bug 1234278",
"url": "https://bugzilla.suse.com/1234278"
},
{
"category": "self",
"summary": "SUSE Bug 1234279",
"url": "https://bugzilla.suse.com/1234279"
},
{
"category": "self",
"summary": "SUSE Bug 1234280",
"url": "https://bugzilla.suse.com/1234280"
},
{
"category": "self",
"summary": "SUSE Bug 1234281",
"url": "https://bugzilla.suse.com/1234281"
},
{
"category": "self",
"summary": "SUSE Bug 1234282",
"url": "https://bugzilla.suse.com/1234282"
},
{
"category": "self",
"summary": "SUSE Bug 1234294",
"url": "https://bugzilla.suse.com/1234294"
},
{
"category": "self",
"summary": "SUSE Bug 1234338",
"url": "https://bugzilla.suse.com/1234338"
},
{
"category": "self",
"summary": "SUSE Bug 1234357",
"url": "https://bugzilla.suse.com/1234357"
},
{
"category": "self",
"summary": "SUSE Bug 1234381",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "self",
"summary": "SUSE Bug 1234454",
"url": "https://bugzilla.suse.com/1234454"
},
{
"category": "self",
"summary": "SUSE Bug 1234464",
"url": "https://bugzilla.suse.com/1234464"
},
{
"category": "self",
"summary": "SUSE Bug 1234605",
"url": "https://bugzilla.suse.com/1234605"
},
{
"category": "self",
"summary": "SUSE Bug 1234619",
"url": "https://bugzilla.suse.com/1234619"
},
{
"category": "self",
"summary": "SUSE Bug 1234635",
"url": "https://bugzilla.suse.com/1234635"
},
{
"category": "self",
"summary": "SUSE Bug 1234651",
"url": "https://bugzilla.suse.com/1234651"
},
{
"category": "self",
"summary": "SUSE Bug 1234652",
"url": "https://bugzilla.suse.com/1234652"
},
{
"category": "self",
"summary": "SUSE Bug 1234654",
"url": "https://bugzilla.suse.com/1234654"
},
{
"category": "self",
"summary": "SUSE Bug 1234655",
"url": "https://bugzilla.suse.com/1234655"
},
{
"category": "self",
"summary": "SUSE Bug 1234657",
"url": "https://bugzilla.suse.com/1234657"
},
{
"category": "self",
"summary": "SUSE Bug 1234658",
"url": "https://bugzilla.suse.com/1234658"
},
{
"category": "self",
"summary": "SUSE Bug 1234659",
"url": "https://bugzilla.suse.com/1234659"
},
{
"category": "self",
"summary": "SUSE Bug 1234668",
"url": "https://bugzilla.suse.com/1234668"
},
{
"category": "self",
"summary": "SUSE Bug 1234690",
"url": "https://bugzilla.suse.com/1234690"
},
{
"category": "self",
"summary": "SUSE Bug 1234725",
"url": "https://bugzilla.suse.com/1234725"
},
{
"category": "self",
"summary": "SUSE Bug 1234726",
"url": "https://bugzilla.suse.com/1234726"
},
{
"category": "self",
"summary": "SUSE Bug 1234810",
"url": "https://bugzilla.suse.com/1234810"
},
{
"category": "self",
"summary": "SUSE Bug 1234811",
"url": "https://bugzilla.suse.com/1234811"
},
{
"category": "self",
"summary": "SUSE Bug 1234825",
"url": "https://bugzilla.suse.com/1234825"
},
{
"category": "self",
"summary": "SUSE Bug 1234826",
"url": "https://bugzilla.suse.com/1234826"
},
{
"category": "self",
"summary": "SUSE Bug 1234827",
"url": "https://bugzilla.suse.com/1234827"
},
{
"category": "self",
"summary": "SUSE Bug 1234829",
"url": "https://bugzilla.suse.com/1234829"
},
{
"category": "self",
"summary": "SUSE Bug 1234832",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "self",
"summary": "SUSE Bug 1234834",
"url": "https://bugzilla.suse.com/1234834"
},
{
"category": "self",
"summary": "SUSE Bug 1234843",
"url": "https://bugzilla.suse.com/1234843"
},
{
"category": "self",
"summary": "SUSE Bug 1234846",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "self",
"summary": "SUSE Bug 1234848",
"url": "https://bugzilla.suse.com/1234848"
},
{
"category": "self",
"summary": "SUSE Bug 1234853",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "self",
"summary": "SUSE Bug 1234855",
"url": "https://bugzilla.suse.com/1234855"
},
{
"category": "self",
"summary": "SUSE Bug 1234856",
"url": "https://bugzilla.suse.com/1234856"
},
{
"category": "self",
"summary": "SUSE Bug 1234863",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "self",
"summary": "SUSE Bug 1234884",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "self",
"summary": "SUSE Bug 1234887",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "self",
"summary": "SUSE Bug 1234888",
"url": "https://bugzilla.suse.com/1234888"
},
{
"category": "self",
"summary": "SUSE Bug 1234889",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "self",
"summary": "SUSE Bug 1234891",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "self",
"summary": "SUSE Bug 1234893",
"url": "https://bugzilla.suse.com/1234893"
},
{
"category": "self",
"summary": "SUSE Bug 1234898",
"url": "https://bugzilla.suse.com/1234898"
},
{
"category": "self",
"summary": "SUSE Bug 1234899",
"url": "https://bugzilla.suse.com/1234899"
},
{
"category": "self",
"summary": "SUSE Bug 1234900",
"url": "https://bugzilla.suse.com/1234900"
},
{
"category": "self",
"summary": "SUSE Bug 1234901",
"url": "https://bugzilla.suse.com/1234901"
},
{
"category": "self",
"summary": "SUSE Bug 1234905",
"url": "https://bugzilla.suse.com/1234905"
},
{
"category": "self",
"summary": "SUSE Bug 1234906",
"url": "https://bugzilla.suse.com/1234906"
},
{
"category": "self",
"summary": "SUSE Bug 1234907",
"url": "https://bugzilla.suse.com/1234907"
},
{
"category": "self",
"summary": "SUSE Bug 1234909",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "self",
"summary": "SUSE Bug 1234911",
"url": "https://bugzilla.suse.com/1234911"
},
{
"category": "self",
"summary": "SUSE Bug 1234912",
"url": "https://bugzilla.suse.com/1234912"
},
{
"category": "self",
"summary": "SUSE Bug 1234916",
"url": "https://bugzilla.suse.com/1234916"
},
{
"category": "self",
"summary": "SUSE Bug 1234918",
"url": "https://bugzilla.suse.com/1234918"
},
{
"category": "self",
"summary": "SUSE Bug 1234920",
"url": "https://bugzilla.suse.com/1234920"
},
{
"category": "self",
"summary": "SUSE Bug 1234921",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "self",
"summary": "SUSE Bug 1234922",
"url": "https://bugzilla.suse.com/1234922"
},
{
"category": "self",
"summary": "SUSE Bug 1234923",
"url": "https://bugzilla.suse.com/1234923"
},
{
"category": "self",
"summary": "SUSE Bug 1234929",
"url": "https://bugzilla.suse.com/1234929"
},
{
"category": "self",
"summary": "SUSE Bug 1234930",
"url": "https://bugzilla.suse.com/1234930"
},
{
"category": "self",
"summary": "SUSE Bug 1234931",
"url": "https://bugzilla.suse.com/1234931"
},
{
"category": "self",
"summary": "SUSE Bug 1234934",
"url": "https://bugzilla.suse.com/1234934"
},
{
"category": "self",
"summary": "SUSE Bug 1234937",
"url": "https://bugzilla.suse.com/1234937"
},
{
"category": "self",
"summary": "SUSE Bug 1234948",
"url": "https://bugzilla.suse.com/1234948"
},
{
"category": "self",
"summary": "SUSE Bug 1234950",
"url": "https://bugzilla.suse.com/1234950"
},
{
"category": "self",
"summary": "SUSE Bug 1234952",
"url": "https://bugzilla.suse.com/1234952"
},
{
"category": "self",
"summary": "SUSE Bug 1234957",
"url": "https://bugzilla.suse.com/1234957"
},
{
"category": "self",
"summary": "SUSE Bug 1234960",
"url": "https://bugzilla.suse.com/1234960"
},
{
"category": "self",
"summary": "SUSE Bug 1234962",
"url": "https://bugzilla.suse.com/1234962"
},
{
"category": "self",
"summary": "SUSE Bug 1234963",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "self",
"summary": "SUSE Bug 1234968",
"url": "https://bugzilla.suse.com/1234968"
},
{
"category": "self",
"summary": "SUSE Bug 1234969",
"url": "https://bugzilla.suse.com/1234969"
},
{
"category": "self",
"summary": "SUSE Bug 1234970",
"url": "https://bugzilla.suse.com/1234970"
},
{
"category": "self",
"summary": "SUSE Bug 1234971",
"url": "https://bugzilla.suse.com/1234971"
},
{
"category": "self",
"summary": "SUSE Bug 1234973",
"url": "https://bugzilla.suse.com/1234973"
},
{
"category": "self",
"summary": "SUSE Bug 1234974",
"url": "https://bugzilla.suse.com/1234974"
},
{
"category": "self",
"summary": "SUSE Bug 1234989",
"url": "https://bugzilla.suse.com/1234989"
},
{
"category": "self",
"summary": "SUSE Bug 1234999",
"url": "https://bugzilla.suse.com/1234999"
},
{
"category": "self",
"summary": "SUSE Bug 1235000",
"url": "https://bugzilla.suse.com/1235000"
},
{
"category": "self",
"summary": "SUSE Bug 1235002",
"url": "https://bugzilla.suse.com/1235002"
},
{
"category": "self",
"summary": "SUSE Bug 1235003",
"url": "https://bugzilla.suse.com/1235003"
},
{
"category": "self",
"summary": "SUSE Bug 1235004",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "self",
"summary": "SUSE Bug 1235007",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "self",
"summary": "SUSE Bug 1235009",
"url": "https://bugzilla.suse.com/1235009"
},
{
"category": "self",
"summary": "SUSE Bug 1235011",
"url": "https://bugzilla.suse.com/1235011"
},
{
"category": "self",
"summary": "SUSE Bug 1235016",
"url": "https://bugzilla.suse.com/1235016"
},
{
"category": "self",
"summary": "SUSE Bug 1235019",
"url": "https://bugzilla.suse.com/1235019"
},
{
"category": "self",
"summary": "SUSE Bug 1235031",
"url": "https://bugzilla.suse.com/1235031"
},
{
"category": "self",
"summary": "SUSE Bug 1235032",
"url": "https://bugzilla.suse.com/1235032"
},
{
"category": "self",
"summary": "SUSE Bug 1235033",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "self",
"summary": "SUSE Bug 1235035",
"url": "https://bugzilla.suse.com/1235035"
},
{
"category": "self",
"summary": "SUSE Bug 1235037",
"url": "https://bugzilla.suse.com/1235037"
},
{
"category": "self",
"summary": "SUSE Bug 1235038",
"url": "https://bugzilla.suse.com/1235038"
},
{
"category": "self",
"summary": "SUSE Bug 1235039",
"url": "https://bugzilla.suse.com/1235039"
},
{
"category": "self",
"summary": "SUSE Bug 1235040",
"url": "https://bugzilla.suse.com/1235040"
},
{
"category": "self",
"summary": "SUSE Bug 1235042",
"url": "https://bugzilla.suse.com/1235042"
},
{
"category": "self",
"summary": "SUSE Bug 1235043",
"url": "https://bugzilla.suse.com/1235043"
},
{
"category": "self",
"summary": "SUSE Bug 1235045",
"url": "https://bugzilla.suse.com/1235045"
},
{
"category": "self",
"summary": "SUSE Bug 1235046",
"url": "https://bugzilla.suse.com/1235046"
},
{
"category": "self",
"summary": "SUSE Bug 1235050",
"url": "https://bugzilla.suse.com/1235050"
},
{
"category": "self",
"summary": "SUSE Bug 1235051",
"url": "https://bugzilla.suse.com/1235051"
},
{
"category": "self",
"summary": "SUSE Bug 1235053",
"url": "https://bugzilla.suse.com/1235053"
},
{
"category": "self",
"summary": "SUSE Bug 1235054",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "self",
"summary": "SUSE Bug 1235056",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "self",
"summary": "SUSE Bug 1235057",
"url": "https://bugzilla.suse.com/1235057"
},
{
"category": "self",
"summary": "SUSE Bug 1235059",
"url": "https://bugzilla.suse.com/1235059"
},
{
"category": "self",
"summary": "SUSE Bug 1235061",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "self",
"summary": "SUSE Bug 1235065",
"url": "https://bugzilla.suse.com/1235065"
},
{
"category": "self",
"summary": "SUSE Bug 1235070",
"url": "https://bugzilla.suse.com/1235070"
},
{
"category": "self",
"summary": "SUSE Bug 1235073",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "self",
"summary": "SUSE Bug 1235075",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "self",
"summary": "SUSE Bug 1235100",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "self",
"summary": "SUSE Bug 1235108",
"url": "https://bugzilla.suse.com/1235108"
},
{
"category": "self",
"summary": "SUSE Bug 1235112",
"url": "https://bugzilla.suse.com/1235112"
},
{
"category": "self",
"summary": "SUSE Bug 1235115",
"url": "https://bugzilla.suse.com/1235115"
},
{
"category": "self",
"summary": "SUSE Bug 1235117",
"url": "https://bugzilla.suse.com/1235117"
},
{
"category": "self",
"summary": "SUSE Bug 1235122",
"url": "https://bugzilla.suse.com/1235122"
},
{
"category": "self",
"summary": "SUSE Bug 1235123",
"url": "https://bugzilla.suse.com/1235123"
},
{
"category": "self",
"summary": "SUSE Bug 1235125",
"url": "https://bugzilla.suse.com/1235125"
},
{
"category": "self",
"summary": "SUSE Bug 1235128",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "self",
"summary": "SUSE Bug 1235132",
"url": "https://bugzilla.suse.com/1235132"
},
{
"category": "self",
"summary": "SUSE Bug 1235133",
"url": "https://bugzilla.suse.com/1235133"
},
{
"category": "self",
"summary": "SUSE Bug 1235134",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "self",
"summary": "SUSE Bug 1235138",
"url": "https://bugzilla.suse.com/1235138"
},
{
"category": "self",
"summary": "SUSE Bug 1235155",
"url": "https://bugzilla.suse.com/1235155"
},
{
"category": "self",
"summary": "SUSE Bug 1235160",
"url": "https://bugzilla.suse.com/1235160"
},
{
"category": "self",
"summary": "SUSE Bug 1235219",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "self",
"summary": "SUSE Bug 1235220",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "self",
"summary": "SUSE Bug 1235222",
"url": "https://bugzilla.suse.com/1235222"
},
{
"category": "self",
"summary": "SUSE Bug 1235223",
"url": "https://bugzilla.suse.com/1235223"
},
{
"category": "self",
"summary": "SUSE Bug 1235224",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "self",
"summary": "SUSE Bug 1235227",
"url": "https://bugzilla.suse.com/1235227"
},
{
"category": "self",
"summary": "SUSE Bug 1235241",
"url": "https://bugzilla.suse.com/1235241"
},
{
"category": "self",
"summary": "SUSE Bug 1235246",
"url": "https://bugzilla.suse.com/1235246"
},
{
"category": "self",
"summary": "SUSE Bug 1235249",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "self",
"summary": "SUSE Bug 1235251",
"url": "https://bugzilla.suse.com/1235251"
},
{
"category": "self",
"summary": "SUSE Bug 1235252",
"url": "https://bugzilla.suse.com/1235252"
},
{
"category": "self",
"summary": "SUSE Bug 1235389",
"url": "https://bugzilla.suse.com/1235389"
},
{
"category": "self",
"summary": "SUSE Bug 1235391",
"url": "https://bugzilla.suse.com/1235391"
},
{
"category": "self",
"summary": "SUSE Bug 1235406",
"url": "https://bugzilla.suse.com/1235406"
},
{
"category": "self",
"summary": "SUSE Bug 1235409",
"url": "https://bugzilla.suse.com/1235409"
},
{
"category": "self",
"summary": "SUSE Bug 1235410",
"url": "https://bugzilla.suse.com/1235410"
},
{
"category": "self",
"summary": "SUSE Bug 1235412",
"url": "https://bugzilla.suse.com/1235412"
},
{
"category": "self",
"summary": "SUSE Bug 1235413",
"url": "https://bugzilla.suse.com/1235413"
},
{
"category": "self",
"summary": "SUSE Bug 1235415",
"url": "https://bugzilla.suse.com/1235415"
},
{
"category": "self",
"summary": "SUSE Bug 1235416",
"url": "https://bugzilla.suse.com/1235416"
},
{
"category": "self",
"summary": "SUSE Bug 1235417",
"url": "https://bugzilla.suse.com/1235417"
},
{
"category": "self",
"summary": "SUSE Bug 1235423",
"url": "https://bugzilla.suse.com/1235423"
},
{
"category": "self",
"summary": "SUSE Bug 1235424",
"url": "https://bugzilla.suse.com/1235424"
},
{
"category": "self",
"summary": "SUSE Bug 1235425",
"url": "https://bugzilla.suse.com/1235425"
},
{
"category": "self",
"summary": "SUSE Bug 1235426",
"url": "https://bugzilla.suse.com/1235426"
},
{
"category": "self",
"summary": "SUSE Bug 1235427",
"url": "https://bugzilla.suse.com/1235427"
},
{
"category": "self",
"summary": "SUSE Bug 1235428",
"url": "https://bugzilla.suse.com/1235428"
},
{
"category": "self",
"summary": "SUSE Bug 1235429",
"url": "https://bugzilla.suse.com/1235429"
},
{
"category": "self",
"summary": "SUSE Bug 1235433",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "self",
"summary": "SUSE Bug 1235437",
"url": "https://bugzilla.suse.com/1235437"
},
{
"category": "self",
"summary": "SUSE Bug 1235439",
"url": "https://bugzilla.suse.com/1235439"
},
{
"category": "self",
"summary": "SUSE Bug 1235444",
"url": "https://bugzilla.suse.com/1235444"
},
{
"category": "self",
"summary": "SUSE Bug 1235445",
"url": "https://bugzilla.suse.com/1235445"
},
{
"category": "self",
"summary": "SUSE Bug 1235449",
"url": "https://bugzilla.suse.com/1235449"
},
{
"category": "self",
"summary": "SUSE Bug 1235451",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "self",
"summary": "SUSE Bug 1235454",
"url": "https://bugzilla.suse.com/1235454"
},
{
"category": "self",
"summary": "SUSE Bug 1235458",
"url": "https://bugzilla.suse.com/1235458"
},
{
"category": "self",
"summary": "SUSE Bug 1235459",
"url": "https://bugzilla.suse.com/1235459"
},
{
"category": "self",
"summary": "SUSE Bug 1235464",
"url": "https://bugzilla.suse.com/1235464"
},
{
"category": "self",
"summary": "SUSE Bug 1235466",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "self",
"summary": "SUSE Bug 1235473",
"url": "https://bugzilla.suse.com/1235473"
},
{
"category": "self",
"summary": "SUSE Bug 1235479",
"url": "https://bugzilla.suse.com/1235479"
},
{
"category": "self",
"summary": "SUSE Bug 1235480",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "self",
"summary": "SUSE Bug 1235483",
"url": "https://bugzilla.suse.com/1235483"
},
{
"category": "self",
"summary": "SUSE Bug 1235486",
"url": "https://bugzilla.suse.com/1235486"
},
{
"category": "self",
"summary": "SUSE Bug 1235488",
"url": "https://bugzilla.suse.com/1235488"
},
{
"category": "self",
"summary": "SUSE Bug 1235491",
"url": "https://bugzilla.suse.com/1235491"
},
{
"category": "self",
"summary": "SUSE Bug 1235494",
"url": "https://bugzilla.suse.com/1235494"
},
{
"category": "self",
"summary": "SUSE Bug 1235495",
"url": "https://bugzilla.suse.com/1235495"
},
{
"category": "self",
"summary": "SUSE Bug 1235496",
"url": "https://bugzilla.suse.com/1235496"
},
{
"category": "self",
"summary": "SUSE Bug 1235497",
"url": "https://bugzilla.suse.com/1235497"
},
{
"category": "self",
"summary": "SUSE Bug 1235500",
"url": "https://bugzilla.suse.com/1235500"
},
{
"category": "self",
"summary": "SUSE Bug 1235502",
"url": "https://bugzilla.suse.com/1235502"
},
{
"category": "self",
"summary": "SUSE Bug 1235503",
"url": "https://bugzilla.suse.com/1235503"
},
{
"category": "self",
"summary": "SUSE Bug 1235507",
"url": "https://bugzilla.suse.com/1235507"
},
{
"category": "self",
"summary": "SUSE Bug 1235519",
"url": "https://bugzilla.suse.com/1235519"
},
{
"category": "self",
"summary": "SUSE Bug 1235520",
"url": "https://bugzilla.suse.com/1235520"
},
{
"category": "self",
"summary": "SUSE Bug 1235521",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "self",
"summary": "SUSE Bug 1235523",
"url": "https://bugzilla.suse.com/1235523"
},
{
"category": "self",
"summary": "SUSE Bug 1235526",
"url": "https://bugzilla.suse.com/1235526"
},
{
"category": "self",
"summary": "SUSE Bug 1235528",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "self",
"summary": "SUSE Bug 1235532",
"url": "https://bugzilla.suse.com/1235532"
},
{
"category": "self",
"summary": "SUSE Bug 1235533",
"url": "https://bugzilla.suse.com/1235533"
},
{
"category": "self",
"summary": "SUSE Bug 1235534",
"url": "https://bugzilla.suse.com/1235534"
},
{
"category": "self",
"summary": "SUSE Bug 1235537",
"url": "https://bugzilla.suse.com/1235537"
},
{
"category": "self",
"summary": "SUSE Bug 1235538",
"url": "https://bugzilla.suse.com/1235538"
},
{
"category": "self",
"summary": "SUSE Bug 1235550",
"url": "https://bugzilla.suse.com/1235550"
},
{
"category": "self",
"summary": "SUSE Bug 1235552",
"url": "https://bugzilla.suse.com/1235552"
},
{
"category": "self",
"summary": "SUSE Bug 1235555",
"url": "https://bugzilla.suse.com/1235555"
},
{
"category": "self",
"summary": "SUSE Bug 1235557",
"url": "https://bugzilla.suse.com/1235557"
},
{
"category": "self",
"summary": "SUSE Bug 1235563",
"url": "https://bugzilla.suse.com/1235563"
},
{
"category": "self",
"summary": "SUSE Bug 1235564",
"url": "https://bugzilla.suse.com/1235564"
},
{
"category": "self",
"summary": "SUSE Bug 1235565",
"url": "https://bugzilla.suse.com/1235565"
},
{
"category": "self",
"summary": "SUSE Bug 1235568",
"url": "https://bugzilla.suse.com/1235568"
},
{
"category": "self",
"summary": "SUSE Bug 1235570",
"url": "https://bugzilla.suse.com/1235570"
},
{
"category": "self",
"summary": "SUSE Bug 1235571",
"url": "https://bugzilla.suse.com/1235571"
},
{
"category": "self",
"summary": "SUSE Bug 1235577",
"url": "https://bugzilla.suse.com/1235577"
},
{
"category": "self",
"summary": "SUSE Bug 1235584",
"url": "https://bugzilla.suse.com/1235584"
},
{
"category": "self",
"summary": "SUSE Bug 1235587",
"url": "https://bugzilla.suse.com/1235587"
},
{
"category": "self",
"summary": "SUSE Bug 1235611",
"url": "https://bugzilla.suse.com/1235611"
},
{
"category": "self",
"summary": "SUSE Bug 1235616",
"url": "https://bugzilla.suse.com/1235616"
},
{
"category": "self",
"summary": "SUSE Bug 1235622",
"url": "https://bugzilla.suse.com/1235622"
},
{
"category": "self",
"summary": "SUSE Bug 1235627",
"url": "https://bugzilla.suse.com/1235627"
},
{
"category": "self",
"summary": "SUSE Bug 1235632",
"url": "https://bugzilla.suse.com/1235632"
},
{
"category": "self",
"summary": "SUSE Bug 1235635",
"url": "https://bugzilla.suse.com/1235635"
},
{
"category": "self",
"summary": "SUSE Bug 1235641",
"url": "https://bugzilla.suse.com/1235641"
},
{
"category": "self",
"summary": "SUSE Bug 1235643",
"url": "https://bugzilla.suse.com/1235643"
},
{
"category": "self",
"summary": "SUSE Bug 1235645",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "self",
"summary": "SUSE Bug 1235646",
"url": "https://bugzilla.suse.com/1235646"
},
{
"category": "self",
"summary": "SUSE Bug 1235647",
"url": "https://bugzilla.suse.com/1235647"
},
{
"category": "self",
"summary": "SUSE Bug 1235650",
"url": "https://bugzilla.suse.com/1235650"
},
{
"category": "self",
"summary": "SUSE Bug 1235653",
"url": "https://bugzilla.suse.com/1235653"
},
{
"category": "self",
"summary": "SUSE Bug 1235657",
"url": "https://bugzilla.suse.com/1235657"
},
{
"category": "self",
"summary": "SUSE Bug 1235663",
"url": "https://bugzilla.suse.com/1235663"
},
{
"category": "self",
"summary": "SUSE Bug 1235700",
"url": "https://bugzilla.suse.com/1235700"
},
{
"category": "self",
"summary": "SUSE Bug 1235705",
"url": "https://bugzilla.suse.com/1235705"
},
{
"category": "self",
"summary": "SUSE Bug 1235707",
"url": "https://bugzilla.suse.com/1235707"
},
{
"category": "self",
"summary": "SUSE Bug 1235708",
"url": "https://bugzilla.suse.com/1235708"
},
{
"category": "self",
"summary": "SUSE Bug 1235710",
"url": "https://bugzilla.suse.com/1235710"
},
{
"category": "self",
"summary": "SUSE Bug 1235714",
"url": "https://bugzilla.suse.com/1235714"
},
{
"category": "self",
"summary": "SUSE Bug 1235716",
"url": "https://bugzilla.suse.com/1235716"
},
{
"category": "self",
"summary": "SUSE Bug 1235720",
"url": "https://bugzilla.suse.com/1235720"
},
{
"category": "self",
"summary": "SUSE Bug 1235723",
"url": "https://bugzilla.suse.com/1235723"
},
{
"category": "self",
"summary": "SUSE Bug 1235727",
"url": "https://bugzilla.suse.com/1235727"
},
{
"category": "self",
"summary": "SUSE Bug 1235730",
"url": "https://bugzilla.suse.com/1235730"
},
{
"category": "self",
"summary": "SUSE Bug 1235737",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "self",
"summary": "SUSE Bug 1235739",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "self",
"summary": "SUSE Bug 1235745",
"url": "https://bugzilla.suse.com/1235745"
},
{
"category": "self",
"summary": "SUSE Bug 1235747",
"url": "https://bugzilla.suse.com/1235747"
},
{
"category": "self",
"summary": "SUSE Bug 1235750",
"url": "https://bugzilla.suse.com/1235750"
},
{
"category": "self",
"summary": "SUSE Bug 1235753",
"url": "https://bugzilla.suse.com/1235753"
},
{
"category": "self",
"summary": "SUSE Bug 1235759",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "self",
"summary": "SUSE Bug 1235764",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "self",
"summary": "SUSE Bug 1235768",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "self",
"summary": "SUSE Bug 1235776",
"url": "https://bugzilla.suse.com/1235776"
},
{
"category": "self",
"summary": "SUSE Bug 1235777",
"url": "https://bugzilla.suse.com/1235777"
},
{
"category": "self",
"summary": "SUSE Bug 1235778",
"url": "https://bugzilla.suse.com/1235778"
},
{
"category": "self",
"summary": "SUSE Bug 1235779",
"url": "https://bugzilla.suse.com/1235779"
},
{
"category": "self",
"summary": "SUSE Bug 1235793",
"url": "https://bugzilla.suse.com/1235793"
},
{
"category": "self",
"summary": "SUSE Bug 1235798",
"url": "https://bugzilla.suse.com/1235798"
},
{
"category": "self",
"summary": "SUSE Bug 1235806",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "self",
"summary": "SUSE Bug 1235808",
"url": "https://bugzilla.suse.com/1235808"
},
{
"category": "self",
"summary": "SUSE Bug 1235812",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "self",
"summary": "SUSE Bug 1235814",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "self",
"summary": "SUSE Bug 1235818",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "self",
"summary": "SUSE Bug 1235842",
"url": "https://bugzilla.suse.com/1235842"
},
{
"category": "self",
"summary": "SUSE Bug 1235894",
"url": "https://bugzilla.suse.com/1235894"
},
{
"category": "self",
"summary": "SUSE Bug 1235902",
"url": "https://bugzilla.suse.com/1235902"
},
{
"category": "self",
"summary": "SUSE Bug 1235903",
"url": "https://bugzilla.suse.com/1235903"
},
{
"category": "self",
"summary": "SUSE Bug 1235906",
"url": "https://bugzilla.suse.com/1235906"
},
{
"category": "self",
"summary": "SUSE Bug 1235918",
"url": "https://bugzilla.suse.com/1235918"
},
{
"category": "self",
"summary": "SUSE Bug 1235919",
"url": "https://bugzilla.suse.com/1235919"
},
{
"category": "self",
"summary": "SUSE Bug 1235920",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "self",
"summary": "SUSE Bug 1235924",
"url": "https://bugzilla.suse.com/1235924"
},
{
"category": "self",
"summary": "SUSE Bug 1235940",
"url": "https://bugzilla.suse.com/1235940"
},
{
"category": "self",
"summary": "SUSE Bug 1235946",
"url": "https://bugzilla.suse.com/1235946"
},
{
"category": "self",
"summary": "SUSE Bug 1235952",
"url": "https://bugzilla.suse.com/1235952"
},
{
"category": "self",
"summary": "SUSE Bug 1235964",
"url": "https://bugzilla.suse.com/1235964"
},
{
"category": "self",
"summary": "SUSE Bug 1235965",
"url": "https://bugzilla.suse.com/1235965"
},
{
"category": "self",
"summary": "SUSE Bug 1235967",
"url": "https://bugzilla.suse.com/1235967"
},
{
"category": "self",
"summary": "SUSE Bug 1235969",
"url": "https://bugzilla.suse.com/1235969"
},
{
"category": "self",
"summary": "SUSE Bug 1235976",
"url": "https://bugzilla.suse.com/1235976"
},
{
"category": "self",
"summary": "SUSE Bug 1235977",
"url": "https://bugzilla.suse.com/1235977"
},
{
"category": "self",
"summary": "SUSE Bug 1236078",
"url": "https://bugzilla.suse.com/1236078"
},
{
"category": "self",
"summary": "SUSE Bug 1236080",
"url": "https://bugzilla.suse.com/1236080"
},
{
"category": "self",
"summary": "SUSE Bug 1236082",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "self",
"summary": "SUSE Bug 1236088",
"url": "https://bugzilla.suse.com/1236088"
},
{
"category": "self",
"summary": "SUSE Bug 1236090",
"url": "https://bugzilla.suse.com/1236090"
},
{
"category": "self",
"summary": "SUSE Bug 1236091",
"url": "https://bugzilla.suse.com/1236091"
},
{
"category": "self",
"summary": "SUSE Bug 1236096",
"url": "https://bugzilla.suse.com/1236096"
},
{
"category": "self",
"summary": "SUSE Bug 1236097",
"url": "https://bugzilla.suse.com/1236097"
},
{
"category": "self",
"summary": "SUSE Bug 1236098",
"url": "https://bugzilla.suse.com/1236098"
},
{
"category": "self",
"summary": "SUSE Bug 1236101",
"url": "https://bugzilla.suse.com/1236101"
},
{
"category": "self",
"summary": "SUSE Bug 1236102",
"url": "https://bugzilla.suse.com/1236102"
},
{
"category": "self",
"summary": "SUSE Bug 1236104",
"url": "https://bugzilla.suse.com/1236104"
},
{
"category": "self",
"summary": "SUSE Bug 1236106",
"url": "https://bugzilla.suse.com/1236106"
},
{
"category": "self",
"summary": "SUSE Bug 1236120",
"url": "https://bugzilla.suse.com/1236120"
},
{
"category": "self",
"summary": "SUSE Bug 1236125",
"url": "https://bugzilla.suse.com/1236125"
},
{
"category": "self",
"summary": "SUSE Bug 1236131",
"url": "https://bugzilla.suse.com/1236131"
},
{
"category": "self",
"summary": "SUSE Bug 1236138",
"url": "https://bugzilla.suse.com/1236138"
},
{
"category": "self",
"summary": "SUSE Bug 1236143",
"url": "https://bugzilla.suse.com/1236143"
},
{
"category": "self",
"summary": "SUSE Bug 1236144",
"url": "https://bugzilla.suse.com/1236144"
},
{
"category": "self",
"summary": "SUSE Bug 1236145",
"url": "https://bugzilla.suse.com/1236145"
},
{
"category": "self",
"summary": "SUSE Bug 1236168",
"url": "https://bugzilla.suse.com/1236168"
},
{
"category": "self",
"summary": "SUSE Bug 1236178",
"url": "https://bugzilla.suse.com/1236178"
},
{
"category": "self",
"summary": "SUSE Bug 1236180",
"url": "https://bugzilla.suse.com/1236180"
},
{
"category": "self",
"summary": "SUSE Bug 1236181",
"url": "https://bugzilla.suse.com/1236181"
},
{
"category": "self",
"summary": "SUSE Bug 1236190",
"url": "https://bugzilla.suse.com/1236190"
},
{
"category": "self",
"summary": "SUSE Bug 1236198",
"url": "https://bugzilla.suse.com/1236198"
},
{
"category": "self",
"summary": "SUSE Bug 1236227",
"url": "https://bugzilla.suse.com/1236227"
},
{
"category": "self",
"summary": "SUSE Bug 1236248",
"url": "https://bugzilla.suse.com/1236248"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52489 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52489/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52923 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26596 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26924 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27397 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35839 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36476 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39282 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39480 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41042 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44934 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44996 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46680 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46765 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46800 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48873 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49854 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49944 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49952 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49998 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50016 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50018 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50039 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50047 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50051 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50106 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50211 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50228 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50252 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50252/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50256 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50256/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50262 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50272 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50272/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50278 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50279 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50279/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50280 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50296 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50296/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50299 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52332 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53043 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53050 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53051 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53055 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53055/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53056 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53056/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53064 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53090 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53091 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53095 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53099 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53103 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53105 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53110 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53110/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53111 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53113 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53117 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53118 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53119 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53120 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53121 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53121/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53122 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53125 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53127 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53129 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53130 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53131 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53133 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53134 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53136 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53138 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53138/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53142 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53144 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53148 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53150 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53155 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53156 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53157 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53158 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53159 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53160 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53161 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53162 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53164 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53166 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53168 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53169 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53170 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53171 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53172 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53173 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53174 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53175 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53179 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53180 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53188 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53190 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53191 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53194 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53195 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53196 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53197 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53198 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53200 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53201 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53206 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53207 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53208 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53209 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53210 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53213 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53214 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53215 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53216 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53217 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53222 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53224 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53229 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53230 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53231 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53232 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53233 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53234 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53236 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53237 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53239 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53240 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53241 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53685 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-54680 page",
"url": "https://www.suse.com/security/cve/CVE-2024-54680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55639 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56369 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56372 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56531 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56533 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56536 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56538 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56539 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56543 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56546 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56548 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56549 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56551 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56557 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56558 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56562 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56566 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56567 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56568 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56570 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56571 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56572 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56573 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56574 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56575 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56576 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56577 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56578 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56582 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56584 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56587 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56588 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56589 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56590 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56593 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56594 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56595 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56596 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56597 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56598 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56599 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56602 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56603 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56604 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56605 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56606 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56607 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56609 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56611 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56614 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56616 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56617 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56619 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56620 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56622 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56623 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56625 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56629 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56631 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56632 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56634 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56635 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56636 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56637 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56641 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56642 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56643 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56644 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56645 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56648 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56649 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56651 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56654 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56656 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56659 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56661 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56662 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56663 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56664 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56667 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56670 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56672 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56675 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56677 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56681 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56683 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56687 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56688 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56691 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56694 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56698 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56700 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56701 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56704 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56705 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56708 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56709 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56712 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56716 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56722 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56723 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56724 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56729 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56741 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56745 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56746 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56747 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56748 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56752 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56754 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56755 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56756 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56759 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56760 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56765 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56766 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56767 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56769 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56774 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56775 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56776 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56777 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56778 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56779 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56780 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56787 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57791 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57792 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57793 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57795 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57798 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57801 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57804 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57838 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57849 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57850 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57874 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57876 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57887 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57888 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57890 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57892 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57893 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57906 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57910 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57912 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57926 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57933 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-8805 page",
"url": "https://www.suse.com/security/cve/CVE-2024-8805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21632 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21645 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21646 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21649 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21650 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21651 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21656 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21662 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21662/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2025-01-29T16:11:29Z",
"generator": {
"date": "2025-01-29T16:11:29Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:0289-1",
"initial_release_date": "2025-01-29T16:11:29Z",
"revision_history": [
{
"date": "2025-01-29T16:11:29Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"product": {
"name": "kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"product_id": "kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"product": {
"name": "kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"product_id": "kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "cluster-md-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "cluster-md-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "dlm-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "dlm-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "gfs2-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "gfs2-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco-extra-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco-extra-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco-extra-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco-livepatch-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco-livepatch-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco-livepatch-devel-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco-optional-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco-optional-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco-optional-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco-vdso-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco-vdso-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco-vdso-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-coco_debug-vdso-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-coco_debug-vdso-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-coco_debug-vdso-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "kselftests-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "kselftests-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "ocfs2-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "ocfs2-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product": {
"name": "reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"product_id": "reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-confidential-computing:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64 as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
},
"product_reference": "kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64 as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64"
},
"product_reference": "kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64 as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64"
},
"product_reference": "kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64 as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64"
},
"product_reference": "kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch"
},
"product_reference": "kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch"
},
"product_reference": "kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64 as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
},
"product_reference": "kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64 as component of SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6",
"product_id": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
},
"product_reference": "reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52489",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52489"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/sparsemem: fix race in accessing memory_section-\u003eusage\n\nThe below race is observed on a PFN which falls into the device memory\nregion with the system memory configuration where PFN\u0027s are such that\n[ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL]. Since normal zone start and end\npfn contains the device memory PFN\u0027s as well, the compaction triggered\nwill try on the device memory PFN\u0027s too though they end up in NOP(because\npfn_to_online_page() returns NULL for ZONE_DEVICE memory sections). When\nfrom other core, the section mappings are being removed for the\nZONE_DEVICE region, that the PFN in question belongs to, on which\ncompaction is currently being operated is resulting into the kernel crash\nwith CONFIG_SPASEMEM_VMEMAP enabled. The crash logs can be seen at [1].\n\ncompact_zone()\t\t\tmemunmap_pages\n-------------\t\t\t---------------\n__pageblock_pfn_to_page\n ......\n (a)pfn_valid():\n valid_section()//return true\n\t\t\t (b)__remove_pages()-\u003e\n\t\t\t\t sparse_remove_section()-\u003e\n\t\t\t\t section_deactivate():\n\t\t\t\t [Free the array ms-\u003eusage and set\n\t\t\t\t ms-\u003eusage = NULL]\n pfn_section_valid()\n [Access ms-\u003eusage which\n is NULL]\n\nNOTE: From the above it can be said that the race is reduced to between\nthe pfn_valid()/pfn_section_valid() and the section deactivate with\nSPASEMEM_VMEMAP enabled.\n\nThe commit b943f045a9af(\"mm/sparse: fix kernel crash with\npfn_section_valid check\") tried to address the same problem by clearing\nthe SECTION_HAS_MEM_MAP with the expectation of valid_section() returns\nfalse thus ms-\u003eusage is not accessed.\n\nFix this issue by the below steps:\n\na) Clear SECTION_HAS_MEM_MAP before freeing the -\u003eusage.\n\nb) RCU protected read side critical section will either return NULL\n when SECTION_HAS_MEM_MAP is cleared or can successfully access -\u003eusage.\n\nc) Free the -\u003eusage with kfree_rcu() and set ms-\u003eusage = NULL. No\n attempt will be made to access -\u003eusage after this as the\n SECTION_HAS_MEM_MAP is cleared thus valid_section() return false.\n\nThanks to David/Pavan for their inputs on this patch.\n\n[1] https://lore.kernel.org/linux-mm/994410bb-89aa-d987-1f50-f514903c55aa@quicinc.com/\n\nOn Snapdragon SoC, with the mentioned memory configuration of PFN\u0027s as\n[ZONE_NORMAL ZONE_DEVICE ZONE_NORMAL], we are able to see bunch of\nissues daily while testing on a device farm.\n\nFor this particular issue below is the log. Though the below log is\nnot directly pointing to the pfn_section_valid(){ ms-\u003eusage;}, when we\nloaded this dump on T32 lauterbach tool, it is pointing.\n\n[ 540.578056] Unable to handle kernel NULL pointer dereference at\nvirtual address 0000000000000000\n[ 540.578068] Mem abort info:\n[ 540.578070] ESR = 0x0000000096000005\n[ 540.578073] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 540.578077] SET = 0, FnV = 0\n[ 540.578080] EA = 0, S1PTW = 0\n[ 540.578082] FSC = 0x05: level 1 translation fault\n[ 540.578085] Data abort info:\n[ 540.578086] ISV = 0, ISS = 0x00000005\n[ 540.578088] CM = 0, WnR = 0\n[ 540.579431] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBSBTYPE=--)\n[ 540.579436] pc : __pageblock_pfn_to_page+0x6c/0x14c\n[ 540.579454] lr : compact_zone+0x994/0x1058\n[ 540.579460] sp : ffffffc03579b510\n[ 540.579463] x29: ffffffc03579b510 x28: 0000000000235800 x27:000000000000000c\n[ 540.579470] x26: 0000000000235c00 x25: 0000000000000068 x24:ffffffc03579b640\n[ 540.579477] x23: 0000000000000001 x22: ffffffc03579b660 x21:0000000000000000\n[ 540.579483] x20: 0000000000235bff x19: ffffffdebf7e3940 x18:ffffffdebf66d140\n[ 540.579489] x17: 00000000739ba063 x16: 00000000739ba063 x15:00000000009f4bff\n[ 540.579495] x14: 0000008000000000 x13: 0000000000000000 x12:0000000000000001\n[ 540.579501] x11: 0000000000000000 x10: 0000000000000000 x9 :ffffff897d2cd440\n[ 540.579507] x8 : 0000000000000000 x7 : 0000000000000000 x6 :ffffffc03579b5b4\n[ 540.579512] x5 : 0000000000027f25 x4 : ffffffc03579b5b8 x3 :0000000000000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52489",
"url": "https://www.suse.com/security/cve/CVE-2023-52489"
},
{
"category": "external",
"summary": "SUSE Bug 1221326 for CVE-2023-52489",
"url": "https://bugzilla.suse.com/1221326"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2023-52489"
},
{
"cve": "CVE-2023-52923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: adapt set backend to use GC transaction API\n\nUse the GC transaction API to replace the old and buggy gc API and the\nbusy mark approach.\n\nNo set elements are removed from async garbage collection anymore,\ninstead the _DEAD bit is set on so the set element is not visible from\nlookup path anymore. Async GC enqueues transaction work that might be\naborted and retried later.\n\nrbtree and pipapo set backends does not set on the _DEAD bit from the\nsync GC path since this runs in control plane path where mutex is held.\nIn this case, set elements are deactivated, removed and then released\nvia RCU callback, sync GC never fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52923",
"url": "https://www.suse.com/security/cve/CVE-2023-52923"
},
{
"category": "external",
"summary": "SUSE Bug 1236104 for CVE-2023-52923",
"url": "https://bugzilla.suse.com/1236104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2023-52923"
},
{
"cve": "CVE-2024-26596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26596"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events\n\nAfter the blamed commit, we started doing this dereference for every\nNETDEV_CHANGEUPPER and NETDEV_PRECHANGEUPPER event in the system.\n\nstatic inline struct dsa_port *dsa_user_to_port(const struct net_device *dev)\n{\n\tstruct dsa_user_priv *p = netdev_priv(dev);\n\n\treturn p-\u003edp;\n}\n\nWhich is obviously bogus, because not all net_devices have a netdev_priv()\nof type struct dsa_user_priv. But struct dsa_user_priv is fairly small,\nand p-\u003edp means dereferencing 8 bytes starting with offset 16. Most\ndrivers allocate that much private memory anyway, making our access not\nfault, and we discard the bogus data quickly afterwards, so this wasn\u0027t\ncaught.\n\nBut the dummy interface is somewhat special in that it calls\nalloc_netdev() with a priv size of 0. So every netdev_priv() dereference\nis invalid, and we get this when we emit a NETDEV_PRECHANGEUPPER event\nwith a VLAN as its new upper:\n\n$ ip link add dummy1 type dummy\n$ ip link add link dummy1 name dummy1.100 type vlan id 100\n[ 43.309174] ==================================================================\n[ 43.316456] BUG: KASAN: slab-out-of-bounds in dsa_user_prechangeupper+0x30/0xe8\n[ 43.323835] Read of size 8 at addr ffff3f86481d2990 by task ip/374\n[ 43.330058]\n[ 43.342436] Call trace:\n[ 43.366542] dsa_user_prechangeupper+0x30/0xe8\n[ 43.371024] dsa_user_netdevice_event+0xb38/0xee8\n[ 43.375768] notifier_call_chain+0xa4/0x210\n[ 43.379985] raw_notifier_call_chain+0x24/0x38\n[ 43.384464] __netdev_upper_dev_link+0x3ec/0x5d8\n[ 43.389120] netdev_upper_dev_link+0x70/0xa8\n[ 43.393424] register_vlan_dev+0x1bc/0x310\n[ 43.397554] vlan_newlink+0x210/0x248\n[ 43.401247] rtnl_newlink+0x9fc/0xe30\n[ 43.404942] rtnetlink_rcv_msg+0x378/0x580\n\nAvoid the kernel oops by dereferencing after the type check, as customary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26596",
"url": "https://www.suse.com/security/cve/CVE-2024-26596"
},
{
"category": "external",
"summary": "SUSE Bug 1220355 for CVE-2024-26596",
"url": "https://bugzilla.suse.com/1220355"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-26596"
},
{
"cve": "CVE-2024-26924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_pipapo: do not free live element\n\nPablo reports a crash with large batches of elements with a\nback-to-back add/remove pattern. Quoting Pablo:\n\n add_elem(\"00000000\") timeout 100 ms\n ...\n add_elem(\"0000000X\") timeout 100 ms\n del_elem(\"0000000X\") \u003c---------------- delete one that was just added\n ...\n add_elem(\"00005000\") timeout 100 ms\n\n 1) nft_pipapo_remove() removes element 0000000X\n Then, KASAN shows a splat.\n\nLooking at the remove function there is a chance that we will drop a\nrule that maps to a non-deactivated element.\n\nRemoval happens in two steps, first we do a lookup for key k and return the\nto-be-removed element and mark it as inactive in the next generation.\nThen, in a second step, the element gets removed from the set/map.\n\nThe _remove function does not work correctly if we have more than one\nelement that share the same key.\n\nThis can happen if we insert an element into a set when the set already\nholds an element with same key, but the element mapping to the existing\nkey has timed out or is not active in the next generation.\n\nIn such case its possible that removal will unmap the wrong element.\nIf this happens, we will leak the non-deactivated element, it becomes\nunreachable.\n\nThe element that got deactivated (and will be freed later) will\nremain reachable in the set data structure, this can result in\na crash when such an element is retrieved during lookup (stale\npointer).\n\nAdd a check that the fully matching key does in fact map to the element\nthat we have marked as inactive in the deactivation step.\nIf not, we need to continue searching.\n\nAdd a bug/warn trap at the end of the function as well, the remove\nfunction must not ever be called with an invisible/unreachable/non-existent\nelement.\n\nv2: avoid uneeded temporary variable (Stefano)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26924",
"url": "https://www.suse.com/security/cve/CVE-2024-26924"
},
{
"category": "external",
"summary": "SUSE Bug 1223387 for CVE-2024-26924",
"url": "https://bugzilla.suse.com/1223387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-26924"
},
{
"cve": "CVE-2024-27397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27397"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: use timestamp to check for set element timeout\n\nAdd a timestamp field at the beginning of the transaction, store it\nin the nftables per-netns area.\n\nUpdate set backend .insert, .deactivate and sync gc path to use the\ntimestamp, this avoids that an element expires while control plane\ntransaction is still unfinished.\n\n.lookup and .update, which are used from packet path, still use the\ncurrent time to check if the element has expired. And .get path and dump\nalso since this runs lockless under rcu read size lock. Then, there is\nasync gc which also needs to check the current time since it runs\nasynchronously from a workqueue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27397",
"url": "https://www.suse.com/security/cve/CVE-2024-27397"
},
{
"category": "external",
"summary": "SUSE Bug 1224095 for CVE-2024-27397",
"url": "https://bugzilla.suse.com/1224095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-27397"
},
{
"cve": "CVE-2024-35839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35839"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: replace physindev with physinif in nf_bridge_info\n\nAn skb can be added to a neigh-\u003earp_queue while waiting for an arp\nreply. Where original skb\u0027s skb-\u003edev can be different to neigh\u0027s\nneigh-\u003edev. For instance in case of bridging dnated skb from one veth to\nanother, the skb would be added to a neigh-\u003earp_queue of the bridge.\n\nAs skb-\u003edev can be reset back to nf_bridge-\u003ephysindev and used, and as\nthere is no explicit mechanism that prevents this physindev from been\nfreed under us (for instance neigh_flush_dev doesn\u0027t cleanup skbs from\ndifferent device\u0027s neigh queue) we can crash on e.g. this stack:\n\narp_process\n neigh_update\n skb = __skb_dequeue(\u0026neigh-\u003earp_queue)\n neigh_resolve_output(..., skb)\n ...\n br_nf_dev_xmit\n br_nf_pre_routing_finish_bridge_slow\n skb-\u003edev = nf_bridge-\u003ephysindev\n br_handle_frame_finish\n\nLet\u0027s use plain ifindex instead of net_device link. To peek into the\noriginal net_device we will use dev_get_by_index_rcu(). Thus either we\nget device and are safe to use it or we don\u0027t get it and drop skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35839",
"url": "https://www.suse.com/security/cve/CVE-2024-35839"
},
{
"category": "external",
"summary": "SUSE Bug 1224726 for CVE-2024-35839",
"url": "https://bugzilla.suse.com/1224726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-35839"
},
{
"cve": "CVE-2024-36476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36476"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible\n\nMove the declaration of the \u0027ib_sge list\u0027 variable outside the\n\u0027always_invalidate\u0027 block to ensure it remains accessible for use\nthroughout the function.\n\nPreviously, \u0027ib_sge list\u0027 was declared within the \u0027always_invalidate\u0027\nblock, limiting its accessibility, then caused a\n\u0027BUG: kernel NULL pointer dereference\u0027[1].\n ? __die_body.cold+0x19/0x27\n ? page_fault_oops+0x15a/0x2d0\n ? search_module_extables+0x19/0x60\n ? search_bpf_extables+0x5f/0x80\n ? exc_page_fault+0x7e/0x180\n ? asm_exc_page_fault+0x26/0x30\n ? memcpy_orig+0xd5/0x140\n rxe_mr_copy+0x1c3/0x200 [rdma_rxe]\n ? rxe_pool_get_index+0x4b/0x80 [rdma_rxe]\n copy_data+0xa5/0x230 [rdma_rxe]\n rxe_requester+0xd9b/0xf70 [rdma_rxe]\n ? finish_task_switch.isra.0+0x99/0x2e0\n rxe_sender+0x13/0x40 [rdma_rxe]\n do_task+0x68/0x1e0 [rdma_rxe]\n process_one_work+0x177/0x330\n worker_thread+0x252/0x390\n ? __pfx_worker_thread+0x10/0x10\n\nThis change ensures the variable is available for subsequent operations\nthat require it.\n\n[1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-bc69-a9b03ecfcda7@fujitsu.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36476",
"url": "https://www.suse.com/security/cve/CVE-2024-36476"
},
{
"category": "external",
"summary": "SUSE Bug 1235902 for CVE-2024-36476",
"url": "https://bugzilla.suse.com/1235902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-36476"
},
{
"cve": "CVE-2024-36908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-iocost: do not WARN if iocg was already offlined\n\nIn iocg_pay_debt(), warn is triggered if \u0027active_list\u0027 is empty, which\nis intended to confirm iocg is active when it has debt. However, warn\ncan be triggered during a blkcg or disk removal, if iocg_waitq_timer_fn()\nis run at that time:\n\n WARNING: CPU: 0 PID: 2344971 at block/blk-iocost.c:1402 iocg_pay_debt+0x14c/0x190\n Call trace:\n iocg_pay_debt+0x14c/0x190\n iocg_kick_waitq+0x438/0x4c0\n iocg_waitq_timer_fn+0xd8/0x130\n __run_hrtimer+0x144/0x45c\n __hrtimer_run_queues+0x16c/0x244\n hrtimer_interrupt+0x2cc/0x7b0\n\nThe warn in this situation is meaningless. Since this iocg is being\nremoved, the state of the \u0027active_list\u0027 is irrelevant, and \u0027waitq_timer\u0027\nis canceled after removing \u0027active_list\u0027 in ioc_pd_free(), which ensures\niocg is freed after iocg_waitq_timer_fn() returns.\n\nTherefore, add the check if iocg was already offlined to avoid warn\nwhen removing a blkcg or disk.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36908",
"url": "https://www.suse.com/security/cve/CVE-2024-36908"
},
{
"category": "external",
"summary": "SUSE Bug 1225743 for CVE-2024-36908",
"url": "https://bugzilla.suse.com/1225743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-36908"
},
{
"cve": "CVE-2024-36915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: fix nfc_llcp_setsockopt() unsafe copies\n\nsyzbot reported unsafe calls to copy_from_sockptr() [1]\n\nUse copy_safe_from_sockptr() instead.\n\n[1]\n\nBUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset include/linux/sockptr.h:49 [inline]\n BUG: KASAN: slab-out-of-bounds in copy_from_sockptr include/linux/sockptr.h:55 [inline]\n BUG: KASAN: slab-out-of-bounds in nfc_llcp_setsockopt+0x6c2/0x850 net/nfc/llcp_sock.c:255\nRead of size 4 at addr ffff88801caa1ec3 by task syz-executor459/5078\n\nCPU: 0 PID: 5078 Comm: syz-executor459 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n copy_from_sockptr_offset include/linux/sockptr.h:49 [inline]\n copy_from_sockptr include/linux/sockptr.h:55 [inline]\n nfc_llcp_setsockopt+0x6c2/0x850 net/nfc/llcp_sock.c:255\n do_sock_setsockopt+0x3b1/0x720 net/socket.c:2311\n __sys_setsockopt+0x1ae/0x250 net/socket.c:2334\n __do_sys_setsockopt net/socket.c:2343 [inline]\n __se_sys_setsockopt net/socket.c:2340 [inline]\n __x64_sys_setsockopt+0xb5/0xd0 net/socket.c:2340\n do_syscall_64+0xfd/0x240\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\nRIP: 0033:0x7f7fac07fd89\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fff660eb788 EFLAGS: 00000246 ORIG_RAX: 0000000000000036\nRAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7fac07fd89\nRDX: 0000000000000000 RSI: 0000000000000118 RDI: 0000000000000004\nRBP: 0000000000000000 R08: 0000000000000002 R09: 0000000000000000\nR10: 0000000020000a80 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36915",
"url": "https://www.suse.com/security/cve/CVE-2024-36915"
},
{
"category": "external",
"summary": "SUSE Bug 1225758 for CVE-2024-36915",
"url": "https://bugzilla.suse.com/1225758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-36915"
},
{
"cve": "CVE-2024-39282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39282"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: Fix FSM command timeout issue\n\nWhen driver processes the internal state change command, it use an\nasynchronous thread to process the command operation. If the main\nthread detects that the task has timed out, the asynchronous thread\nwill panic when executing the completion notification because the\nmain thread completion object has been released.\n\nBUG: unable to handle page fault for address: fffffffffffffff8\nPGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nRIP: 0010:complete_all+0x3e/0xa0\n[...]\nCall Trace:\n \u003cTASK\u003e\n ? __die_body+0x68/0xb0\n ? page_fault_oops+0x379/0x3e0\n ? exc_page_fault+0x69/0xa0\n ? asm_exc_page_fault+0x22/0x30\n ? complete_all+0x3e/0xa0\n fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_autoremove_wake_function+0x10/0x10\n kthread+0xd8/0x110\n ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x38/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n[...]\nCR2: fffffffffffffff8\n---[ end trace 0000000000000000 ]---\n\nUse the reference counter to ensure safe release as Sergey suggests:\nhttps://lore.kernel.org/all/da90f64c-260a-4329-87bf-1f9ff20a5951@gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39282",
"url": "https://www.suse.com/security/cve/CVE-2024-39282"
},
{
"category": "external",
"summary": "SUSE Bug 1235903 for CVE-2024-39282",
"url": "https://bugzilla.suse.com/1235903"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-39282"
},
{
"cve": "CVE-2024-39480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39480"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkdb: Fix buffer overflow during tab-complete\n\nCurrently, when the user attempts symbol completion with the Tab key, kdb\nwill use strncpy() to insert the completed symbol into the command buffer.\nUnfortunately it passes the size of the source buffer rather than the\ndestination to strncpy() with predictably horrible results. Most obviously\nif the command buffer is already full but cp, the cursor position, is in\nthe middle of the buffer, then we will write past the end of the supplied\nbuffer.\n\nFix this by replacing the dubious strncpy() calls with memmove()/memcpy()\ncalls plus explicit boundary checks to make sure we have enough space\nbefore we start moving characters around.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39480",
"url": "https://www.suse.com/security/cve/CVE-2024-39480"
},
{
"category": "external",
"summary": "SUSE Bug 1227445 for CVE-2024-39480",
"url": "https://bugzilla.suse.com/1227445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-39480"
},
{
"cve": "CVE-2024-41042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41042"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: prefer nft_chain_validate\n\nnft_chain_validate already performs loop detection because a cycle will\nresult in a call stack overflow (ctx-\u003elevel \u003e= NFT_JUMP_STACK_SIZE).\n\nIt also follows maps via -\u003evalidate callback in nft_lookup, so there\nappears no reason to iterate the maps again.\n\nnf_tables_check_loops() and all its helper functions can be removed.\nThis improves ruleset load time significantly, from 23s down to 12s.\n\nThis also fixes a crash bug. Old loop detection code can result in\nunbounded recursion:\n\nBUG: TASK stack guard page was hit at ....\nOops: stack guard page: 0000 [#1] PREEMPT SMP KASAN\nCPU: 4 PID: 1539 Comm: nft Not tainted 6.10.0-rc5+ #1\n[..]\n\nwith a suitable ruleset during validation of register stores.\n\nI can\u0027t see any actual reason to attempt to check for this from\nnft_validate_register_store(), at this point the transaction is still in\nprogress, so we don\u0027t have a full picture of the rule graph.\n\nFor nf-next it might make sense to either remove it or make this depend\non table-\u003evalidate_state in case we could catch an error earlier\n(for improved error reporting to userspace).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41042",
"url": "https://www.suse.com/security/cve/CVE-2024-41042"
},
{
"category": "external",
"summary": "SUSE Bug 1228526 for CVE-2024-41042",
"url": "https://bugzilla.suse.com/1228526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-41042"
},
{
"cve": "CVE-2024-43913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: apple: fix device reference counting\n\nDrivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl.\nSplit the allocation side out to make the error handling boundary easier\nto navigate. The apple driver had been doing this wrong, leaking the\ncontroller device memory on a tagset failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43913",
"url": "https://www.suse.com/security/cve/CVE-2024-43913"
},
{
"category": "external",
"summary": "SUSE Bug 1229833 for CVE-2024-43913",
"url": "https://bugzilla.suse.com/1229833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-43913"
},
{
"cve": "CVE-2024-44934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44934"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: wait for previous gc cycles when removing port\n\nsyzbot hit a use-after-free[1] which is caused because the bridge doesn\u0027t\nmake sure that all previous garbage has been collected when removing a\nport. What happens is:\n CPU 1 CPU 2\n start gc cycle remove port\n acquire gc lock first\n wait for lock\n call br_multicasg_gc() directly\n acquire lock now but free port\n the port can be freed\n while grp timers still\n running\n\nMake sure all previous gc cycles have finished by using flush_work before\nfreeing the port.\n\n[1]\n BUG: KASAN: slab-use-after-free in br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n Read of size 8 at addr ffff888071d6d000 by task syz.5.1232/9699\n\n CPU: 1 PID: 9699 Comm: syz.5.1232 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024\n Call Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0xc3/0x620 mm/kasan/report.c:488\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n call_timer_fn+0x1a3/0x610 kernel/time/timer.c:1792\n expire_timers kernel/time/timer.c:1843 [inline]\n __run_timers+0x74b/0xaf0 kernel/time/timer.c:2417\n __run_timer_base kernel/time/timer.c:2428 [inline]\n __run_timer_base kernel/time/timer.c:2421 [inline]\n run_timer_base+0x111/0x190 kernel/time/timer.c:2437",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44934",
"url": "https://www.suse.com/security/cve/CVE-2024-44934"
},
{
"category": "external",
"summary": "SUSE Bug 1229809 for CVE-2024-44934",
"url": "https://bugzilla.suse.com/1229809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-44934"
},
{
"cve": "CVE-2024-44996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44996"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: fix recursive -\u003erecvmsg calls\n\nAfter a vsock socket has been added to a BPF sockmap, its prot-\u003erecvmsg\nhas been replaced with vsock_bpf_recvmsg(). Thus the following\nrecursiion could happen:\n\nvsock_bpf_recvmsg()\n -\u003e __vsock_recvmsg()\n -\u003e vsock_connectible_recvmsg()\n -\u003e prot-\u003erecvmsg()\n -\u003e vsock_bpf_recvmsg() again\n\nWe need to fix it by calling the original -\u003erecvmsg() without any BPF\nsockmap logic in __vsock_recvmsg().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44996",
"url": "https://www.suse.com/security/cve/CVE-2024-44996"
},
{
"category": "external",
"summary": "SUSE Bug 1230205 for CVE-2024-44996",
"url": "https://bugzilla.suse.com/1230205"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-44996"
},
{
"cve": "CVE-2024-45828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Mask ring interrupts before ring stop request\n\nBus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when\nthe ring is being stopped. Depending on timing between ring stop request\ncompletion, interrupt handler removal and code execution this may lead\nto a NULL pointer dereference in hci_dma_irq_handler() if it gets to run\nafter the io_data pointer is set to NULL in hci_dma_cleanup().\n\nPrevent this my masking the ring interrupts before ring stop request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45828",
"url": "https://www.suse.com/security/cve/CVE-2024-45828"
},
{
"category": "external",
"summary": "SUSE Bug 1235705 for CVE-2024-45828",
"url": "https://bugzilla.suse.com/1235705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-45828"
},
{
"cve": "CVE-2024-46680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46680"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btnxpuart: Fix random crash seen while removing driver\n\nThis fixes the random kernel crash seen while removing the driver, when\nrunning the load/unload test over multiple iterations.\n\n1) modprobe btnxpuart\n2) hciconfig hci0 reset\n3) hciconfig (check hci0 interface up with valid BD address)\n4) modprobe -r btnxpuart\nRepeat steps 1 to 4\n\nThe ps_wakeup() call in btnxpuart_close() schedules the psdata-\u003ework(),\nwhich gets scheduled after module is removed, causing a kernel crash.\n\nThis hidden issue got highlighted after enabling Power Save by default\nin 4183a7be7700 (Bluetooth: btnxpuart: Enable Power Save feature on\nstartup)\n\nThe new ps_cleanup() deasserts UART break immediately while closing\nserdev device, cancels any scheduled ps_work and destroys the ps_lock\nmutex.\n\n[ 85.884604] Unable to handle kernel paging request at virtual address ffffd4a61638f258\n[ 85.884624] Mem abort info:\n[ 85.884625] ESR = 0x0000000086000007\n[ 85.884628] EC = 0x21: IABT (current EL), IL = 32 bits\n[ 85.884633] SET = 0, FnV = 0\n[ 85.884636] EA = 0, S1PTW = 0\n[ 85.884638] FSC = 0x07: level 3 translation fault\n[ 85.884642] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000041dd0000\n[ 85.884646] [ffffd4a61638f258] pgd=1000000095fff003, p4d=1000000095fff003, pud=100000004823d003, pmd=100000004823e003, pte=0000000000000000\n[ 85.884662] Internal error: Oops: 0000000086000007 [#1] PREEMPT SMP\n[ 85.890932] Modules linked in: algif_hash algif_skcipher af_alg overlay fsl_jr_uio caam_jr caamkeyblob_desc caamhash_desc caamalg_desc crypto_engine authenc libdes crct10dif_ce polyval_ce polyval_generic snd_soc_imx_spdif snd_soc_imx_card snd_soc_ak5558 snd_soc_ak4458 caam secvio error snd_soc_fsl_spdif snd_soc_fsl_micfil snd_soc_fsl_sai snd_soc_fsl_utils gpio_ir_recv rc_core fuse [last unloaded: btnxpuart(O)]\n[ 85.927297] CPU: 1 PID: 67 Comm: kworker/1:3 Tainted: G O 6.1.36+g937b1be4345a #1\n[ 85.936176] Hardware name: FSL i.MX8MM EVK board (DT)\n[ 85.936182] Workqueue: events 0xffffd4a61638f380\n[ 85.936198] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 85.952817] pc : 0xffffd4a61638f258\n[ 85.952823] lr : 0xffffd4a61638f258\n[ 85.952827] sp : ffff8000084fbd70\n[ 85.952829] x29: ffff8000084fbd70 x28: 0000000000000000 x27: 0000000000000000\n[ 85.963112] x26: ffffd4a69133f000 x25: ffff4bf1c8540990 x24: ffff4bf215b87305\n[ 85.963119] x23: ffff4bf215b87300 x22: ffff4bf1c85409d0 x21: ffff4bf1c8540970\n[ 85.977382] x20: 0000000000000000 x19: ffff4bf1c8540880 x18: 0000000000000000\n[ 85.977391] x17: 0000000000000000 x16: 0000000000000133 x15: 0000ffffe2217090\n[ 85.977399] x14: 0000000000000001 x13: 0000000000000133 x12: 0000000000000139\n[ 85.977407] x11: 0000000000000001 x10: 0000000000000a60 x9 : ffff8000084fbc50\n[ 85.977417] x8 : ffff4bf215b7d000 x7 : ffff4bf215b83b40 x6 : 00000000000003e8\n[ 85.977424] x5 : 00000000410fd030 x4 : 0000000000000000 x3 : 0000000000000000\n[ 85.977432] x2 : 0000000000000000 x1 : ffff4bf1c4265880 x0 : 0000000000000000\n[ 85.977443] Call trace:\n[ 85.977446] 0xffffd4a61638f258\n[ 85.977451] 0xffffd4a61638f3e8\n[ 85.977455] process_one_work+0x1d4/0x330\n[ 85.977464] worker_thread+0x6c/0x430\n[ 85.977471] kthread+0x108/0x10c\n[ 85.977476] ret_from_fork+0x10/0x20\n[ 85.977488] Code: bad PC value\n[ 85.977491] ---[ end trace 0000000000000000 ]---\n\nPreset since v6.9.11",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46680",
"url": "https://www.suse.com/security/cve/CVE-2024-46680"
},
{
"category": "external",
"summary": "SUSE Bug 1230557 for CVE-2024-46680",
"url": "https://bugzilla.suse.com/1230557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-46680"
},
{
"cve": "CVE-2024-46765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: protect XDP configuration with a mutex\n\nThe main threat to data consistency in ice_xdp() is a possible asynchronous\nPF reset. It can be triggered by a user or by TX timeout handler.\n\nXDP setup and PF reset code access the same resources in the following\nsections:\n* ice_vsi_close() in ice_prepare_for_reset() - already rtnl-locked\n* ice_vsi_rebuild() for the PF VSI - not protected\n* ice_vsi_open() - already rtnl-locked\n\nWith an unfortunate timing, such accesses can result in a crash such as the\none below:\n\n[ +1.999878] ice 0000:b1:00.0: Registered XDP mem model MEM_TYPE_XSK_BUFF_POOL on Rx ring 14\n[ +2.002992] ice 0000:b1:00.0: Registered XDP mem model MEM_TYPE_XSK_BUFF_POOL on Rx ring 18\n[Mar15 18:17] ice 0000:b1:00.0 ens801f0np0: NETDEV WATCHDOG: CPU: 38: transmit queue 14 timed out 80692736 ms\n[ +0.000093] ice 0000:b1:00.0 ens801f0np0: tx_timeout: VSI_num: 6, Q 14, NTC: 0x0, HW_HEAD: 0x0, NTU: 0x0, INT: 0x4000001\n[ +0.000012] ice 0000:b1:00.0 ens801f0np0: tx_timeout recovery level 1, txqueue 14\n[ +0.394718] ice 0000:b1:00.0: PTP reset successful\n[ +0.006184] BUG: kernel NULL pointer dereference, address: 0000000000000098\n[ +0.000045] #PF: supervisor read access in kernel mode\n[ +0.000023] #PF: error_code(0x0000) - not-present page\n[ +0.000023] PGD 0 P4D 0\n[ +0.000018] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[ +0.000023] CPU: 38 PID: 7540 Comm: kworker/38:1 Not tainted 6.8.0-rc7 #1\n[ +0.000031] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0014.082620210524 08/26/2021\n[ +0.000036] Workqueue: ice ice_service_task [ice]\n[ +0.000183] RIP: 0010:ice_clean_tx_ring+0xa/0xd0 [ice]\n[...]\n[ +0.000013] Call Trace:\n[ +0.000016] \u003cTASK\u003e\n[ +0.000014] ? __die+0x1f/0x70\n[ +0.000029] ? page_fault_oops+0x171/0x4f0\n[ +0.000029] ? schedule+0x3b/0xd0\n[ +0.000027] ? exc_page_fault+0x7b/0x180\n[ +0.000022] ? asm_exc_page_fault+0x22/0x30\n[ +0.000031] ? ice_clean_tx_ring+0xa/0xd0 [ice]\n[ +0.000194] ice_free_tx_ring+0xe/0x60 [ice]\n[ +0.000186] ice_destroy_xdp_rings+0x157/0x310 [ice]\n[ +0.000151] ice_vsi_decfg+0x53/0xe0 [ice]\n[ +0.000180] ice_vsi_rebuild+0x239/0x540 [ice]\n[ +0.000186] ice_vsi_rebuild_by_type+0x76/0x180 [ice]\n[ +0.000145] ice_rebuild+0x18c/0x840 [ice]\n[ +0.000145] ? delay_tsc+0x4a/0xc0\n[ +0.000022] ? delay_tsc+0x92/0xc0\n[ +0.000020] ice_do_reset+0x140/0x180 [ice]\n[ +0.000886] ice_service_task+0x404/0x1030 [ice]\n[ +0.000824] process_one_work+0x171/0x340\n[ +0.000685] worker_thread+0x277/0x3a0\n[ +0.000675] ? preempt_count_add+0x6a/0xa0\n[ +0.000677] ? _raw_spin_lock_irqsave+0x23/0x50\n[ +0.000679] ? __pfx_worker_thread+0x10/0x10\n[ +0.000653] kthread+0xf0/0x120\n[ +0.000635] ? __pfx_kthread+0x10/0x10\n[ +0.000616] ret_from_fork+0x2d/0x50\n[ +0.000612] ? __pfx_kthread+0x10/0x10\n[ +0.000604] ret_from_fork_asm+0x1b/0x30\n[ +0.000604] \u003c/TASK\u003e\n\nThe previous way of handling this through returning -EBUSY is not viable,\nparticularly when destroying AF_XDP socket, because the kernel proceeds\nwith removal anyway.\n\nThere is plenty of code between those calls and there is no need to create\na large critical section that covers all of them, same as there is no need\nto protect ice_vsi_rebuild() with rtnl_lock().\n\nAdd xdp_state_lock mutex to protect ice_vsi_rebuild() and ice_xdp().\n\nLeaving unprotected sections in between would result in two states that\nhave to be considered:\n1. when the VSI is closed, but not yet rebuild\n2. when VSI is already rebuild, but not yet open\n\nThe latter case is actually already handled through !netif_running() case,\nwe just need to adjust flag checking a little. The former one is not as\ntrivial, because between ice_vsi_close() and ice_vsi_rebuild(), a lot of\nhardware interaction happens, this can make adding/deleting rings exit\nwith an error. Luckily, VSI rebuild is pending and can apply new\nconfiguration for us in a managed fashion.\n\nTherefore, add an additional VSI state flag ICE_VSI_REBUILD_PENDING to\nindicate that ice_x\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46765",
"url": "https://www.suse.com/security/cve/CVE-2024-46765"
},
{
"category": "external",
"summary": "SUSE Bug 1230807 for CVE-2024-46765",
"url": "https://bugzilla.suse.com/1230807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-46765"
},
{
"cve": "CVE-2024-46800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46800"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsch/netem: fix use after free in netem_dequeue\n\nIf netem_dequeue() enqueues packet to inner qdisc and that qdisc\nreturns __NET_XMIT_STOLEN. The packet is dropped but\nqdisc_tree_reduce_backlog() is not called to update the parent\u0027s\nq.qlen, leading to the similar use-after-free as Commit\ne04991a48dbaf382 (\"netem: fix return value if duplicate enqueue\nfails\")\n\nCommands to trigger KASAN UaF:\n\nip link add type dummy\nip link set lo up\nip link set dummy0 up\ntc qdisc add dev lo parent root handle 1: drr\ntc filter add dev lo parent 1: basic classid 1:1\ntc class add dev lo classid 1:1 drr\ntc qdisc add dev lo parent 1:1 handle 2: netem\ntc qdisc add dev lo parent 2: handle 3: drr\ntc filter add dev lo parent 3: basic classid 3:1 action mirred egress\nredirect dev dummy0\ntc class add dev lo classid 3:1 drr\nping -c1 -W0.01 localhost # Trigger bug\ntc class del dev lo classid 1:1\ntc class add dev lo classid 1:1 drr\nping -c1 -W0.01 localhost # UaF",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46800",
"url": "https://www.suse.com/security/cve/CVE-2024-46800"
},
{
"category": "external",
"summary": "SUSE Bug 1230827 for CVE-2024-46800",
"url": "https://bugzilla.suse.com/1230827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-46800"
},
{
"cve": "CVE-2024-46896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: don\u0027t access invalid sched\n\nSince 2320c9e6a768 (\"drm/sched: memset() \u0027job\u0027 in drm_sched_job_init()\")\naccessing job-\u003ebase.sched can produce unexpected results as the initialisation\nof (*job)-\u003ebase.sched done in amdgpu_job_alloc is overwritten by the\nmemset.\n\nThis commit fixes an issue when a CS would fail validation and would\nbe rejected after job-\u003enum_ibs is incremented. In this case,\namdgpu_ib_free(ring-\u003eadev, ...) will be called, which would crash the\nmachine because the ring value is bogus.\n\nTo fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this\nbecause the device is actually not used in this function.\n\nThe next commit will remove the ring argument completely.\n\n(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46896",
"url": "https://www.suse.com/security/cve/CVE-2024-46896"
},
{
"category": "external",
"summary": "SUSE Bug 1235707 for CVE-2024-46896",
"url": "https://bugzilla.suse.com/1235707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-46896"
},
{
"cve": "CVE-2024-47141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinmux: Use sequential access to access desc-\u003epinmux data\n\nWhen two client of the same gpio call pinctrl_select_state() for the\nsame functionality, we are seeing NULL pointer issue while accessing\ndesc-\u003emux_owner.\n\nLet\u0027s say two processes A, B executing in pin_request() for the same pin\nand process A updates the desc-\u003emux_usecount but not yet updated the\ndesc-\u003emux_owner while process B see the desc-\u003emux_usecount which got\nupdated by A path and further executes strcmp and while accessing\ndesc-\u003emux_owner it crashes with NULL pointer.\n\nSerialize the access to mux related setting with a mutex lock.\n\n\tcpu0 (process A)\t\t\tcpu1(process B)\n\npinctrl_select_state() {\t\t pinctrl_select_state() {\n pin_request() {\t\t\t\tpin_request() {\n ...\n\t\t\t\t\t\t ....\n } else {\n desc-\u003emux_usecount++;\n \t\t\t\t\t\tdesc-\u003emux_usecount \u0026\u0026 strcmp(desc-\u003emux_owner, owner)) {\n\n if (desc-\u003emux_usecount \u003e 1)\n return 0;\n desc-\u003emux_owner = owner;\n\n }\t\t\t\t\t\t}",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47141",
"url": "https://www.suse.com/security/cve/CVE-2024-47141"
},
{
"category": "external",
"summary": "SUSE Bug 1235708 for CVE-2024-47141",
"url": "https://bugzilla.suse.com/1235708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-47141"
},
{
"cve": "CVE-2024-47143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-debug: fix a possible deadlock on radix_lock\n\nradix_lock() shouldn\u0027t be held while holding dma_hash_entry[idx].lock\notherwise, there\u0027s a possible deadlock scenario when\ndma debug API is called holding rq_lock():\n\nCPU0 CPU1 CPU2\ndma_free_attrs()\ncheck_unmap() add_dma_entry() __schedule() //out\n (A) rq_lock()\nget_hash_bucket()\n(A) dma_entry_hash\n check_sync()\n (A) radix_lock() (W) dma_entry_hash\ndma_entry_free()\n(W) radix_lock()\n // CPU2\u0027s one\n (W) rq_lock()\n\nCPU1 situation can happen when it extending radix tree and\nit tries to wake up kswapd via wake_all_kswapd().\n\nCPU2 situation can happen while perf_event_task_sched_out()\n(i.e. dma sync operation is called while deleting perf_event using\n etm and etr tmc which are Arm Coresight hwtracing driver backends).\n\nTo remove this possible situation, call dma_entry_free() after\nput_hash_bucket() in check_unmap().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47143",
"url": "https://www.suse.com/security/cve/CVE-2024-47143"
},
{
"category": "external",
"summary": "SUSE Bug 1235710 for CVE-2024-47143",
"url": "https://bugzilla.suse.com/1235710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-47143"
},
{
"cve": "CVE-2024-47678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: change the order of rate limits\n\nICMP messages are ratelimited :\n\nAfter the blamed commits, the two rate limiters are applied in this order:\n\n1) host wide ratelimit (icmp_global_allow())\n\n2) Per destination ratelimit (inetpeer based)\n\nIn order to avoid side-channels attacks, we need to apply\nthe per destination check first.\n\nThis patch makes the following change :\n\n1) icmp_global_allow() checks if the host wide limit is reached.\n But credits are not yet consumed. This is deferred to 3)\n\n2) The per destination limit is checked/updated.\n This might add a new node in inetpeer tree.\n\n3) icmp_global_consume() consumes tokens if prior operations succeeded.\n\nThis means that host wide ratelimit is still effective\nin keeping inetpeer tree small even under DDOS.\n\nAs a bonus, I removed icmp_global.lock as the fast path\ncan use a lock-free operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47678",
"url": "https://www.suse.com/security/cve/CVE-2024-47678"
},
{
"category": "external",
"summary": "SUSE Bug 1231854 for CVE-2024-47678",
"url": "https://bugzilla.suse.com/1231854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-47678"
},
{
"cve": "CVE-2024-47809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix possible lkb_resource null dereference\n\nThis patch fixes a possible null pointer dereference when this function is\ncalled from request_lock() as lkb-\u003elkb_resource is not assigned yet,\nonly after validate_lock_args() by calling attach_lkb(). Another issue\nis that a resource name could be a non printable bytearray and we cannot\nassume to be ASCII coded.\n\nThe log functionality is probably never being hit when DLM is used in\nnormal way and no debug logging is enabled. The null pointer dereference\ncan only occur on a new created lkb that does not have the resource\nassigned yet, it probably never hits the null pointer dereference but we\nshould be sure that other changes might not change this behaviour and we\nactually can hit the mentioned null pointer dereference.\n\nIn this patch we just drop the printout of the resource name, the lkb id\nis enough to make a possible connection to a resource name if this\nexists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47809",
"url": "https://www.suse.com/security/cve/CVE-2024-47809"
},
{
"category": "external",
"summary": "SUSE Bug 1235714 for CVE-2024-47809",
"url": "https://bugzilla.suse.com/1235714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-47809"
},
{
"cve": "CVE-2024-48873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48873"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: check return value of ieee80211_probereq_get() for RNR\n\nThe return value of ieee80211_probereq_get() might be NULL, so check it\nbefore using to avoid NULL pointer access.\n\nAddresses-Coverity-ID: 1529805 (\"Dereference null return value\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48873",
"url": "https://www.suse.com/security/cve/CVE-2024-48873"
},
{
"category": "external",
"summary": "SUSE Bug 1235716 for CVE-2024-48873",
"url": "https://bugzilla.suse.com/1235716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-48873"
},
{
"cve": "CVE-2024-48881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721 if (!IS_ERR_OR_NULL(c-\u003eroot))\n1722 list_add(\u0026c-\u003eroot-\u003elist, \u0026c-\u003ebtree_cache);\n\n\u003eFrom the above code in cache_set_flush(), if previous registration code\nfails before allocating c-\u003eroot, it is possible c-\u003eroot is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc-\u003eroot is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48881",
"url": "https://www.suse.com/security/cve/CVE-2024-48881"
},
{
"category": "external",
"summary": "SUSE Bug 1235727 for CVE-2024-48881",
"url": "https://bugzilla.suse.com/1235727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-rdma: unquiesce admin_q before destroy it\n\nKernel will hang on destroy admin_q while we create ctrl failed, such\nas following calltrace:\n\nPID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: \"nvme\"\n #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15\n #1 [ff61d23de260fc08] schedule at ffffffff8323c014\n #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1\n #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a\n #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006\n #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce\n #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced\n #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b\n #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362\n #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25\n RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202\n RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574\n RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004\n RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90\n R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004\n R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500\n ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b\n\nThis due to we have quiesced admi_q before cancel requests, but forgot\nto unquiesce before destroy it, as a result we fail to drain the\npending requests, and hang on blk_mq_freeze_queue_wait() forever. Here\ntry to reuse nvme_rdma_teardown_admin_queue() to fix this issue and\nsimplify the code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49569",
"url": "https://www.suse.com/security/cve/CVE-2024-49569"
},
{
"category": "external",
"summary": "SUSE Bug 1235730 for CVE-2024-49569",
"url": "https://bugzilla.suse.com/1235730"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-49569"
},
{
"cve": "CVE-2024-49854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix uaf for accessing waker_bfqq after splitting\n\nAfter commit 42c306ed7233 (\"block, bfq: don\u0027t break merge chain in\nbfq_split_bfqq()\"), if the current procress is the last holder of bfqq,\nthe bfqq can be freed after bfq_split_bfqq(). Hence recored the bfqq and\nthen access bfqq-\u003ewaker_bfqq may trigger UAF. What\u0027s more, the waker_bfqq\nmay in the merge chain of bfqq, hence just recored waker_bfqq is still\nnot safe.\n\nFix the problem by adding a helper bfq_waker_bfqq() to check if\nbfqq-\u003ewaker_bfqq is in the merge chain, and current procress is the only\nholder.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49854",
"url": "https://www.suse.com/security/cve/CVE-2024-49854"
},
{
"category": "external",
"summary": "SUSE Bug 1232193 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "external",
"summary": "SUSE Bug 1236571 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1236571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-49854"
},
{
"cve": "CVE-2024-49884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix slab-use-after-free in ext4_split_extent_at()\n\nWe hit the following use-after-free:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_split_extent_at+0xba8/0xcc0\nRead of size 2 at addr ffff88810548ed08 by task kworker/u20:0/40\nCPU: 0 PID: 40 Comm: kworker/u20:0 Not tainted 6.9.0-dirty #724\nCall Trace:\n \u003cTASK\u003e\n kasan_report+0x93/0xc0\n ext4_split_extent_at+0xba8/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nAllocated by task 40:\n __kmalloc_noprof+0x1ac/0x480\n ext4_find_extent+0xf3b/0x1e70\n ext4_ext_map_blocks+0x188/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nFreed by task 40:\n kfree+0xf1/0x2b0\n ext4_find_extent+0xa71/0x1e70\n ext4_ext_insert_extent+0xa22/0x3260\n ext4_split_extent_at+0x3ef/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n==================================================================\n\nThe flow of issue triggering is as follows:\n\next4_split_extent_at\n path = *ppath\n ext4_ext_insert_extent(ppath)\n ext4_ext_create_new_leaf(ppath)\n ext4_find_extent(orig_path)\n path = *orig_path\n read_extent_tree_block\n // return -ENOMEM or -EIO\n ext4_free_ext_path(path)\n kfree(path)\n *orig_path = NULL\n a. If err is -ENOMEM:\n ext4_ext_dirty(path + path-\u003ep_depth)\n // path use-after-free !!!\n b. If err is -EIO and we have EXT_DEBUG defined:\n ext4_ext_show_leaf(path)\n eh = path[depth].p_hdr\n // path also use-after-free !!!\n\nSo when trying to zeroout or fix the extent length, call ext4_find_extent()\nto update the path.\n\nIn addition we use *ppath directly as an ext4_ext_show_leaf() input to\navoid possible use-after-free when EXT_DEBUG is defined, and to avoid\nunnecessary path updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49884",
"url": "https://www.suse.com/security/cve/CVE-2024-49884"
},
{
"category": "external",
"summary": "SUSE Bug 1225742 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1225742"
},
{
"category": "external",
"summary": "SUSE Bug 1232198 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1232198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-49884"
},
{
"cve": "CVE-2024-49915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn32_init_hw` function. The issue could occur when `dc-\u003eclk_mgr` is\nnull.\n\nThe fix adds a check to ensure `dc-\u003eclk_mgr` is not null before\naccessing its functions. This prevents a potential null pointer\ndereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn32/dcn32_hwseq.c:961 dcn32_init_hw() error: we previously assumed \u0027dc-\u003eclk_mgr\u0027 could be null (see line 782)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49915",
"url": "https://www.suse.com/security/cve/CVE-2024-49915"
},
{
"category": "external",
"summary": "SUSE Bug 1231963 for CVE-2024-49915",
"url": "https://bugzilla.suse.com/1231963"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-49915"
},
{
"cve": "CVE-2024-49944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49944"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start\n\nIn sctp_listen_start() invoked by sctp_inet_listen(), it should set the\nsk_state back to CLOSED if sctp_autobind() fails due to whatever reason.\n\nOtherwise, next time when calling sctp_inet_listen(), if sctp_sk(sk)-\u003ereuse\nis already set via setsockopt(SCTP_REUSE_PORT), sctp_sk(sk)-\u003ebind_hash will\nbe dereferenced as sk_state is LISTENING, which causes a crash as bind_hash\nis NULL.\n\n KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n RIP: 0010:sctp_inet_listen+0x7f0/0xa20 net/sctp/socket.c:8617\n Call Trace:\n \u003cTASK\u003e\n __sys_listen_socket net/socket.c:1883 [inline]\n __sys_listen+0x1b7/0x230 net/socket.c:1894\n __do_sys_listen net/socket.c:1902 [inline]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49944",
"url": "https://www.suse.com/security/cve/CVE-2024-49944"
},
{
"category": "external",
"summary": "SUSE Bug 1232166 for CVE-2024-49944",
"url": "https://bugzilla.suse.com/1232166"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-49944"
},
{
"cve": "CVE-2024-49951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible crash on mgmt_index_removed\n\nIf mgmt_index_removed is called while there are commands queued on\ncmd_sync it could lead to crashes like the bellow trace:\n\n0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc\n0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth]\n0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth]\n0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth]\n\nSo while handling mgmt_index_removed this attempts to dequeue\ncommands passed as user_data to cmd_sync.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49951",
"url": "https://www.suse.com/security/cve/CVE-2024-49951"
},
{
"category": "external",
"summary": "SUSE Bug 1232158 for CVE-2024-49951",
"url": "https://bugzilla.suse.com/1232158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-49951"
},
{
"cve": "CVE-2024-49952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49952"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: prevent nf_skb_duplicated corruption\n\nsyzbot found that nf_dup_ipv4() or nf_dup_ipv6() could write\nper-cpu variable nf_skb_duplicated in an unsafe way [1].\n\nDisabling preemption as hinted by the splat is not enough,\nwe have to disable soft interrupts as well.\n\n[1]\nBUG: using __this_cpu_write() in preemptible [00000000] code: syz.4.282/6316\n caller is nf_dup_ipv4+0x651/0x8f0 net/ipv4/netfilter/nf_dup_ipv4.c:87\nCPU: 0 UID: 0 PID: 6316 Comm: syz.4.282 Not tainted 6.11.0-rc7-syzkaller-00104-g7052622fccb1 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:93 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119\n check_preemption_disabled+0x10e/0x120 lib/smp_processor_id.c:49\n nf_dup_ipv4+0x651/0x8f0 net/ipv4/netfilter/nf_dup_ipv4.c:87\n nft_dup_ipv4_eval+0x1db/0x300 net/ipv4/netfilter/nft_dup_ipv4.c:30\n expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]\n nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288\n nft_do_chain_ipv4+0x202/0x320 net/netfilter/nft_chain_filter.c:23\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626\n nf_hook+0x2c4/0x450 include/linux/netfilter.h:269\n NF_HOOK_COND include/linux/netfilter.h:302 [inline]\n ip_output+0x185/0x230 net/ipv4/ip_output.c:433\n ip_local_out net/ipv4/ip_output.c:129 [inline]\n ip_send_skb+0x74/0x100 net/ipv4/ip_output.c:1495\n udp_send_skb+0xacf/0x1650 net/ipv4/udp.c:981\n udp_sendmsg+0x1c21/0x2a60 net/ipv4/udp.c:1269\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x1a6/0x270 net/socket.c:745\n ____sys_sendmsg+0x525/0x7d0 net/socket.c:2597\n ___sys_sendmsg net/socket.c:2651 [inline]\n __sys_sendmmsg+0x3b2/0x740 net/socket.c:2737\n __do_sys_sendmmsg net/socket.c:2766 [inline]\n __se_sys_sendmmsg net/socket.c:2763 [inline]\n __x64_sys_sendmmsg+0xa0/0xb0 net/socket.c:2763\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f4ce4f7def9\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f4ce5d4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133\nRAX: ffffffffffffffda RBX: 00007f4ce5135f80 RCX: 00007f4ce4f7def9\nRDX: 0000000000000001 RSI: 0000000020005d40 RDI: 0000000000000006\nRBP: 00007f4ce4ff0b76 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007f4ce5135f80 R15: 00007ffd4cbc6d68\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49952",
"url": "https://www.suse.com/security/cve/CVE-2024-49952"
},
{
"category": "external",
"summary": "SUSE Bug 1232157 for CVE-2024-49952",
"url": "https://bugzilla.suse.com/1232157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-49952"
},
{
"cve": "CVE-2024-49998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: improve shutdown sequence\n\nAlexander Sverdlin presents 2 problems during shutdown with the\nlan9303 driver. One is specific to lan9303 and the other just happens\nto reproduce there.\n\nThe first problem is that lan9303 is unique among DSA drivers in that it\ncalls dev_get_drvdata() at \"arbitrary runtime\" (not probe, not shutdown,\nnot remove):\n\nphy_state_machine()\n-\u003e ...\n -\u003e dsa_user_phy_read()\n -\u003e ds-\u003eops-\u003ephy_read()\n -\u003e lan9303_phy_read()\n -\u003e chip-\u003eops-\u003ephy_read()\n -\u003e lan9303_mdio_phy_read()\n -\u003e dev_get_drvdata()\n\nBut we never stop the phy_state_machine(), so it may continue to run\nafter dsa_switch_shutdown(). Our common pattern in all DSA drivers is\nto set drvdata to NULL to suppress the remove() method that may come\nafterwards. But in this case it will result in an NPD.\n\nThe second problem is that the way in which we set\ndp-\u003econduit-\u003edsa_ptr = NULL; is concurrent with receive packet\nprocessing. dsa_switch_rcv() checks once whether dev-\u003edsa_ptr is NULL,\nbut afterwards, rather than continuing to use that non-NULL value,\ndev-\u003edsa_ptr is dereferenced again and again without NULL checks:\ndsa_conduit_find_user() and many other places. In between dereferences,\nthere is no locking to ensure that what was valid once continues to be\nvalid.\n\nBoth problems have the common aspect that closing the conduit interface\nsolves them.\n\nIn the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN\nevent in dsa_user_netdevice_event() which closes user ports as well.\ndsa_port_disable_rt() calls phylink_stop(), which synchronously stops\nthe phylink state machine, and ds-\u003eops-\u003ephy_read() will thus no longer\ncall into the driver after this point.\n\nIn the second case, dev_close(conduit) should do this, as per\nDocumentation/networking/driver.rst:\n\n| Quiescence\n| ----------\n|\n| After the ndo_stop routine has been called, the hardware must\n| not receive or transmit any data. All in flight packets must\n| be aborted. If necessary, poll or wait for completion of\n| any reset commands.\n\nSo it should be sufficient to ensure that later, when we zeroize\nconduit-\u003edsa_ptr, there will be no concurrent dsa_switch_rcv() call\non this conduit.\n\nThe addition of the netif_device_detach() function is to ensure that\nioctls, rtnetlinks and ethtool requests on the user ports no longer\npropagate down to the driver - we\u0027re no longer prepared to handle them.\n\nThe race condition actually did not exist when commit 0650bf52b31f\n(\"net: dsa: be compatible with masters which unregister on shutdown\")\nfirst introduced dsa_switch_shutdown(). It was created later, when we\nstopped unregistering the user interfaces from a bad spot, and we just\nreplaced that sequence with a racy zeroization of conduit-\u003edsa_ptr\n(one which doesn\u0027t ensure that the interfaces aren\u0027t up).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49998",
"url": "https://www.suse.com/security/cve/CVE-2024-49998"
},
{
"category": "external",
"summary": "SUSE Bug 1232087 for CVE-2024-49998",
"url": "https://bugzilla.suse.com/1232087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-49998"
},
{
"cve": "CVE-2024-50016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50016"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50016",
"url": "https://www.suse.com/security/cve/CVE-2024-50016"
},
{
"category": "external",
"summary": "SUSE Bug 1232420 for CVE-2024-50016",
"url": "https://bugzilla.suse.com/1232420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50016"
},
{
"cve": "CVE-2024-50018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50018"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50018",
"url": "https://www.suse.com/security/cve/CVE-2024-50018"
},
{
"category": "external",
"summary": "SUSE Bug 1232419 for CVE-2024-50018",
"url": "https://bugzilla.suse.com/1232419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50018"
},
{
"cve": "CVE-2024-50039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50039"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: accept TCA_STAB only for root qdisc\n\nMost qdiscs maintain their backlog using qdisc_pkt_len(skb)\non the assumption it is invariant between the enqueue()\nand dequeue() handlers.\n\nUnfortunately syzbot can crash a host rather easily using\na TBF + SFQ combination, with an STAB on SFQ [1]\n\nWe can\u0027t support TCA_STAB on arbitrary level, this would\nrequire to maintain per-qdisc storage.\n\n[1]\n[ 88.796496] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[ 88.798611] #PF: supervisor read access in kernel mode\n[ 88.799014] #PF: error_code(0x0000) - not-present page\n[ 88.799506] PGD 0 P4D 0\n[ 88.799829] Oops: Oops: 0000 [#1] SMP NOPTI\n[ 88.800569] CPU: 14 UID: 0 PID: 2053 Comm: b371744477 Not tainted 6.12.0-rc1-virtme #1117\n[ 88.801107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 88.801779] RIP: 0010:sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.802544] Code: 0f b7 50 12 48 8d 04 d5 00 00 00 00 48 89 d6 48 29 d0 48 8b 91 c0 01 00 00 48 c1 e0 03 48 01 c2 66 83 7a 1a 00 7e c0 48 8b 3a \u003c4c\u003e 8b 07 4c 89 02 49 89 50 08 48 c7 47 08 00 00 00 00 48 c7 07 00\nAll code\n========\n 0:\t0f b7 50 12 \tmovzwl 0x12(%rax),%edx\n 4:\t48 8d 04 d5 00 00 00 \tlea 0x0(,%rdx,8),%rax\n b:\t00\n c:\t48 89 d6 \tmov %rdx,%rsi\n f:\t48 29 d0 \tsub %rdx,%rax\n 12:\t48 8b 91 c0 01 00 00 \tmov 0x1c0(%rcx),%rdx\n 19:\t48 c1 e0 03 \tshl $0x3,%rax\n 1d:\t48 01 c2 \tadd %rax,%rdx\n 20:\t66 83 7a 1a 00 \tcmpw $0x0,0x1a(%rdx)\n 25:\t7e c0 \tjle 0xffffffffffffffe7\n 27:\t48 8b 3a \tmov (%rdx),%rdi\n 2a:*\t4c 8b 07 \tmov (%rdi),%r8\t\t\u003c-- trapping instruction\n 2d:\t4c 89 02 \tmov %r8,(%rdx)\n 30:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n 34:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 3b:\t00\n 3c:\t48 \trex.W\n 3d:\tc7 \t.byte 0xc7\n 3e:\t07 \t(bad)\n\t...\n\nCode starting with the faulting instruction\n===========================================\n 0:\t4c 8b 07 \tmov (%rdi),%r8\n 3:\t4c 89 02 \tmov %r8,(%rdx)\n 6:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n a:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 11:\t00\n 12:\t48 \trex.W\n 13:\tc7 \t.byte 0xc7\n 14:\t07 \t(bad)\n\t...\n[ 88.803721] RSP: 0018:ffff9a1f892b7d58 EFLAGS: 00000206\n[ 88.804032] RAX: 0000000000000000 RBX: ffff9a1f8420c800 RCX: ffff9a1f8420c800\n[ 88.804560] RDX: ffff9a1f81bc1440 RSI: 0000000000000000 RDI: 0000000000000000\n[ 88.805056] RBP: ffffffffc04bb0e0 R08: 0000000000000001 R09: 00000000ff7f9a1f\n[ 88.805473] R10: 000000000001001b R11: 0000000000009a1f R12: 0000000000000140\n[ 88.806194] R13: 0000000000000001 R14: ffff9a1f886df400 R15: ffff9a1f886df4ac\n[ 88.806734] FS: 00007f445601a740(0000) GS:ffff9a2e7fd80000(0000) knlGS:0000000000000000\n[ 88.807225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 88.807672] CR2: 0000000000000000 CR3: 000000050cc46000 CR4: 00000000000006f0\n[ 88.808165] Call Trace:\n[ 88.808459] \u003cTASK\u003e\n[ 88.808710] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434)\n[ 88.809261] ? page_fault_oops (arch/x86/mm/fault.c:715)\n[ 88.809561] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539)\n[ 88.809806] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623)\n[ 88.810074] ? sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.810411] sfq_reset (net/sched/sch_sfq.c:525) sch_sfq\n[ 88.810671] qdisc_reset (./include/linux/skbuff.h:2135 ./include/linux/skbuff.h:2441 ./include/linux/skbuff.h:3304 ./include/linux/skbuff.h:3310 net/sched/sch_g\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50039",
"url": "https://www.suse.com/security/cve/CVE-2024-50039"
},
{
"category": "external",
"summary": "SUSE Bug 1231909 for CVE-2024-50039",
"url": "https://bugzilla.suse.com/1231909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50039"
},
{
"cve": "CVE-2024-50047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50047"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix UAF in async decryption\n\nDoing an async decryption (large read) crashes with a\nslab-use-after-free way down in the crypto API.\n\nReproducer:\n # mount.cifs -o ...,seal,esize=1 //srv/share /mnt\n # dd if=/mnt/largefile of=/dev/null\n ...\n [ 194.196391] ==================================================================\n [ 194.196844] BUG: KASAN: slab-use-after-free in gf128mul_4k_lle+0xc1/0x110\n [ 194.197269] Read of size 8 at addr ffff888112bd0448 by task kworker/u77:2/899\n [ 194.197707]\n [ 194.197818] CPU: 12 UID: 0 PID: 899 Comm: kworker/u77:2 Not tainted 6.11.0-lku-00028-gfca3ca14a17a-dirty #43\n [ 194.198400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014\n [ 194.199046] Workqueue: smb3decryptd smb2_decrypt_offload [cifs]\n [ 194.200032] Call Trace:\n [ 194.200191] \u003cTASK\u003e\n [ 194.200327] dump_stack_lvl+0x4e/0x70\n [ 194.200558] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.200809] print_report+0x174/0x505\n [ 194.201040] ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n [ 194.201352] ? srso_return_thunk+0x5/0x5f\n [ 194.201604] ? __virt_addr_valid+0xdf/0x1c0\n [ 194.201868] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202128] kasan_report+0xc8/0x150\n [ 194.202361] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202616] gf128mul_4k_lle+0xc1/0x110\n [ 194.202863] ghash_update+0x184/0x210\n [ 194.203103] shash_ahash_update+0x184/0x2a0\n [ 194.203377] ? __pfx_shash_ahash_update+0x10/0x10\n [ 194.203651] ? srso_return_thunk+0x5/0x5f\n [ 194.203877] ? crypto_gcm_init_common+0x1ba/0x340\n [ 194.204142] gcm_hash_assoc_remain_continue+0x10a/0x140\n [ 194.204434] crypt_message+0xec1/0x10a0 [cifs]\n [ 194.206489] ? __pfx_crypt_message+0x10/0x10 [cifs]\n [ 194.208507] ? srso_return_thunk+0x5/0x5f\n [ 194.209205] ? srso_return_thunk+0x5/0x5f\n [ 194.209925] ? srso_return_thunk+0x5/0x5f\n [ 194.210443] ? srso_return_thunk+0x5/0x5f\n [ 194.211037] decrypt_raw_data+0x15f/0x250 [cifs]\n [ 194.212906] ? __pfx_decrypt_raw_data+0x10/0x10 [cifs]\n [ 194.214670] ? srso_return_thunk+0x5/0x5f\n [ 194.215193] smb2_decrypt_offload+0x12a/0x6c0 [cifs]\n\nThis is because TFM is being used in parallel.\n\nFix this by allocating a new AEAD TFM for async decryption, but keep\nthe existing one for synchronous READ cases (similar to what is done\nin smb3_calc_signature()).\n\nAlso remove the calls to aead_request_set_callback() and\ncrypto_wait_req() since it\u0027s always going to be a synchronous operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50047",
"url": "https://www.suse.com/security/cve/CVE-2024-50047"
},
{
"category": "external",
"summary": "SUSE Bug 1232418 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "external",
"summary": "SUSE Bug 1232576 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232576"
},
{
"category": "external",
"summary": "SUSE Bug 1232638 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-50047"
},
{
"cve": "CVE-2024-50051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: Add cancel_work_sync before module remove\n\nIf we remove the module which will call mpc52xx_spi_remove\nit will free \u0027ms\u0027 through spi_unregister_controller.\nwhile the work ms-\u003ework will be used. The sequence of operations\nthat may lead to a UAF bug.\n\nFix it by ensuring that the work is canceled before proceeding with\nthe cleanup in mpc52xx_spi_remove.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50051",
"url": "https://www.suse.com/security/cve/CVE-2024-50051"
},
{
"category": "external",
"summary": "SUSE Bug 1235739 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "external",
"summary": "SUSE Bug 1239156 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1239156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-50051"
},
{
"cve": "CVE-2024-50106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix race between laundromat and free_stateid\n\nThere is a race between laundromat handling of revoked delegations\nand a client sending free_stateid operation. Laundromat thread\nfinds that delegation has expired and needs to be revoked so it\nmarks the delegation stid revoked and it puts it on a reaper list\nbut then it unlock the state lock and the actual delegation revocation\nhappens without the lock. Once the stid is marked revoked a racing\nfree_stateid processing thread does the following (1) it calls\nlist_del_init() which removes it from the reaper list and (2) frees\nthe delegation stid structure. The laundromat thread ends up not\ncalling the revoke_delegation() function for this particular delegation\nbut that means it will no release the lock lease that exists on\nthe file.\n\nNow, a new open for this file comes in and ends up finding that\nlease list isn\u0027t empty and calls nfsd_breaker_owns_lease() which ends\nup trying to derefence a freed delegation stateid. Leading to the\nfollowint use-after-free KASAN warning:\n\nkernel: ==================================================================\nkernel: BUG: KASAN: slab-use-after-free in nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: Read of size 8 at addr ffff0000e73cd0c8 by task nfsd/6205\nkernel:\nkernel: CPU: 2 UID: 0 PID: 6205 Comm: nfsd Kdump: loaded Not tainted 6.11.0-rc7+ #9\nkernel: Hardware name: Apple Inc. Apple Virtualization Generic Platform, BIOS 2069.0.0.0.0 08/03/2024\nkernel: Call trace:\nkernel: dump_backtrace+0x98/0x120\nkernel: show_stack+0x1c/0x30\nkernel: dump_stack_lvl+0x80/0xe8\nkernel: print_address_description.constprop.0+0x84/0x390\nkernel: print_report+0xa4/0x268\nkernel: kasan_report+0xb4/0xf8\nkernel: __asan_report_load8_noabort+0x1c/0x28\nkernel: nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: nfsd_file_do_acquire+0xb3c/0x11d0 [nfsd]\nkernel: nfsd_file_acquire_opened+0x84/0x110 [nfsd]\nkernel: nfs4_get_vfs_file+0x634/0x958 [nfsd]\nkernel: nfsd4_process_open2+0xa40/0x1a40 [nfsd]\nkernel: nfsd4_open+0xa08/0xe80 [nfsd]\nkernel: nfsd4_proc_compound+0xb8c/0x2130 [nfsd]\nkernel: nfsd_dispatch+0x22c/0x718 [nfsd]\nkernel: svc_process_common+0x8e8/0x1960 [sunrpc]\nkernel: svc_process+0x3d4/0x7e0 [sunrpc]\nkernel: svc_handle_xprt+0x828/0xe10 [sunrpc]\nkernel: svc_recv+0x2cc/0x6a8 [sunrpc]\nkernel: nfsd+0x270/0x400 [nfsd]\nkernel: kthread+0x288/0x310\nkernel: ret_from_fork+0x10/0x20\n\nThis patch proposes a fixed that\u0027s based on adding 2 new additional\nstid\u0027s sc_status values that help coordinate between the laundromat\nand other operations (nfsd4_free_stateid() and nfsd4_delegreturn()).\n\nFirst to make sure, that once the stid is marked revoked, it is not\nremoved by the nfsd4_free_stateid(), the laundromat take a reference\non the stateid. Then, coordinating whether the stid has been put\non the cl_revoked list or we are processing FREE_STATEID and need to\nmake sure to remove it from the list, each check that state and act\naccordingly. If laundromat has added to the cl_revoke list before\nthe arrival of FREE_STATEID, then nfsd4_free_stateid() knows to remove\nit from the list. If nfsd4_free_stateid() finds that operations arrived\nbefore laundromat has placed it on cl_revoke list, it marks the state\nfreed and then laundromat will no longer add it to the list.\n\nAlso, for nfsd4_delegreturn() when looking for the specified stid,\nwe need to access stid that are marked removed or freeable, it means\nthe laundromat has started processing it but hasn\u0027t finished and this\ndelegreturn needs to return nfserr_deleg_revoked and not\nnfserr_bad_stateid. The latter will not trigger a FREE_STATEID and the\nlack of it will leave this stid on the cl_revoked list indefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50106",
"url": "https://www.suse.com/security/cve/CVE-2024-50106"
},
{
"category": "external",
"summary": "SUSE Bug 1232882 for CVE-2024-50106",
"url": "https://bugzilla.suse.com/1232882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50106"
},
{
"cve": "CVE-2024-50143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: fix uninit-value use in udf_get_fileshortad\n\nCheck for overflow when computing alen in udf_current_aext to mitigate\nlater uninit-value use in udf_get_fileshortad KMSAN bug[1].\nAfter applying the patch reproducer did not trigger any issue[2].\n\n[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df\n[2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50143",
"url": "https://www.suse.com/security/cve/CVE-2024-50143"
},
{
"category": "external",
"summary": "SUSE Bug 1233038 for CVE-2024-50143",
"url": "https://bugzilla.suse.com/1233038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50143"
},
{
"cve": "CVE-2024-50151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOBs when building SMB2_IOCTL request\n\nWhen using encryption, either enforced by the server or when using\n\u0027seal\u0027 mount option, the client will squash all compound request buffers\ndown for encryption into a single iov in smb2_set_next_command().\n\nSMB2_ioctl_init() allocates a small buffer (448 bytes) to hold the\nSMB2_IOCTL request in the first iov, and if the user passes an input\nbuffer that is greater than 328 bytes, smb2_set_next_command() will\nend up writing off the end of @rqst-\u003eiov[0].iov_base as shown below:\n\n mount.cifs //srv/share /mnt -o ...,seal\n ln -s $(perl -e \"print(\u0027a\u0027)for 1..1024\") /mnt/link\n\n BUG: KASAN: slab-out-of-bounds in\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n Write of size 4116 at addr ffff8881148fcab8 by task ln/859\n\n CPU: 1 UID: 0 PID: 859 Comm: ln Not tainted 6.12.0-rc3 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n 1.16.3-2.fc40 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n print_report+0x156/0x4d9\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n ? __virt_addr_valid+0x145/0x310\n ? __phys_addr+0x46/0x90\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_report+0xda/0x110\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_check_range+0x10f/0x1f0\n __asan_memcpy+0x3c/0x60\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n smb2_compound_op+0x238c/0x3840 [cifs]\n ? kasan_save_track+0x14/0x30\n ? kasan_save_free_info+0x3b/0x70\n ? vfs_symlink+0x1a1/0x2c0\n ? do_symlinkat+0x108/0x1c0\n ? __pfx_smb2_compound_op+0x10/0x10 [cifs]\n ? kmem_cache_free+0x118/0x3e0\n ? cifs_get_writable_path+0xeb/0x1a0 [cifs]\n smb2_get_reparse_inode+0x423/0x540 [cifs]\n ? __pfx_smb2_get_reparse_inode+0x10/0x10 [cifs]\n ? rcu_is_watching+0x20/0x50\n ? __kmalloc_noprof+0x37c/0x480\n ? smb2_create_reparse_symlink+0x257/0x490 [cifs]\n ? smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n ? __pfx_smb2_create_reparse_symlink+0x10/0x10 [cifs]\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? __build_path_from_dentry_optional_prefix+0x19d/0x2e0 [cifs]\n cifs_symlink+0x24f/0x960 [cifs]\n ? __pfx_make_vfsuid+0x10/0x10\n ? __pfx_cifs_symlink+0x10/0x10 [cifs]\n ? make_vfsgid+0x6b/0xc0\n ? generic_permission+0x96/0x2d0\n vfs_symlink+0x1a1/0x2c0\n do_symlinkat+0x108/0x1c0\n ? __pfx_do_symlinkat+0x10/0x10\n ? strncpy_from_user+0xaa/0x160\n __x64_sys_symlinkat+0xb9/0xf0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7f08d75c13bb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50151",
"url": "https://www.suse.com/security/cve/CVE-2024-50151"
},
{
"category": "external",
"summary": "SUSE Bug 1233055 for CVE-2024-50151",
"url": "https://bugzilla.suse.com/1233055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50151"
},
{
"cve": "CVE-2024-50154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp/dccp: Don\u0027t use timer_pending() in reqsk_queue_unlink().\n\nMartin KaFai Lau reported use-after-free [0] in reqsk_timer_handler().\n\n \"\"\"\n We are seeing a use-after-free from a bpf prog attached to\n trace_tcp_retransmit_synack. The program passes the req-\u003esk to the\n bpf_sk_storage_get_tracing kernel helper which does check for null\n before using it.\n \"\"\"\n\nThe commit 83fccfc3940c (\"inet: fix potential deadlock in\nreqsk_queue_unlink()\") added timer_pending() in reqsk_queue_unlink() not\nto call del_timer_sync() from reqsk_timer_handler(), but it introduced a\nsmall race window.\n\nBefore the timer is called, expire_timers() calls detach_timer(timer, true)\nto clear timer-\u003eentry.pprev and marks it as not pending.\n\nIf reqsk_queue_unlink() checks timer_pending() just after expire_timers()\ncalls detach_timer(), TCP will miss del_timer_sync(); the reqsk timer will\ncontinue running and send multiple SYN+ACKs until it expires.\n\nThe reported UAF could happen if req-\u003esk is close()d earlier than the timer\nexpiration, which is 63s by default.\n\nThe scenario would be\n\n 1. inet_csk_complete_hashdance() calls inet_csk_reqsk_queue_drop(),\n but del_timer_sync() is missed\n\n 2. reqsk timer is executed and scheduled again\n\n 3. req-\u003esk is accept()ed and reqsk_put() decrements rsk_refcnt, but\n reqsk timer still has another one, and inet_csk_accept() does not\n clear req-\u003esk for non-TFO sockets\n\n 4. sk is close()d\n\n 5. reqsk timer is executed again, and BPF touches req-\u003esk\n\nLet\u0027s not use timer_pending() by passing the caller context to\n__inet_csk_reqsk_queue_drop().\n\nNote that reqsk timer is pinned, so the issue does not happen in most\nuse cases. [1]\n\n[0]\nBUG: KFENCE: use-after-free read in bpf_sk_storage_get_tracing+0x2e/0x1b0\n\nUse-after-free read at 0x00000000a891fb3a (in kfence-#1):\nbpf_sk_storage_get_tracing+0x2e/0x1b0\nbpf_prog_5ea3e95db6da0438_tcp_retransmit_synack+0x1d20/0x1dda\nbpf_trace_run2+0x4c/0xc0\ntcp_rtx_synack+0xf9/0x100\nreqsk_timer_handler+0xda/0x3d0\nrun_timer_softirq+0x292/0x8a0\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\nintel_idle_irq+0x5a/0xa0\ncpuidle_enter_state+0x94/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nkfence-#1: 0x00000000a72cc7b6-0x00000000d97616d9, size=2376, cache=TCPv6\n\nallocated by task 0 on cpu 9 at 260507.901592s:\nsk_prot_alloc+0x35/0x140\nsk_clone_lock+0x1f/0x3f0\ninet_csk_clone_lock+0x15/0x160\ntcp_create_openreq_child+0x1f/0x410\ntcp_v6_syn_recv_sock+0x1da/0x700\ntcp_check_req+0x1fb/0x510\ntcp_v6_rcv+0x98b/0x1420\nipv6_list_rcv+0x2258/0x26e0\nnapi_complete_done+0x5b1/0x2990\nmlx5e_napi_poll+0x2ae/0x8d0\nnet_rx_action+0x13e/0x590\nirq_exit_rcu+0xf5/0x320\ncommon_interrupt+0x80/0x90\nasm_common_interrupt+0x22/0x40\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nfreed by task 0 on cpu 9 at 260507.927527s:\nrcu_core_si+0x4ff/0xf10\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50154",
"url": "https://www.suse.com/security/cve/CVE-2024-50154"
},
{
"category": "external",
"summary": "SUSE Bug 1233070 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "external",
"summary": "SUSE Bug 1233072 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233072"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-50154"
},
{
"cve": "CVE-2024-50199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50199"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/swapfile: skip HugeTLB pages for unuse_vma\n\nI got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The\nproblem can be reproduced by the following steps:\n\n 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.\n 2. Swapout the above anonymous memory.\n 3. run swapoff and we will get a bad pud error in kernel message:\n\n mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)\n\nWe can tell that pud_clear_bad is called by pud_none_or_clear_bad in\nunuse_pud_range() by ftrace. And therefore the HugeTLB pages will never\nbe freed because we lost it from page table. We can skip HugeTLB pages\nfor unuse_vma to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50199",
"url": "https://www.suse.com/security/cve/CVE-2024-50199"
},
{
"category": "external",
"summary": "SUSE Bug 1233112 for CVE-2024-50199",
"url": "https://bugzilla.suse.com/1233112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50199"
},
{
"cve": "CVE-2024-50202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: propagate directory read errors from nilfs_find_entry()\n\nSyzbot reported that a task hang occurs in vcs_open() during a fuzzing\ntest for nilfs2.\n\nThe root cause of this problem is that in nilfs_find_entry(), which\nsearches for directory entries, ignores errors when loading a directory\npage/folio via nilfs_get_folio() fails.\n\nIf the filesystem images is corrupted, and the i_size of the directory\ninode is large, and the directory page/folio is successfully read but\nfails the sanity check, for example when it is zero-filled,\nnilfs_check_folio() may continue to spit out error messages in bursts.\n\nFix this issue by propagating the error to the callers when loading a\npage/folio fails in nilfs_find_entry().\n\nThe current interface of nilfs_find_entry() and its callers is outdated\nand cannot propagate error codes such as -EIO and -ENOMEM returned via\nnilfs_find_entry(), so fix it together.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50202",
"url": "https://www.suse.com/security/cve/CVE-2024-50202"
},
{
"category": "external",
"summary": "SUSE Bug 1233324 for CVE-2024-50202",
"url": "https://bugzilla.suse.com/1233324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50202"
},
{
"cve": "CVE-2024-50203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Fix address emission with tag-based KASAN enabled\n\nWhen BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image\nstruct on the stack is passed during the size calculation pass and\nan address on the heap is passed during code generation. This may\ncause a heap buffer overflow if the heap address is tagged because\nemit_a64_mov_i64() will emit longer code than it did during the size\ncalculation pass. The same problem could occur without tag-based\nKASAN if one of the 16-bit words of the stack address happened to\nbe all-ones during the size calculation pass. Fix the problem by\nassuming the worst case (4 instructions) when calculating the size\nof the bpf_tramp_image address emission.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50203",
"url": "https://www.suse.com/security/cve/CVE-2024-50203"
},
{
"category": "external",
"summary": "SUSE Bug 1233328 for CVE-2024-50203",
"url": "https://bugzilla.suse.com/1233328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50203"
},
{
"cve": "CVE-2024-50211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50211"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: refactor inode_bmap() to handle error\n\nRefactor inode_bmap() to handle error since udf_next_aext() can return\nerror now. On situations like ftruncate, udf_extend_file() can now\ndetect errors and bail out early without resorting to checking for\nparticular offsets and assuming internal behavior of these functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50211",
"url": "https://www.suse.com/security/cve/CVE-2024-50211"
},
{
"category": "external",
"summary": "SUSE Bug 1233096 for CVE-2024-50211",
"url": "https://bugzilla.suse.com/1233096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50211"
},
{
"cve": "CVE-2024-50228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50228"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50228",
"url": "https://www.suse.com/security/cve/CVE-2024-50228"
},
{
"category": "external",
"summary": "SUSE Bug 1233204 for CVE-2024-50228",
"url": "https://bugzilla.suse.com/1233204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50228"
},
{
"cve": "CVE-2024-50252",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50252"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address\n\nThe device stores IPv6 addresses that are used for encapsulation in\nlinear memory that is managed by the driver.\n\nChanging the remote address of an ip6gre net device never worked\nproperly, but since cited commit the following reproducer [1] would\nresult in a warning [2] and a memory leak [3]. The problem is that the\nnew remote address is never added by the driver to its hash table (and\ntherefore the device) and the old address is never removed from it.\n\nFix by programming the new address when the configuration of the ip6gre\nnet device changes and removing the old one. If the address did not\nchange, then the above would result in increasing the reference count of\nthe address and then decreasing it.\n\n[1]\n # ip link add name bla up type ip6gre local 2001:db8:1::1 remote 2001:db8:2::1 tos inherit ttl inherit\n # ip link set dev bla type ip6gre remote 2001:db8:3::1\n # ip link del dev bla\n # devlink dev reload pci/0000:01:00.0\n\n[2]\nWARNING: CPU: 0 PID: 1682 at drivers/net/ethernet/mellanox/mlxsw/spectrum.c:3002 mlxsw_sp_ipv6_addr_put+0x140/0x1d0\nModules linked in:\nCPU: 0 UID: 0 PID: 1682 Comm: ip Not tainted 6.12.0-rc3-custom-g86b5b55bc835 #151\nHardware name: Nvidia SN5600/VMOD0013, BIOS 5.13 05/31/2023\nRIP: 0010:mlxsw_sp_ipv6_addr_put+0x140/0x1d0\n[...]\nCall Trace:\n \u003cTASK\u003e\n mlxsw_sp_router_netdevice_event+0x55f/0x1240\n notifier_call_chain+0x5a/0xd0\n call_netdevice_notifiers_info+0x39/0x90\n unregister_netdevice_many_notify+0x63e/0x9d0\n rtnl_dellink+0x16b/0x3a0\n rtnetlink_rcv_msg+0x142/0x3f0\n netlink_rcv_skb+0x50/0x100\n netlink_unicast+0x242/0x390\n netlink_sendmsg+0x1de/0x420\n ____sys_sendmsg+0x2bd/0x320\n ___sys_sendmsg+0x9a/0xe0\n __sys_sendmsg+0x7a/0xd0\n do_syscall_64+0x9e/0x1a0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n[3]\nunreferenced object 0xffff898081f597a0 (size 32):\n comm \"ip\", pid 1626, jiffies 4294719324\n hex dump (first 32 bytes):\n 20 01 0d b8 00 02 00 00 00 00 00 00 00 00 00 01 ...............\n 21 49 61 83 80 89 ff ff 00 00 00 00 01 00 00 00 !Ia.............\n backtrace (crc fd9be911):\n [\u003c00000000df89c55d\u003e] __kmalloc_cache_noprof+0x1da/0x260\n [\u003c00000000ff2a1ddb\u003e] mlxsw_sp_ipv6_addr_kvdl_index_get+0x281/0x340\n [\u003c000000009ddd445d\u003e] mlxsw_sp_router_netdevice_event+0x47b/0x1240\n [\u003c00000000743e7757\u003e] notifier_call_chain+0x5a/0xd0\n [\u003c000000007c7b9e13\u003e] call_netdevice_notifiers_info+0x39/0x90\n [\u003c000000002509645d\u003e] register_netdevice+0x5f7/0x7a0\n [\u003c00000000c2e7d2a9\u003e] ip6gre_newlink_common.isra.0+0x65/0x130\n [\u003c0000000087cd6d8d\u003e] ip6gre_newlink+0x72/0x120\n [\u003c000000004df7c7cc\u003e] rtnl_newlink+0x471/0xa20\n [\u003c0000000057ed632a\u003e] rtnetlink_rcv_msg+0x142/0x3f0\n [\u003c0000000032e0d5b5\u003e] netlink_rcv_skb+0x50/0x100\n [\u003c00000000908bca63\u003e] netlink_unicast+0x242/0x390\n [\u003c00000000cdbe1c87\u003e] netlink_sendmsg+0x1de/0x420\n [\u003c0000000011db153e\u003e] ____sys_sendmsg+0x2bd/0x320\n [\u003c000000003b6d53eb\u003e] ___sys_sendmsg+0x9a/0xe0\n [\u003c00000000cae27c62\u003e] __sys_sendmsg+0x7a/0xd0",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50252",
"url": "https://www.suse.com/security/cve/CVE-2024-50252"
},
{
"category": "external",
"summary": "SUSE Bug 1233201 for CVE-2024-50252",
"url": "https://bugzilla.suse.com/1233201"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50252"
},
{
"cve": "CVE-2024-50256",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50256"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()\n\nI got a syzbot report without a repro [1] crashing in nf_send_reset6()\n\nI think the issue is that dev-\u003ehard_header_len is zero, and we attempt\nlater to push an Ethernet header.\n\nUse LL_MAX_HEADER, as other functions in net/ipv6/netfilter/nf_reject_ipv6.c.\n\n[1]\n\nskbuff: skb_under_panic: text:ffffffff89b1d008 len:74 put:14 head:ffff88803123aa00 data:ffff88803123a9f2 tail:0x3c end:0x140 dev:syz_tun\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 7373 Comm: syz.1.568 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 60 a6 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 ba 30 38 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc900045269b0 EFLAGS: 00010282\nRAX: 0000000000000088 RBX: dffffc0000000000 RCX: cd66dacdc5d8e800\nRDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000\nRBP: ffff88802d39a3d0 R08: ffffffff8174afec R09: 1ffff920008a4ccc\nR10: dffffc0000000000 R11: fffff520008a4ccd R12: 0000000000000140\nR13: ffff88803123aa00 R14: ffff88803123a9f2 R15: 000000000000003c\nFS: 00007fdbee5ff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000005d322000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n eth_header+0x38/0x1f0 net/ethernet/eth.c:83\n dev_hard_header include/linux/netdevice.h:3208 [inline]\n nf_send_reset6+0xce6/0x1270 net/ipv6/netfilter/nf_reject_ipv6.c:358\n nft_reject_inet_eval+0x3b9/0x690 net/netfilter/nft_reject_inet.c:48\n expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]\n nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288\n nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626\n nf_hook include/linux/netfilter.h:269 [inline]\n NF_HOOK include/linux/netfilter.h:312 [inline]\n br_nf_pre_routing_ipv6+0x63e/0x770 net/bridge/br_netfilter_ipv6.c:184\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]\n br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424\n __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5562\n __netif_receive_skb_one_core net/core/dev.c:5666 [inline]\n __netif_receive_skb+0x12f/0x650 net/core/dev.c:5781\n netif_receive_skb_internal net/core/dev.c:5867 [inline]\n netif_receive_skb+0x1e8/0x890 net/core/dev.c:5926\n tun_rx_batched+0x1b7/0x8f0 drivers/net/tun.c:1550\n tun_get_user+0x3056/0x47e0 drivers/net/tun.c:2007\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2053\n new_sync_write fs/read_write.c:590 [inline]\n vfs_write+0xa6d/0xc90 fs/read_write.c:683\n ksys_write+0x183/0x2b0 fs/read_write.c:736\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fdbeeb7d1ff\nCode: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48\nRSP: 002b:00007fdbee5ff000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 00007fdbeed36058 RCX: 00007fdbeeb7d1ff\nRDX: 000000000000008e RSI: 0000000020000040 RDI: 00000000000000c8\nRBP: 00007fdbeebf12be R08: 0000000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50256",
"url": "https://www.suse.com/security/cve/CVE-2024-50256"
},
{
"category": "external",
"summary": "SUSE Bug 1233200 for CVE-2024-50256",
"url": "https://bugzilla.suse.com/1233200"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50256"
},
{
"cve": "CVE-2024-50262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50262"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix out-of-bounds write in trie_get_next_key()\n\ntrie_get_next_key() allocates a node stack with size trie-\u003emax_prefixlen,\nwhile it writes (trie-\u003emax_prefixlen + 1) nodes to the stack when it has\nfull paths from the root to leaves. For example, consider a trie with\nmax_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ...\n0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with\n.prefixlen = 8 make 9 nodes be written on the node stack with size 8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50262",
"url": "https://www.suse.com/security/cve/CVE-2024-50262"
},
{
"category": "external",
"summary": "SUSE Bug 1233239 for CVE-2024-50262",
"url": "https://bugzilla.suse.com/1233239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50262"
},
{
"cve": "CVE-2024-50272",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50272"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfilemap: Fix bounds checking in filemap_read()\n\nIf the caller supplies an iocb-\u003eki_pos value that is close to the\nfilesystem upper limit, and an iterator with a count that causes us to\noverflow that limit, then filemap_read() enters an infinite loop.\n\nThis behaviour was discovered when testing xfstests generic/525 with the\n\"localio\" optimisation for loopback NFS mounts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50272",
"url": "https://www.suse.com/security/cve/CVE-2024-50272"
},
{
"category": "external",
"summary": "SUSE Bug 1233461 for CVE-2024-50272",
"url": "https://bugzilla.suse.com/1233461"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50272"
},
{
"cve": "CVE-2024-50278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50278"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix potential out-of-bounds access on the first resume\n\nOut-of-bounds access occurs if the fast device is expanded unexpectedly\nbefore the first-time resume of the cache table. This happens because\nexpanding the fast device requires reloading the cache table for\ncache_create to allocate new in-core data structures that fit the new\nsize, and the check in cache_preresume is not performed during the\nfirst resume, leading to the issue.\n\nReproduce steps:\n\n1. prepare component devices:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\n\n2. load a cache table of 512 cache blocks, and deliberately expand the\n fast device before resuming the cache, making the in-core data\n structures inadequate.\n\ndmsetup create cache --notable\ndmsetup reload cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\ndmsetup reload cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup resume cdata\ndmsetup resume cache\n\n3. suspend the cache to write out the in-core dirty bitset and hint\n array, leading to out-of-bounds access to the dirty bitset at offset\n 0x40:\n\ndmsetup suspend cache\n\nKASAN reports:\n\n BUG: KASAN: vmalloc-out-of-bounds in is_dirty_callback+0x2b/0x80\n Read of size 8 at addr ffffc90000085040 by task dmsetup/90\n\n (...snip...)\n The buggy address belongs to the virtual mapping at\n [ffffc90000085000, ffffc90000087000) created by:\n cache_ctr+0x176a/0x35f0\n\n (...snip...)\n Memory state around the buggy address:\n ffffc90000084f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000084f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n \u003effffc90000085000: 00 00 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8\n ^\n ffffc90000085080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000085100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n\nFix by checking the size change on the first resume.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50278",
"url": "https://www.suse.com/security/cve/CVE-2024-50278"
},
{
"category": "external",
"summary": "SUSE Bug 1233467 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "external",
"summary": "SUSE Bug 1233709 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50278"
},
{
"cve": "CVE-2024-50279",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50279"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix out-of-bounds access to the dirty bitset when resizing\n\ndm-cache checks the dirty bits of the cache blocks to be dropped when\nshrinking the fast device, but an index bug in bitset iteration causes\nout-of-bounds access.\n\nReproduce steps:\n\n1. create a cache device of 1024 cache blocks (128 bytes dirty bitset)\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. shrink the fast device to 512 cache blocks, triggering out-of-bounds\n access to the dirty bitset (offset 0x80)\n\ndmsetup suspend cache\ndmsetup reload cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup resume cdata\ndmsetup resume cache\n\nKASAN reports:\n\n BUG: KASAN: vmalloc-out-of-bounds in cache_preresume+0x269/0x7b0\n Read of size 8 at addr ffffc900000f3080 by task dmsetup/131\n\n (...snip...)\n The buggy address belongs to the virtual mapping at\n [ffffc900000f3000, ffffc900000f5000) created by:\n cache_ctr+0x176a/0x35f0\n\n (...snip...)\n Memory state around the buggy address:\n ffffc900000f2f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc900000f3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n \u003effffc900000f3080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ^\n ffffc900000f3100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc900000f3180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n\nFix by making the index post-incremented.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50279",
"url": "https://www.suse.com/security/cve/CVE-2024-50279"
},
{
"category": "external",
"summary": "SUSE Bug 1233468 for CVE-2024-50279",
"url": "https://bugzilla.suse.com/1233468"
},
{
"category": "external",
"summary": "SUSE Bug 1233708 for CVE-2024-50279",
"url": "https://bugzilla.suse.com/1233708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-50279"
},
{
"cve": "CVE-2024-50280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50280"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix flushing uninitialized delayed_work on cache_ctr error\n\nAn unexpected WARN_ON from flush_work() may occur when cache creation\nfails, caused by destroying the uninitialized delayed_work waker in the\nerror path of cache_create(). For example, the warning appears on the\nsuperblock checksum error.\n\nReproduce steps:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\nWARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890\n\nFix by pulling out the cancel_delayed_work_sync() from the constructor\u0027s\nerror path. This patch doesn\u0027t affect the use-after-free fix for\nconcurrent dm_resume and dm_destroy (commit 6a459d8edbdb (\"dm cache: Fix\nUAF in destroy()\")) as cache_dtr is not changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50280",
"url": "https://www.suse.com/security/cve/CVE-2024-50280"
},
{
"category": "external",
"summary": "SUSE Bug 1233469 for CVE-2024-50280",
"url": "https://bugzilla.suse.com/1233469"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50280"
},
{
"cve": "CVE-2024-50296",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50296"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when uninstalling driver\n\nWhen the driver is uninstalled and the VF is disabled concurrently, a\nkernel crash occurs. The reason is that the two actions call function\npci_disable_sriov(). The num_VFs is checked to determine whether to\nrelease the corresponding resources. During the second calling, num_VFs\nis not 0 and the resource release function is called. However, the\ncorresponding resource has been released during the first invoking.\nTherefore, the problem occurs:\n\n[15277.839633][T50670] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020\n...\n[15278.131557][T50670] Call trace:\n[15278.134686][T50670] klist_put+0x28/0x12c\n[15278.138682][T50670] klist_del+0x14/0x20\n[15278.142592][T50670] device_del+0xbc/0x3c0\n[15278.146676][T50670] pci_remove_bus_device+0x84/0x120\n[15278.151714][T50670] pci_stop_and_remove_bus_device+0x6c/0x80\n[15278.157447][T50670] pci_iov_remove_virtfn+0xb4/0x12c\n[15278.162485][T50670] sriov_disable+0x50/0x11c\n[15278.166829][T50670] pci_disable_sriov+0x24/0x30\n[15278.171433][T50670] hnae3_unregister_ae_algo_prepare+0x60/0x90 [hnae3]\n[15278.178039][T50670] hclge_exit+0x28/0xd0 [hclge]\n[15278.182730][T50670] __se_sys_delete_module.isra.0+0x164/0x230\n[15278.188550][T50670] __arm64_sys_delete_module+0x1c/0x30\n[15278.193848][T50670] invoke_syscall+0x50/0x11c\n[15278.198278][T50670] el0_svc_common.constprop.0+0x158/0x164\n[15278.203837][T50670] do_el0_svc+0x34/0xcc\n[15278.207834][T50670] el0_svc+0x20/0x30\n\nFor details, see the following figure.\n\n rmmod hclge disable VFs\n----------------------------------------------------\nhclge_exit() sriov_numvfs_store()\n ... device_lock()\n pci_disable_sriov() hns3_pci_sriov_configure()\n pci_disable_sriov()\n sriov_disable()\n sriov_disable() if !num_VFs :\n if !num_VFs : return;\n return; sriov_del_vfs()\n sriov_del_vfs() ...\n ... klist_put()\n klist_put() ...\n ... num_VFs = 0;\n num_VFs = 0; device_unlock();\n\nIn this patch, when driver is removing, we get the device_lock()\nto protect num_VFs, just like sriov_numvfs_store().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50296",
"url": "https://www.suse.com/security/cve/CVE-2024-50296"
},
{
"category": "external",
"summary": "SUSE Bug 1233485 for CVE-2024-50296",
"url": "https://bugzilla.suse.com/1233485"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50296"
},
{
"cve": "CVE-2024-50299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50299"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: properly validate chunk size in sctp_sf_ootb()\n\nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add\nsize validation when walking chunks\") is also required in sctp_sf_ootb()\nto address a crash reported by syzbot:\n\n BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166\n sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407\n sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88\n sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243\n sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159\n ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50299",
"url": "https://www.suse.com/security/cve/CVE-2024-50299"
},
{
"category": "external",
"summary": "SUSE Bug 1233488 for CVE-2024-50299",
"url": "https://bugzilla.suse.com/1233488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-52332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52332",
"url": "https://www.suse.com/security/cve/CVE-2024-52332"
},
{
"category": "external",
"summary": "SUSE Bug 1235700 for CVE-2024-52332",
"url": "https://bugzilla.suse.com/1235700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53043"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmctp i2c: handle NULL header address\n\ndaddr can be NULL if there is no neighbour table entry present,\nin that case the tx packet should be dropped.\n\nsaddr will usually be set by MCTP core, but check for NULL in case a\npacket is transmitted by a different protocol.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53043",
"url": "https://www.suse.com/security/cve/CVE-2024-53043"
},
{
"category": "external",
"summary": "SUSE Bug 1233523 for CVE-2024-53043",
"url": "https://bugzilla.suse.com/1233523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53043"
},
{
"cve": "CVE-2024-53050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53050"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/hdcp: Add encoder check in hdcp2_get_capability\n\nAdd encoder check in intel_hdcp2_get_capability to avoid\nnull pointer error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53050",
"url": "https://www.suse.com/security/cve/CVE-2024-53050"
},
{
"category": "external",
"summary": "SUSE Bug 1233546 for CVE-2024-53050",
"url": "https://bugzilla.suse.com/1233546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53050"
},
{
"cve": "CVE-2024-53051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/hdcp: Add encoder check in intel_hdcp_get_capability\n\nSometimes during hotplug scenario or suspend/resume scenario encoder is\nnot always initialized when intel_hdcp_get_capability add\na check to avoid kernel null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53051",
"url": "https://www.suse.com/security/cve/CVE-2024-53051"
},
{
"category": "external",
"summary": "SUSE Bug 1233547 for CVE-2024-53051",
"url": "https://bugzilla.suse.com/1233547"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53051"
},
{
"cve": "CVE-2024-53055",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53055"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: fix 6 GHz scan construction\n\nIf more than 255 colocated APs exist for the set of all\nAPs found during 2.4/5 GHz scanning, then the 6 GHz scan\nconstruction will loop forever since the loop variable\nhas type u8, which can never reach the number found when\nthat\u0027s bigger than 255, and is stored in a u32 variable.\nAlso move it into the loops to have a smaller scope.\n\nUsing a u32 there is fine, we limit the number of APs in\nthe scan list and each has a limit on the number of RNR\nentries due to the frame size. With a limit of 1000 scan\nresults, a frame size upper bound of 4096 (really it\u0027s\nmore like ~2300) and a TBTT entry size of at least 11,\nwe get an upper bound for the number of ~372k, well in\nthe bounds of a u32.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53055",
"url": "https://www.suse.com/security/cve/CVE-2024-53055"
},
{
"category": "external",
"summary": "SUSE Bug 1233550 for CVE-2024-53055",
"url": "https://bugzilla.suse.com/1233550"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53055"
},
{
"cve": "CVE-2024-53056",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53056"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()\n\nIn mtk_crtc_create(), if the call to mbox_request_channel() fails then we\nset the \"mtk_crtc-\u003ecmdq_client.chan\" pointer to NULL. In that situation,\nwe do not call cmdq_pkt_create().\n\nDuring the cleanup, we need to check if the \"mtk_crtc-\u003ecmdq_client.chan\"\nis NULL first before calling cmdq_pkt_destroy(). Calling\ncmdq_pkt_destroy() is unnecessary if we didn\u0027t call cmdq_pkt_create() and\nit will result in a NULL pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53056",
"url": "https://www.suse.com/security/cve/CVE-2024-53056"
},
{
"category": "external",
"summary": "SUSE Bug 1233568 for CVE-2024-53056",
"url": "https://bugzilla.suse.com/1233568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53056"
},
{
"cve": "CVE-2024-53064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53064"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix idpf_vc_core_init error path\n\nIn an event where the platform running the device control plane\nis rebooted, reset is detected on the driver. It releases\nall the resources and waits for the reset to complete. Once the\nreset is done, it tries to build the resources back. At this\ntime if the device control plane is not yet started, then\nthe driver timeouts on the virtchnl message and retries to\nestablish the mailbox again.\n\nIn the retry flow, mailbox is deinitialized but the mailbox\nworkqueue is still alive and polling for the mailbox message.\nThis results in accessing the released control queue leading to\nnull-ptr-deref. Fix it by unrolling the work queue cancellation\nand mailbox deinitialization in the reverse order which they got\ninitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53064",
"url": "https://www.suse.com/security/cve/CVE-2024-53064"
},
{
"category": "external",
"summary": "SUSE Bug 1233558 for CVE-2024-53064",
"url": "https://bugzilla.suse.com/1233558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53064"
},
{
"cve": "CVE-2024-53090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53090"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix lock recursion\n\nafs_wake_up_async_call() can incur lock recursion. The problem is that it\nis called from AF_RXRPC whilst holding the -\u003enotify_lock, but it tries to\ntake a ref on the afs_call struct in order to pass it to a work queue - but\nif the afs_call is already queued, we then have an extraneous ref that must\nbe put... calling afs_put_call() may call back down into AF_RXRPC through\nrxrpc_kernel_shutdown_call(), however, which might try taking the\n-\u003enotify_lock again.\n\nThis case isn\u0027t very common, however, so defer it to a workqueue. The oops\nlooks something like:\n\n BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646\n lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0\n CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351\n Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x70\n do_raw_spin_lock+0x3c/0x90\n rxrpc_kernel_shutdown_call+0x83/0xb0\n afs_put_call+0xd7/0x180\n rxrpc_notify_socket+0xa0/0x190\n rxrpc_input_split_jumbo+0x198/0x1d0\n rxrpc_input_data+0x14b/0x1e0\n ? rxrpc_input_call_packet+0xc2/0x1f0\n rxrpc_input_call_event+0xad/0x6b0\n rxrpc_input_packet_on_conn+0x1e1/0x210\n rxrpc_input_packet+0x3f2/0x4d0\n rxrpc_io_thread+0x243/0x410\n ? __pfx_rxrpc_io_thread+0x10/0x10\n kthread+0xcf/0xe0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x24/0x40\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53090",
"url": "https://www.suse.com/security/cve/CVE-2024-53090"
},
{
"category": "external",
"summary": "SUSE Bug 1233637 for CVE-2024-53090",
"url": "https://bugzilla.suse.com/1233637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53090"
},
{
"cve": "CVE-2024-53091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53091"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx\n\nAs the introduction of the support for vsock and unix sockets in sockmap,\ntls_sw_has_ctx_tx/rx cannot presume the socket passed in must be IS_ICSK.\nvsock and af_unix sockets have vsock_sock and unix_sock instead of\ninet_connection_sock. For these sockets, tls_get_ctx may return an invalid\npointer and cause page fault in function tls_sw_ctx_rx.\n\nBUG: unable to handle page fault for address: 0000000000040030\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:sk_psock_strp_data_ready+0x23/0x60\nCall Trace:\n ? __die+0x81/0xc3\n ? no_context+0x194/0x350\n ? do_page_fault+0x30/0x110\n ? async_page_fault+0x3e/0x50\n ? sk_psock_strp_data_ready+0x23/0x60\n virtio_transport_recv_pkt+0x750/0x800\n ? update_load_avg+0x7e/0x620\n vsock_loopback_work+0xd0/0x100\n process_one_work+0x1a7/0x360\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x112/0x130\n ? __kthread_cancel_work+0x40/0x40\n ret_from_fork+0x1f/0x40\n\nv2:\n - Add IS_ICSK check\nv3:\n - Update the commits in Fixes",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53091",
"url": "https://www.suse.com/security/cve/CVE-2024-53091"
},
{
"category": "external",
"summary": "SUSE Bug 1233638 for CVE-2024-53091",
"url": "https://bugzilla.suse.com/1233638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53091"
},
{
"cve": "CVE-2024-53095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53095"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix use-after-free of network namespace.\n\nRecently, we got a customer report that CIFS triggers oops while\nreconnecting to a server. [0]\n\nThe workload runs on Kubernetes, and some pods mount CIFS servers\nin non-root network namespaces. The problem rarely happened, but\nit was always while the pod was dying.\n\nThe root cause is wrong reference counting for network namespace.\n\nCIFS uses kernel sockets, which do not hold refcnt of the netns that\nthe socket belongs to. That means CIFS must ensure the socket is\nalways freed before its netns; otherwise, use-after-free happens.\n\nThe repro steps are roughly:\n\n 1. mount CIFS in a non-root netns\n 2. drop packets from the netns\n 3. destroy the netns\n 4. unmount CIFS\n\nWe can reproduce the issue quickly with the script [1] below and see\nthe splat [2] if CONFIG_NET_NS_REFCNT_TRACKER is enabled.\n\nWhen the socket is TCP, it is hard to guarantee the netns lifetime\nwithout holding refcnt due to async timers.\n\nLet\u0027s hold netns refcnt for each socket as done for SMC in commit\n9744d2bf1976 (\"smc: Fix use-after-free in tcp_write_timer_handler().\").\n\nNote that we need to move put_net() from cifs_put_tcp_session() to\nclean_demultiplex_info(); otherwise, __sock_create() still could touch a\nfreed netns while cifsd tries to reconnect from cifs_demultiplex_thread().\n\nAlso, maybe_get_net() cannot be put just before __sock_create() because\nthe code is not under RCU and there is a small chance that the same\naddress happened to be reallocated to another netns.\n\n[0]:\nCIFS: VFS: \\\\XXXXXXXXXXX has not responded in 15 seconds. Reconnecting...\nCIFS: Serverclose failed 4 times, giving up\nUnable to handle kernel paging request at virtual address 14de99e461f84a07\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\n[14de99e461f84a07] address between user and kernel address ranges\nInternal error: Oops: 0000000096000004 [#1] SMP\nModules linked in: cls_bpf sch_ingress nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver tcp_diag inet_diag veth xt_state xt_connmark nf_conntrack_netlink xt_nat xt_statistic xt_MASQUERADE xt_mark xt_addrtype ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nf_tables nfnetlink overlay nls_ascii nls_cp437 sunrpc vfat fat aes_ce_blk aes_ce_cipher ghash_ce sm4_ce_cipher sm4 sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 sha1_ce ena button sch_fq_codel loop fuse configfs dmi_sysfs sha2_ce sha256_arm64 dm_mirror dm_region_hash dm_log dm_mod dax efivarfs\nCPU: 5 PID: 2690970 Comm: cifsd Not tainted 6.1.103-109.184.amzn2023.aarch64 #1\nHardware name: Amazon EC2 r7g.4xlarge/, BIOS 1.0 11/1/2018\npstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : fib_rules_lookup+0x44/0x238\nlr : __fib_lookup+0x64/0xbc\nsp : ffff8000265db790\nx29: ffff8000265db790 x28: 0000000000000000 x27: 000000000000bd01\nx26: 0000000000000000 x25: ffff000b4baf8000 x24: ffff00047b5e4580\nx23: ffff8000265db7e0 x22: 0000000000000000 x21: ffff00047b5e4500\nx20: ffff0010e3f694f8 x19: 14de99e461f849f7 x18: 0000000000000000\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000000 x13: 0000000000000000 x12: 3f92800abd010002\nx11: 0000000000000001 x10: ffff0010e3f69420 x9 : ffff800008a6f294\nx8 : 0000000000000000 x7 : 0000000000000006 x6 : 0000000000000000\nx5 : 0000000000000001 x4 : ffff001924354280 x3 : ffff8000265db7e0\nx2 : 0000000000000000 x1 : ffff0010e3f694f8 x0 : ffff00047b5e4500\nCall trace:\n fib_rules_lookup+0x44/0x238\n __fib_lookup+0x64/0xbc\n ip_route_output_key_hash_rcu+0x2c4/0x398\n ip_route_output_key_hash+0x60/0x8c\n tcp_v4_connect+0x290/0x488\n __inet_stream_connect+0x108/0x3d0\n inet_stream_connect+0x50/0x78\n kernel_connect+0x6c/0xac\n generic_ip_conne\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53095",
"url": "https://www.suse.com/security/cve/CVE-2024-53095"
},
{
"category": "external",
"summary": "SUSE Bug 1233642 for CVE-2024-53095",
"url": "https://bugzilla.suse.com/1233642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53095"
},
{
"cve": "CVE-2024-53099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53099"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check validity of link-\u003etype in bpf_link_show_fdinfo()\n\nIf a newly-added link type doesn\u0027t invoke BPF_LINK_TYPE(), accessing\nbpf_link_type_strs[link-\u003etype] may result in an out-of-bounds access.\n\nTo spot such missed invocations early in the future, checking the\nvalidity of link-\u003etype in bpf_link_show_fdinfo() and emitting a warning\nwhen such invocations are missed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53099",
"url": "https://www.suse.com/security/cve/CVE-2024-53099"
},
{
"category": "external",
"summary": "SUSE Bug 1233772 for CVE-2024-53099",
"url": "https://bugzilla.suse.com/1233772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53099"
},
{
"cve": "CVE-2024-53103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53103"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer\n\nWhen hvs is released, there is a possibility that vsk-\u003etrans may not\nbe initialized to NULL, which could lead to a dangling pointer.\nThis issue is resolved by initializing vsk-\u003etrans to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53103",
"url": "https://www.suse.com/security/cve/CVE-2024-53103"
},
{
"category": "external",
"summary": "SUSE Bug 1234024 for CVE-2024-53103",
"url": "https://bugzilla.suse.com/1234024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53103"
},
{
"cve": "CVE-2024-53105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53105"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: page_alloc: move mlocked flag clearance into free_pages_prepare()\n\nSyzbot reported a bad page state problem caused by a page being freed\nusing free_page() still having a mlocked flag at free_pages_prepare()\nstage:\n\n BUG: Bad page state in process syz.5.504 pfn:61f45\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61f45\n flags: 0xfff00000080204(referenced|workingset|mlocked|node=0|zone=1|lastcpupid=0x7ff)\n raw: 00fff00000080204 0000000000000000 dead000000000122 0000000000000000\n raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\n page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set\n page_owner tracks the page as allocated\n page last allocated via order 0, migratetype Unmovable, gfp_mask 0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), pid 8443, tgid 8442 (syz.5.504), ts 201884660643, free_ts 201499827394\n set_page_owner include/linux/page_owner.h:32 [inline]\n post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1537\n prep_new_page mm/page_alloc.c:1545 [inline]\n get_page_from_freelist+0x303f/0x3190 mm/page_alloc.c:3457\n __alloc_pages_noprof+0x292/0x710 mm/page_alloc.c:4733\n alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265\n kvm_coalesced_mmio_init+0x1f/0xf0 virt/kvm/coalesced_mmio.c:99\n kvm_create_vm virt/kvm/kvm_main.c:1235 [inline]\n kvm_dev_ioctl_create_vm virt/kvm/kvm_main.c:5488 [inline]\n kvm_dev_ioctl+0x12dc/0x2240 virt/kvm/kvm_main.c:5530\n __do_compat_sys_ioctl fs/ioctl.c:1007 [inline]\n __se_compat_sys_ioctl+0x510/0xc90 fs/ioctl.c:950\n do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]\n __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386\n do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411\n entry_SYSENTER_compat_after_hwframe+0x84/0x8e\n page last free pid 8399 tgid 8399 stack trace:\n reset_page_owner include/linux/page_owner.h:25 [inline]\n free_pages_prepare mm/page_alloc.c:1108 [inline]\n free_unref_folios+0xf12/0x18d0 mm/page_alloc.c:2686\n folios_put_refs+0x76c/0x860 mm/swap.c:1007\n free_pages_and_swap_cache+0x5c8/0x690 mm/swap_state.c:335\n __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline]\n tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]\n tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]\n tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373\n tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465\n exit_mmap+0x496/0xc40 mm/mmap.c:1926\n __mmput+0x115/0x390 kernel/fork.c:1348\n exit_mm+0x220/0x310 kernel/exit.c:571\n do_exit+0x9b2/0x28e0 kernel/exit.c:926\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [inline]\n __se_sys_exit_group kernel/exit.c:1097 [inline]\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1097\n x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n Modules linked in:\n CPU: 0 UID: 0 PID: 8442 Comm: syz.5.504 Not tainted 6.12.0-rc6-syzkaller #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n bad_page+0x176/0x1d0 mm/page_alloc.c:501\n free_page_is_bad mm/page_alloc.c:918 [inline]\n free_pages_prepare mm/page_alloc.c:1100 [inline]\n free_unref_page+0xed0/0xf20 mm/page_alloc.c:2638\n kvm_destroy_vm virt/kvm/kvm_main.c:1327 [inline]\n kvm_put_kvm+0xc75/0x1350 virt/kvm/kvm_main.c:1386\n kvm_vcpu_release+0x54/0x60 virt/kvm/kvm_main.c:4143\n __fput+0x23f/0x880 fs/file_table.c:431\n task_work_run+0x24f/0x310 kernel/task_work.c:239\n exit_task_work include/linux/task_work.h:43 [inline]\n do_exit+0xa2f/0x28e0 kernel/exit.c:939\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53105",
"url": "https://www.suse.com/security/cve/CVE-2024-53105"
},
{
"category": "external",
"summary": "SUSE Bug 1234069 for CVE-2024-53105",
"url": "https://bugzilla.suse.com/1234069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53105"
},
{
"cve": "CVE-2024-53110",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53110"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvp_vdpa: fix id_table array not null terminated error\n\nAllocate one extra virtio_device_id as null terminator, otherwise\nvdpa_mgmtdev_get_classes() may iterate multiple times and visit\nundefined memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53110",
"url": "https://www.suse.com/security/cve/CVE-2024-53110"
},
{
"category": "external",
"summary": "SUSE Bug 1234085 for CVE-2024-53110",
"url": "https://bugzilla.suse.com/1234085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53110"
},
{
"cve": "CVE-2024-53111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53111"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mremap: fix address wraparound in move_page_tables()\n\nOn 32-bit platforms, it is possible for the expression `len + old_addr \u003c\nold_end` to be false-positive if `len + old_addr` wraps around. \n`old_addr` is the cursor in the old range up to which page table entries\nhave been moved; so if the operation succeeded, `old_addr` is the *end* of\nthe old region, and adding `len` to it can wrap.\n\nThe overflow causes mremap() to mistakenly believe that PTEs have been\ncopied; the consequence is that mremap() bails out, but doesn\u0027t move the\nPTEs back before the new VMA is unmapped, causing anonymous pages in the\nregion to be lost. So basically if userspace tries to mremap() a\nprivate-anon region and hits this bug, mremap() will return an error and\nthe private-anon region\u0027s contents appear to have been zeroed.\n\nThe idea of this check is that `old_end - len` is the original start\naddress, and writing the check that way also makes it easier to read; so\nfix the check by rearranging the comparison accordingly.\n\n(An alternate fix would be to refactor this function by introducing an\n\"orig_old_start\" variable or such.)\n\n\nTested in a VM with a 32-bit X86 kernel; without the patch:\n\n```\nuser@horn:~/big_mremap$ cat test.c\n#define _GNU_SOURCE\n#include \u003cstdlib.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003cerr.h\u003e\n#include \u003csys/mman.h\u003e\n\n#define ADDR1 ((void*)0x60000000)\n#define ADDR2 ((void*)0x10000000)\n#define SIZE 0x50000000uL\n\nint main(void) {\n unsigned char *p1 = mmap(ADDR1, SIZE, PROT_READ|PROT_WRITE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p1 == MAP_FAILED)\n err(1, \"mmap 1\");\n unsigned char *p2 = mmap(ADDR2, SIZE, PROT_NONE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p2 == MAP_FAILED)\n err(1, \"mmap 2\");\n *p1 = 0x41;\n printf(\"first char is 0x%02hhx\\n\", *p1);\n unsigned char *p3 = mremap(p1, SIZE, SIZE,\n MREMAP_MAYMOVE|MREMAP_FIXED, p2);\n if (p3 == MAP_FAILED) {\n printf(\"mremap() failed; first char is 0x%02hhx\\n\", *p1);\n } else {\n printf(\"mremap() succeeded; first char is 0x%02hhx\\n\", *p3);\n }\n}\nuser@horn:~/big_mremap$ gcc -static -o test test.c\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() failed; first char is 0x00\n```\n\nWith the patch:\n\n```\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() succeeded; first char is 0x41\n```",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53111",
"url": "https://www.suse.com/security/cve/CVE-2024-53111"
},
{
"category": "external",
"summary": "SUSE Bug 1234086 for CVE-2024-53111",
"url": "https://bugzilla.suse.com/1234086"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53111"
},
{
"cve": "CVE-2024-53113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53113"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix NULL pointer dereference in alloc_pages_bulk_noprof\n\nWe triggered a NULL pointer dereference for ac.preferred_zoneref-\u003ezone in\nalloc_pages_bulk_noprof() when the task is migrated between cpusets.\n\nWhen cpuset is enabled, in prepare_alloc_pages(), ac-\u003enodemask may be\n\u0026current-\u003emems_allowed. when first_zones_zonelist() is called to find\npreferred_zoneref, the ac-\u003enodemask may be modified concurrently if the\ntask is migrated between different cpusets. Assuming we have 2 NUMA Node,\nwhen traversing Node1 in ac-\u003ezonelist, the nodemask is 2, and when\ntraversing Node2 in ac-\u003ezonelist, the nodemask is 1. As a result, the\nac-\u003epreferred_zoneref points to NULL zone.\n\nIn alloc_pages_bulk_noprof(), for_each_zone_zonelist_nodemask() finds a\nallowable zone and calls zonelist_node_idx(ac.preferred_zoneref), leading\nto NULL pointer dereference.\n\n__alloc_pages_noprof() fixes this issue by checking NULL pointer in commit\nea57485af8f4 (\"mm, page_alloc: fix check for NULL preferred_zone\") and\ncommit df76cee6bbeb (\"mm, page_alloc: remove redundant checks from alloc\nfastpath\").\n\nTo fix it, check NULL pointer for preferred_zoneref-\u003ezone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53113",
"url": "https://www.suse.com/security/cve/CVE-2024-53113"
},
{
"category": "external",
"summary": "SUSE Bug 1234077 for CVE-2024-53113",
"url": "https://bugzilla.suse.com/1234077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53113"
},
{
"cve": "CVE-2024-53117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Improve MSG_ZEROCOPY error handling\n\nAdd a missing kfree_skb() to prevent memory leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53117",
"url": "https://www.suse.com/security/cve/CVE-2024-53117"
},
{
"category": "external",
"summary": "SUSE Bug 1234079 for CVE-2024-53117",
"url": "https://bugzilla.suse.com/1234079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53117"
},
{
"cve": "CVE-2024-53118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53118"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Fix sk_error_queue memory leak\n\nKernel queues MSG_ZEROCOPY completion notifications on the error queue.\nWhere they remain, until explicitly recv()ed. To prevent memory leaks,\nclean up the queue when the socket is destroyed.\n\nunreferenced object 0xffff8881028beb00 (size 224):\n comm \"vsock_test\", pid 1218, jiffies 4294694897\n hex dump (first 32 bytes):\n 90 b0 21 17 81 88 ff ff 90 b0 21 17 81 88 ff ff ..!.......!.....\n 00 00 00 00 00 00 00 00 00 b0 21 17 81 88 ff ff ..........!.....\n backtrace (crc 6c7031ca):\n [\u003cffffffff81418ef7\u003e] kmem_cache_alloc_node_noprof+0x2f7/0x370\n [\u003cffffffff81d35882\u003e] __alloc_skb+0x132/0x180\n [\u003cffffffff81d2d32b\u003e] sock_omalloc+0x4b/0x80\n [\u003cffffffff81d3a8ae\u003e] msg_zerocopy_realloc+0x9e/0x240\n [\u003cffffffff81fe5cb2\u003e] virtio_transport_send_pkt_info+0x412/0x4c0\n [\u003cffffffff81fe6183\u003e] virtio_transport_stream_enqueue+0x43/0x50\n [\u003cffffffff81fe0813\u003e] vsock_connectible_sendmsg+0x373/0x450\n [\u003cffffffff81d233d5\u003e] ____sys_sendmsg+0x365/0x3a0\n [\u003cffffffff81d246f4\u003e] ___sys_sendmsg+0x84/0xd0\n [\u003cffffffff81d26f47\u003e] __sys_sendmsg+0x47/0x80\n [\u003cffffffff820d3df3\u003e] do_syscall_64+0x93/0x180\n [\u003cffffffff8220012b\u003e] entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53118",
"url": "https://www.suse.com/security/cve/CVE-2024-53118"
},
{
"category": "external",
"summary": "SUSE Bug 1234071 for CVE-2024-53118",
"url": "https://bugzilla.suse.com/1234071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53118"
},
{
"cve": "CVE-2024-53119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53119"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Fix accept_queue memory leak\n\nAs the final stages of socket destruction may be delayed, it is possible\nthat virtio_transport_recv_listen() will be called after the accept_queue\nhas been flushed, but before the SOCK_DONE flag has been set. As a result,\nsockets enqueued after the flush would remain unremoved, leading to a\nmemory leak.\n\nvsock_release\n __vsock_release\n lock\n virtio_transport_release\n virtio_transport_close\n schedule_delayed_work(close_work)\n sk_shutdown = SHUTDOWN_MASK\n(!) flush accept_queue\n release\n virtio_transport_recv_pkt\n vsock_find_bound_socket\n lock\n if flag(SOCK_DONE) return\n virtio_transport_recv_listen\n child = vsock_create_connected\n (!) vsock_enqueue_accept(child)\n release\nclose_work\n lock\n virtio_transport_do_close\n set_flag(SOCK_DONE)\n virtio_transport_remove_sock\n vsock_remove_sock\n vsock_remove_bound\n release\n\nIntroduce a sk_shutdown check to disallow vsock_enqueue_accept() during\nsocket destruction.\n\nunreferenced object 0xffff888109e3f800 (size 2040):\n comm \"kworker/5:2\", pid 371, jiffies 4294940105\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 28 00 0b 40 00 00 00 00 00 00 00 00 00 00 00 00 (..@............\n backtrace (crc 9e5f4e84):\n [\u003cffffffff81418ff1\u003e] kmem_cache_alloc_noprof+0x2c1/0x360\n [\u003cffffffff81d27aa0\u003e] sk_prot_alloc+0x30/0x120\n [\u003cffffffff81d2b54c\u003e] sk_alloc+0x2c/0x4b0\n [\u003cffffffff81fe049a\u003e] __vsock_create.constprop.0+0x2a/0x310\n [\u003cffffffff81fe6d6c\u003e] virtio_transport_recv_pkt+0x4dc/0x9a0\n [\u003cffffffff81fe745d\u003e] vsock_loopback_work+0xfd/0x140\n [\u003cffffffff810fc6ac\u003e] process_one_work+0x20c/0x570\n [\u003cffffffff810fce3f\u003e] worker_thread+0x1bf/0x3a0\n [\u003cffffffff811070dd\u003e] kthread+0xdd/0x110\n [\u003cffffffff81044fdd\u003e] ret_from_fork+0x2d/0x50\n [\u003cffffffff8100785a\u003e] ret_from_fork_asm+0x1a/0x30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53119",
"url": "https://www.suse.com/security/cve/CVE-2024-53119"
},
{
"category": "external",
"summary": "SUSE Bug 1234073 for CVE-2024-53119",
"url": "https://bugzilla.suse.com/1234073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53119"
},
{
"cve": "CVE-2024-53120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53120"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: CT: Fix null-ptr-deref in add rule err flow\n\nIn error flow of mlx5_tc_ct_entry_add_rule(), in case ct_rule_add()\ncallback returns error, zone_rule-\u003eattr is used uninitiated. Fix it to\nuse attr which has the needed pointer value.\n\nKernel log:\n BUG: kernel NULL pointer dereference, address: 0000000000000110\n RIP: 0010:mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n\u2026\n Call Trace:\n \u003cTASK\u003e\n ? __die+0x20/0x70\n ? page_fault_oops+0x150/0x3e0\n ? exc_page_fault+0x74/0x140\n ? asm_exc_page_fault+0x22/0x30\n ? mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n ? mlx5_tc_ct_entry_add_rule+0x1d5/0x2f0 [mlx5_core]\n mlx5_tc_ct_block_flow_offload+0xc6a/0xf90 [mlx5_core]\n ? nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n flow_offload_work_handler+0x142/0x320 [nf_flow_table]\n ? finish_task_switch.isra.0+0x15b/0x2b0\n process_one_work+0x16c/0x320\n worker_thread+0x28c/0x3a0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xb8/0xf0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2d/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53120",
"url": "https://www.suse.com/security/cve/CVE-2024-53120"
},
{
"category": "external",
"summary": "SUSE Bug 1234075 for CVE-2024-53120",
"url": "https://bugzilla.suse.com/1234075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53120"
},
{
"cve": "CVE-2024-53121",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53121"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: fs, lock FTE when checking if active\n\nThe referenced commits introduced a two-step process for deleting FTEs:\n\n- Lock the FTE, delete it from hardware, set the hardware deletion function\n to NULL and unlock the FTE.\n- Lock the parent flow group, delete the software copy of the FTE, and\n remove it from the xarray.\n\nHowever, this approach encounters a race condition if a rule with the same\nmatch value is added simultaneously. In this scenario, fs_core may set the\nhardware deletion function to NULL prematurely, causing a panic during\nsubsequent rule deletions.\n\nTo prevent this, ensure the active flag of the FTE is checked under a lock,\nwhich will prevent the fs_core layer from attaching a new steering rule to\nan FTE that is in the process of deletion.\n\n[ 438.967589] MOSHE: 2496 mlx5_del_flow_rules del_hw_func\n[ 438.968205] ------------[ cut here ]------------\n[ 438.968654] refcount_t: decrement hit 0; leaking memory.\n[ 438.969249] WARNING: CPU: 0 PID: 8957 at lib/refcount.c:31 refcount_warn_saturate+0xfb/0x110\n[ 438.970054] Modules linked in: act_mirred cls_flower act_gact sch_ingress openvswitch nsh mlx5_vdpa vringh vhost_iotlb vdpa mlx5_ib mlx5_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter rpcsec_gss_krb5 auth_rpcgss oid_registry overlay rpcrdma rdma_ucm ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm ib_ipoib iw_cm ib_cm ib_uverbs ib_core zram zsmalloc fuse [last unloaded: cls_flower]\n[ 438.973288] CPU: 0 UID: 0 PID: 8957 Comm: tc Not tainted 6.12.0-rc1+ #8\n[ 438.973888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n[ 438.974874] RIP: 0010:refcount_warn_saturate+0xfb/0x110\n[ 438.975363] Code: 40 66 3b 82 c6 05 16 e9 4d 01 01 e8 1f 7c a0 ff 0f 0b c3 cc cc cc cc 48 c7 c7 10 66 3b 82 c6 05 fd e8 4d 01 01 e8 05 7c a0 ff \u003c0f\u003e 0b c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90\n[ 438.976947] RSP: 0018:ffff888124a53610 EFLAGS: 00010286\n[ 438.977446] RAX: 0000000000000000 RBX: ffff888119d56de0 RCX: 0000000000000000\n[ 438.978090] RDX: ffff88852c828700 RSI: ffff88852c81b3c0 RDI: ffff88852c81b3c0\n[ 438.978721] RBP: ffff888120fa0e88 R08: 0000000000000000 R09: ffff888124a534b0\n[ 438.979353] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888119d56de0\n[ 438.979979] R13: ffff888120fa0ec0 R14: ffff888120fa0ee8 R15: ffff888119d56de0\n[ 438.980607] FS: 00007fe6dcc0f800(0000) GS:ffff88852c800000(0000) knlGS:0000000000000000\n[ 438.983984] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 438.984544] CR2: 00000000004275e0 CR3: 0000000186982001 CR4: 0000000000372eb0\n[ 438.985205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 438.985842] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 438.986507] Call Trace:\n[ 438.986799] \u003cTASK\u003e\n[ 438.987070] ? __warn+0x7d/0x110\n[ 438.987426] ? refcount_warn_saturate+0xfb/0x110\n[ 438.987877] ? report_bug+0x17d/0x190\n[ 438.988261] ? prb_read_valid+0x17/0x20\n[ 438.988659] ? handle_bug+0x53/0x90\n[ 438.989054] ? exc_invalid_op+0x14/0x70\n[ 438.989458] ? asm_exc_invalid_op+0x16/0x20\n[ 438.989883] ? refcount_warn_saturate+0xfb/0x110\n[ 438.990348] mlx5_del_flow_rules+0x2f7/0x340 [mlx5_core]\n[ 438.990932] __mlx5_eswitch_del_rule+0x49/0x170 [mlx5_core]\n[ 438.991519] ? mlx5_lag_is_sriov+0x3c/0x50 [mlx5_core]\n[ 438.992054] ? xas_load+0x9/0xb0\n[ 438.992407] mlx5e_tc_rule_unoffload+0x45/0xe0 [mlx5_core]\n[ 438.993037] mlx5e_tc_del_fdb_flow+0x2a6/0x2e0 [mlx5_core]\n[ 438.993623] mlx5e_flow_put+0x29/0x60 [mlx5_core]\n[ 438.994161] mlx5e_delete_flower+0x261/0x390 [mlx5_core]\n[ 438.994728] tc_setup_cb_destroy+0xb9/0x190\n[ 438.995150] fl_hw_destroy_filter+0x94/0xc0 [cls_flower]\n[ 438.995650] fl_change+0x11a4/0x13c0 [cls_flower]\n[ 438.996105] tc_new_tfilter+0x347/0xbc0\n[ 438.996503] ? __\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53121",
"url": "https://www.suse.com/security/cve/CVE-2024-53121"
},
{
"category": "external",
"summary": "SUSE Bug 1234078 for CVE-2024-53121",
"url": "https://bugzilla.suse.com/1234078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53121"
},
{
"cve": "CVE-2024-53122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53122"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: cope racing subflow creation in mptcp_rcv_space_adjust\n\nAdditional active subflows - i.e. created by the in kernel path\nmanager - are included into the subflow list before starting the\n3whs.\n\nA racing recvmsg() spooling data received on an already established\nsubflow would unconditionally call tcp_cleanup_rbuf() on all the\ncurrent subflows, potentially hitting a divide by zero error on\nthe newly created ones.\n\nExplicitly check that the subflow is in a suitable state before\ninvoking tcp_cleanup_rbuf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53122",
"url": "https://www.suse.com/security/cve/CVE-2024-53122"
},
{
"category": "external",
"summary": "SUSE Bug 1234076 for CVE-2024-53122",
"url": "https://bugzilla.suse.com/1234076"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53122"
},
{
"cve": "CVE-2024-53125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53125"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: sync_linked_regs() must preserve subreg_def\n\nRange propagation must not affect subreg_def marks, otherwise the\nfollowing example is rewritten by verifier incorrectly when\nBPF_F_TEST_RND_HI32 flag is set:\n\n 0: call bpf_ktime_get_ns call bpf_ktime_get_ns\n 1: r0 \u0026= 0x7fffffff after verifier r0 \u0026= 0x7fffffff\n 2: w1 = w0 rewrites w1 = w0\n 3: if w0 \u003c 10 goto +0 --------------\u003e r11 = 0x2f5674a6 (r)\n 4: r1 \u003e\u003e= 32 r11 \u003c\u003c= 32 (r)\n 5: r0 = r1 r1 |= r11 (r)\n 6: exit; if w0 \u003c 0xa goto pc+0\n r1 \u003e\u003e= 32\n r0 = r1\n exit\n\n(or zero extension of w1 at (2) is missing for architectures that\n require zero extension for upper register half).\n\nThe following happens w/o this patch:\n- r0 is marked as not a subreg at (0);\n- w1 is marked as subreg at (2);\n- w1 subreg_def is overridden at (3) by copy_register_state();\n- w1 is read at (5) but mark_insn_zext() does not mark (2)\n for zero extension, because w1 subreg_def is not set;\n- because of BPF_F_TEST_RND_HI32 flag verifier inserts random\n value for hi32 bits of (2) (marked (r));\n- this random value is read at (5).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53125",
"url": "https://www.suse.com/security/cve/CVE-2024-53125"
},
{
"category": "external",
"summary": "SUSE Bug 1234156 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "external",
"summary": "SUSE Bug 1245804 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1245804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53125"
},
{
"cve": "CVE-2024-53126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53126"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: solidrun: Fix UB bug with devres\n\nIn psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to\npcim_iomap_regions() is placed on the stack. Neither\npcim_iomap_regions() nor the functions it calls copy that string.\n\nShould the string later ever be used, this, consequently, causes\nundefined behavior since the stack frame will by then have disappeared.\n\nFix the bug by allocating the strings on the heap through\ndevm_kasprintf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53126",
"url": "https://www.suse.com/security/cve/CVE-2024-53126"
},
{
"category": "external",
"summary": "SUSE Bug 1234158 for CVE-2024-53126",
"url": "https://bugzilla.suse.com/1234158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53126"
},
{
"cve": "CVE-2024-53127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53127"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"\n\nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages\nbigger than 4K\") increased the max_req_size, even for 4K pages, causing\nvarious issues:\n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566\n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100\n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110\n\nAt this stage no fix have been found, so it\u0027s probably better to just\nrevert the change.\n\nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53127",
"url": "https://www.suse.com/security/cve/CVE-2024-53127"
},
{
"category": "external",
"summary": "SUSE Bug 1234153 for CVE-2024-53127",
"url": "https://bugzilla.suse.com/1234153"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53127"
},
{
"cve": "CVE-2024-53129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53129"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/rockchip: vop: Fix a dereferenced before check warning\n\nThe \u0027state\u0027 can\u0027t be NULL, we should check crtc_state.\n\nFix warning:\ndrivers/gpu/drm/rockchip/rockchip_drm_vop.c:1096\nvop_plane_atomic_async_check() warn: variable dereferenced before check\n\u0027state\u0027 (see line 1077)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53129",
"url": "https://www.suse.com/security/cve/CVE-2024-53129"
},
{
"category": "external",
"summary": "SUSE Bug 1234155 for CVE-2024-53129",
"url": "https://bugzilla.suse.com/1234155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53129"
},
{
"cve": "CVE-2024-53130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53130"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint\n\nWhen using the \"block:block_dirty_buffer\" tracepoint, mark_buffer_dirty()\nmay cause a NULL pointer dereference, or a general protection fault when\nKASAN is enabled.\n\nThis happens because, since the tracepoint was added in\nmark_buffer_dirty(), it references the dev_t member bh-\u003eb_bdev-\u003ebd_dev\nregardless of whether the buffer head has a pointer to a block_device\nstructure.\n\nIn the current implementation, nilfs_grab_buffer(), which grabs a buffer\nto read (or create) a block of metadata, including b-tree node blocks,\ndoes not set the block device, but instead does so only if the buffer is\nnot in the \"uptodate\" state for each of its caller block reading\nfunctions. However, if the uptodate flag is set on a folio/page, and the\nbuffer heads are detached from it by try_to_free_buffers(), and new buffer\nheads are then attached by create_empty_buffers(), the uptodate flag may\nbe restored to each buffer without the block device being set to\nbh-\u003eb_bdev, and mark_buffer_dirty() may be called later in that state,\nresulting in the bug mentioned above.\n\nFix this issue by making nilfs_grab_buffer() always set the block device\nof the super block structure to the buffer head, regardless of the state\nof the buffer\u0027s uptodate flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53130",
"url": "https://www.suse.com/security/cve/CVE-2024-53130"
},
{
"category": "external",
"summary": "SUSE Bug 1234219 for CVE-2024-53130",
"url": "https://bugzilla.suse.com/1234219"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53130"
},
{
"cve": "CVE-2024-53131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_touch_buffer tracepoint\n\nPatch series \"nilfs2: fix null-ptr-deref bugs on block tracepoints\".\n\nThis series fixes null pointer dereference bugs that occur when using\nnilfs2 and two block-related tracepoints.\n\n\nThis patch (of 2):\n\nIt has been reported that when using \"block:block_touch_buffer\"\ntracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a\nNULL pointer dereference, or a general protection fault when KASAN is\nenabled.\n\nThis happens because since the tracepoint was added in touch_buffer(), it\nreferences the dev_t member bh-\u003eb_bdev-\u003ebd_dev regardless of whether the\nbuffer head has a pointer to a block_device structure. In the current\nimplementation, the block_device structure is set after the function\nreturns to the caller.\n\nHere, touch_buffer() is used to mark the folio/page that owns the buffer\nhead as accessed, but the common search helper for folio/page used by the\ncaller function was optimized to mark the folio/page as accessed when it\nwas reimplemented a long time ago, eliminating the need to call\ntouch_buffer() here in the first place.\n\nSo this solves the issue by eliminating the touch_buffer() call itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53131",
"url": "https://www.suse.com/security/cve/CVE-2024-53131"
},
{
"category": "external",
"summary": "SUSE Bug 1234220 for CVE-2024-53131",
"url": "https://bugzilla.suse.com/1234220"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53131"
},
{
"cve": "CVE-2024-53133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53133"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Handle dml allocation failure to avoid crash\n\n[Why]\nIn the case where a dml allocation fails for any reason, the\ncurrent state\u0027s dml contexts would no longer be valid. Then\nsubsequent calls dc_state_copy_internal would shallow copy\ninvalid memory and if the new state was released, a double\nfree would occur.\n\n[How]\nReset dml pointers in new_state to NULL and avoid invalid\npointer\n\n(cherry picked from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53133",
"url": "https://www.suse.com/security/cve/CVE-2024-53133"
},
{
"category": "external",
"summary": "SUSE Bug 1234221 for CVE-2024-53133",
"url": "https://bugzilla.suse.com/1234221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53133"
},
{
"cve": "CVE-2024-53134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53134"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx93-blk-ctrl: correct remove path\n\nThe check condition should be \u0027i \u003c bc-\u003eonecell_data.num_domains\u0027, not\n\u0027bc-\u003eonecell_data.num_domains\u0027 which will make the look never finish\nand cause kernel panic.\n\nAlso disable runtime to address\n\"imx93-blk-ctrl 4ac10000.system-controller: Unbalanced pm_runtime_enable!\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53134",
"url": "https://www.suse.com/security/cve/CVE-2024-53134"
},
{
"category": "external",
"summary": "SUSE Bug 1234159 for CVE-2024-53134",
"url": "https://bugzilla.suse.com/1234159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53134"
},
{
"cve": "CVE-2024-53136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: revert \"mm: shmem: fix data-race in shmem_getattr()\"\n\nRevert d949d1d14fa2 (\"mm: shmem: fix data-race in shmem_getattr()\") as\nsuggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over\nNFS.\n\nAs Hugh commented, \"added just to silence a syzbot sanitizer splat: added\nwhere there has never been any practical problem\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53136",
"url": "https://www.suse.com/security/cve/CVE-2024-53136"
},
{
"category": "external",
"summary": "SUSE Bug 1234161 for CVE-2024-53136",
"url": "https://bugzilla.suse.com/1234161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53136"
},
{
"cve": "CVE-2024-53138",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53138"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: kTLS, Fix incorrect page refcounting\n\nThe kTLS tx handling code is using a mix of get_page() and\npage_ref_inc() APIs to increment the page reference. But on the release\npath (mlx5e_ktls_tx_handle_resync_dump_comp()), only put_page() is used.\n\nThis is an issue when using pages from large folios: the get_page()\nreferences are stored on the folio page while the page_ref_inc()\nreferences are stored directly in the given page. On release the folio\npage will be dereferenced too many times.\n\nThis was found while doing kTLS testing with sendfile() + ZC when the\nserved file was read from NFS on a kernel with NFS large folios support\n(commit 49b29a573da8 (\"nfs: add support for large folios\")).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53138",
"url": "https://www.suse.com/security/cve/CVE-2024-53138"
},
{
"category": "external",
"summary": "SUSE Bug 1234223 for CVE-2024-53138",
"url": "https://bugzilla.suse.com/1234223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53138"
},
{
"cve": "CVE-2024-53141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: add missing range check in bitmap_ip_uadt\n\nWhen tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,\nthe values of ip and ip_to are slightly swapped. Therefore, the range check\nfor ip should be done later, but this part is missing and it seems that the\nvulnerability occurs.\n\nSo we should add missing range checks and remove unnecessary range checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53141",
"url": "https://www.suse.com/security/cve/CVE-2024-53141"
},
{
"category": "external",
"summary": "SUSE Bug 1234381 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "external",
"summary": "SUSE Bug 1245778 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1245778"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53141"
},
{
"cve": "CVE-2024-53142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53142"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninitramfs: avoid filename buffer overrun\n\nThe initramfs filename field is defined in\nDocumentation/driver-api/early-userspace/buffer-format.rst as:\n\n 37 cpio_file := ALGN(4) + cpio_header + filename + \"\\0\" + ALGN(4) + data\n...\n 55 ============= ================== =========================\n 56 Field name Field size Meaning\n 57 ============= ================== =========================\n...\n 70 c_namesize 8 bytes Length of filename, including final \\0\n\nWhen extracting an initramfs cpio archive, the kernel\u0027s do_name() path\nhandler assumes a zero-terminated path at @collected, passing it\ndirectly to filp_open() / init_mkdir() / init_mknod().\n\nIf a specially crafted cpio entry carries a non-zero-terminated filename\nand is followed by uninitialized memory, then a file may be created with\ntrailing characters that represent the uninitialized memory. The ability\nto create an initramfs entry would imply already having full control of\nthe system, so the buffer overrun shouldn\u0027t be considered a security\nvulnerability.\n\nAppend the output of the following bash script to an existing initramfs\nand observe any created /initramfs_test_fname_overrunAA* path. E.g.\n ./reproducer.sh | gzip \u003e\u003e /myinitramfs\n\nIt\u0027s easiest to observe non-zero uninitialized memory when the output is\ngzipped, as it\u0027ll overflow the heap allocated @out_buf in __gunzip(),\nrather than the initrd_start+initrd_size block.\n\n---- reproducer.sh ----\nnilchar=\"A\"\t# change to \"\\0\" to properly zero terminate / pad\nmagic=\"070701\"\nino=1\nmode=$(( 0100777 ))\nuid=0\ngid=0\nnlink=1\nmtime=1\nfilesize=0\ndevmajor=0\ndevminor=1\nrdevmajor=0\nrdevminor=0\ncsum=0\nfname=\"initramfs_test_fname_overrun\"\nnamelen=$(( ${#fname} + 1 ))\t# plus one to account for terminator\n\nprintf \"%s%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%s\" \\\n\t$magic $ino $mode $uid $gid $nlink $mtime $filesize \\\n\t$devmajor $devminor $rdevmajor $rdevminor $namelen $csum $fname\n\ntermpadlen=$(( 1 + ((4 - ((110 + $namelen) \u0026 3)) % 4) ))\nprintf \"%.s${nilchar}\" $(seq 1 $termpadlen)\n---- reproducer.sh ----\n\nSymlink filename fields handled in do_symlink() won\u0027t overrun past the\ndata segment, due to the explicit zero-termination of the symlink\ntarget.\n\nFix filename buffer overrun by aborting the initramfs FSM if any cpio\nentry doesn\u0027t carry a zero-terminator at the expected (name_len - 1)\noffset.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53142",
"url": "https://www.suse.com/security/cve/CVE-2024-53142"
},
{
"category": "external",
"summary": "SUSE Bug 1232436 for CVE-2024-53142",
"url": "https://bugzilla.suse.com/1232436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53142"
},
{
"cve": "CVE-2024-53144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53144"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\n\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\n\nCVE: CVE-2024-8805",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53144",
"url": "https://www.suse.com/security/cve/CVE-2024-53144"
},
{
"category": "external",
"summary": "SUSE Bug 1234690 for CVE-2024-53144",
"url": "https://bugzilla.suse.com/1234690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53144"
},
{
"cve": "CVE-2024-53146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53146"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent a potential integer overflow\n\nIf the tag length is \u003e= U32_MAX - 3 then the \"length + 4\" addition\ncan result in an integer overflow. Address this by splitting the\ndecoding into several steps so that decode_cb_compound4res() does\nnot have to perform arithmetic on the unsafe length value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53146",
"url": "https://www.suse.com/security/cve/CVE-2024-53146"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234854 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53146"
},
{
"cve": "CVE-2024-53148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53148"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Flush partial mappings in error case\n\nIf some remap_pfn_range() calls succeeded before one failed, we still have\nbuffer pages mapped into the userspace page tables when we drop the buffer\nreference with comedi_buf_map_put(bm). The userspace mappings are only\ncleaned up later in the mmap error path.\n\nFix it by explicitly flushing all mappings in our VMA on the error path.\n\nSee commit 79a61cc3fc04 (\"mm: avoid leaving partial pfn mappings around in\nerror case\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53148",
"url": "https://www.suse.com/security/cve/CVE-2024-53148"
},
{
"category": "external",
"summary": "SUSE Bug 1234832 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "external",
"summary": "SUSE Bug 1234833 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53148"
},
{
"cve": "CVE-2024-53150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix out of bounds reads when finding clock sources\n\nThe current USB-audio driver code doesn\u0027t check bLength of each\ndescriptor at traversing for clock descriptors. That is, when a\ndevice provides a bogus descriptor with a shorter bLength, the driver\nmight hit out-of-bounds reads.\n\nFor addressing it, this patch adds sanity checks to the validator\nfunctions for the clock descriptor traversal. When the descriptor\nlength is shorter than expected, it\u0027s skipped in the loop.\n\nFor the clock source and clock multiplier descriptors, we can just\ncheck bLength against the sizeof() of each descriptor type.\nOTOH, the clock selector descriptor of UAC2 and UAC3 has an array\nof bNrInPins elements and two more fields at its tail, hence those\nhave to be checked in addition to the sizeof() check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53150",
"url": "https://www.suse.com/security/cve/CVE-2024-53150"
},
{
"category": "external",
"summary": "SUSE Bug 1234834 for CVE-2024-53150",
"url": "https://bugzilla.suse.com/1234834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53150"
},
{
"cve": "CVE-2024-53151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Address an integer overflow\n\nDan Carpenter reports:\n\u003e Commit 78147ca8b4a9 (\"svcrdma: Add a \"parsed chunk list\" data\n\u003e structure\") from Jun 22, 2020 (linux-next), leads to the following\n\u003e Smatch static checker warning:\n\u003e\n\u003e\tnet/sunrpc/xprtrdma/svc_rdma_recvfrom.c:498 xdr_check_write_chunk()\n\u003e\twarn: potential user controlled sizeof overflow \u0027segcount * 4 * 4\u0027\n\u003e\n\u003e net/sunrpc/xprtrdma/svc_rdma_recvfrom.c\n\u003e 488 static bool xdr_check_write_chunk(struct svc_rdma_recv_ctxt *rctxt)\n\u003e 489 {\n\u003e 490 u32 segcount;\n\u003e 491 __be32 *p;\n\u003e 492\n\u003e 493 if (xdr_stream_decode_u32(\u0026rctxt-\u003erc_stream, \u0026segcount))\n\u003e ^^^^^^^^\n\u003e\n\u003e 494 return false;\n\u003e 495\n\u003e 496 /* A bogus segcount causes this buffer overflow check to fail. */\n\u003e 497 p = xdr_inline_decode(\u0026rctxt-\u003erc_stream,\n\u003e --\u003e 498 segcount * rpcrdma_segment_maxsz * sizeof(*p));\n\u003e\n\u003e\n\u003e segcount is an untrusted u32. On 32bit systems anything \u003e= SIZE_MAX / 16 will\n\u003e have an integer overflow and some those values will be accepted by\n\u003e xdr_inline_decode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53151",
"url": "https://www.suse.com/security/cve/CVE-2024-53151"
},
{
"category": "external",
"summary": "SUSE Bug 1234829 for CVE-2024-53151",
"url": "https://bugzilla.suse.com/1234829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53151"
},
{
"cve": "CVE-2024-53154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: clk-apple-nco: Add NULL check in applnco_probe\n\nAdd NULL check in applnco_probe, to handle kernel NULL pointer\ndereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53154",
"url": "https://www.suse.com/security/cve/CVE-2024-53154"
},
{
"category": "external",
"summary": "SUSE Bug 1234826 for CVE-2024-53154",
"url": "https://bugzilla.suse.com/1234826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53154"
},
{
"cve": "CVE-2024-53155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53155"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix uninitialized value in ocfs2_file_read_iter()\n\nSyzbot has reported the following KMSAN splat:\n\nBUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80\n ocfs2_file_read_iter+0x9a4/0xf80\n __io_read+0x8d4/0x20f0\n io_read+0x3e/0xf0\n io_issue_sqe+0x42b/0x22c0\n io_wq_submit_work+0xaf9/0xdc0\n io_worker_handle_work+0xd13/0x2110\n io_wq_worker+0x447/0x1410\n ret_from_fork+0x6f/0x90\n ret_from_fork_asm+0x1a/0x30\n\nUninit was created at:\n __alloc_pages_noprof+0x9a7/0xe00\n alloc_pages_mpol_noprof+0x299/0x990\n alloc_pages_noprof+0x1bf/0x1e0\n allocate_slab+0x33a/0x1250\n ___slab_alloc+0x12ef/0x35e0\n kmem_cache_alloc_bulk_noprof+0x486/0x1330\n __io_alloc_req_refill+0x84/0x560\n io_submit_sqes+0x172f/0x2f30\n __se_sys_io_uring_enter+0x406/0x41c0\n __x64_sys_io_uring_enter+0x11f/0x1a0\n x64_sys_call+0x2b54/0x3ba0\n do_syscall_64+0xcd/0x1e0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nSince an instance of \u0027struct kiocb\u0027 may be passed from the block layer\nwith \u0027private\u0027 field uninitialized, introduce \u0027ocfs2_iocb_init_rw_locked()\u0027\nand use it from where \u0027ocfs2_dio_end_io()\u0027 might take care, i.e. in\n\u0027ocfs2_file_read_iter()\u0027 and \u0027ocfs2_file_write_iter()\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53155",
"url": "https://www.suse.com/security/cve/CVE-2024-53155"
},
{
"category": "external",
"summary": "SUSE Bug 1234855 for CVE-2024-53155",
"url": "https://bugzilla.suse.com/1234855"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53155"
},
{
"cve": "CVE-2024-53156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53156"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()\n\nI found the following bug in my fuzzer:\n\n UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51\n index 255 is out of range for type \u0027htc_endpoint [22]\u0027\n CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-dirty #14\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n Workqueue: events request_firmware_work_func\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x180/0x1b0\n __ubsan_handle_out_of_bounds+0xd4/0x130\n htc_issue_send.constprop.0+0x20c/0x230\n ? _raw_spin_unlock_irqrestore+0x3c/0x70\n ath9k_wmi_cmd+0x41d/0x610\n ? mark_held_locks+0x9f/0xe0\n ...\n\nSince this bug has been confirmed to be caused by insufficient verification\nof conn_rsp_epid, I think it would be appropriate to add a range check for\nconn_rsp_epid to htc_connect_service() to prevent the bug from occurring.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53156",
"url": "https://www.suse.com/security/cve/CVE-2024-53156"
},
{
"category": "external",
"summary": "SUSE Bug 1234846 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "external",
"summary": "SUSE Bug 1234847 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234847"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53156"
},
{
"cve": "CVE-2024-53157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53157"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scpi: Check the DVFS OPP count returned by the firmware\n\nFix a kernel crash with the below call trace when the SCPI firmware\nreturns OPP count of zero.\n\ndvfs_info.opp_count may be zero on some platforms during the reboot\ntest, and the kernel will crash after dereferencing the pointer to\nkcalloc(info-\u003ecount, sizeof(*opp), GFP_KERNEL).\n\n | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028\n | Mem abort info:\n | ESR = 0x96000004\n | Exception class = DABT (current EL), IL = 32 bits\n | SET = 0, FnV = 0\n | EA = 0, S1PTW = 0\n | Data abort info:\n | ISV = 0, ISS = 0x00000004\n | CM = 0, WnR = 0\n | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c\n | [0000000000000028] pgd=0000000000000000\n | Internal error: Oops: 96000004 [#1] SMP\n | scpi-hwmon: probe of PHYT000D:00 failed with error -110\n | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c)\n | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1\n | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS\n | pstate: 60000005 (nZCv daif -PAN -UAO)\n | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | lr : clk_register+0x438/0x720\n | Call trace:\n | scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | devm_clk_hw_register+0x50/0xa0\n | scpi_clk_ops_init.isra.2+0xa0/0x138 [clk_scpi]\n | scpi_clocks_probe+0x528/0x70c [clk_scpi]\n | platform_drv_probe+0x58/0xa8\n | really_probe+0x260/0x3d0\n | driver_probe_device+0x12c/0x148\n | device_driver_attach+0x74/0x98\n | __driver_attach+0xb4/0xe8\n | bus_for_each_dev+0x88/0xe0\n | driver_attach+0x30/0x40\n | bus_add_driver+0x178/0x2b0\n | driver_register+0x64/0x118\n | __platform_driver_register+0x54/0x60\n | scpi_clocks_driver_init+0x24/0x1000 [clk_scpi]\n | do_one_initcall+0x54/0x220\n | do_init_module+0x54/0x1c8\n | load_module+0x14a4/0x1668\n | __se_sys_finit_module+0xf8/0x110\n | __arm64_sys_finit_module+0x24/0x30\n | el0_svc_common+0x78/0x170\n | el0_svc_handler+0x38/0x78\n | el0_svc+0x8/0x340\n | Code: 937d7c00 a94153f3 a8c27bfd f9400421 (b8606820)\n | ---[ end trace 06feb22469d89fa8 ]---\n | Kernel panic - not syncing: Fatal exception\n | SMP: stopping secondary CPUs\n | Kernel Offset: disabled\n | CPU features: 0x10,a0002008\n | Memory Limit: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53157",
"url": "https://www.suse.com/security/cve/CVE-2024-53157"
},
{
"category": "external",
"summary": "SUSE Bug 1234827 for CVE-2024-53157",
"url": "https://bugzilla.suse.com/1234827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53157"
},
{
"cve": "CVE-2024-53158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()\n\nThis loop is supposed to break if the frequency returned from\nclk_round_rate() is the same as on the previous iteration. However,\nthat check doesn\u0027t make sense on the first iteration through the loop.\nIt leads to reading before the start of these-\u003eclk_perf_tbl[] array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53158",
"url": "https://www.suse.com/security/cve/CVE-2024-53158"
},
{
"category": "external",
"summary": "SUSE Bug 1234811 for CVE-2024-53158",
"url": "https://bugzilla.suse.com/1234811"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53158"
},
{
"cve": "CVE-2024-53159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53159"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53159",
"url": "https://www.suse.com/security/cve/CVE-2024-53159"
},
{
"category": "external",
"summary": "SUSE Bug 1234848 for CVE-2024-53159",
"url": "https://bugzilla.suse.com/1234848"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53159"
},
{
"cve": "CVE-2024-53160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53160"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu\n\nKCSAN reports a data race when access the krcp-\u003emonitor_work.timer.expires\nvariable in the schedule_delayed_monitor_work() function:\n\n\u003csnip\u003e\nBUG: KCSAN: data-race in __mod_timer / kvfree_call_rcu\n\nread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1:\n schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline]\n kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839\n trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441\n bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203\n generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849\n bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143\n __sys_bpf+0x2e5/0x7a0\n __do_sys_bpf kernel/bpf/syscall.c:5741 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5739 [inline]\n __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739\n x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0:\n __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173\n add_timer_global+0x51/0x70 kernel/time/timer.c:1330\n __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523\n queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552\n queue_delayed_work include/linux/workqueue.h:677 [inline]\n schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline]\n kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310\n worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391\n kthread+0x1d1/0x210 kernel/kthread.c:389\n ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events_unbound kfree_rcu_monitor\n\u003csnip\u003e\n\nkfree_rcu_monitor() rearms the work if a \"krcp\" has to be still\noffloaded and this is done without holding krcp-\u003elock, whereas\nthe kvfree_call_rcu() holds it.\n\nFix it by acquiring the \"krcp-\u003elock\" for kfree_rcu_monitor() so\nboth functions do not race anymore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53160",
"url": "https://www.suse.com/security/cve/CVE-2024-53160"
},
{
"category": "external",
"summary": "SUSE Bug 1234810 for CVE-2024-53160",
"url": "https://bugzilla.suse.com/1234810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53160"
},
{
"cve": "CVE-2024-53161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53161"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/bluefield: Fix potential integer overflow\n\nThe 64-bit argument for the \"get DIMM info\" SMC call consists of mem_ctrl_idx\nleft-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as\n32-bits wide the left-shift operation truncates the upper 16 bits of\ninformation during the calculation of the SMC argument.\n\nThe mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any\npotential integer overflow, i.e. loss of data from upper 16 bits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53161",
"url": "https://www.suse.com/security/cve/CVE-2024-53161"
},
{
"category": "external",
"summary": "SUSE Bug 1234856 for CVE-2024-53161",
"url": "https://bugzilla.suse.com/1234856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53161"
},
{
"cve": "CVE-2024-53162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53162"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat/qat_4xxx - fix off by one in uof_get_name()\n\nThe fw_objs[] array has \"num_objs\" elements so the \u003e needs to be \u003e= to\nprevent an out of bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53162",
"url": "https://www.suse.com/security/cve/CVE-2024-53162"
},
{
"category": "external",
"summary": "SUSE Bug 1234843 for CVE-2024-53162",
"url": "https://bugzilla.suse.com/1234843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53162"
},
{
"cve": "CVE-2024-53164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53164"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ordering of qlen adjustment\n\nChanges to sch-\u003eq.qlen around qdisc_tree_reduce_backlog() need to happen\n_before_ a call to said function because otherwise it may fail to notify\nparent qdiscs when the child is about to become empty.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53164",
"url": "https://www.suse.com/security/cve/CVE-2024-53164"
},
{
"category": "external",
"summary": "SUSE Bug 1234863 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "external",
"summary": "SUSE Bug 1246019 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1246019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53164"
},
{
"cve": "CVE-2024-53166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53166"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix bfqq uaf in bfq_limit_depth()\n\nSet new allocated bfqq to bic or remove freed bfqq from bic are both\nprotected by bfqd-\u003elock, however bfq_limit_depth() is deferencing bfqq\nfrom bic without the lock, this can lead to UAF if the io_context is\nshared by multiple tasks.\n\nFor example, test bfq with io_uring can trigger following UAF in v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in bfqq_group+0x15/0x50\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x80\n print_address_description.constprop.0+0x66/0x300\n print_report+0x3e/0x70\n kasan_report+0xb4/0xf0\n bfqq_group+0x15/0x50\n bfqq_request_over_limit+0x130/0x9a0\n bfq_limit_depth+0x1b5/0x480\n __blk_mq_alloc_requests+0x2b5/0xa00\n blk_mq_get_new_requests+0x11d/0x1d0\n blk_mq_submit_bio+0x286/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __block_write_full_folio+0x3d0/0x640\n writepage_cb+0x3b/0xc0\n write_cache_pages+0x254/0x6c0\n write_cache_pages+0x254/0x6c0\n do_writepages+0x192/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n\nAllocated by task 808602:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n __kasan_slab_alloc+0x83/0x90\n kmem_cache_alloc_node+0x1b1/0x6d0\n bfq_get_queue+0x138/0xfa0\n bfq_get_bfqq_handle_split+0xe3/0x2c0\n bfq_init_rq+0x196/0xbb0\n bfq_insert_request.isra.0+0xb5/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_insert_request+0x15d/0x440\n blk_mq_submit_bio+0x8a4/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __blkdev_direct_IO_async+0x2dd/0x330\n blkdev_write_iter+0x39a/0x450\n io_write+0x22a/0x840\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFreed by task 808589:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x27/0x40\n __kasan_slab_free+0x126/0x1b0\n kmem_cache_free+0x10c/0x750\n bfq_put_queue+0x2dd/0x770\n __bfq_insert_request.isra.0+0x155/0x7a0\n bfq_insert_request.isra.0+0x122/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_dispatch_plug_list+0x528/0x7e0\n blk_mq_flush_plug_list.part.0+0xe5/0x590\n __blk_flush_plug+0x3b/0x90\n blk_finish_plug+0x40/0x60\n do_writepages+0x19d/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFix the problem by protecting bic_to_bfqq() with bfqd-\u003elock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53166",
"url": "https://www.suse.com/security/cve/CVE-2024-53166"
},
{
"category": "external",
"summary": "SUSE Bug 1234884 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "external",
"summary": "SUSE Bug 1234885 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53166"
},
{
"cve": "CVE-2024-53168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 \u003cfa\u003e c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \u003c/TASK\u003e\n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp\u0027s timer handler function causes problems.\n\nTo fix this problem, let\u0027s hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53168",
"url": "https://www.suse.com/security/cve/CVE-2024-53168"
},
{
"category": "external",
"summary": "SUSE Bug 1234887 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "external",
"summary": "SUSE Bug 1243650 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1243650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53168"
},
{
"cve": "CVE-2024-53169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53169"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-fabrics: fix kernel crash while shutting down controller\n\nThe nvme keep-alive operation, which executes at a periodic interval,\ncould potentially sneak in while shutting down a fabric controller.\nThis may lead to a race between the fabric controller admin queue\ndestroy code path (invoked while shutting down controller) and hw/hctx\nqueue dispatcher called from the nvme keep-alive async request queuing\noperation. This race could lead to the kernel crash shown below:\n\nCall Trace:\n autoremove_wake_function+0x0/0xbc (unreliable)\n __blk_mq_sched_dispatch_requests+0x114/0x24c\n blk_mq_sched_dispatch_requests+0x44/0x84\n blk_mq_run_hw_queue+0x140/0x220\n nvme_keep_alive_work+0xc8/0x19c [nvme_core]\n process_one_work+0x200/0x4e0\n worker_thread+0x340/0x504\n kthread+0x138/0x140\n start_kernel_thread+0x14/0x18\n\nWhile shutting down fabric controller, if nvme keep-alive request sneaks\nin then it would be flushed off. The nvme_keep_alive_end_io function is\nthen invoked to handle the end of the keep-alive operation which\ndecrements the admin-\u003eq_usage_counter and assuming this is the last/only\nrequest in the admin queue then the admin-\u003eq_usage_counter becomes zero.\nIf that happens then blk-mq destroy queue operation (blk_mq_destroy_\nqueue()) which could be potentially running simultaneously on another\ncpu (as this is the controller shutdown code path) would forward\nprogress and deletes the admin queue. So, now from this point onward\nwe are not supposed to access the admin queue resources. However the\nissue here\u0027s that the nvme keep-alive thread running hw/hctx queue\ndispatch operation hasn\u0027t yet finished its work and so it could still\npotentially access the admin queue resource while the admin queue had\nbeen already deleted and that causes the above crash.\n\nThe above kernel crash is regression caused due to changes implemented\nin commit a54a93d0e359 (\"nvme: move stopping keep-alive into\nnvme_uninit_ctrl()\"). Ideally we should stop keep-alive before destroyin\ng the admin queue and freeing the admin tagset so that it wouldn\u0027t sneak\nin during the shutdown operation. However we removed the keep alive stop\noperation from the beginning of the controller shutdown code path in commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\")\nand added it under nvme_uninit_ctrl() which executes very late in the\nshutdown code path after the admin queue is destroyed and its tagset is\nremoved. So this change created the possibility of keep-alive sneaking in\nand interfering with the shutdown operation and causing observed kernel\ncrash.\n\nTo fix the observed crash, we decided to move nvme_stop_keep_alive() from\nnvme_uninit_ctrl() to nvme_remove_admin_tag_set(). This change would ensure\nthat we don\u0027t forward progress and delete the admin queue until the keep-\nalive operation is finished (if it\u0027s in-flight) or cancelled and that would\nhelp contain the race condition explained above and hence avoid the crash.\n\nMoving nvme_stop_keep_alive() to nvme_remove_admin_tag_set() instead of\nadding nvme_stop_keep_alive() to the beginning of the controller shutdown\ncode path in nvme_stop_ctrl(), as was the case earlier before commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\"),\nwould help save one callsite of nvme_stop_keep_alive().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53169",
"url": "https://www.suse.com/security/cve/CVE-2024-53169"
},
{
"category": "external",
"summary": "SUSE Bug 1234900 for CVE-2024-53169",
"url": "https://bugzilla.suse.com/1234900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53169"
},
{
"cve": "CVE-2024-53170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix uaf for flush rq while iterating tags\n\nblk_mq_clear_flush_rq_mapping() is not called during scsi probe, by\nchecking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared\nin del_gendisk by commit aec89dc5d421 (\"block: keep q_usage_counter in\natomic mode after del_gendisk\"), hence for disk like scsi, following\nblk_mq_destroy_queue() will not clear flush rq from tags-\u003erqs[] as well,\ncause following uaf that is found by our syzkaller for v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in blk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nRead of size 4 at addr ffff88811c969c20 by task kworker/1:2H/224909\n\nCPU: 1 PID: 224909 Comm: kworker/1:2H Not tainted 6.6.0-ga836a5060850 #32\nWorkqueue: kblockd blk_mq_timeout_work\nCall Trace:\n\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106\nprint_address_description.constprop.0+0x66/0x300 mm/kasan/report.c:364\nprint_report+0x3e/0x70 mm/kasan/report.c:475\nkasan_report+0xb8/0xf0 mm/kasan/report.c:588\nblk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nbt_iter block/blk-mq-tag.c:288 [inline]\n__sbitmap_for_each_set include/linux/sbitmap.h:295 [inline]\nsbitmap_for_each_set include/linux/sbitmap.h:316 [inline]\nbt_for_each+0x455/0x790 block/blk-mq-tag.c:325\nblk_mq_queue_tag_busy_iter+0x320/0x740 block/blk-mq-tag.c:534\nblk_mq_timeout_work+0x1a3/0x7b0 block/blk-mq.c:1673\nprocess_one_work+0x7c4/0x1450 kernel/workqueue.c:2631\nprocess_scheduled_works kernel/workqueue.c:2704 [inline]\nworker_thread+0x804/0xe40 kernel/workqueue.c:2785\nkthread+0x346/0x450 kernel/kthread.c:388\nret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:293\n\nAllocated by task 942:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\n____kasan_kmalloc mm/kasan/common.c:374 [inline]\n__kasan_kmalloc mm/kasan/common.c:383 [inline]\n__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:380\nkasan_kmalloc include/linux/kasan.h:198 [inline]\n__do_kmalloc_node mm/slab_common.c:1007 [inline]\n__kmalloc_node+0x69/0x170 mm/slab_common.c:1014\nkmalloc_node include/linux/slab.h:620 [inline]\nkzalloc_node include/linux/slab.h:732 [inline]\nblk_alloc_flush_queue+0x144/0x2f0 block/blk-flush.c:499\nblk_mq_alloc_hctx+0x601/0x940 block/blk-mq.c:3788\nblk_mq_alloc_and_init_hctx+0x27f/0x330 block/blk-mq.c:4261\nblk_mq_realloc_hw_ctxs+0x488/0x5e0 block/blk-mq.c:4294\nblk_mq_init_allocated_queue+0x188/0x860 block/blk-mq.c:4350\nblk_mq_init_queue_data block/blk-mq.c:4166 [inline]\nblk_mq_init_queue+0x8d/0x100 block/blk-mq.c:4176\nscsi_alloc_sdev+0x843/0xd50 drivers/scsi/scsi_scan.c:335\nscsi_probe_and_add_lun+0x77c/0xde0 drivers/scsi/scsi_scan.c:1189\n__scsi_scan_target+0x1fc/0x5a0 drivers/scsi/scsi_scan.c:1727\nscsi_scan_channel drivers/scsi/scsi_scan.c:1815 [inline]\nscsi_scan_channel+0x14b/0x1e0 drivers/scsi/scsi_scan.c:1791\nscsi_scan_host_selected+0x2fe/0x400 drivers/scsi/scsi_scan.c:1844\nscsi_scan+0x3a0/0x3f0 drivers/scsi/scsi_sysfs.c:151\nstore_scan+0x2a/0x60 drivers/scsi/scsi_sysfs.c:191\ndev_attr_store+0x5c/0x90 drivers/base/core.c:2388\nsysfs_kf_write+0x11c/0x170 fs/sysfs/file.c:136\nkernfs_fop_write_iter+0x3fc/0x610 fs/kernfs/file.c:338\ncall_write_iter include/linux/fs.h:2083 [inline]\nnew_sync_write+0x1b4/0x2d0 fs/read_write.c:493\nvfs_write+0x76c/0xb00 fs/read_write.c:586\nksys_write+0x127/0x250 fs/read_write.c:639\ndo_syscall_x64 arch/x86/entry/common.c:51 [inline]\ndo_syscall_64+0x70/0x120 arch/x86/entry/common.c:81\nentry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nFreed by task 244687:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\nkasan_save_free_info+0x2b/0x50 mm/kasan/generic.c:522\n____kasan_slab_free mm/kasan/common.c:236 [inline]\n__kasan_slab_free+0x12a/0x1b0 mm/kasan/common.c:244\nkasan_slab_free include/linux/kasan.h:164 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53170",
"url": "https://www.suse.com/security/cve/CVE-2024-53170"
},
{
"category": "external",
"summary": "SUSE Bug 1234888 for CVE-2024-53170",
"url": "https://bugzilla.suse.com/1234888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53170"
},
{
"cve": "CVE-2024-53171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53171"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit\n\nAfter an insertion in TNC, the tree might split and cause a node to\nchange its `znode-\u003eparent`. A further deletion of other nodes in the\ntree (which also could free the nodes), the aforementioned node\u0027s\n`znode-\u003ecparent` could still point to a freed node. This\n`znode-\u003ecparent` may not be updated when getting nodes to commit in\n`ubifs_tnc_start_commit()`. This could then trigger a use-after-free\nwhen accessing the `znode-\u003ecparent` in `write_index()` in\n`ubifs_tnc_end_commit()`.\n\nThis can be triggered by running\n\n rm -f /etc/test-file.bin\n dd if=/dev/urandom of=/etc/test-file.bin bs=1M count=60 conv=fsync\n\nin a loop, and with `CONFIG_UBIFS_FS_AUTHENTICATION`. KASAN then\nreports:\n\n BUG: KASAN: use-after-free in ubifs_tnc_end_commit+0xa5c/0x1950\n Write of size 32 at addr ffffff800a3af86c by task ubifs_bgt0_20/153\n\n Call trace:\n dump_backtrace+0x0/0x340\n show_stack+0x18/0x24\n dump_stack_lvl+0x9c/0xbc\n print_address_description.constprop.0+0x74/0x2b0\n kasan_report+0x1d8/0x1f0\n kasan_check_range+0xf8/0x1a0\n memcpy+0x84/0xf4\n ubifs_tnc_end_commit+0xa5c/0x1950\n do_commit+0x4e0/0x1340\n ubifs_bg_thread+0x234/0x2e0\n kthread+0x36c/0x410\n ret_from_fork+0x10/0x20\n\n Allocated by task 401:\n kasan_save_stack+0x38/0x70\n __kasan_kmalloc+0x8c/0xd0\n __kmalloc+0x34c/0x5bc\n tnc_insert+0x140/0x16a4\n ubifs_tnc_add+0x370/0x52c\n ubifs_jnl_write_data+0x5d8/0x870\n do_writepage+0x36c/0x510\n ubifs_writepage+0x190/0x4dc\n __writepage+0x58/0x154\n write_cache_pages+0x394/0x830\n do_writepages+0x1f0/0x5b0\n filemap_fdatawrite_wbc+0x170/0x25c\n file_write_and_wait_range+0x140/0x190\n ubifs_fsync+0xe8/0x290\n vfs_fsync_range+0xc0/0x1e4\n do_fsync+0x40/0x90\n __arm64_sys_fsync+0x34/0x50\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\n Freed by task 403:\n kasan_save_stack+0x38/0x70\n kasan_set_track+0x28/0x40\n kasan_set_free_info+0x28/0x4c\n __kasan_slab_free+0xd4/0x13c\n kfree+0xc4/0x3a0\n tnc_delete+0x3f4/0xe40\n ubifs_tnc_remove_range+0x368/0x73c\n ubifs_tnc_remove_ino+0x29c/0x2e0\n ubifs_jnl_delete_inode+0x150/0x260\n ubifs_evict_inode+0x1d4/0x2e4\n evict+0x1c8/0x450\n iput+0x2a0/0x3c4\n do_unlinkat+0x2cc/0x490\n __arm64_sys_unlinkat+0x90/0x100\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\nThe offending `memcpy()` in `ubifs_copy_hash()` has a use-after-free\nwhen a node becomes root in TNC but still has a `cparent` to an already\nfreed node. More specifically, consider the following TNC:\n\n zroot\n /\n /\n zp1\n /\n /\n zn\n\nInserting a new node `zn_new` with a key smaller then `zn` will trigger\na split in `tnc_insert()` if `zp1` is full:\n\n zroot\n / \\\n / \\\n zp1 zp2\n / \\\n / \\\n zn_new zn\n\n`zn-\u003eparent` has now been moved to `zp2`, *but* `zn-\u003ecparent` still\npoints to `zp1`.\n\nNow, consider a removal of all the nodes _except_ `zn`. Just when\n`tnc_delete()` is about to delete `zroot` and `zp2`:\n\n zroot\n \\\n \\\n zp2\n \\\n \\\n zn\n\n`zroot` and `zp2` get freed and the tree collapses:\n\n zn\n\n`zn` now becomes the new `zroot`.\n\n`get_znodes_to_commit()` will now only find `zn`, the new `zroot`, and\n`write_index()` will check its `znode-\u003ecparent` that wrongly points to\nthe already freed `zp1`. `ubifs_copy_hash()` thus gets wrongly called\nwith `znode-\u003ecparent-\u003ezbranch[znode-\u003eiip].hash` that triggers the\nuse-after-free!\n\nFix this by explicitly setting `znode-\u003ecparent` to `NULL` in\n`get_znodes_to_commit()` for the root node. The search for the dirty\nnodes\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53171",
"url": "https://www.suse.com/security/cve/CVE-2024-53171"
},
{
"category": "external",
"summary": "SUSE Bug 1234889 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "external",
"summary": "SUSE Bug 1236234 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1236234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53171"
},
{
"cve": "CVE-2024-53172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53172"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: fastmap: Fix duplicate slab cache names while attaching\n\nSince commit 4c39529663b9 (\"slab: Warn on duplicate cache names when\nDEBUG_VM=y\"), the duplicate slab cache names can be detected and a\nkernel WARNING is thrown out.\nIn UBI fast attaching process, alloc_ai() could be invoked twice\nwith the same slab cache name \u0027ubi_aeb_slab_cache\u0027, which will trigger\nfollowing warning messages:\n kmem_cache of name \u0027ubi_aeb_slab_cache\u0027 already exists\n WARNING: CPU: 0 PID: 7519 at mm/slab_common.c:107\n __kmem_cache_create_args+0x100/0x5f0\n Modules linked in: ubi(+) nandsim [last unloaded: nandsim]\n CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2\n RIP: 0010:__kmem_cache_create_args+0x100/0x5f0\n Call Trace:\n __kmem_cache_create_args+0x100/0x5f0\n alloc_ai+0x295/0x3f0 [ubi]\n ubi_attach+0x3c3/0xcc0 [ubi]\n ubi_attach_mtd_dev+0x17cf/0x3fa0 [ubi]\n ubi_init+0x3fb/0x800 [ubi]\n do_init_module+0x265/0x7d0\n __x64_sys_finit_module+0x7a/0xc0\n\nThe problem could be easily reproduced by loading UBI device by fastmap\nwith CONFIG_DEBUG_VM=y.\nFix it by using different slab names for alloc_ai() callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53172",
"url": "https://www.suse.com/security/cve/CVE-2024-53172"
},
{
"category": "external",
"summary": "SUSE Bug 1234898 for CVE-2024-53172",
"url": "https://bugzilla.suse.com/1234898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53172"
},
{
"cve": "CVE-2024-53173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53173"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.0: Fix a use-after-free problem in the asynchronous open()\n\nYang Erkun reports that when two threads are opening files at the same\ntime, and are forced to abort before a reply is seen, then the call to\nnfs_release_seqid() in nfs4_opendata_free() can result in a\nuse-after-free of the pointer to the defunct rpc task of the other\nthread.\nThe fix is to ensure that if the RPC call is aborted before the call to\nnfs_wait_on_sequence() is complete, then we must call nfs_release_seqid()\nin nfs4_open_release() before the rpc_task is freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53173",
"url": "https://www.suse.com/security/cve/CVE-2024-53173"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234891 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "external",
"summary": "SUSE Bug 1234892 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53173"
},
{
"cve": "CVE-2024-53174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53174"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: make sure cache entry active before cache_show\n\nThe function `c_show` was called with protection from RCU. This only\nensures that `cp` will not be freed. Therefore, the reference count for\n`cp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `cache_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `cp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 7 PID: 822 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n\nCall Trace:\n \u003cTASK\u003e\n c_show+0x2fc/0x380 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53174",
"url": "https://www.suse.com/security/cve/CVE-2024-53174"
},
{
"category": "external",
"summary": "SUSE Bug 1234899 for CVE-2024-53174",
"url": "https://bugzilla.suse.com/1234899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53174"
},
{
"cve": "CVE-2024-53175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53175"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: fix memleak if msg_init_ns failed in create_ipc_ns\n\nPercpu memory allocation may failed during create_ipc_ns however this\nfail is not handled properly since ipc sysctls and mq sysctls is not\nreleased properly. Fix this by release these two resource when failure.\n\nHere is the kmemleak stack when percpu failed:\n\nunreferenced object 0xffff88819de2a600 (size 512):\n comm \"shmem_2nstest\", pid 120711, jiffies 4300542254\n hex dump (first 32 bytes):\n 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H.....\n 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V.....\n backtrace (crc be7cba35):\n [\u003cffffffff81b43f83\u003e] __kmalloc_node_track_caller_noprof+0x333/0x420\n [\u003cffffffff81a52e56\u003e] kmemdup_noprof+0x26/0x50\n [\u003cffffffff821b2f37\u003e] setup_mq_sysctls+0x57/0x1d0\n [\u003cffffffff821b29cc\u003e] copy_ipcs+0x29c/0x3b0\n [\u003cffffffff815d6a10\u003e] create_new_namespaces+0x1d0/0x920\n [\u003cffffffff815d7449\u003e] copy_namespaces+0x2e9/0x3e0\n [\u003cffffffff815458f3\u003e] copy_process+0x29f3/0x7ff0\n [\u003cffffffff8154b080\u003e] kernel_clone+0xc0/0x650\n [\u003cffffffff8154b6b1\u003e] __do_sys_clone+0xa1/0xe0\n [\u003cffffffff843df8ff\u003e] do_syscall_64+0xbf/0x1c0\n [\u003cffffffff846000b0\u003e] entry_SYSCALL_64_after_hwframe+0x4b/0x53",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53175",
"url": "https://www.suse.com/security/cve/CVE-2024-53175"
},
{
"category": "external",
"summary": "SUSE Bug 1234893 for CVE-2024-53175",
"url": "https://bugzilla.suse.com/1234893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53175"
},
{
"cve": "CVE-2024-53179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53179"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix use-after-free of signing key\n\nCustomers have reported use-after-free in @ses-\u003eauth_key.response with\nSMB2.1 + sign mounts which occurs due to following race:\n\ntask A task B\ncifs_mount()\n dfs_mount_share()\n get_session()\n cifs_mount_get_session() cifs_send_recv()\n cifs_get_smb_ses() compound_send_recv()\n cifs_setup_session() smb2_setup_request()\n kfree_sensitive() smb2_calc_signature()\n crypto_shash_setkey() *UAF*\n\nFix this by ensuring that we have a valid @ses-\u003eauth_key.response by\nchecking whether @ses-\u003eses_status is SES_GOOD or SES_EXITING with\n@ses-\u003eses_lock held. After commit 24a9799aa8ef (\"smb: client: fix UAF\nin smb2_reconnect_server()\"), we made sure to call -\u003elogoff() only\nwhen @ses was known to be good (e.g. valid -\u003eauth_key.response), so\nit\u0027s safe to access signing key when @ses-\u003eses_status == SES_EXITING.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53179",
"url": "https://www.suse.com/security/cve/CVE-2024-53179"
},
{
"category": "external",
"summary": "SUSE Bug 1234921 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "external",
"summary": "SUSE Bug 1234927 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53179"
},
{
"cve": "CVE-2024-53180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53180"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Add sanity NULL check for the default mmap fault handler\n\nA driver might allow the mmap access before initializing its\nruntime-\u003edma_area properly. Add a proper NULL check before passing to\nvirt_to_page() for avoiding a panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53180",
"url": "https://www.suse.com/security/cve/CVE-2024-53180"
},
{
"category": "external",
"summary": "SUSE Bug 1234929 for CVE-2024-53180",
"url": "https://bugzilla.suse.com/1234929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53180"
},
{
"cve": "CVE-2024-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix NULL ptr deref in crypto_aead_setkey()\n\nNeither SMB3.0 or SMB3.02 supports encryption negotiate context, so\nwhen SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response,\nthe client uses AES-128-CCM as the default cipher. See MS-SMB2\n3.3.5.4.\n\nCommit b0abcd65ec54 (\"smb: client: fix UAF in async decryption\") added\na @server-\u003ecipher_type check to conditionally call\nsmb3_crypto_aead_allocate(), but that check would always be false as\n@server-\u003ecipher_type is unset for SMB3.02.\n\nFix the following KASAN splat by setting @server-\u003ecipher_type for\nSMB3.02 as well.\n\nmount.cifs //srv/share /mnt -o vers=3.02,seal,...\n\nBUG: KASAN: null-ptr-deref in crypto_aead_setkey+0x2c/0x130\nRead of size 8 at addr 0000000000000020 by task mount.cifs/1095\nCPU: 1 UID: 0 PID: 1095 Comm: mount.cifs Not tainted 6.12.0 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? crypto_aead_setkey+0x2c/0x130\n kasan_report+0xda/0x110\n ? crypto_aead_setkey+0x2c/0x130\n crypto_aead_setkey+0x2c/0x130\n crypt_message+0x258/0xec0 [cifs]\n ? __asan_memset+0x23/0x50\n ? __pfx_crypt_message+0x10/0x10 [cifs]\n ? mark_lock+0xb0/0x6a0\n ? hlock_class+0x32/0xb0\n ? mark_lock+0xb0/0x6a0\n smb3_init_transform_rq+0x352/0x3f0 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n smb_send_rqst+0x144/0x230 [cifs]\n ? __pfx_smb_send_rqst+0x10/0x10 [cifs]\n ? hlock_class+0x32/0xb0\n ? smb2_setup_request+0x225/0x3a0 [cifs]\n ? __pfx_cifs_compound_last_callback+0x10/0x10 [cifs]\n compound_send_recv+0x59b/0x1140 [cifs]\n ? __pfx_compound_send_recv+0x10/0x10 [cifs]\n ? __create_object+0x5e/0x90\n ? hlock_class+0x32/0xb0\n ? do_raw_spin_unlock+0x9a/0xf0\n cifs_send_recv+0x23/0x30 [cifs]\n SMB2_tcon+0x3ec/0xb30 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? __pfx_lock_release+0x10/0x10\n ? do_raw_spin_trylock+0xc6/0x120\n ? lock_acquire+0x3f/0x90\n ? _get_xid+0x16/0xd0 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n ? __pfx_cifs_get_smb_ses+0x10/0x10 [cifs]\n ? cifs_get_tcp_session+0xaa0/0xca0 [cifs]\n cifs_mount_get_session+0x8a/0x210 [cifs]\n dfs_mount_share+0x1b0/0x11d0 [cifs]\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_dfs_mount_share+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? lock_release+0x203/0x5d0\n cifs_mount+0xb3/0x3d0 [cifs]\n ? do_raw_spin_trylock+0xc6/0x120\n ? __pfx_cifs_mount+0x10/0x10 [cifs]\n ? lock_acquire+0x3f/0x90\n ? find_nls+0x16/0xa0\n ? smb3_update_mnt_flags+0x372/0x3b0 [cifs]\n cifs_smb3_do_mount+0x1e2/0xc80 [cifs]\n ? __pfx_vfs_parse_fs_string+0x10/0x10\n ? __pfx_cifs_smb3_do_mount+0x10/0x10 [cifs]\n smb3_get_tree+0x1bf/0x330 [cifs]\n vfs_get_tree+0x4a/0x160\n path_mount+0x3c1/0xfb0\n ? kasan_quarantine_put+0xc7/0x1d0\n ? __pfx_path_mount+0x10/0x10\n ? kmem_cache_free+0x118/0x3e0\n ? user_path_at+0x74/0xa0\n __x64_sys_mount+0x1a6/0x1e0\n ? __pfx___x64_sys_mount+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53185",
"url": "https://www.suse.com/security/cve/CVE-2024-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1234901 for CVE-2024-53185",
"url": "https://bugzilla.suse.com/1234901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53185"
},
{
"cve": "CVE-2024-53188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53188"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix crash when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe function ath12k_dp_cc_cleanup is called to release resources.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nBUG: kernel NULL pointer dereference, address: 0000000000000020\nat RIP: 0010:ath12k_dp_cc_cleanup.part.0+0xb6/0x500 [ath12k]\nCall Trace:\nath12k_dp_cc_cleanup\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set to NULL the released structure in\nath12k_dp_cc_cleanup at the end.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53188",
"url": "https://www.suse.com/security/cve/CVE-2024-53188"
},
{
"category": "external",
"summary": "SUSE Bug 1234948 for CVE-2024-53188",
"url": "https://bugzilla.suse.com/1234948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53188"
},
{
"cve": "CVE-2024-53190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures\n\nSyzkaller reported a hung task with uevent_show() on stack trace. That\nspecific issue was addressed by another commit [0], but even with that\nfix applied (for example, running v6.12-rc5) we face another type of hung\ntask that comes from the same reproducer [1]. By investigating that, we\ncould narrow it to the following path:\n\n(a) Syzkaller emulates a Realtek USB WiFi adapter using raw-gadget and\ndummy_hcd infrastructure.\n\n(b) During the probe of rtl8192cu, the driver ends-up performing an efuse\nread procedure (which is related to EEPROM load IIUC), and here lies the\nissue: the function read_efuse() calls read_efuse_byte() many times, as\nloop iterations depending on the efuse size (in our example, 512 in total).\n\nThis procedure for reading efuse bytes relies in a loop that performs an\nI/O read up to *10k* times in case of failures. We measured the time of\nthe loop inside read_efuse_byte() alone, and in this reproducer (which\ninvolves the dummy_hcd emulation layer), it takes 15 seconds each. As a\nconsequence, we have the driver stuck in its probe routine for big time,\nexposing a stack trace like below if we attempt to reboot the system, for\nexample:\n\ntask:kworker/0:3 state:D stack:0 pid:662 tgid:662 ppid:2 flags:0x00004000\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n __schedule+0xe22/0xeb6\n schedule_timeout+0xe7/0x132\n __wait_for_common+0xb5/0x12e\n usb_start_wait_urb+0xc5/0x1ef\n ? usb_alloc_urb+0x95/0xa4\n usb_control_msg+0xff/0x184\n _usbctrl_vendorreq_sync+0xa0/0x161\n _usb_read_sync+0xb3/0xc5\n read_efuse_byte+0x13c/0x146\n read_efuse+0x351/0x5f0\n efuse_read_all_map+0x42/0x52\n rtl_efuse_shadow_map_update+0x60/0xef\n rtl_get_hwinfo+0x5d/0x1c2\n rtl92cu_read_eeprom_info+0x10a/0x8d5\n ? rtl92c_read_chip_version+0x14f/0x17e\n rtl_usb_probe+0x323/0x851\n usb_probe_interface+0x278/0x34b\n really_probe+0x202/0x4a4\n __driver_probe_device+0x166/0x1b2\n driver_probe_device+0x2f/0xd8\n [...]\n\nWe propose hereby to drastically reduce the attempts of doing the I/O\nreads in case of failures, restricted to USB devices (given that\nthey\u0027re inherently slower than PCIe ones). By retrying up to 10 times\n(instead of 10000), we got reponsiveness in the reproducer, while seems\nreasonable to believe that there\u0027s no sane USB device implementation in\nthe field requiring this amount of retries at every I/O read in order\nto properly work. Based on that assumption, it\u0027d be good to have it\nbackported to stable but maybe not since driver implementation (the 10k\nnumber comes from day 0), perhaps up to 6.x series makes sense.\n\n[0] Commit 15fffc6a5624 (\"driver core: Fix uevent_show() vs driver detach race\")\n\n[1] A note about that: this syzkaller report presents multiple reproducers\nthat differs by the type of emulated USB device. For this specific case,\ncheck the entry from 2024/08/08 06:23 in the list of crashes; the C repro\nis available at https://syzkaller.appspot.com/text?tag=ReproC\u0026x=1521fc83980000.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53190",
"url": "https://www.suse.com/security/cve/CVE-2024-53190"
},
{
"category": "external",
"summary": "SUSE Bug 1234950 for CVE-2024-53190",
"url": "https://bugzilla.suse.com/1234950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-53190"
},
{
"cve": "CVE-2024-53191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53191"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix warning when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe buffers dp-\u003etx_ring[i].tx_status are released.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nWARNING: CPU: 0 PID: 2098 at mm/slub.c:4689 free_large_kmalloc+0x4d/0x80\nCall Trace:\nfree_large_kmalloc\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set the buffers to NULL after releasing in\norder to avoid the double free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53191",
"url": "https://www.suse.com/security/cve/CVE-2024-53191"
},
{
"category": "external",
"summary": "SUSE Bug 1234952 for CVE-2024-53191",
"url": "https://bugzilla.suse.com/1234952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53191"
},
{
"cve": "CVE-2024-53194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53194"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix use-after-free of slot-\u003ebus on hot remove\n\nDennis reports a boot crash on recent Lenovo laptops with a USB4 dock.\n\nSince commit 0fc70886569c (\"thunderbolt: Reset USB4 v2 host router\") and\ncommit 59a54c5f3dbd (\"thunderbolt: Reset topology created by the boot\nfirmware\"), USB4 v2 and v1 Host Routers are reset on probe of the\nthunderbolt driver.\n\nThe reset clears the Presence Detect State and Data Link Layer Link Active\nbits at the USB4 Host Router\u0027s Root Port and thus causes hot removal of the\ndock.\n\nThe crash occurs when pciehp is unbound from one of the dock\u0027s Downstream\nPorts: pciehp creates a pci_slot on bind and destroys it on unbind. The\npci_slot contains a pointer to the pci_bus below the Downstream Port, but\na reference on that pci_bus is never acquired. The pci_bus is destroyed\nbefore the pci_slot, so a use-after-free ensues when pci_slot_release()\naccesses slot-\u003ebus.\n\nIn principle this should not happen because pci_stop_bus_device() unbinds\npciehp (and therefore destroys the pci_slot) before the pci_bus is\ndestroyed by pci_remove_bus_device().\n\nHowever the stacktrace provided by Dennis shows that pciehp is unbound from\npci_remove_bus_device() instead of pci_stop_bus_device(). To understand\nthe significance of this, one needs to know that the PCI core uses a two\nstep process to remove a portion of the hierarchy: It first unbinds all\ndrivers in the sub-hierarchy in pci_stop_bus_device() and then actually\nremoves the devices in pci_remove_bus_device(). There is no precaution to\nprevent driver binding in-between pci_stop_bus_device() and\npci_remove_bus_device().\n\nIn Dennis\u0027 case, it seems removal of the hierarchy by pciehp races with\ndriver binding by pci_bus_add_devices(). pciehp is bound to the\nDownstream Port after pci_stop_bus_device() has run, so it is unbound by\npci_remove_bus_device() instead of pci_stop_bus_device(). Because the\npci_bus has already been destroyed at that point, accesses to it result in\na use-after-free.\n\nOne might conclude that driver binding needs to be prevented after\npci_stop_bus_device() has run. However it seems risky that pci_slot points\nto pci_bus without holding a reference. Solely relying on correct ordering\nof driver unbind versus pci_bus destruction is certainly not defensive\nprogramming.\n\nIf pci_slot has a need to access data in pci_bus, it ought to acquire a\nreference. Amend pci_create_slot() accordingly. Dennis reports that the\ncrash is not reproducible with this change.\n\nAbridged stacktrace:\n\n pcieport 0000:00:07.0: PME: Signaling with IRQ 156\n pcieport 0000:00:07.0: pciehp: Slot #12 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ IbPresDis- LLActRep+\n pci_bus 0000:20: dev 00, created physical slot 12\n pcieport 0000:00:07.0: pciehp: Slot(12): Card not present\n ...\n pcieport 0000:21:02.0: pciehp: pcie_disable_notification: SLOTCTRL d8 write cmd 0\n Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b6b: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 13 UID: 0 PID: 134 Comm: irq/156-pciehp Not tainted 6.11.0-devel+ #1\n RIP: 0010:dev_driver_string+0x12/0x40\n pci_destroy_slot\n pciehp_remove\n pcie_port_remove_service\n device_release_driver_internal\n bus_remove_device\n device_del\n device_unregister\n remove_iter\n device_for_each_child\n pcie_portdrv_remove\n pci_device_remove\n device_release_driver_internal\n bus_remove_device\n device_del\n pci_remove_bus_device (recursive invocation)\n pci_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53194",
"url": "https://www.suse.com/security/cve/CVE-2024-53194"
},
{
"category": "external",
"summary": "SUSE Bug 1235459 for CVE-2024-53194",
"url": "https://bugzilla.suse.com/1235459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53194"
},
{
"cve": "CVE-2024-53195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Get rid of userspace_irqchip_in_use\n\nImproper use of userspace_irqchip_in_use led to syzbot hitting the\nfollowing WARN_ON() in kvm_timer_update_irq():\n\nWARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arch_timer.c:459\nkvm_timer_update_irq+0x21c/0x394\nCall trace:\n kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459\n kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968\n kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264\n kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline]\n kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline]\n kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695\n kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151\n el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe following sequence led to the scenario:\n - Userspace creates a VM and a vCPU.\n - The vCPU is initialized with KVM_ARM_VCPU_PMU_V3 during\n KVM_ARM_VCPU_INIT.\n - Without any other setup, such as vGIC or vPMU, userspace issues\n KVM_RUN on the vCPU. Since the vPMU is requested, but not setup,\n kvm_arm_pmu_v3_enable() fails in kvm_arch_vcpu_run_pid_change().\n As a result, KVM_RUN returns after enabling the timer, but before\n incrementing \u0027userspace_irqchip_in_use\u0027:\n kvm_arch_vcpu_run_pid_change()\n ret = kvm_arm_pmu_v3_enable()\n if (!vcpu-\u003earch.pmu.created)\n return -EINVAL;\n if (ret)\n return ret;\n [...]\n if (!irqchip_in_kernel(kvm))\n static_branch_inc(\u0026userspace_irqchip_in_use);\n - Userspace ignores the error and issues KVM_ARM_VCPU_INIT again.\n Since the timer is already enabled, control moves through the\n following flow, ultimately hitting the WARN_ON():\n kvm_timer_vcpu_reset()\n if (timer-\u003eenabled)\n kvm_timer_update_irq()\n if (!userspace_irqchip())\n ret = kvm_vgic_inject_irq()\n ret = vgic_lazy_init()\n if (unlikely(!vgic_initialized(kvm)))\n if (kvm-\u003earch.vgic.vgic_model !=\n KVM_DEV_TYPE_ARM_VGIC_V2)\n return -EBUSY;\n WARN_ON(ret);\n\nTheoretically, since userspace_irqchip_in_use\u0027s functionality can be\nsimply replaced by \u0027!irqchip_in_kernel()\u0027, get rid of the static key\nto avoid the mismanagement, which also helps with the syzbot issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53195",
"url": "https://www.suse.com/security/cve/CVE-2024-53195"
},
{
"category": "external",
"summary": "SUSE Bug 1234957 for CVE-2024-53195",
"url": "https://bugzilla.suse.com/1234957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53195"
},
{
"cve": "CVE-2024-53196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53196"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Don\u0027t retire aborted MMIO instruction\n\nReturning an abort to the guest for an unsupported MMIO access is a\ndocumented feature of the KVM UAPI. Nevertheless, it\u0027s clear that this\nplumbing has seen limited testing, since userspace can trivially cause a\nWARN in the MMIO return:\n\n WARNING: CPU: 0 PID: 30558 at arch/arm64/include/asm/kvm_emulate.h:536 kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n Call trace:\n kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n kvm_arch_vcpu_ioctl_run+0x98/0x15b4 arch/arm64/kvm/arm.c:1133\n kvm_vcpu_ioctl+0x75c/0xa78 virt/kvm/kvm_main.c:4487\n __do_sys_ioctl fs/ioctl.c:51 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x1e0/0x23c arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151\n el0_svc+0x38/0x68 arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x90/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe splat is complaining that KVM is advancing PC while an exception is\npending, i.e. that KVM is retiring the MMIO instruction despite a\npending synchronous external abort. Womp womp.\n\nFix the glaring UAPI bug by skipping over all the MMIO emulation in\ncase there is a pending synchronous exception. Note that while userspace\nis capable of pending an asynchronous exception (SError, IRQ, or FIQ),\nit is still safe to retire the MMIO instruction in this case as (1) they\nare by definition asynchronous, and (2) KVM relies on hardware support\nfor pending/delivering these exceptions instead of the software state\nmachine for advancing PC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53196",
"url": "https://www.suse.com/security/cve/CVE-2024-53196"
},
{
"category": "external",
"summary": "SUSE Bug 1234906 for CVE-2024-53196",
"url": "https://bugzilla.suse.com/1234906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53196"
},
{
"cve": "CVE-2024-53197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53197"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev-\u003econfig.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53197",
"url": "https://www.suse.com/security/cve/CVE-2024-53197"
},
{
"category": "external",
"summary": "SUSE Bug 1235464 for CVE-2024-53197",
"url": "https://bugzilla.suse.com/1235464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53198"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen: Fix the issue of resource not being properly released in xenbus_dev_probe()\n\nThis patch fixes an issue in the function xenbus_dev_probe(). In the\nxenbus_dev_probe() function, within the if (err) branch at line 313, the\nprogram incorrectly returns err directly without releasing the resources\nallocated by err = drv-\u003eprobe(dev, id). As the return value is non-zero,\nthe upper layers assume the processing logic has failed. However, the probe\noperation was performed earlier without a corresponding remove operation.\nSince the probe actually allocates resources, failing to perform the remove\noperation could lead to problems.\n\nTo fix this issue, we followed the resource release logic of the\nxenbus_dev_remove() function by adding a new block fail_remove before the\nfail_put block. After entering the branch if (err) at line 313, the\nfunction will use a goto statement to jump to the fail_remove block,\nensuring that the previously acquired resources are correctly released,\nthus preventing the reference count leak.\n\nThis bug was identified by an experimental static analysis tool developed\nby our team. The tool specializes in analyzing reference count operations\nand detecting potential issues where resources are not properly managed.\nIn this case, the tool flagged the missing release operation as a\npotential problem, which led to the development of this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53198",
"url": "https://www.suse.com/security/cve/CVE-2024-53198"
},
{
"category": "external",
"summary": "SUSE Bug 1234923 for CVE-2024-53198",
"url": "https://bugzilla.suse.com/1234923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53198"
},
{
"cve": "CVE-2024-53200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53200"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp\n\nThis commit addresses a null pointer dereference issue in\nhwss_setup_dpp(). The issue could occur when pipe_ctx-\u003eplane_state is\nnull. The fix adds a check to ensure `pipe_ctx-\u003eplane_state` is not null\nbefore accessing. This prevents a null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53200",
"url": "https://www.suse.com/security/cve/CVE-2024-53200"
},
{
"category": "external",
"summary": "SUSE Bug 1234968 for CVE-2024-53200",
"url": "https://bugzilla.suse.com/1234968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53200"
},
{
"cve": "CVE-2024-53201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53201"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\n\nThis commit addresses a null pointer dereference issue in\ndcn20_program_pipe(). Previously, commit 8e4ed3cf1642 (\"drm/amd/display:\nAdd null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\")\npartially fixed the null pointer dereference issue. However, in\ndcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and\nplane_state is accessed again through pipe_ctx. Multiple if statements\ndirectly call attributes of plane_state, leading to potential null\npointer dereference issues. This patch adds necessary null checks to\nensure stability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53201",
"url": "https://www.suse.com/security/cve/CVE-2024-53201"
},
{
"category": "external",
"summary": "SUSE Bug 1234969 for CVE-2024-53201",
"url": "https://bugzilla.suse.com/1234969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53201"
},
{
"cve": "CVE-2024-53202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware_loader: Fix possible resource leak in fw_log_firmware_info()\n\nThe alg instance should be released under the exception path, otherwise\nthere may be resource leak here.\n\nTo mitigate this, free the alg instance with crypto_free_shash when kmalloc\nfails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53202",
"url": "https://www.suse.com/security/cve/CVE-2024-53202"
},
{
"category": "external",
"summary": "SUSE Bug 1234970 for CVE-2024-53202",
"url": "https://bugzilla.suse.com/1234970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53202"
},
{
"cve": "CVE-2024-53206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53206"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix use-after-free of nreq in reqsk_timer_handler().\n\nThe cited commit replaced inet_csk_reqsk_queue_drop_and_put() with\n__inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().\n\nThen, oreq should be passed to reqsk_put() instead of req; otherwise\nuse-after-free of nreq could happen when reqsk is migrated but the\nretry attempt failed (e.g. due to timeout).\n\nLet\u0027s pass oreq to reqsk_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53206",
"url": "https://www.suse.com/security/cve/CVE-2024-53206"
},
{
"category": "external",
"summary": "SUSE Bug 1234960 for CVE-2024-53206",
"url": "https://bugzilla.suse.com/1234960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53206"
},
{
"cve": "CVE-2024-53207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53207"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible deadlocks\n\nThis fixes possible deadlocks like the following caused by\nhci_cmd_sync_dequeue causing the destroy function to run:\n\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\n Tainted: G W O 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:kworker/u19:0 state:D stack:0 pid:143 tgid:143 ppid:2 flags:0x00004000\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\n Call Trace:\n \u003cTASK\u003e\n __schedule+0x374/0xaf0\n schedule+0x3c/0xf0\n schedule_preempt_disabled+0x1c/0x30\n __mutex_lock.constprop.0+0x3ef/0x7a0\n __mutex_lock_slowpath+0x13/0x20\n mutex_lock+0x3c/0x50\n mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\n ? kfree+0x211/0x2a0\n hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\n ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\n cmd_complete_rsp+0x26/0x80 [bluetooth]\n mgmt_pending_foreach+0x4d/0x70 [bluetooth]\n __mgmt_power_off+0x8d/0x180 [bluetooth]\n ? _raw_spin_unlock_irq+0x23/0x40\n hci_dev_close_sync+0x445/0x5b0 [bluetooth]\n hci_set_powered_sync+0x149/0x250 [bluetooth]\n set_powered_sync+0x24/0x60 [bluetooth]\n hci_cmd_sync_work+0x90/0x150 [bluetooth]\n process_one_work+0x13e/0x300\n worker_thread+0x2f7/0x420\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x107/0x140\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x3d/0x60\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53207",
"url": "https://www.suse.com/security/cve/CVE-2024-53207"
},
{
"category": "external",
"summary": "SUSE Bug 1234907 for CVE-2024-53207",
"url": "https://bugzilla.suse.com/1234907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53207"
},
{
"cve": "CVE-2024-53208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53208"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync\n\nThis fixes the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\nRead of size 8 at addr ffff888029b4dd18 by task kworker/u9:0/54\n\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc6-syzkaller-01155-gf723224742fc #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:93 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\nq kasan_report+0x143/0x180 mm/kasan/report.c:601\n set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\n hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:328\n process_one_work kernel/workqueue.c:3231 [inline]\n process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312\n worker_thread+0x86d/0xd10 kernel/workqueue.c:3389\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\nAllocated by task 5247:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:370 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387\n kasan_kmalloc include/linux/kasan.h:211 [inline]\n __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4193\n kmalloc_noprof include/linux/slab.h:681 [inline]\n kzalloc_noprof include/linux/slab.h:807 [inline]\n mgmt_pending_new+0x65/0x250 net/bluetooth/mgmt_util.c:269\n mgmt_pending_add+0x36/0x120 net/bluetooth/mgmt_util.c:296\n set_powered+0x3cd/0x5e0 net/bluetooth/mgmt.c:1394\n hci_mgmt_cmd+0xc47/0x11d0 net/bluetooth/hci_sock.c:1712\n hci_sock_sendmsg+0x7b8/0x11c0 net/bluetooth/hci_sock.c:1832\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n sock_write_iter+0x2dd/0x400 net/socket.c:1160\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xa72/0xc90 fs/read_write.c:590\n ksys_write+0x1a0/0x2c0 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 5246:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579\n poison_slab_object+0xe0/0x150 mm/kasan/common.c:240\n __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256\n kasan_slab_free include/linux/kasan.h:184 [inline]\n slab_free_hook mm/slub.c:2256 [inline]\n slab_free mm/slub.c:4477 [inline]\n kfree+0x149/0x360 mm/slub.c:4598\n settings_rsp+0x2bc/0x390 net/bluetooth/mgmt.c:1443\n mgmt_pending_foreach+0xd1/0x130 net/bluetooth/mgmt_util.c:259\n __mgmt_power_off+0x112/0x420 net/bluetooth/mgmt.c:9455\n hci_dev_close_sync+0x665/0x11a0 net/bluetooth/hci_sync.c:5191\n hci_dev_do_close net/bluetooth/hci_core.c:483 [inline]\n hci_dev_close+0x112/0x210 net/bluetooth/hci_core.c:508\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83gv\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53208",
"url": "https://www.suse.com/security/cve/CVE-2024-53208"
},
{
"category": "external",
"summary": "SUSE Bug 1234909 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "external",
"summary": "SUSE Bug 1236244 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1236244"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53208"
},
{
"cve": "CVE-2024-53209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53209"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix receive ring space parameters when XDP is active\n\nThe MTU setting at the time an XDP multi-buffer is attached\ndetermines whether the aggregation ring will be used and the\nrx_skb_func handler. This is done in bnxt_set_rx_skb_mode().\n\nIf the MTU is later changed, the aggregation ring setting may need\nto be changed and it may become out-of-sync with the settings\ninitially done in bnxt_set_rx_skb_mode(). This may result in\nrandom memory corruption and crashes as the HW may DMA data larger\nthan the allocated buffer size, such as:\n\nBUG: kernel NULL pointer dereference, address: 00000000000003c0\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 17 PID: 0 Comm: swapper/17 Kdump: loaded Tainted: G S OE 6.1.0-226bf9805506 #1\nHardware name: Wiwynn Delta Lake PVT BZA.02601.0150/Delta Lake-Class1, BIOS F0E_3A12 08/26/2021\nRIP: 0010:bnxt_rx_pkt+0xe97/0x1ae0 [bnxt_en]\nCode: 8b 95 70 ff ff ff 4c 8b 9d 48 ff ff ff 66 41 89 87 b4 00 00 00 e9 0b f7 ff ff 0f b7 43 0a 49 8b 95 a8 04 00 00 25 ff 0f 00 00 \u003c0f\u003e b7 14 42 48 c1 e2 06 49 03 95 a0 04 00 00 0f b6 42 33f\nRSP: 0018:ffffa19f40cc0d18 EFLAGS: 00010202\nRAX: 00000000000001e0 RBX: ffff8e2c805c6100 RCX: 00000000000007ff\nRDX: 0000000000000000 RSI: ffff8e2c271ab990 RDI: ffff8e2c84f12380\nRBP: ffffa19f40cc0e48 R08: 000000000001000d R09: 974ea2fcddfa4cbf\nR10: 0000000000000000 R11: ffffa19f40cc0ff8 R12: ffff8e2c94b58980\nR13: ffff8e2c952d6600 R14: 0000000000000016 R15: ffff8e2c271ab990\nFS: 0000000000000000(0000) GS:ffff8e3b3f840000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000000003c0 CR3: 0000000e8580a004 CR4: 00000000007706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n __bnxt_poll_work+0x1c2/0x3e0 [bnxt_en]\n\nTo address the issue, we now call bnxt_set_rx_skb_mode() within\nbnxt_change_mtu() to properly set the AGG rings configuration and\nupdate rx_skb_func based on the new MTU value.\nAdditionally, BNXT_FLAG_NO_AGG_RINGS is cleared at the beginning of\nbnxt_set_rx_skb_mode() to make sure it gets set or cleared based on\nthe current MTU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53209",
"url": "https://www.suse.com/security/cve/CVE-2024-53209"
},
{
"category": "external",
"summary": "SUSE Bug 1235002 for CVE-2024-53209",
"url": "https://bugzilla.suse.com/1235002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53209"
},
{
"cve": "CVE-2024-53210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53210"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\n\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\nat exit.\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\niucv_sock_destruct() during socket close. To fix this decrease\nskb refcount by one if MSG_PEEK is set in order to prevent memory\nleak and WARN_ON.\n\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G W 6.10.0-rc7 #1\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\nCall Trace:\n [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\n [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\n [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\n [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\n [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\n [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\n [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\n [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\n [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\n [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\n [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\n [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\n [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\n Last Breaking-Event-Address:\n [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53210",
"url": "https://www.suse.com/security/cve/CVE-2024-53210"
},
{
"category": "external",
"summary": "SUSE Bug 1234971 for CVE-2024-53210",
"url": "https://bugzilla.suse.com/1234971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53210"
},
{
"cve": "CVE-2024-53213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53213"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: lan78xx: Fix double free issue with interrupt buffer allocation\n\nIn lan78xx_probe(), the buffer `buf` was being freed twice: once\nimplicitly through `usb_free_urb(dev-\u003eurb_intr)` with the\n`URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused\na double free issue.\n\nTo resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to\nsimplify the initialization sequence and removed the redundant\n`kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring\nit is correctly managed by `usb_fill_int_urb()` and freed by\n`usb_free_urb()` as intended.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53213",
"url": "https://www.suse.com/security/cve/CVE-2024-53213"
},
{
"category": "external",
"summary": "SUSE Bug 1234973 for CVE-2024-53213",
"url": "https://bugzilla.suse.com/1234973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53213"
},
{
"cve": "CVE-2024-53214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53214"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: Properly hide first-in-list PCIe extended capability\n\nThere are cases where a PCIe extended capability should be hidden from\nthe user. For example, an unknown capability (i.e., capability with ID\ngreater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally\nchosen to be hidden from the user.\n\nHiding a capability is done by virtualizing and modifying the \u0027Next\nCapability Offset\u0027 field of the previous capability so it points to the\ncapability after the one that should be hidden.\n\nThe special case where the first capability in the list should be hidden\nis handled differently because there is no previous capability that can\nbe modified. In this case, the capability ID and version are zeroed\nwhile leaving the next pointer intact. This hides the capability and\nleaves an anchor for the rest of the capability list.\n\nHowever, today, hiding the first capability in the list is not done\nproperly if the capability is unknown, as struct\nvfio_pci_core_device-\u003epci_config_map is set to the capability ID during\ninitialization but the capability ID is not properly checked later when\nused in vfio_config_do_rw(). This leads to the following warning [1] and\nto an out-of-bounds access to ecap_perms array.\n\nFix it by checking cap_id in vfio_config_do_rw(), and if it is greater\nthan PCI_EXT_CAP_ID_MAX, use an alternative struct perm_bits for direct\nread only access instead of the ecap_perms array.\n\nNote that this is safe since the above is the only case where cap_id can\nexceed PCI_EXT_CAP_ID_MAX (except for the special capabilities, which\nare already checked before).\n\n[1]\n\nWARNING: CPU: 118 PID: 5329 at drivers/vfio/pci/vfio_pci_config.c:1900 vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\nCPU: 118 UID: 0 PID: 5329 Comm: simx-qemu-syste Not tainted 6.12.0+ #1\n(snip)\nCall Trace:\n \u003cTASK\u003e\n ? show_regs+0x69/0x80\n ? __warn+0x8d/0x140\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? report_bug+0x18f/0x1a0\n ? handle_bug+0x63/0xa0\n ? exc_invalid_op+0x19/0x70\n ? asm_exc_invalid_op+0x1b/0x20\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? vfio_pci_config_rw+0x244/0x430 [vfio_pci_core]\n vfio_pci_rw+0x101/0x1b0 [vfio_pci_core]\n vfio_pci_core_read+0x1d/0x30 [vfio_pci_core]\n vfio_device_fops_read+0x27/0x40 [vfio]\n vfs_read+0xbd/0x340\n ? vfio_device_fops_unl_ioctl+0xbb/0x740 [vfio]\n ? __rseq_handle_notify_resume+0xa4/0x4b0\n __x64_sys_pread64+0x96/0xc0\n x64_sys_call+0x1c3d/0x20d0\n do_syscall_64+0x4d/0x120\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53214",
"url": "https://www.suse.com/security/cve/CVE-2024-53214"
},
{
"category": "external",
"summary": "SUSE Bug 1235004 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "external",
"summary": "SUSE Bug 1235005 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53214"
},
{
"cve": "CVE-2024-53215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53215"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\n\nThere\u0027s issue as follows:\nRPC: Registered rdma transport module.\nRPC: Registered rdma backchannel transport module.\nRPC: Unregistered rdma transport module.\nRPC: Unregistered rdma backchannel transport module.\nBUG: unable to handle page fault for address: fffffbfff80c609a\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\nCall Trace:\n \u003cTASK\u003e\n __die+0x1f/0x70\n page_fault_oops+0x2cd/0x860\n spurious_kernel_fault+0x36/0x450\n do_kern_addr_fault+0xca/0x100\n exc_page_fault+0x128/0x150\n asm_exc_page_fault+0x26/0x30\n percpu_counter_destroy_many+0xf7/0x2a0\n mmdrop+0x209/0x350\n finish_task_switch.isra.0+0x481/0x840\n schedule_tail+0xe/0xd0\n ret_from_fork+0x23/0x80\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\ndestroy the percpu counters which init in svc_rdma_proc_init().\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\nleakage occurs.\nTo solve above issue just destroy all percpu counters when\nregister_sysctl() return NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53215",
"url": "https://www.suse.com/security/cve/CVE-2024-53215"
},
{
"category": "external",
"summary": "SUSE Bug 1234962 for CVE-2024-53215",
"url": "https://bugzilla.suse.com/1234962"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53215"
},
{
"cve": "CVE-2024-53216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53216"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: release svc_expkey/svc_export with rcu_work\n\nThe last reference for `cache_head` can be reduced to zero in `c_show`\nand `e_show`(using `rcu_read_lock` and `rcu_read_unlock`). Consequently,\n`svc_export_put` and `expkey_put` will be invoked, leading to two\nissues:\n\n1. The `svc_export_put` will directly free ex_uuid. However,\n `e_show`/`c_show` will access `ex_uuid` after `cache_put`, which can\n trigger a use-after-free issue, shown below.\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in svc_export_show+0x362/0x430 [nfsd]\n Read of size 1 at addr ff11000010fdc120 by task cat/870\n\n CPU: 1 UID: 0 PID: 870 Comm: cat Not tainted 6.12.0-rc3+ #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n 1.16.1-2.fc37 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x53/0x70\n print_address_description.constprop.0+0x2c/0x3a0\n print_report+0xb9/0x280\n kasan_report+0xae/0xe0\n svc_export_show+0x362/0x430 [nfsd]\n c_show+0x161/0x390 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Allocated by task 830:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x8f/0xa0\n __kmalloc_node_track_caller_noprof+0x1bc/0x400\n kmemdup_noprof+0x22/0x50\n svc_export_parse+0x8a9/0xb80 [nfsd]\n cache_do_downcall+0x71/0xa0 [sunrpc]\n cache_write_procfs+0x8e/0xd0 [sunrpc]\n proc_reg_write+0xe1/0x140\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 868:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x37/0x50\n kfree+0xf3/0x3e0\n svc_export_put+0x87/0xb0 [nfsd]\n cache_purge+0x17f/0x1f0 [sunrpc]\n nfsd_destroy_serv+0x226/0x2d0 [nfsd]\n nfsd_svc+0x125/0x1e0 [nfsd]\n write_threads+0x16a/0x2a0 [nfsd]\n nfsctl_transaction_write+0x74/0xa0 [nfsd]\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n2. We cannot sleep while using `rcu_read_lock`/`rcu_read_unlock`.\n However, `svc_export_put`/`expkey_put` will call path_put, which\n subsequently triggers a sleeping operation due to the following\n `dput`.\n\n =============================\n WARNING: suspicious RCU usage\n 5.10.0-dirty #141 Not tainted\n -----------------------------\n ...\n Call Trace:\n dump_stack+0x9a/0xd0\n ___might_sleep+0x231/0x240\n dput+0x39/0x600\n path_put+0x1b/0x30\n svc_export_put+0x17/0x80\n e_show+0x1c9/0x200\n seq_read_iter+0x63f/0x7c0\n seq_read+0x226/0x2d0\n vfs_read+0x113/0x2c0\n ksys_read+0xc9/0x170\n do_syscall_64+0x33/0x40\n entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nFix these issues by using `rcu_work` to help release\n`svc_expkey`/`svc_export`. This approach allows for an asynchronous\ncontext to invoke `path_put` and also facilitates the freeing of\n`uuid/exp/key` after an RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53216",
"url": "https://www.suse.com/security/cve/CVE-2024-53216"
},
{
"category": "external",
"summary": "SUSE Bug 1235003 for CVE-2024-53216",
"url": "https://bugzilla.suse.com/1235003"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53216"
},
{
"cve": "CVE-2024-53217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53217"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent NULL dereference in nfsd4_process_cb_update()\n\n@ses is initialized to NULL. If __nfsd4_find_backchannel() finds no\navailable backchannel session, setup_callback_client() will try to\ndereference @ses and segfault.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53217",
"url": "https://www.suse.com/security/cve/CVE-2024-53217"
},
{
"category": "external",
"summary": "SUSE Bug 1234999 for CVE-2024-53217",
"url": "https://bugzilla.suse.com/1234999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53217"
},
{
"cve": "CVE-2024-53222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53222"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: fix NULL pointer in comp_algorithm_show()\n\nLTP reported a NULL pointer dereference as followed:\n\n CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3\n Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : __pi_strcmp+0x24/0x140\n lr : zcomp_available_show+0x60/0x100 [zram]\n sp : ffff800088b93b90\n x29: ffff800088b93b90 x28: 0000000000000001 x27: 0000000000400cc0\n x26: 0000000000000ffe x25: ffff80007b3e2388 x24: 0000000000000000\n x23: ffff80007b3e2390 x22: ffff0004041a9000 x21: ffff80007b3e2900\n x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000\n x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000\n x11: 0000000000000000 x10: ffff80007b3e2900 x9 : ffff80007b3cb280\n x8 : 0101010101010101 x7 : 0000000000000000 x6 : 0000000000000000\n x5 : 0000000000000040 x4 : 0000000000000000 x3 : 00656c722d6f7a6c\n x2 : 0000000000000000 x1 : ffff80007b3e2900 x0 : 0000000000000000\n Call trace:\n __pi_strcmp+0x24/0x140\n comp_algorithm_show+0x40/0x70 [zram]\n dev_attr_show+0x28/0x80\n sysfs_kf_seq_show+0x90/0x140\n kernfs_seq_show+0x34/0x48\n seq_read_iter+0x1d4/0x4e8\n kernfs_fop_read_iter+0x40/0x58\n new_sync_read+0x9c/0x168\n vfs_read+0x1a8/0x1f8\n ksys_read+0x74/0x108\n __arm64_sys_read+0x24/0x38\n invoke_syscall+0x50/0x120\n el0_svc_common.constprop.0+0xc8/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x38/0x138\n el0t_64_sync_handler+0xc0/0xc8\n el0t_64_sync+0x188/0x190\n\nThe zram-\u003ecomp_algs[ZRAM_PRIMARY_COMP] can be NULL in zram_add() if\ncomp_algorithm_set() has not been called. User can access the zram device\nby sysfs after device_add_disk(), so there is a time window to trigger the\nNULL pointer dereference. Move it ahead device_add_disk() to make sure\nwhen user can access the zram device, it is ready. comp_algorithm_set()\nis protected by zram-\u003einit_lock in other places and no such problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53222",
"url": "https://www.suse.com/security/cve/CVE-2024-53222"
},
{
"category": "external",
"summary": "SUSE Bug 1234974 for CVE-2024-53222",
"url": "https://bugzilla.suse.com/1234974"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53222"
},
{
"cve": "CVE-2024-53224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53224"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Move events notifier registration to be after device registration\n\nMove pkey change work initialization and cleanup from device resources\nstage to notifier stage, since this is the stage which handles this work\nevents.\n\nFix a race between the device deregistration and pkey change work by moving\nMLX5_IB_STAGE_DEVICE_NOTIFIER to be after MLX5_IB_STAGE_IB_REG in order to\nensure that the notifier is deregistered before the device during cleanup.\nWhich ensures there are no works that are being executed after the\ndevice has already unregistered which can cause the panic below.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 1 PID: 630071 Comm: kworker/1:2 Kdump: loaded Tainted: G W OE --------- --- 5.14.0-162.6.1.el9_1.x86_64 #1\nHardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS 090008 02/27/2023\nWorkqueue: events pkey_change_handler [mlx5_ib]\nRIP: 0010:setup_qp+0x38/0x1f0 [mlx5_ib]\nCode: ee 41 54 45 31 e4 55 89 f5 53 48 89 fb 48 83 ec 20 8b 77 08 65 48 8b 04 25 28 00 00 00 48 89 44 24 18 48 8b 07 48 8d 4c 24 16 \u003c4c\u003e 8b 38 49 8b 87 80 0b 00 00 4c 89 ff 48 8b 80 08 05 00 00 8b 40\nRSP: 0018:ffffbcc54068be20 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffff954054494128 RCX: ffffbcc54068be36\nRDX: ffff954004934000 RSI: 0000000000000001 RDI: ffff954054494128\nRBP: 0000000000000023 R08: ffff954001be2c20 R09: 0000000000000001\nR10: ffff954001be2c20 R11: ffff9540260133c0 R12: 0000000000000000\nR13: 0000000000000023 R14: 0000000000000000 R15: ffff9540ffcb0905\nFS: 0000000000000000(0000) GS:ffff9540ffc80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000010625c001 CR4: 00000000003706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\nmlx5_ib_gsi_pkey_change+0x20/0x40 [mlx5_ib]\nprocess_one_work+0x1e8/0x3c0\nworker_thread+0x50/0x3b0\n? rescuer_thread+0x380/0x380\nkthread+0x149/0x170\n? set_kthread_struct+0x50/0x50\nret_from_fork+0x22/0x30\nModules linked in: rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) mlx5_fwctl(OE) fwctl(OE) ib_uverbs(OE) mlx5_core(OE) mlxdevm(OE) ib_core(OE) mlx_compat(OE) psample mlxfw(OE) tls knem(OE) netconsole nfsv3 nfs_acl nfs lockd grace fscache netfs qrtr rfkill sunrpc intel_rapl_msr intel_rapl_common rapl hv_balloon hv_utils i2c_piix4 pcspkr joydev fuse ext4 mbcache jbd2 sr_mod sd_mod cdrom t10_pi sg ata_generic pci_hyperv pci_hyperv_intf hyperv_drm drm_shmem_helper drm_kms_helper hv_storvsc syscopyarea hv_netvsc sysfillrect sysimgblt hid_hyperv fb_sys_fops scsi_transport_fc hyperv_keyboard drm ata_piix crct10dif_pclmul crc32_pclmul crc32c_intel libata ghash_clmulni_intel hv_vmbus serio_raw [last unloaded: ib_core]\nCR2: 0000000000000000\n---[ end trace f6f8be4eae12f7bc ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53224",
"url": "https://www.suse.com/security/cve/CVE-2024-53224"
},
{
"category": "external",
"summary": "SUSE Bug 1235009 for CVE-2024-53224",
"url": "https://bugzilla.suse.com/1235009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53224"
},
{
"cve": "CVE-2024-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n error = bfad_im_module_init()\n fc_release_transport(bfad_im_scsi_transport_template);\n if (error)\n goto ext;\n\next:\n bfad_im_module_exit();\n fc_release_transport(bfad_im_scsi_transport_template);\n --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53227",
"url": "https://www.suse.com/security/cve/CVE-2024-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1235011 for CVE-2024-53227",
"url": "https://bugzilla.suse.com/1235011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-53229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53229"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix the qp flush warnings in req\n\nWhen the qp is in error state, the status of WQEs in the queue should be\nset to error. Or else the following will appear.\n\n[ 920.617269] WARNING: CPU: 1 PID: 21 at drivers/infiniband/sw/rxe/rxe_comp.c:756 rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.617744] Modules linked in: rnbd_client(O) rtrs_client(O) rtrs_core(O) rdma_ucm rdma_cm iw_cm ib_cm crc32_generic rdma_rxe ip6_udp_tunnel udp_tunnel ib_uverbs ib_core loop brd null_blk ipv6\n[ 920.618516] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G O 6.1.113-storage+ #65\n[ 920.618986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 920.619396] RIP: 0010:rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.619658] Code: 0f b6 84 24 3a 02 00 00 41 89 84 24 44 04 00 00 e9 2a f7 ff ff 39 ca bb 03 00 00 00 b8 0e 00 00 00 48 0f 45 d8 e9 15 f7 ff ff \u003c0f\u003e 0b e9 cb f8 ff ff 41 bf f5 ff ff ff e9 08 f8 ff ff 49 8d bc 24\n[ 920.620482] RSP: 0018:ffff97b7c00bbc38 EFLAGS: 00010246\n[ 920.620817] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000008\n[ 920.621183] RDX: ffff960dc396ebc0 RSI: 0000000000005400 RDI: ffff960dc4e2fbac\n[ 920.621548] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffffac406450\n[ 920.621884] R10: ffffffffac4060c0 R11: 0000000000000001 R12: ffff960dc4e2f800\n[ 920.622254] R13: ffff960dc4e2f928 R14: ffff97b7c029c580 R15: 0000000000000000\n[ 920.622609] FS: 0000000000000000(0000) GS:ffff960ef7d00000(0000) knlGS:0000000000000000\n[ 920.622979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 920.623245] CR2: 00007fa056965e90 CR3: 00000001107f1000 CR4: 00000000000006e0\n[ 920.623680] Call Trace:\n[ 920.623815] \u003cTASK\u003e\n[ 920.623933] ? __warn+0x79/0xc0\n[ 920.624116] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.624356] ? report_bug+0xfb/0x150\n[ 920.624594] ? handle_bug+0x3c/0x60\n[ 920.624796] ? exc_invalid_op+0x14/0x70\n[ 920.624976] ? asm_exc_invalid_op+0x16/0x20\n[ 920.625203] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.625474] ? rxe_completer+0x329/0xcc0 [rdma_rxe]\n[ 920.625749] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.626037] rxe_requester+0x625/0xde0 [rdma_rxe]\n[ 920.626310] ? rxe_cq_post+0xe2/0x180 [rdma_rxe]\n[ 920.626583] ? do_complete+0x18d/0x220 [rdma_rxe]\n[ 920.626812] ? rxe_completer+0x1a3/0xcc0 [rdma_rxe]\n[ 920.627050] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.627285] tasklet_action_common.constprop.0+0xa4/0x120\n[ 920.627522] handle_softirqs+0xc2/0x250\n[ 920.627728] ? sort_range+0x20/0x20\n[ 920.627942] run_ksoftirqd+0x1f/0x30\n[ 920.628158] smpboot_thread_fn+0xc7/0x1b0\n[ 920.628334] kthread+0xd6/0x100\n[ 920.628504] ? kthread_complete_and_exit+0x20/0x20\n[ 920.628709] ret_from_fork+0x1f/0x30\n[ 920.628892] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53229",
"url": "https://www.suse.com/security/cve/CVE-2024-53229"
},
{
"category": "external",
"summary": "SUSE Bug 1234905 for CVE-2024-53229",
"url": "https://bugzilla.suse.com/1234905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53229"
},
{
"cve": "CVE-2024-53230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference,\nso check NULL for cppc_get_cpu_cost().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53230",
"url": "https://www.suse.com/security/cve/CVE-2024-53230"
},
{
"category": "external",
"summary": "SUSE Bug 1235976 for CVE-2024-53230",
"url": "https://bugzilla.suse.com/1235976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53230"
},
{
"cve": "CVE-2024-53231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53231",
"url": "https://www.suse.com/security/cve/CVE-2024-53231"
},
{
"category": "external",
"summary": "SUSE Bug 1235977 for CVE-2024-53231",
"url": "https://bugzilla.suse.com/1235977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53231"
},
{
"cve": "CVE-2024-53232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Implement blocking domain\n\nThis fixes a crash when surprise hot-unplugging a PCI device. This crash\nhappens because during hot-unplug __iommu_group_set_domain_nofail()\nattaching the default domain fails when the platform no longer\nrecognizes the device as it has already been removed and we end up with\na NULL domain pointer and UAF. This is exactly the case referred to in\nthe second comment in __iommu_device_set_domain() and just as stated\nthere if we can instead attach the blocking domain the UAF is prevented\nas this can handle the already removed device. Implement the blocking\ndomain to use this handling. With this change, the crash is fixed but\nwe still hit a warning attempting to change DMA ownership on a blocked\ndevice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53232",
"url": "https://www.suse.com/security/cve/CVE-2024-53232"
},
{
"category": "external",
"summary": "SUSE Bug 1235050 for CVE-2024-53232",
"url": "https://bugzilla.suse.com/1235050"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53232"
},
{
"cve": "CVE-2024-53233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nunicode: Fix utf8_load() error path\n\nutf8_load() requests the symbol \"utf8_data_table\" and then checks if the\nrequested UTF-8 version is supported. If it\u0027s unsupported, it tries to\nput the data table using symbol_put(). If an unsupported version is\nrequested, symbol_put() fails like this:\n\n kernel BUG at kernel/module/main.c:786!\n RIP: 0010:__symbol_put+0x93/0xb0\n Call Trace:\n \u003cTASK\u003e\n ? __die_body.cold+0x19/0x27\n ? die+0x2e/0x50\n ? do_trap+0xca/0x110\n ? do_error_trap+0x65/0x80\n ? __symbol_put+0x93/0xb0\n ? exc_invalid_op+0x51/0x70\n ? __symbol_put+0x93/0xb0\n ? asm_exc_invalid_op+0x1a/0x20\n ? __pfx_cmp_name+0x10/0x10\n ? __symbol_put+0x93/0xb0\n ? __symbol_put+0x62/0xb0\n utf8_load+0xf8/0x150\n\nThat happens because symbol_put() expects the unique string that\nidentify the symbol, instead of a pointer to the loaded symbol. Fix that\nby using such string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53233",
"url": "https://www.suse.com/security/cve/CVE-2024-53233"
},
{
"category": "external",
"summary": "SUSE Bug 1235046 for CVE-2024-53233",
"url": "https://bugzilla.suse.com/1235046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53233"
},
{
"cve": "CVE-2024-53234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53234"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: handle NONHEAD !delta[1] lclusters gracefully\n\nsyzbot reported a WARNING in iomap_iter_done:\n iomap_fiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80\n ioctl_fiemap fs/ioctl.c:220 [inline]\n\nGenerally, NONHEAD lclusters won\u0027t have delta[1]==0, except for crafted\nimages and filesystems created by pre-1.0 mkfs versions.\n\nPreviously, it would immediately bail out if delta[1]==0, which led to\ninadequate decompressed lengths (thus FIEMAP is impacted). Treat it as\ndelta[1]=1 to work around these legacy mkfs versions.\n\n`lclusterbits \u003e 14` is illegal for compact indexes, error out too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53234",
"url": "https://www.suse.com/security/cve/CVE-2024-53234"
},
{
"category": "external",
"summary": "SUSE Bug 1235045 for CVE-2024-53234",
"url": "https://bugzilla.suse.com/1235045"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53234"
},
{
"cve": "CVE-2024-53236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Free skb when TX metadata options are invalid\n\nWhen a new skb is allocated for transmitting an xsk descriptor, i.e., for\nevery non-multibuf descriptor or the first frag of a multibuf descriptor,\nbut the descriptor is later found to have invalid options set for the TX\nmetadata, the new skb is never freed. This can leak skbs until the send\nbuffer is full which makes sending more packets impossible.\n\nFix this by freeing the skb in the error path if we are currently dealing\nwith the first frag, i.e., an skb allocated in this iteration of\nxsk_build_skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53236",
"url": "https://www.suse.com/security/cve/CVE-2024-53236"
},
{
"category": "external",
"summary": "SUSE Bug 1235000 for CVE-2024-53236",
"url": "https://bugzilla.suse.com/1235000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53236"
},
{
"cve": "CVE-2024-53237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53237"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix use-after-free in device_for_each_child()\n\nSyzbot has reported the following KASAN splat:\n\nBUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0\nRead of size 8 at addr ffff88801f605308 by task kbnepd bnep0/4980\n\nCPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Not tainted 6.12.0-rc4-00161-gae90f6a6170d #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x100/0x190\n ? device_for_each_child+0x18f/0x1a0\n print_report+0x13a/0x4cb\n ? __virt_addr_valid+0x5e/0x590\n ? __phys_addr+0xc6/0x150\n ? device_for_each_child+0x18f/0x1a0\n kasan_report+0xda/0x110\n ? device_for_each_child+0x18f/0x1a0\n ? __pfx_dev_memalloc_noio+0x10/0x10\n device_for_each_child+0x18f/0x1a0\n ? __pfx_device_for_each_child+0x10/0x10\n pm_runtime_set_memalloc_noio+0xf2/0x180\n netdev_unregister_kobject+0x1ed/0x270\n unregister_netdevice_many_notify+0x123c/0x1d80\n ? __mutex_trylock_common+0xde/0x250\n ? __pfx_unregister_netdevice_many_notify+0x10/0x10\n ? trace_contention_end+0xe6/0x140\n ? __mutex_lock+0x4e7/0x8f0\n ? __pfx_lock_acquire.part.0+0x10/0x10\n ? rcu_is_watching+0x12/0xc0\n ? unregister_netdev+0x12/0x30\n unregister_netdevice_queue+0x30d/0x3f0\n ? __pfx_unregister_netdevice_queue+0x10/0x10\n ? __pfx_down_write+0x10/0x10\n unregister_netdev+0x1c/0x30\n bnep_session+0x1fb3/0x2ab0\n ? __pfx_bnep_session+0x10/0x10\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_woken_wake_function+0x10/0x10\n ? __kthread_parkme+0x132/0x200\n ? __pfx_bnep_session+0x10/0x10\n ? kthread+0x13a/0x370\n ? __pfx_bnep_session+0x10/0x10\n kthread+0x2b7/0x370\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x48/0x80\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 4974:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n __kmalloc_noprof+0x1d1/0x440\n hci_alloc_dev_priv+0x1d/0x2820\n __vhci_create_device+0xef/0x7d0\n vhci_write+0x2c7/0x480\n vfs_write+0x6a0/0xfc0\n ksys_write+0x12f/0x260\n do_syscall_64+0xc7/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 4979:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x4f/0x70\n kfree+0x141/0x490\n hci_release_dev+0x4d9/0x600\n bt_host_release+0x6a/0xb0\n device_release+0xa4/0x240\n kobject_put+0x1ec/0x5a0\n put_device+0x1f/0x30\n vhci_release+0x81/0xf0\n __fput+0x3f6/0xb30\n task_work_run+0x151/0x250\n do_exit+0xa79/0x2c30\n do_group_exit+0xd5/0x2a0\n get_signal+0x1fcd/0x2210\n arch_do_signal_or_restart+0x93/0x780\n syscall_exit_to_user_mode+0x140/0x290\n do_syscall_64+0xd4/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nIn \u0027hci_conn_del_sysfs()\u0027, \u0027device_unregister()\u0027 may be called when\nan underlying (kobject) reference counter is greater than 1. This\nmeans that reparenting (happened when the device is actually freed)\nis delayed and, during that delay, parent controller device (hciX)\nmay be deleted. Since the latter may create a dangling pointer to\nfreed parent, avoid that scenario by reparenting to NULL explicitly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53237",
"url": "https://www.suse.com/security/cve/CVE-2024-53237"
},
{
"category": "external",
"summary": "SUSE Bug 1235007 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "external",
"summary": "SUSE Bug 1235008 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53237"
},
{
"cve": "CVE-2024-53239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: Release resources at card release\n\nThe current 6fire code tries to release the resources right after the\ncall of usb6fire_chip_abort(). But at this moment, the card object\nmight be still in use (as we\u0027re calling snd_card_free_when_closed()).\n\nFor avoid potential UAFs, move the release of resources to the card\u0027s\nprivate_free instead of the manual call of usb6fire_chip_destroy() at\nthe USB disconnect callback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53239",
"url": "https://www.suse.com/security/cve/CVE-2024-53239"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235054 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "external",
"summary": "SUSE Bug 1235055 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-53239"
},
{
"cve": "CVE-2024-53240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53240"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netfront: fix crash when removing device\n\nWhen removing a netfront device directly after a suspend/resume cycle\nit might happen that the queues have not been setup again, causing a\ncrash during the attempt to stop the queues another time.\n\nFix that by checking the queues are existing before trying to stop\nthem.\n\nThis is XSA-465 / CVE-2024-53240.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53240",
"url": "https://www.suse.com/security/cve/CVE-2024-53240"
},
{
"category": "external",
"summary": "SUSE Bug 1234281 for CVE-2024-53240",
"url": "https://bugzilla.suse.com/1234281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53240"
},
{
"cve": "CVE-2024-53241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53241"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: don\u0027t do PV iret hypercall through hypercall page\n\nInstead of jumping to the Xen hypercall page for doing the iret\nhypercall, directly code the required sequence in xen-asm.S.\n\nThis is done in preparation of no longer using hypercall page at all,\nas it has shown to cause problems with speculation mitigations.\n\nThis is part of XSA-466 / CVE-2024-53241.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53241",
"url": "https://www.suse.com/security/cve/CVE-2024-53241"
},
{
"category": "external",
"summary": "SUSE Bug 1234282 for CVE-2024-53241",
"url": "https://bugzilla.suse.com/1234282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53241"
},
{
"cve": "CVE-2024-53685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: give up on paths longer than PATH_MAX\n\nIf the full path to be built by ceph_mdsc_build_path() happens to be\nlonger than PATH_MAX, then this function will enter an endless (retry)\nloop, effectively blocking the whole task. Most of the machine\nbecomes unusable, making this a very simple and effective DoS\nvulnerability.\n\nI cannot imagine why this retry was ever implemented, but it seems\nrather useless and harmful to me. Let\u0027s remove it and fail with\nENAMETOOLONG instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53685",
"url": "https://www.suse.com/security/cve/CVE-2024-53685"
},
{
"category": "external",
"summary": "SUSE Bug 1235720 for CVE-2024-53685",
"url": "https://bugzilla.suse.com/1235720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53685"
},
{
"cve": "CVE-2024-53690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: prevent use of deleted inode\n\nsyzbot reported a WARNING in nilfs_rmdir. [1]\n\nBecause the inode bitmap is corrupted, an inode with an inode number that\nshould exist as a \".nilfs\" file was reassigned by nilfs_mkdir for \"file0\",\ncausing an inode duplication during execution. And this causes an\nunderflow of i_nlink in rmdir operations.\n\nThe inode is used twice by the same task to unmount and remove directories\n\".nilfs\" and \"file0\", it trigger warning in nilfs_rmdir.\n\nAvoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means\nthat this inode has been deleted, and iput is executed to reclaim it.\n\n[1]\nWARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407\n...\nCall Trace:\n \u003cTASK\u003e\n nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342\n vfs_rmdir+0x3a3/0x510 fs/namei.c:4394\n do_rmdir+0x3b5/0x580 fs/namei.c:4453\n __do_sys_rmdir fs/namei.c:4472 [inline]\n __se_sys_rmdir fs/namei.c:4470 [inline]\n __x64_sys_rmdir+0x47/0x50 fs/namei.c:4470\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53690",
"url": "https://www.suse.com/security/cve/CVE-2024-53690"
},
{
"category": "external",
"summary": "SUSE Bug 1235842 for CVE-2024-53690",
"url": "https://bugzilla.suse.com/1235842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-53690"
},
{
"cve": "CVE-2024-54680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-54680"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-54680",
"url": "https://www.suse.com/security/cve/CVE-2024-54680"
},
{
"category": "external",
"summary": "SUSE Bug 1235723 for CVE-2024-54680",
"url": "https://bugzilla.suse.com/1235723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-54680"
},
{
"cve": "CVE-2024-55639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55639"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: renesas: rswitch: avoid use-after-put for a device tree node\n\nThe device tree node saved in the rswitch_device structure is used at\nseveral driver locations. So passing this node to of_node_put() after\nthe first use is wrong.\n\nMove of_node_put() for this node to exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55639",
"url": "https://www.suse.com/security/cve/CVE-2024-55639"
},
{
"category": "external",
"summary": "SUSE Bug 1235737 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "external",
"summary": "SUSE Bug 1235738 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-55639"
},
{
"cve": "CVE-2024-55881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Play nice with protected guests in complete_hypercall_exit()\n\nUse is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit\nhypercall when completing said hypercall. For guests with protected state,\ne.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit\nmode as the vCPU state needed to detect 64-bit mode is unavailable.\n\nHacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE\nhypercall via VMGEXIT trips the WARN:\n\n ------------[ cut here ]------------\n WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm]\n Modules linked in: kvm_amd kvm ... [last unloaded: kvm]\n CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat #470\n Hardware name: Google Astoria/astoria, BIOS 0.20240617.0-0 06/17/2024\n RIP: 0010:complete_hypercall_exit+0x44/0xe0 [kvm]\n Call Trace:\n \u003cTASK\u003e\n kvm_arch_vcpu_ioctl_run+0x2400/0x2720 [kvm]\n kvm_vcpu_ioctl+0x54f/0x630 [kvm]\n __se_sys_ioctl+0x6b/0xc0\n do_syscall_64+0x83/0x160\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55881",
"url": "https://www.suse.com/security/cve/CVE-2024-55881"
},
{
"category": "external",
"summary": "SUSE Bug 1235745 for CVE-2024-55881",
"url": "https://bugzilla.suse.com/1235745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-55881"
},
{
"cve": "CVE-2024-55916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet\n\nIf the KVP (or VSS) daemon starts before the VMBus channel\u0027s ringbuffer is\nfully initialized, we can hit the panic below:\n\nhv_utils: Registering HyperV Utility Driver\nhv_vmbus: registering driver hv_utils\n...\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1\nRIP: 0010:hv_pkt_iter_first+0x12/0xd0\nCall Trace:\n...\n vmbus_recvpacket\n hv_kvp_onchannelcallback\n vmbus_on_event\n tasklet_action_common\n tasklet_action\n handle_softirqs\n irq_exit_rcu\n sysvec_hyperv_stimer0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_hyperv_stimer0\n...\n kvp_register_done\n hvt_op_read\n vfs_read\n ksys_read\n __x64_sys_read\n\nThis can happen because the KVP/VSS channel callback can be invoked\neven before the channel is fully opened:\n1) as soon as hv_kvp_init() -\u003e hvutil_transport_init() creates\n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and\nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the\nfile (which is handled by kvp_on_msg() -\u003ekvp_handle_handshake()) and\nreading the file for the driver\u0027s response, which is handled by\nhvt_op_read(), which calls hvt-\u003eon_read(), i.e. kvp_register_done().\n\n2) the problem with kvp_register_done() is that it can cause the\nchannel callback to be called even before the channel is fully opened,\nand when the channel callback is starting to run, util_probe()-\u003e\nvmbus_open() may have not initialized the ringbuffer yet, so the\ncallback can hit the panic of NULL pointer dereference.\n\nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in\n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we\nunload and reload the driver hv_utils, and run the daemon manually within\nthe 10 seconds.\n\nFix the panic by reordering the steps in util_probe() so the char dev\nentry used by the KVP or VSS daemon is not created until after\nvmbus_open() has completed. This reordering prevents the race condition\nfrom happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55916",
"url": "https://www.suse.com/security/cve/CVE-2024-55916"
},
{
"category": "external",
"summary": "SUSE Bug 1235747 for CVE-2024-55916",
"url": "https://bugzilla.suse.com/1235747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-55916"
},
{
"cve": "CVE-2024-56369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/modes: Avoid divide by zero harder in drm_mode_vrefresh()\n\ndrm_mode_vrefresh() is trying to avoid divide by zero\nby checking whether htotal or vtotal are zero. But we may\nstill end up with a div-by-zero of vtotal*htotal*...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56369",
"url": "https://www.suse.com/security/cve/CVE-2024-56369"
},
{
"category": "external",
"summary": "SUSE Bug 1235750 for CVE-2024-56369",
"url": "https://bugzilla.suse.com/1235750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56369"
},
{
"cve": "CVE-2024-56372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56372"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: fix tun_napi_alloc_frags()\n\nsyzbot reported the following crash [1]\n\nIssue came with the blamed commit. Instead of going through\nall the iov components, we keep using the first one\nand end up with a malformed skb.\n\n[1]\n\nkernel BUG at net/core/skbuff.c:2849 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6230 Comm: syz-executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\n RIP: 0010:__pskb_pull_tail+0x1568/0x1570 net/core/skbuff.c:2848\nCode: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 92 96 74 f8 e9 25 f1 ff ff e8 e8 ae 09 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 d9 ae 09 f8 90 \u003c0f\u003e 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90\nRSP: 0018:ffffc90004cbef30 EFLAGS: 00010293\nRAX: ffffffff8995c347 RBX: 00000000fffffff2 RCX: ffff88802cf45a00\nRDX: 0000000000000000 RSI: 00000000fffffff2 RDI: 0000000000000000\nRBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c\nR10: dffffc0000000000 R11: ffffed100fbe185d R12: ffff888076e85d50\nR13: ffff888076e85c80 R14: ffff888076e85cf4 R15: ffff888076e85c80\nFS: 00007f0dca6ea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f0dca6ead58 CR3: 00000000119da000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_cow_data+0x2da/0xcb0 net/core/skbuff.c:5284\n tipc_aead_decrypt net/tipc/crypto.c:894 [inline]\n tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.c:1844\n tipc_rcv+0x57e/0x12a0 net/tipc/node.c:2109\n tipc_l2_rcv_msg+0x2bd/0x450 net/tipc/bearer.c:668\n __netif_receive_skb_list_ptype net/core/dev.c:5720 [inline]\n __netif_receive_skb_list_core+0x8b7/0x980 net/core/dev.c:5762\n __netif_receive_skb_list net/core/dev.c:5814 [inline]\n netif_receive_skb_list_internal+0xa51/0xe30 net/core/dev.c:5905\n gro_normal_list include/net/gro.h:515 [inline]\n napi_complete_done+0x2b5/0x870 net/core/dev.c:6256\n napi_complete include/linux/netdevice.h:567 [inline]\n tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2057\n do_iter_readv_writev+0x600/0x880\n vfs_writev+0x376/0xba0 fs/read_write.c:1050\n do_writev+0x1b6/0x360 fs/read_write.c:1096\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56372",
"url": "https://www.suse.com/security/cve/CVE-2024-56372"
},
{
"category": "external",
"summary": "SUSE Bug 1235753 for CVE-2024-56372",
"url": "https://bugzilla.suse.com/1235753"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56372"
},
{
"cve": "CVE-2024-56531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56531"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThis patch also splits the code to the disconnect and the free phases;\nthe former is called immediately at the USB disconnect callback while\nthe latter is called from the card destructor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56531",
"url": "https://www.suse.com/security/cve/CVE-2024-56531"
},
{
"category": "external",
"summary": "SUSE Bug 1235057 for CVE-2024-56531",
"url": "https://bugzilla.suse.com/1235057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56531"
},
{
"cve": "CVE-2024-56532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: us122l: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThe loop of us122l-\u003emmap_count check is dropped as well. The check is\nuseless for the asynchronous operation with *_when_closed().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56532",
"url": "https://www.suse.com/security/cve/CVE-2024-56532"
},
{
"category": "external",
"summary": "SUSE Bug 1235059 for CVE-2024-56532",
"url": "https://bugzilla.suse.com/1235059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56533"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56533",
"url": "https://www.suse.com/security/cve/CVE-2024-56533"
},
{
"category": "external",
"summary": "SUSE Bug 1235053 for CVE-2024-56533",
"url": "https://bugzilla.suse.com/1235053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56536"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cw1200: Fix potential NULL dereference\n\nA recent refactoring was identified by static analysis to\ncause a potential NULL dereference, fix this!",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56536",
"url": "https://www.suse.com/security/cve/CVE-2024-56536"
},
{
"category": "external",
"summary": "SUSE Bug 1234911 for CVE-2024-56536",
"url": "https://bugzilla.suse.com/1234911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56536"
},
{
"cve": "CVE-2024-56538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56538"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: zynqmp_kms: Unplug DRM device before removal\n\nPrevent userspace accesses to the DRM device from causing\nuse-after-frees by unplugging the device before we remove it. This\ncauses any further userspace accesses to result in an error without\nfurther calls into this driver\u0027s internals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56538",
"url": "https://www.suse.com/security/cve/CVE-2024-56538"
},
{
"category": "external",
"summary": "SUSE Bug 1235051 for CVE-2024-56538",
"url": "https://bugzilla.suse.com/1235051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56538"
},
{
"cve": "CVE-2024-56539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56539"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()\n\nReplace one-element array with a flexible-array member in `struct\nmwifiex_ie_types_wildcard_ssid_params` to fix the following warning\non a MT8173 Chromebook (mt8173-elm-hana):\n\n[ 356.775250] ------------[ cut here ]------------\n[ 356.784543] memcpy: detected field-spanning write (size 6) of single field \"wildcard_ssid_tlv-\u003essid\" at drivers/net/wireless/marvell/mwifiex/scan.c:904 (size 1)\n[ 356.813403] WARNING: CPU: 3 PID: 742 at drivers/net/wireless/marvell/mwifiex/scan.c:904 mwifiex_scan_networks+0x4fc/0xf28 [mwifiex]\n\nThe \"(size 6)\" above is exactly the length of the SSID of the network\nthis device was connected to. The source of the warning looks like:\n\n ssid_len = user_scan_in-\u003essid_list[i].ssid_len;\n [...]\n memcpy(wildcard_ssid_tlv-\u003essid,\n user_scan_in-\u003essid_list[i].ssid, ssid_len);\n\nThere is a #define WILDCARD_SSID_TLV_MAX_SIZE that uses sizeof() on this\nstruct, but it already didn\u0027t account for the size of the one-element\narray, so it doesn\u0027t need to be changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56539",
"url": "https://www.suse.com/security/cve/CVE-2024-56539"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234963 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "external",
"summary": "SUSE Bug 1234964 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56539"
},
{
"cve": "CVE-2024-56543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56543"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Skip Rx TID cleanup for self peer\n\nDuring peer create, dp setup for the peer is done where Rx TID is\nupdated for all the TIDs. Peer object for self peer will not go through\ndp setup.\n\nWhen core halts, dp cleanup is done for all the peers. While cleanup,\nrx_tid::ab is accessed which causes below stack trace for self peer.\n\nWARNING: CPU: 6 PID: 12297 at drivers/net/wireless/ath/ath12k/dp_rx.c:851\nCall Trace:\n__warn+0x7b/0x1a0\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nreport_bug+0x10b/0x200\nhandle_bug+0x3f/0x70\nexc_invalid_op+0x13/0x60\nasm_exc_invalid_op+0x16/0x20\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nath12k_dp_rx_frags_cleanup+0xca/0xe0 [ath12k]\nath12k_dp_rx_peer_tid_cleanup+0x39/0xa0 [ath12k]\nath12k_mac_peer_cleanup_all+0x61/0x100 [ath12k]\nath12k_core_halt+0x3b/0x100 [ath12k]\nath12k_core_reset+0x494/0x4c0 [ath12k]\n\nsta object in peer will be updated when remote peer is created. Hence\nuse peer::sta to detect the self peer and skip the cleanup.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56543",
"url": "https://www.suse.com/security/cve/CVE-2024-56543"
},
{
"category": "external",
"summary": "SUSE Bug 1235065 for CVE-2024-56543",
"url": "https://bugzilla.suse.com/1235065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56543"
},
{
"cve": "CVE-2024-56546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56546"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()\n\nIf we fail to allocate memory for cb_data by kmalloc, the memory\nallocation for eve_data is never freed, add the missing kfree()\nin the error handling path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56546",
"url": "https://www.suse.com/security/cve/CVE-2024-56546"
},
{
"category": "external",
"summary": "SUSE Bug 1235070 for CVE-2024-56546",
"url": "https://bugzilla.suse.com/1235070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56546"
},
{
"cve": "CVE-2024-56548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56548"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: don\u0027t query the device logical block size multiple times\n\nDevices block sizes may change. One of these cases is a loop device by\nusing ioctl LOOP_SET_BLOCK_SIZE.\n\nWhile this may cause other issues like IO being rejected, in the case of\nhfsplus, it will allocate a block by using that size and potentially write\nout-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the\nlatter function reads a different io_size.\n\nUsing a new min_io_size initally set to sb_min_blocksize works for the\npurposes of the original fix, since it will be set to the max between\nHFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the\nmax between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not\ninitialized.\n\nTested by mounting an hfsplus filesystem with loop block sizes 512, 1024\nand 4096.\n\nThe produced KASAN report before the fix looks like this:\n\n[ 419.944641] ==================================================================\n[ 419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a\n[ 419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678\n[ 419.947612]\n[ 419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84\n[ 419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[ 419.950035] Call Trace:\n[ 419.950384] \u003cTASK\u003e\n[ 419.950676] dump_stack_lvl+0x57/0x78\n[ 419.951212] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.951830] print_report+0x14c/0x49e\n[ 419.952361] ? __virt_addr_valid+0x267/0x278\n[ 419.952979] ? kmem_cache_debug_flags+0xc/0x1d\n[ 419.953561] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.954231] kasan_report+0x89/0xb0\n[ 419.954748] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955367] hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955948] ? __pfx_hfsplus_read_wrapper+0x10/0x10\n[ 419.956618] ? do_raw_spin_unlock+0x59/0x1a9\n[ 419.957214] ? _raw_spin_unlock+0x1a/0x2e\n[ 419.957772] hfsplus_fill_super+0x348/0x1590\n[ 419.958355] ? hlock_class+0x4c/0x109\n[ 419.958867] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.959499] ? __pfx_string+0x10/0x10\n[ 419.960006] ? lock_acquire+0x3e2/0x454\n[ 419.960532] ? bdev_name.constprop.0+0xce/0x243\n[ 419.961129] ? __pfx_bdev_name.constprop.0+0x10/0x10\n[ 419.961799] ? pointer+0x3f0/0x62f\n[ 419.962277] ? __pfx_pointer+0x10/0x10\n[ 419.962761] ? vsnprintf+0x6c4/0xfba\n[ 419.963178] ? __pfx_vsnprintf+0x10/0x10\n[ 419.963621] ? setup_bdev_super+0x376/0x3b3\n[ 419.964029] ? snprintf+0x9d/0xd2\n[ 419.964344] ? __pfx_snprintf+0x10/0x10\n[ 419.964675] ? lock_acquired+0x45c/0x5e9\n[ 419.965016] ? set_blocksize+0x139/0x1c1\n[ 419.965381] ? sb_set_blocksize+0x6d/0xae\n[ 419.965742] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.966179] mount_bdev+0x12f/0x1bf\n[ 419.966512] ? __pfx_mount_bdev+0x10/0x10\n[ 419.966886] ? vfs_parse_fs_string+0xce/0x111\n[ 419.967293] ? __pfx_vfs_parse_fs_string+0x10/0x10\n[ 419.967702] ? __pfx_hfsplus_mount+0x10/0x10\n[ 419.968073] legacy_get_tree+0x104/0x178\n[ 419.968414] vfs_get_tree+0x86/0x296\n[ 419.968751] path_mount+0xba3/0xd0b\n[ 419.969157] ? __pfx_path_mount+0x10/0x10\n[ 419.969594] ? kmem_cache_free+0x1e2/0x260\n[ 419.970311] do_mount+0x99/0xe0\n[ 419.970630] ? __pfx_do_mount+0x10/0x10\n[ 419.971008] __do_sys_mount+0x199/0x1c9\n[ 419.971397] do_syscall_64+0xd0/0x135\n[ 419.971761] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 419.972233] RIP: 0033:0x7c3cb812972e\n[ 419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48\n[ 419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5\n[ 419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e\n[ 419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56548",
"url": "https://www.suse.com/security/cve/CVE-2024-56548"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235073 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "external",
"summary": "SUSE Bug 1235074 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56548"
},
{
"cve": "CVE-2024-56549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56549"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: Fix NULL pointer dereference in object-\u003efile\n\nAt present, the object-\u003efile has the NULL pointer dereference problem in\nondemand-mode. The root cause is that the allocated fd and object-\u003efile\nlifetime are inconsistent, and the user-space invocation to anon_fd uses\nobject-\u003efile. Following is the process that triggers the issue:\n\n\t [write fd]\t\t\t\t[umount]\ncachefiles_ondemand_fd_write_iter\n\t\t\t\t fscache_cookie_state_machine\n\t\t\t\t\t cachefiles_withdraw_cookie\n if (!file) return -ENOBUFS\n\t\t\t\t\t cachefiles_clean_up_object\n\t\t\t\t\t cachefiles_unmark_inode_in_use\n\t\t\t\t\t fput(object-\u003efile)\n\t\t\t\t\t object-\u003efile = NULL\n // file NULL pointer dereference!\n __cachefiles_write(..., file, ...)\n\nFix this issue by add an additional reference count to the object-\u003efile\nbefore write/llseek, and decrement after it finished.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56549",
"url": "https://www.suse.com/security/cve/CVE-2024-56549"
},
{
"category": "external",
"summary": "SUSE Bug 1234912 for CVE-2024-56549",
"url": "https://bugzilla.suse.com/1234912"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56549"
},
{
"cve": "CVE-2024-56551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56551"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix usage slab after free\n\n[ +0.000021] BUG: KASAN: slab-use-after-free in drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000027] Read of size 8 at addr ffff8881b8605f88 by task amd_pci_unplug/2147\n\n[ +0.000023] CPU: 6 PID: 2147 Comm: amd_pci_unplug Not tainted 6.10.0+ #1\n[ +0.000016] Hardware name: ASUS System Product Name/ROG STRIX B550-F GAMING (WI-FI), BIOS 1401 12/03/2020\n[ +0.000016] Call Trace:\n[ +0.000008] \u003cTASK\u003e\n[ +0.000009] dump_stack_lvl+0x76/0xa0\n[ +0.000017] print_report+0xce/0x5f0\n[ +0.000017] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] ? srso_return_thunk+0x5/0x5f\n[ +0.000015] ? kasan_complete_mode_report_info+0x72/0x200\n[ +0.000016] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] kasan_report+0xbe/0x110\n[ +0.000015] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000023] __asan_report_load8_noabort+0x14/0x30\n[ +0.000014] drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000016] ? __pfx_drm_sched_entity_flush+0x10/0x10 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? enable_work+0x124/0x220\n[ +0.000015] ? __pfx_enable_work+0x10/0x10\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? free_large_kmalloc+0x85/0xf0\n[ +0.000016] drm_sched_entity_destroy+0x18/0x30 [gpu_sched]\n[ +0.000020] amdgpu_vce_sw_fini+0x55/0x170 [amdgpu]\n[ +0.000735] ? __kasan_check_read+0x11/0x20\n[ +0.000016] vce_v4_0_sw_fini+0x80/0x110 [amdgpu]\n[ +0.000726] amdgpu_device_fini_sw+0x331/0xfc0 [amdgpu]\n[ +0.000679] ? mutex_unlock+0x80/0xe0\n[ +0.000017] ? __pfx_amdgpu_device_fini_sw+0x10/0x10 [amdgpu]\n[ +0.000662] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? mutex_unlock+0x80/0xe0\n[ +0.000016] amdgpu_driver_release_kms+0x16/0x80 [amdgpu]\n[ +0.000663] drm_minor_release+0xc9/0x140 [drm]\n[ +0.000081] drm_release+0x1fd/0x390 [drm]\n[ +0.000082] __fput+0x36c/0xad0\n[ +0.000018] __fput_sync+0x3c/0x50\n[ +0.000014] __x64_sys_close+0x7d/0xe0\n[ +0.000014] x64_sys_call+0x1bc6/0x2680\n[ +0.000014] do_syscall_64+0x70/0x130\n[ +0.000014] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit_to_user_mode+0x60/0x190\n[ +0.000015] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit+0x43/0x50\n[ +0.000012] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? exc_page_fault+0x7c/0x110\n[ +0.000015] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ +0.000014] RIP: 0033:0x7ffff7b14f67\n[ +0.000013] Code: ff e8 0d 16 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 03 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 73 ba f7 ff\n[ +0.000026] RSP: 002b:00007fffffffe378 EFLAGS: 00000246 ORIG_RAX: 0000000000000003\n[ +0.000019] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffff7b14f67\n[ +0.000014] RDX: 0000000000000000 RSI: 00007ffff7f6f47a RDI: 0000000000000003\n[ +0.000014] RBP: 00007fffffffe3a0 R08: 0000555555569890 R09: 0000000000000000\n[ +0.000014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffffffe5c8\n[ +0.000013] R13: 00005555555552a9 R14: 0000555555557d48 R15: 00007ffff7ffd040\n[ +0.000020] \u003c/TASK\u003e\n\n[ +0.000016] Allocated by task 383 on cpu 7 at 26.880319s:\n[ +0.000014] kasan_save_stack+0x28/0x60\n[ +0.000008] kasan_save_track+0x18/0x70\n[ +0.000007] kasan_save_alloc_info+0x38/0x60\n[ +0.000007] __kasan_kmalloc+0xc1/0xd0\n[ +0.000007] kmalloc_trace_noprof+0x180/0x380\n[ +0.000007] drm_sched_init+0x411/0xec0 [gpu_sched]\n[ +0.000012] amdgpu_device_init+0x695f/0xa610 [amdgpu]\n[ +0.000658] amdgpu_driver_load_kms+0x1a/0x120 [amdgpu]\n[ +0.000662] amdgpu_pci_p\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56551",
"url": "https://www.suse.com/security/cve/CVE-2024-56551"
},
{
"category": "external",
"summary": "SUSE Bug 1235075 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "external",
"summary": "SUSE Bug 1235102 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56551"
},
{
"cve": "CVE-2024-56557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56557"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer\n\nThe AD7923 was updated to support devices with 8 channels, but the size\nof tx_buf and ring_xfer was not increased accordingly, leading to a\npotential buffer overflow in ad7923_update_scan_mode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56557",
"url": "https://www.suse.com/security/cve/CVE-2024-56557"
},
{
"category": "external",
"summary": "SUSE Bug 1235122 for CVE-2024-56557",
"url": "https://bugzilla.suse.com/1235122"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56557"
},
{
"cve": "CVE-2024-56558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56558"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: make sure exp active before svc_export_show\n\nThe function `e_show` was called with protection from RCU. This only\nensures that `exp` will not be freed. Therefore, the reference count for\n`exp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `exp_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `exp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 3 PID: 819 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n...\nCall Trace:\n \u003cTASK\u003e\n e_show+0x20b/0x230 [nfsd]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56558",
"url": "https://www.suse.com/security/cve/CVE-2024-56558"
},
{
"category": "external",
"summary": "SUSE Bug 1235100 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "external",
"summary": "SUSE Bug 1243648 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1243648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56558"
},
{
"cve": "CVE-2024-56562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56562"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()\n\nif (dev-\u003eboardinfo \u0026\u0026 dev-\u003eboardinfo-\u003einit_dyn_addr)\n ^^^ here check \"init_dyn_addr\"\n\ti3c_bus_set_addr_slot_status(\u0026master-\u003ebus, dev-\u003einfo.dyn_addr, ...)\n\t\t\t\t\t\t ^^^^\n\t\t\t\t\t\t\tfree \"dyn_addr\"\nFix copy/paste error \"dyn_addr\" by replacing it with \"init_dyn_addr\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56562",
"url": "https://www.suse.com/security/cve/CVE-2024-56562"
},
{
"category": "external",
"summary": "SUSE Bug 1234930 for CVE-2024-56562",
"url": "https://bugzilla.suse.com/1234930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56562"
},
{
"cve": "CVE-2024-56566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56566"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slub: Avoid list corruption when removing a slab from the full list\n\nBoot with slub_debug=UFPZ.\n\nIf allocated object failed in alloc_consistency_checks, all objects of\nthe slab will be marked as used, and then the slab will be removed from\nthe partial list.\n\nWhen an object belonging to the slab got freed later, the remove_full()\nfunction is called. Because the slab is neither on the partial list nor\non the full list, it eventually lead to a list corruption (actually a\nlist poison being detected).\n\nSo we need to mark and isolate the slab page with metadata corruption,\ndo not put it back in circulation.\n\nBecause the debug caches avoid all the fastpaths, reusing the frozen bit\nto mark slab page with metadata corruption seems to be fine.\n\n[ 4277.385669] list_del corruption, ffffea00044b3e50-\u003enext is LIST_POISON1 (dead000000000100)\n[ 4277.387023] ------------[ cut here ]------------\n[ 4277.387880] kernel BUG at lib/list_debug.c:56!\n[ 4277.388680] invalid opcode: 0000 [#1] PREEMPT SMP PTI\n[ 4277.389562] CPU: 5 PID: 90 Comm: kworker/5:1 Kdump: loaded Tainted: G OE 6.6.1-1 #1\n[ 4277.392113] Workqueue: xfs-inodegc/vda1 xfs_inodegc_worker [xfs]\n[ 4277.393551] RIP: 0010:__list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.394518] Code: 48 91 82 e8 37 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 28 49 91 82 e8 26 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 58 49 91\n[ 4277.397292] RSP: 0018:ffffc90000333b38 EFLAGS: 00010082\n[ 4277.398202] RAX: 000000000000004e RBX: ffffea00044b3e50 RCX: 0000000000000000\n[ 4277.399340] RDX: 0000000000000002 RSI: ffffffff828f8715 RDI: 00000000ffffffff\n[ 4277.400545] RBP: ffffea00044b3e40 R08: 0000000000000000 R09: ffffc900003339f0\n[ 4277.401710] R10: 0000000000000003 R11: ffffffff82d44088 R12: ffff888112cf9910\n[ 4277.402887] R13: 0000000000000001 R14: 0000000000000001 R15: ffff8881000424c0\n[ 4277.404049] FS: 0000000000000000(0000) GS:ffff88842fd40000(0000) knlGS:0000000000000000\n[ 4277.405357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4277.406389] CR2: 00007f2ad0b24000 CR3: 0000000102a3a006 CR4: 00000000007706e0\n[ 4277.407589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 4277.408780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 4277.410000] PKRU: 55555554\n[ 4277.410645] Call Trace:\n[ 4277.411234] \u003cTASK\u003e\n[ 4277.411777] ? die+0x32/0x80\n[ 4277.412439] ? do_trap+0xd6/0x100\n[ 4277.413150] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.414158] ? do_error_trap+0x6a/0x90\n[ 4277.414948] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.415915] ? exc_invalid_op+0x4c/0x60\n[ 4277.416710] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.417675] ? asm_exc_invalid_op+0x16/0x20\n[ 4277.418482] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.419466] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.420410] free_to_partial_list+0x515/0x5e0\n[ 4277.421242] ? xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.422298] xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.423316] ? xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.424383] xfs_bmap_del_extent_delay+0x4fe/0x7d0 [xfs]\n[ 4277.425490] __xfs_bunmapi+0x50d/0x840 [xfs]\n[ 4277.426445] xfs_itruncate_extents_flags+0x13a/0x490 [xfs]\n[ 4277.427553] xfs_inactive_truncate+0xa3/0x120 [xfs]\n[ 4277.428567] xfs_inactive+0x22d/0x290 [xfs]\n[ 4277.429500] xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.430479] process_one_work+0x171/0x340\n[ 4277.431227] worker_thread+0x277/0x390\n[ 4277.431962] ? __pfx_worker_thread+0x10/0x10\n[ 4277.432752] kthread+0xf0/0x120\n[ 4277.433382] ? __pfx_kthread+0x10/0x10\n[ 4277.434134] ret_from_fork+0x2d/0x50\n[ 4277.434837] ? __pfx_kthread+0x10/0x10\n[ 4277.435566] ret_from_fork_asm+0x1b/0x30\n[ 4277.436280] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56566",
"url": "https://www.suse.com/security/cve/CVE-2024-56566"
},
{
"category": "external",
"summary": "SUSE Bug 1235033 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "external",
"summary": "SUSE Bug 1235034 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56566"
},
{
"cve": "CVE-2024-56567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56567"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nad7780: fix division by zero in ad7780_write_raw()\n\nIn the ad7780_write_raw() , val2 can be zero, which might lead to a\ndivision by zero error in DIV_ROUND_CLOSEST(). The ad7780_write_raw()\nis based on iio_info\u0027s write_raw. While val is explicitly declared that\ncan be zero (in read mode), val2 is not specified to be non-zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56567",
"url": "https://www.suse.com/security/cve/CVE-2024-56567"
},
{
"category": "external",
"summary": "SUSE Bug 1234916 for CVE-2024-56567",
"url": "https://bugzilla.suse.com/1234916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56567"
},
{
"cve": "CVE-2024-56568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56568"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Defer probe of clients after smmu device bound\n\nNull pointer dereference occurs due to a race between smmu\ndriver probe and client driver probe, when of_dma_configure()\nfor client is called after the iommu_device_register() for smmu driver\nprobe has executed but before the driver_bound() for smmu driver\nhas been called.\n\nFollowing is how the race occurs:\n\nT1:Smmu device probe\t\tT2: Client device probe\n\nreally_probe()\narm_smmu_device_probe()\niommu_device_register()\n\t\t\t\t\treally_probe()\n\t\t\t\t\tplatform_dma_configure()\n\t\t\t\t\tof_dma_configure()\n\t\t\t\t\tof_dma_configure_id()\n\t\t\t\t\tof_iommu_configure()\n\t\t\t\t\tiommu_probe_device()\n\t\t\t\t\tiommu_init_device()\n\t\t\t\t\tarm_smmu_probe_device()\n\t\t\t\t\tarm_smmu_get_by_fwnode()\n\t\t\t\t\t\tdriver_find_device_by_fwnode()\n\t\t\t\t\t\tdriver_find_device()\n\t\t\t\t\t\tnext_device()\n\t\t\t\t\t\tklist_next()\n\t\t\t\t\t\t /* null ptr\n\t\t\t\t\t\t assigned to smmu */\n\t\t\t\t\t/* null ptr dereference\n\t\t\t\t\t while smmu-\u003estreamid_mask */\ndriver_bound()\n\tklist_add_tail()\n\nWhen this null smmu pointer is dereferenced later in\narm_smmu_probe_device, the device crashes.\n\nFix this by deferring the probe of the client device\nuntil the smmu device has bound to the arm smmu driver.\n\n[will: Add comment]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56568",
"url": "https://www.suse.com/security/cve/CVE-2024-56568"
},
{
"category": "external",
"summary": "SUSE Bug 1235032 for CVE-2024-56568",
"url": "https://bugzilla.suse.com/1235032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56568"
},
{
"cve": "CVE-2024-56569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix regression with module command in stack_trace_filter\n\nWhen executing the following command:\n\n # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter\n\nThe current mod command causes a null pointer dereference. While commit\n0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\")\nhas addressed part of the issue, it left a corner case unhandled, which still\nresults in a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56569",
"url": "https://www.suse.com/security/cve/CVE-2024-56569"
},
{
"category": "external",
"summary": "SUSE Bug 1235031 for CVE-2024-56569",
"url": "https://bugzilla.suse.com/1235031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: Filter invalid inodes with missing lookup function\n\nAdd a check to the ovl_dentry_weird() function to prevent the\nprocessing of directory inodes that lack the lookup function.\nThis is important because such inodes can cause errors in overlayfs\nwhen passed to the lowerstack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56570",
"url": "https://www.suse.com/security/cve/CVE-2024-56570"
},
{
"category": "external",
"summary": "SUSE Bug 1235035 for CVE-2024-56570",
"url": "https://bugzilla.suse.com/1235035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56571"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56571",
"url": "https://www.suse.com/security/cve/CVE-2024-56571"
},
{
"category": "external",
"summary": "SUSE Bug 1235037 for CVE-2024-56571",
"url": "https://bugzilla.suse.com/1235037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56571"
},
{
"cve": "CVE-2024-56572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56572"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()\n\nThe buffer in the loop should be released under the exception path,\notherwise there may be a memory leak here.\n\nTo mitigate this, free the buffer when allegro_alloc_buffer fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56572",
"url": "https://www.suse.com/security/cve/CVE-2024-56572"
},
{
"category": "external",
"summary": "SUSE Bug 1235043 for CVE-2024-56572",
"url": "https://bugzilla.suse.com/1235043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56572"
},
{
"cve": "CVE-2024-56573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56573"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/libstub: Free correct pointer on failure\n\ncmdline_ptr is an out parameter, which is not allocated by the function\nitself, and likely points into the caller\u0027s stack.\n\ncmdline refers to the pool allocation that should be freed when cleaning\nup after a failure, so pass this instead to free_pool().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56573",
"url": "https://www.suse.com/security/cve/CVE-2024-56573"
},
{
"category": "external",
"summary": "SUSE Bug 1235042 for CVE-2024-56573",
"url": "https://bugzilla.suse.com/1235042"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56573"
},
{
"cve": "CVE-2024-56574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56574"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ts2020: fix null-ptr-deref in ts2020_probe()\n\nKASAN reported a null-ptr-deref issue when executing the following\ncommand:\n\n # echo ts2020 0x20 \u003e /sys/bus/i2c/devices/i2c-0/new_device\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]\n RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809\n RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010\n RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6\n R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790\n R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001\n FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n ts2020_probe+0xad/0xe10 [ts2020]\n i2c_device_probe+0x421/0xb40\n really_probe+0x266/0x850\n ...\n\nThe cause of the problem is that when using sysfs to dynamically register\nan i2c device, there is no platform data, but the probe process of ts2020\nneeds to use platform data, resulting in a null pointer being accessed.\n\nSolve this problem by adding checks to platform data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56574",
"url": "https://www.suse.com/security/cve/CVE-2024-56574"
},
{
"category": "external",
"summary": "SUSE Bug 1235040 for CVE-2024-56574",
"url": "https://bugzilla.suse.com/1235040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56575"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Ensure power suppliers be suspended before detach them\n\nThe power suppliers are always requested to suspend asynchronously,\ndev_pm_domain_detach() requires the caller to ensure proper\nsynchronization of this function with power management callbacks.\notherwise the detach may led to kernel panic, like below:\n\n[ 1457.107934] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000040\n[ 1457.116777] Mem abort info:\n[ 1457.119589] ESR = 0x0000000096000004\n[ 1457.123358] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 1457.128692] SET = 0, FnV = 0\n[ 1457.131764] EA = 0, S1PTW = 0\n[ 1457.134920] FSC = 0x04: level 0 translation fault\n[ 1457.139812] Data abort info:\n[ 1457.142707] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 1457.148196] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 1457.153256] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 1457.158563] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001138b6000\n[ 1457.165000] [0000000000000040] pgd=0000000000000000, p4d=0000000000000000\n[ 1457.171792] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 1457.178045] Modules linked in: v4l2_jpeg wave6_vpu_ctrl(-) [last unloaded: mxc_jpeg_encdec]\n[ 1457.186383] CPU: 0 PID: 51938 Comm: kworker/0:3 Not tainted 6.6.36-gd23d64eea511 #66\n[ 1457.194112] Hardware name: NXP i.MX95 19X19 board (DT)\n[ 1457.199236] Workqueue: pm pm_runtime_work\n[ 1457.203247] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 1457.210188] pc : genpd_runtime_suspend+0x20/0x290\n[ 1457.214886] lr : __rpm_callback+0x48/0x1d8\n[ 1457.218968] sp : ffff80008250bc50\n[ 1457.222270] x29: ffff80008250bc50 x28: 0000000000000000 x27: 0000000000000000\n[ 1457.229394] x26: 0000000000000000 x25: 0000000000000008 x24: 00000000000f4240\n[ 1457.236518] x23: 0000000000000000 x22: ffff00008590f0e4 x21: 0000000000000008\n[ 1457.243642] x20: ffff80008099c434 x19: ffff00008590f000 x18: ffffffffffffffff\n[ 1457.250766] x17: 5300326563697665 x16: 645f676e696c6f6f x15: 63343a6d726f6674\n[ 1457.257890] x14: 0000000000000004 x13: 00000000000003a4 x12: 0000000000000002\n[ 1457.265014] x11: 0000000000000000 x10: 0000000000000a60 x9 : ffff80008250bbb0\n[ 1457.272138] x8 : ffff000092937200 x7 : ffff0003fdf6af80 x6 : 0000000000000000\n[ 1457.279262] x5 : 00000000410fd050 x4 : 0000000000200000 x3 : 0000000000000000\n[ 1457.286386] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008590f000\n[ 1457.293510] Call trace:\n[ 1457.295946] genpd_runtime_suspend+0x20/0x290\n[ 1457.300296] __rpm_callback+0x48/0x1d8\n[ 1457.304038] rpm_callback+0x6c/0x78\n[ 1457.307515] rpm_suspend+0x10c/0x570\n[ 1457.311077] pm_runtime_work+0xc4/0xc8\n[ 1457.314813] process_one_work+0x138/0x248\n[ 1457.318816] worker_thread+0x320/0x438\n[ 1457.322552] kthread+0x110/0x114\n[ 1457.325767] ret_from_fork+0x10/0x20",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56575",
"url": "https://www.suse.com/security/cve/CVE-2024-56575"
},
{
"category": "external",
"summary": "SUSE Bug 1235039 for CVE-2024-56575",
"url": "https://bugzilla.suse.com/1235039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56575"
},
{
"cve": "CVE-2024-56576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56576"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: tc358743: Fix crash in the probe error path when using polling\n\nIf an error occurs in the probe() function, we should remove the polling\ntimer that was alarmed earlier, otherwise the timer is called with\narguments that are already freed, which results in a crash.\n\n------------[ cut here ]------------\nWARNING: CPU: 3 PID: 0 at kernel/time/timer.c:1830 __run_timers+0x244/0x268\nModules linked in:\nCPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0 #226\nHardware name: Diasom DS-RK3568-SOM-EVB (DT)\npstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __run_timers+0x244/0x268\nlr : __run_timers+0x1d4/0x268\nsp : ffffff80eff2baf0\nx29: ffffff80eff2bb50 x28: 7fffffffffffffff x27: ffffff80eff2bb00\nx26: ffffffc080f669c0 x25: ffffff80efef6bf0 x24: ffffff80eff2bb00\nx23: 0000000000000000 x22: dead000000000122 x21: 0000000000000000\nx20: ffffff80efef6b80 x19: ffffff80041c8bf8 x18: ffffffffffffffff\nx17: ffffffc06f146000 x16: ffffff80eff27dc0 x15: 000000000000003e\nx14: 0000000000000000 x13: 00000000000054da x12: 0000000000000000\nx11: 00000000000639c0 x10: 000000000000000c x9 : 0000000000000009\nx8 : ffffff80eff2cb40 x7 : ffffff80eff2cb40 x6 : ffffff8002bee480\nx5 : ffffffc080cb2220 x4 : ffffffc080cb2150 x3 : 00000000000f4240\nx2 : 0000000000000102 x1 : ffffff80eff2bb00 x0 : ffffff80041c8bf0\nCall trace:\n __run_timers+0x244/0x268\n timer_expire_remote+0x50/0x68\n tmigr_handle_remote+0x388/0x39c\n run_timer_softirq+0x38/0x44\n handle_softirqs+0x138/0x298\n __do_softirq+0x14/0x20\n ____do_softirq+0x10/0x1c\n call_on_irq_stack+0x24/0x4c\n do_softirq_own_stack+0x1c/0x2c\n irq_exit_rcu+0x9c/0xcc\n el1_interrupt+0x48/0xc0\n el1h_64_irq_handler+0x18/0x24\n el1h_64_irq+0x7c/0x80\n default_idle_call+0x34/0x68\n do_idle+0x23c/0x294\n cpu_startup_entry+0x38/0x3c\n secondary_start_kernel+0x128/0x160\n __secondary_switched+0xb8/0xbc\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56576",
"url": "https://www.suse.com/security/cve/CVE-2024-56576"
},
{
"category": "external",
"summary": "SUSE Bug 1235019 for CVE-2024-56576",
"url": "https://bugzilla.suse.com/1235019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56576"
},
{
"cve": "CVE-2024-56577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56577"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-jpeg: Fix null-ptr-deref during unload module\n\nThe workqueue should be destroyed in mtk_jpeg_core.c since commit\n09aea13ecf6f (\"media: mtk-jpeg: refactor some variables\"), otherwise\nthe below calltrace can be easily triggered.\n\n[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023\n[ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]\n...\n[ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17\n...\n[ 677.882838] pc : destroy_workqueue+0x3c/0x770\n[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.884314] sp : ffff80008ad974f0\n[ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070\n[ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690\n[ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff800000000000\n[ 677.887515] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800085397ac0\n[ 677.888438] x17: 0000000000000000 x16: ffff8000801b87c8 x15: 1ffff000115b2e10\n[ 677.889361] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d\n[ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90\n[ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001\n[ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000\n[ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118\n[ 677.893977] Call trace:\n[ 677.894297] destroy_workqueue+0x3c/0x770\n[ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.895677] devm_action_release+0x50/0x90\n[ 677.896211] release_nodes+0xe8/0x170\n[ 677.896688] devres_release_all+0xf8/0x178\n[ 677.897219] device_unbind_cleanup+0x24/0x170\n[ 677.897785] device_release_driver_internal+0x35c/0x480\n[ 677.898461] device_release_driver+0x20/0x38\n...\n[ 677.912665] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56577",
"url": "https://www.suse.com/security/cve/CVE-2024-56577"
},
{
"category": "external",
"summary": "SUSE Bug 1235112 for CVE-2024-56577",
"url": "https://bugzilla.suse.com/1235112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56577"
},
{
"cve": "CVE-2024-56578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Set video drvdata before register video device\n\nThe video drvdata should be set before the video device is registered,\notherwise video_drvdata() may return NULL in the open() file ops, and led\nto oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56578",
"url": "https://www.suse.com/security/cve/CVE-2024-56578"
},
{
"category": "external",
"summary": "SUSE Bug 1235115 for CVE-2024-56578",
"url": "https://bugzilla.suse.com/1235115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56578"
},
{
"cve": "CVE-2024-56582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56582"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free in btrfs_encoded_read_endio()\n\nShinichiro reported the following use-after free that sometimes is\nhappening in our CI system when running fstests\u0027 btrfs/284 on a TCMU\nrunner device:\n\n BUG: KASAN: slab-use-after-free in lock_release+0x708/0x780\n Read of size 8 at addr ffff888106a83f18 by task kworker/u80:6/219\n\n CPU: 8 UID: 0 PID: 219 Comm: kworker/u80:6 Not tainted 6.12.0-rc6-kts+ #15\n Hardware name: Supermicro Super Server/X11SPi-TF, BIOS 3.3 02/21/2020\n Workqueue: btrfs-endio btrfs_end_bio_work [btrfs]\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x6e/0xa0\n ? lock_release+0x708/0x780\n print_report+0x174/0x505\n ? lock_release+0x708/0x780\n ? __virt_addr_valid+0x224/0x410\n ? lock_release+0x708/0x780\n kasan_report+0xda/0x1b0\n ? lock_release+0x708/0x780\n ? __wake_up+0x44/0x60\n lock_release+0x708/0x780\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_do_raw_spin_lock+0x10/0x10\n ? lock_is_held_type+0x9a/0x110\n _raw_spin_unlock_irqrestore+0x1f/0x60\n __wake_up+0x44/0x60\n btrfs_encoded_read_endio+0x14b/0x190 [btrfs]\n btrfs_check_read_bio+0x8d9/0x1360 [btrfs]\n ? lock_release+0x1b0/0x780\n ? trace_lock_acquire+0x12f/0x1a0\n ? __pfx_btrfs_check_read_bio+0x10/0x10 [btrfs]\n ? process_one_work+0x7e3/0x1460\n ? lock_acquire+0x31/0xc0\n ? process_one_work+0x7e3/0x1460\n process_one_work+0x85c/0x1460\n ? __pfx_process_one_work+0x10/0x10\n ? assign_work+0x16c/0x240\n worker_thread+0x5e6/0xfc0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x2c3/0x3a0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x31/0x70\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\n Allocated by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n btrfs_encoded_read_regular_fill_pages+0x16c/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x70\n __kasan_slab_free+0x4f/0x70\n kfree+0x143/0x490\n btrfs_encoded_read_regular_fill_pages+0x531/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n The buggy address belongs to the object at ffff888106a83f00\n which belongs to the cache kmalloc-rnd-07-96 of size 96\n The buggy address is located 24 bytes inside of\n freed 96-byte region [ffff888106a83f00, ffff888106a83f60)\n\n The buggy address belongs to the physical page:\n page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888106a83800 pfn:0x106a83\n flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff)\n page_type: f5(slab)\n raw: 0017ffffc0000000 ffff888100053680 ffffea0004917200 0000000000000004\n raw: ffff888106a83800 0000000080200019 00000001f5000000 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff888106a83e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a83e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n \u003effff888106a83f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ^\n ffff888106a83f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a84000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ==================================================================\n\nFurther analyzing the trace and \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56582",
"url": "https://www.suse.com/security/cve/CVE-2024-56582"
},
{
"category": "external",
"summary": "SUSE Bug 1235128 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "external",
"summary": "SUSE Bug 1235129 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56582"
},
{
"cve": "CVE-2024-56584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56584"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/tctx: work around xa_store() allocation error issue\n\nsyzbot triggered the following WARN_ON:\n\nWARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51\n\nwhich is the\n\nWARN_ON_ONCE(!xa_empty(\u0026tctx-\u003exa));\n\nsanity check in __io_uring_free() when a io_uring_task is going through\nits final put. The syzbot test case includes injecting memory allocation\nfailures, and it very much looks like xa_store() can fail one of its\nmemory allocations and end up with -\u003ehead being non-NULL even though no\nentries exist in the xarray.\n\nUntil this issue gets sorted out, work around it by attempting to\niterate entries in our xarray, and WARN_ON_ONCE() if one is found.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56584",
"url": "https://www.suse.com/security/cve/CVE-2024-56584"
},
{
"category": "external",
"summary": "SUSE Bug 1235117 for CVE-2024-56584",
"url": "https://bugzilla.suse.com/1235117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56584"
},
{
"cve": "CVE-2024-56587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56587"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex\n\nThere is NULL pointer issue observed if from Process A where hid device\nbeing added which results in adding a led_cdev addition and later a\nanother call to access of led_cdev attribute from Process B can result\nin NULL pointer issue.\n\nUse mutex led_cdev-\u003eled_access to protect access to led-\u003ecdev and its\nattribute inside brightness_show() and max_brightness_show() and also\nupdate the comment for mutex that it should be used to protect the led\nclass device fields.\n\n\tProcess A \t\t\t\tProcess B\n\n kthread+0x114\n worker_thread+0x244\n process_scheduled_works+0x248\n uhid_device_add_worker+0x24\n hid_add_device+0x120\n device_add+0x268\n bus_probe_device+0x94\n device_initial_probe+0x14\n __device_attach+0xfc\n bus_for_each_drv+0x10c\n __device_attach_driver+0x14c\n driver_probe_device+0x3c\n __driver_probe_device+0xa0\n really_probe+0x190\n hid_device_probe+0x130\n ps_probe+0x990\n ps_led_register+0x94\n devm_led_classdev_register_ext+0x58\n led_classdev_register_ext+0x1f8\n device_create_with_groups+0x48\n device_create_groups_vargs+0xc8\n device_add+0x244\n kobject_uevent+0x14\n kobject_uevent_env[jt]+0x224\n mutex_unlock[jt]+0xc4\n __mutex_unlock_slowpath+0xd4\n wake_up_q+0x70\n try_to_wake_up[jt]+0x48c\n preempt_schedule_common+0x28\n __schedule+0x628\n __switch_to+0x174\n\t\t\t\t\t\tel0t_64_sync+0x1a8/0x1ac\n\t\t\t\t\t\tel0t_64_sync_handler+0x68/0xbc\n\t\t\t\t\t\tel0_svc+0x38/0x68\n\t\t\t\t\t\tdo_el0_svc+0x1c/0x28\n\t\t\t\t\t\tel0_svc_common+0x80/0xe0\n\t\t\t\t\t\tinvoke_syscall+0x58/0x114\n\t\t\t\t\t\t__arm64_sys_read+0x1c/0x2c\n\t\t\t\t\t\tksys_read+0x78/0xe8\n\t\t\t\t\t\tvfs_read+0x1e0/0x2c8\n\t\t\t\t\t\tkernfs_fop_read_iter+0x68/0x1b4\n\t\t\t\t\t\tseq_read_iter+0x158/0x4ec\n\t\t\t\t\t\tkernfs_seq_show+0x44/0x54\n\t\t\t\t\t\tsysfs_kf_seq_show+0xb4/0x130\n\t\t\t\t\t\tdev_attr_show+0x38/0x74\n\t\t\t\t\t\tbrightness_show+0x20/0x4c\n\t\t\t\t\t\tdualshock4_led_get_brightness+0xc/0x74\n\n[ 3313.874295][ T4013] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[ 3313.874301][ T4013] Mem abort info:\n[ 3313.874303][ T4013] ESR = 0x0000000096000006\n[ 3313.874305][ T4013] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 3313.874307][ T4013] SET = 0, FnV = 0\n[ 3313.874309][ T4013] EA = 0, S1PTW = 0\n[ 3313.874311][ T4013] FSC = 0x06: level 2 translation fault\n[ 3313.874313][ T4013] Data abort info:\n[ 3313.874314][ T4013] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000\n[ 3313.874316][ T4013] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 3313.874318][ T4013] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 3313.874320][ T4013] user pgtable: 4k pages, 39-bit VAs, pgdp=00000008f2b0a000\n..\n\n[ 3313.874332][ T4013] Dumping ftrace buffer:\n[ 3313.874334][ T4013] (ftrace buffer empty)\n..\n..\n[ dd3313.874639][ T4013] CPU: 6 PID: 4013 Comm: InputReader\n[ 3313.874648][ T4013] pc : dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874653][ T4013] lr : led_update_brightness+0x38/0x60\n[ 3313.874656][ T4013] sp : ffffffc0b910bbd0\n..\n..\n[ 3313.874685][ T4013] Call trace:\n[ 3313.874687][ T4013] dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874690][ T4013] brightness_show+0x20/0x4c\n[ 3313.874692][ T4013] dev_attr_show+0x38/0x74\n[ 3313.874696][ T4013] sysfs_kf_seq_show+0xb4/0x130\n[ 3313.874700][ T4013] kernfs_seq_show+0x44/0x54\n[ 3313.874703][ T4013] seq_read_iter+0x158/0x4ec\n[ 3313.874705][ T4013] kernfs_fop_read_iter+0x68/0x1b4\n[ 3313.874708][ T4013] vfs_read+0x1e0/0x2c8\n[ 3313.874711][ T4013] ksys_read+0x78/0xe8\n[ 3313.874714][ T4013] __arm64_sys_read+0x1c/0x2c\n[ 3313.874718][ T4013] invoke_syscall+0x58/0x114\n[ 3313.874721][ T4013] el0_svc_common+0x80/0xe0\n[ 3313.874724][ T4013] do_el0_svc+0x1c/0x28\n[ 3313.874727][ T4013] el0_svc+0x38/0x68\n[ 3313.874730][ T4013] el0t_64_sync_handler+0x68/0xbc\n[ 3313.874732][ T4013] el0t_64_sync+0x1a8/0x1ac",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56587",
"url": "https://www.suse.com/security/cve/CVE-2024-56587"
},
{
"category": "external",
"summary": "SUSE Bug 1235125 for CVE-2024-56587",
"url": "https://bugzilla.suse.com/1235125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56587"
},
{
"cve": "CVE-2024-56588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56588"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Create all dump files during debugfs initialization\n\nFor the current debugfs of hisi_sas, after user triggers dump, the\ndriver allocate memory space to save the register information and create\ndebugfs files to display the saved information. In this process, the\ndebugfs files created after each dump.\n\nTherefore, when the dump is triggered while the driver is unbind, the\nfollowing hang occurs:\n\n[67840.853907] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[67840.862947] Mem abort info:\n[67840.865855] ESR = 0x0000000096000004\n[67840.869713] EC = 0x25: DABT (current EL), IL = 32 bits\n[67840.875125] SET = 0, FnV = 0\n[67840.878291] EA = 0, S1PTW = 0\n[67840.881545] FSC = 0x04: level 0 translation fault\n[67840.886528] Data abort info:\n[67840.889524] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[67840.895117] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[67840.900284] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[67840.905709] user pgtable: 4k pages, 48-bit VAs, pgdp=0000002803a1f000\n[67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000\n[67840.919177] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[67840.996435] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[67841.003628] pc : down_write+0x30/0x98\n[67841.007546] lr : start_creating.part.0+0x60/0x198\n[67841.012495] sp : ffff8000b979ba20\n[67841.016046] x29: ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40\n[67841.023412] x26: 0000000000000012 x25: ffff20202b355ae8 x24: ffff20202b35a8c8\n[67841.030779] x23: ffffa36877928208 x22: ffffa368b4972240 x21: ffff8000b979bb18\n[67841.038147] x20: ffff00281dc1e3c0 x19: fffffffffffffffe x18: 0000000000000020\n[67841.045515] x17: 0000000000000000 x16: ffffa368b128a530 x15: ffffffffffffffff\n[67841.052888] x14: ffff8000b979bc18 x13: ffffffffffffffff x12: ffff8000b979bb18\n[67841.060263] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa368b1289b18\n[67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6 : 00000000000003a9\n[67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001\n[67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0\n[67841.089759] Call trace:\n[67841.092456] down_write+0x30/0x98\n[67841.096017] start_creating.part.0+0x60/0x198\n[67841.100613] debugfs_create_dir+0x48/0x1f8\n[67841.104950] debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw]\n[67841.111447] debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw]\n[67841.118111] debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw]\n[67841.125115] full_proxy_write+0x68/0xc8\n[67841.129175] vfs_write+0xd8/0x3f0\n[67841.132708] ksys_write+0x70/0x108\n[67841.136317] __arm64_sys_write+0x24/0x38\n[67841.140440] invoke_syscall+0x50/0x128\n[67841.144385] el0_svc_common.constprop.0+0xc8/0xf0\n[67841.149273] do_el0_svc+0x24/0x38\n[67841.152773] el0_svc+0x38/0xd8\n[67841.156009] el0t_64_sync_handler+0xc0/0xc8\n[67841.160361] el0t_64_sync+0x1a4/0x1a8\n[67841.164189] Code: b9000882 d2800002 d2800023 f9800011 (c85ffc05)\n[67841.170443] ---[ end trace 0000000000000000 ]---\n\nTo fix this issue, create all directories and files during debugfs\ninitialization. In this way, the driver only needs to allocate memory\nspace to save information each time the user triggers dumping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56588",
"url": "https://www.suse.com/security/cve/CVE-2024-56588"
},
{
"category": "external",
"summary": "SUSE Bug 1235123 for CVE-2024-56588",
"url": "https://bugzilla.suse.com/1235123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56588"
},
{
"cve": "CVE-2024-56589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56589"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Add cond_resched() for no forced preemption model\n\nFor no forced preemption model kernel, in the scenario where the\nexpander is connected to 12 high performance SAS SSDs, the following\ncall trace may occur:\n\n[ 214.409199][ C240] watchdog: BUG: soft lockup - CPU#240 stuck for 22s! [irq/149-hisi_sa:3211]\n[ 214.568533][ C240] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)\n[ 214.575224][ C240] pc : fput_many+0x8c/0xdc\n[ 214.579480][ C240] lr : fput+0x1c/0xf0\n[ 214.583302][ C240] sp : ffff80002de2b900\n[ 214.587298][ C240] x29: ffff80002de2b900 x28: ffff1082aa412000\n[ 214.593291][ C240] x27: ffff3062a0348c08 x26: ffff80003a9f6000\n[ 214.599284][ C240] x25: ffff1062bbac5c40 x24: 0000000000001000\n[ 214.605277][ C240] x23: 000000000000000a x22: 0000000000000001\n[ 214.611270][ C240] x21: 0000000000001000 x20: 0000000000000000\n[ 214.617262][ C240] x19: ffff3062a41ae580 x18: 0000000000010000\n[ 214.623255][ C240] x17: 0000000000000001 x16: ffffdb3a6efe5fc0\n[ 214.629248][ C240] x15: ffffffffffffffff x14: 0000000003ffffff\n[ 214.635241][ C240] x13: 000000000000ffff x12: 000000000000029c\n[ 214.641234][ C240] x11: 0000000000000006 x10: ffff80003a9f7fd0\n[ 214.647226][ C240] x9 : ffffdb3a6f0482fc x8 : 0000000000000001\n[ 214.653219][ C240] x7 : 0000000000000002 x6 : 0000000000000080\n[ 214.659212][ C240] x5 : ffff55480ee9b000 x4 : fffffde7f94c6554\n[ 214.665205][ C240] x3 : 0000000000000002 x2 : 0000000000000020\n[ 214.671198][ C240] x1 : 0000000000000021 x0 : ffff3062a41ae5b8\n[ 214.677191][ C240] Call trace:\n[ 214.680320][ C240] fput_many+0x8c/0xdc\n[ 214.684230][ C240] fput+0x1c/0xf0\n[ 214.687707][ C240] aio_complete_rw+0xd8/0x1fc\n[ 214.692225][ C240] blkdev_bio_end_io+0x98/0x140\n[ 214.696917][ C240] bio_endio+0x160/0x1bc\n[ 214.701001][ C240] blk_update_request+0x1c8/0x3bc\n[ 214.705867][ C240] scsi_end_request+0x3c/0x1f0\n[ 214.710471][ C240] scsi_io_completion+0x7c/0x1a0\n[ 214.715249][ C240] scsi_finish_command+0x104/0x140\n[ 214.720200][ C240] scsi_softirq_done+0x90/0x180\n[ 214.724892][ C240] blk_mq_complete_request+0x5c/0x70\n[ 214.730016][ C240] scsi_mq_done+0x48/0xac\n[ 214.734194][ C240] sas_scsi_task_done+0xbc/0x16c [libsas]\n[ 214.739758][ C240] slot_complete_v3_hw+0x260/0x760 [hisi_sas_v3_hw]\n[ 214.746185][ C240] cq_thread_v3_hw+0xbc/0x190 [hisi_sas_v3_hw]\n[ 214.752179][ C240] irq_thread_fn+0x34/0xa4\n[ 214.756435][ C240] irq_thread+0xc4/0x130\n[ 214.760520][ C240] kthread+0x108/0x13c\n[ 214.764430][ C240] ret_from_fork+0x10/0x18\n\nThis is because in the hisi_sas driver, both the hardware interrupt\nhandler and the interrupt thread are executed on the same CPU. In the\nperformance test scenario, function irq_wait_for_interrupt() will always\nreturn 0 if lots of interrupts occurs and the CPU will be continuously\nconsumed. As a result, the CPU cannot run the watchdog thread. When the\nwatchdog time exceeds the specified time, call trace occurs.\n\nTo fix it, add cond_resched() to execute the watchdog thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56589",
"url": "https://www.suse.com/security/cve/CVE-2024-56589"
},
{
"category": "external",
"summary": "SUSE Bug 1235241 for CVE-2024-56589",
"url": "https://bugzilla.suse.com/1235241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56589"
},
{
"cve": "CVE-2024-56590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56590"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix not checking skb length on hci_acldata_packet\n\nThis fixes not checking if skb really contains an ACL header otherwise\nthe code may attempt to access some uninitilized/invalid memory past the\nvalid skb-\u003edata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56590",
"url": "https://www.suse.com/security/cve/CVE-2024-56590"
},
{
"category": "external",
"summary": "SUSE Bug 1235038 for CVE-2024-56590",
"url": "https://bugzilla.suse.com/1235038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56590"
},
{
"cve": "CVE-2024-56593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56593"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()\n\nThis patch fixes a NULL pointer dereference bug in brcmfmac that occurs\nwhen a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs\nare sent from the pkt queue.\n\nThe problem is the number of entries in the pre-allocated sgtable, it is\nnents = max(rxglom_size, txglom_size) + max(rxglom_size, txglom_size) \u003e\u003e 4 + 1.\nGiven the default [rt]xglom_size=32 it\u0027s actually 35 which is too small.\nWorst case, the pkt queue can end up with 64 SKBs. This occurs when a new SKB\nis added for each original SKB if tailroom isn\u0027t enough to hold tail_pad.\nAt least one sg entry is needed for each SKB. So, eventually the \"skb_queue_walk loop\"\nin brcmf_sdiod_sglist_rw may run out of sg entries. This makes sg_next return\nNULL and this causes the oops.\n\nThe patch sets nents to max(rxglom_size, txglom_size) * 2 to be able handle\nthe worst-case.\nBtw. this requires only 64-35=29 * 16 (or 20 if CONFIG_NEED_SG_DMA_LENGTH) = 464\nadditional bytes of memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56593",
"url": "https://www.suse.com/security/cve/CVE-2024-56593"
},
{
"category": "external",
"summary": "SUSE Bug 1235252 for CVE-2024-56593",
"url": "https://bugzilla.suse.com/1235252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56594"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: set the right AMDGPU sg segment limitation\n\nThe driver needs to set the correct max_segment_size;\notherwise debug_dma_map_sg() will complain about the\nover-mapping of the AMDGPU sg length as following:\n\nWARNING: CPU: 6 PID: 1964 at kernel/dma/debug.c:1178 debug_dma_map_sg+0x2dc/0x370\n[ 364.049444] Modules linked in: veth amdgpu(OE) amdxcp drm_exec gpu_sched drm_buddy drm_ttm_helper ttm(OE) drm_suballoc_helper drm_display_helper drm_kms_helper i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc amd_atl intel_rapl_msr intel_rapl_common sunrpc sch_fq_codel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd binfmt_misc snd_hda_codec snd_pci_acp6x snd_hda_core snd_acp_config snd_hwdep snd_soc_acpi kvm_amd snd_pcm kvm snd_seq_midi snd_seq_midi_event crct10dif_pclmul ghash_clmulni_intel sha512_ssse3 snd_rawmidi sha256_ssse3 sha1_ssse3 aesni_intel snd_seq nls_iso8859_1 crypto_simd snd_seq_device cryptd snd_timer rapl input_leds snd\n[ 364.049532] ipmi_devintf wmi_bmof ccp serio_raw k10temp sp5100_tco soundcore ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 364.049576] CPU: 6 PID: 1964 Comm: rocminfo Tainted: G OE 6.10.0-custom #492\n[ 364.049579] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 364.049582] RIP: 0010:debug_dma_map_sg+0x2dc/0x370\n[ 364.049585] Code: 89 4d b8 e8 36 b1 86 00 8b 4d b8 48 8b 55 b0 44 8b 45 a8 4c 8b 4d a0 48 89 c6 48 c7 c7 00 4b 74 bc 4c 89 4d b8 e8 b4 73 f3 ff \u003c0f\u003e 0b 4c 8b 4d b8 8b 15 c8 2c b8 01 85 d2 0f 85 ee fd ff ff 8b 05\n[ 364.049588] RSP: 0018:ffff9ca600b57ac0 EFLAGS: 00010286\n[ 364.049590] RAX: 0000000000000000 RBX: ffff88b7c132b0c8 RCX: 0000000000000027\n[ 364.049592] RDX: ffff88bb0f521688 RSI: 0000000000000001 RDI: ffff88bb0f521680\n[ 364.049594] RBP: ffff9ca600b57b20 R08: 000000000000006f R09: ffff9ca600b57930\n[ 364.049596] R10: ffff9ca600b57928 R11: ffffffffbcb46328 R12: 0000000000000000\n[ 364.049597] R13: 0000000000000001 R14: ffff88b7c19c0700 R15: ffff88b7c9059800\n[ 364.049599] FS: 00007fb2d3516e80(0000) GS:ffff88bb0f500000(0000) knlGS:0000000000000000\n[ 364.049601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 364.049603] CR2: 000055610bd03598 CR3: 00000001049f6000 CR4: 0000000000350ef0\n[ 364.049605] Call Trace:\n[ 364.049607] \u003cTASK\u003e\n[ 364.049609] ? show_regs+0x6d/0x80\n[ 364.049614] ? __warn+0x8c/0x140\n[ 364.049618] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049621] ? report_bug+0x193/0x1a0\n[ 364.049627] ? handle_bug+0x46/0x80\n[ 364.049631] ? exc_invalid_op+0x1d/0x80\n[ 364.049635] ? asm_exc_invalid_op+0x1f/0x30\n[ 364.049642] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049647] __dma_map_sg_attrs+0x90/0xe0\n[ 364.049651] dma_map_sgtable+0x25/0x40\n[ 364.049654] amdgpu_bo_move+0x59a/0x850 [amdgpu]\n[ 364.049935] ? srso_return_thunk+0x5/0x5f\n[ 364.049939] ? amdgpu_ttm_tt_populate+0x5d/0xc0 [amdgpu]\n[ 364.050095] ttm_bo_handle_move_mem+0xc3/0x180 [ttm]\n[ 364.050103] ttm_bo_validate+0xc1/0x160 [ttm]\n[ 364.050108] ? amdgpu_ttm_tt_get_user_pages+0xe5/0x1b0 [amdgpu]\n[ 364.050263] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0xa12/0xc90 [amdgpu]\n[ 364.050473] kfd_ioctl_alloc_memory_of_gpu+0x16b/0x3b0 [amdgpu]\n[ 364.050680] kfd_ioctl+0x3c2/0x530 [amdgpu]\n[ 364.050866] ? __pfx_kfd_ioctl_alloc_memory_of_gpu+0x10/0x10 [amdgpu]\n[ 364.05105\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56594",
"url": "https://www.suse.com/security/cve/CVE-2024-56594"
},
{
"category": "external",
"summary": "SUSE Bug 1235413 for CVE-2024-56594",
"url": "https://bugzilla.suse.com/1235413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56595"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add a check to prevent array-index-out-of-bounds in dbAdjTree\n\nWhen the value of lp is 0 at the beginning of the for loop, it will\nbecome negative in the next assignment and we should bail out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56595",
"url": "https://www.suse.com/security/cve/CVE-2024-56595"
},
{
"category": "external",
"summary": "SUSE Bug 1235410 for CVE-2024-56595",
"url": "https://bugzilla.suse.com/1235410"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56595"
},
{
"cve": "CVE-2024-56596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56596"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in jfs_readdir\n\nThe stbl might contain some invalid values. Added a check to\nreturn error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56596",
"url": "https://www.suse.com/security/cve/CVE-2024-56596"
},
{
"category": "external",
"summary": "SUSE Bug 1235458 for CVE-2024-56596",
"url": "https://bugzilla.suse.com/1235458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56596"
},
{
"cve": "CVE-2024-56597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56597"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix shift-out-of-bounds in dbSplit\n\nWhen dmt_budmin is less than zero, it causes errors\nin the later stages. Added a check to return an error beforehand\nin dbAllocCtl itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56597",
"url": "https://www.suse.com/security/cve/CVE-2024-56597"
},
{
"category": "external",
"summary": "SUSE Bug 1235222 for CVE-2024-56597",
"url": "https://bugzilla.suse.com/1235222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56597"
},
{
"cve": "CVE-2024-56598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: array-index-out-of-bounds fix in dtReadFirst\n\nThe value of stbl can be sometimes out of bounds due\nto a bad filesystem. Added a check with appopriate return\nof error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56598",
"url": "https://www.suse.com/security/cve/CVE-2024-56598"
},
{
"category": "external",
"summary": "SUSE Bug 1235220 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "external",
"summary": "SUSE Bug 1235221 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56598"
},
{
"cve": "CVE-2024-56599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56599"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath10k: avoid NULL pointer error during sdio remove\n\nWhen running \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will free sdio\nworkqueue by destroy_workqueue(). But if CONFIG_INIT_ON_FREE_DEFAULT_ON\nis set to yes, kernel panic will happen:\nCall trace:\n destroy_workqueue+0x1c/0x258\n ath10k_sdio_remove+0x84/0x94\n sdio_bus_remove+0x50/0x16c\n device_release_driver_internal+0x188/0x25c\n device_driver_detach+0x20/0x2c\n\nThis is because during \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will call\nath10k_core_destroy() before destroy_workqueue(). wiphy_dev_release()\nwill finally be called in ath10k_core_destroy(). This function will free\nstruct cfg80211_registered_device *rdev and all its members, including\nwiphy, dev and the pointer of sdio workqueue. Then the pointer of sdio\nworkqueue will be set to NULL due to CONFIG_INIT_ON_FREE_DEFAULT_ON.\n\nAfter device release, destroy_workqueue() will use NULL pointer then the\nkernel panic happen.\n\nCall trace:\nath10k_sdio_remove\n -\u003eath10k_core_unregister\n \u2026\u2026\n -\u003eath10k_core_stop\n -\u003eath10k_hif_stop\n -\u003eath10k_sdio_irq_disable\n -\u003eath10k_hif_power_down\n -\u003edel_timer_sync(\u0026ar_sdio-\u003esleep_timer)\n -\u003eath10k_core_destroy\n -\u003eath10k_mac_destroy\n -\u003eieee80211_free_hw\n -\u003ewiphy_free\n \u2026\u2026\n -\u003ewiphy_dev_release\n -\u003edestroy_workqueue\n\nNeed to call destroy_workqueue() before ath10k_core_destroy(), free\nthe work queue buffer first and then free pointer of work queue by\nath10k_core_destroy(). This order matches the error path order in\nath10k_sdio_probe().\n\nNo work will be queued on sdio workqueue between it is destroyed and\nath10k_core_destroy() is called. Based on the call_stack above, the\nreason is:\nOnly ath10k_sdio_sleep_timer_handler(), ath10k_sdio_hif_tx_sg() and\nath10k_sdio_irq_disable() will queue work on sdio workqueue.\nSleep timer will be deleted before ath10k_core_destroy() in\nath10k_hif_power_down().\nath10k_sdio_irq_disable() only be called in ath10k_hif_stop().\nath10k_core_unregister() will call ath10k_hif_power_down() to stop hif\nbus, so ath10k_sdio_hif_tx_sg() won\u0027t be called anymore.\n\nTested-on: QCA6174 hw3.2 SDIO WLAN.RMH.4.4.1-00189",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56599",
"url": "https://www.suse.com/security/cve/CVE-2024-56599"
},
{
"category": "external",
"summary": "SUSE Bug 1235138 for CVE-2024-56599",
"url": "https://bugzilla.suse.com/1235138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56599"
},
{
"cve": "CVE-2024-5660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5660"
}
],
"notes": [
{
"category": "general",
"text": "Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5660",
"url": "https://www.suse.com/security/cve/CVE-2024-5660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "critical"
}
],
"title": "CVE-2024-5660"
},
{
"cve": "CVE-2024-56602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56602"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: do not leave a dangling sk pointer in ieee802154_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If ieee802154_create() fails later, the allocated sk object is\nfreed, but the dangling pointer remains in the provided sock object, which\nmay allow use-after-free.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56602",
"url": "https://www.suse.com/security/cve/CVE-2024-56602"
},
{
"category": "external",
"summary": "SUSE Bug 1235521 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "external",
"summary": "SUSE Bug 1235522 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2024-56603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56603"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: af_can: do not leave a dangling sk pointer in can_create()\n\nOn error can_create() frees the allocated sk object, but sock_init_data()\nhas already attached it to the provided sock object. This will leave a\ndangling sk pointer in the sock object and may cause use-after-free later.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56603",
"url": "https://www.suse.com/security/cve/CVE-2024-56603"
},
{
"category": "external",
"summary": "SUSE Bug 1235415 for CVE-2024-56603",
"url": "https://bugzilla.suse.com/1235415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56603"
},
{
"cve": "CVE-2024-56604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56604"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()\n\nbt_sock_alloc() attaches allocated sk object to the provided sock object.\nIf rfcomm_dlc_alloc() fails, we release the sk object, but leave the\ndangling pointer in the sock object, which may cause use-after-free.\n\nFix this by swapping calls to bt_sock_alloc() and rfcomm_dlc_alloc().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56604",
"url": "https://www.suse.com/security/cve/CVE-2024-56604"
},
{
"category": "external",
"summary": "SUSE Bug 1235056 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "external",
"summary": "SUSE Bug 1235058 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56604"
},
{
"cve": "CVE-2024-56605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56605"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()\n\nbt_sock_alloc() allocates the sk object and attaches it to the provided\nsock object. On error l2cap_sock_alloc() frees the sk object, but the\ndangling pointer is still attached to the sock object, which may create\nuse-after-free in other code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56605",
"url": "https://www.suse.com/security/cve/CVE-2024-56605"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235061 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "external",
"summary": "SUSE Bug 1235062 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235062"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56605"
},
{
"cve": "CVE-2024-56606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56606"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: avoid erroring out after sock_init_data() in packet_create()\n\nAfter sock_init_data() the allocated sk object is attached to the provided\nsock object. On error, packet_create() frees the sk object leaving the\ndangling pointer in the sock object on return. Some other code may try\nto use this pointer and cause use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56606",
"url": "https://www.suse.com/security/cve/CVE-2024-56606"
},
{
"category": "external",
"summary": "SUSE Bug 1235417 for CVE-2024-56606",
"url": "https://bugzilla.suse.com/1235417"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56607"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()\n\nWhen I try to manually set bitrates:\n\niw wlan0 set bitrates legacy-2.4 1\n\nI get sleeping from invalid context error, see below. Fix that by switching to\nuse recently introduced ieee80211_iterate_stations_mtx().\n\nDo note that WCN6855 firmware is still crashing, I\u0027m not sure if that firmware\neven supports bitrate WMI commands and should we consider disabling\nath12k_mac_op_set_bitrate_mask() for WCN6855? But that\u0027s for another patch.\n\nBUG: sleeping function called from invalid context at drivers/net/wireless/ath/ath12k/wmi.c:420\nin_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 2236, name: iw\npreempt_count: 0, expected: 0\nRCU nest depth: 1, expected: 0\n3 locks held by iw/2236:\n #0: ffffffffabc6f1d8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40\n #1: ffff888138410810 (\u0026rdev-\u003ewiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x54d/0x800 [cfg80211]\n #2: ffffffffab2cfaa0 (rcu_read_lock){....}-{1:2}, at: ieee80211_iterate_stations_atomic+0x2f/0x200 [mac80211]\nCPU: 3 UID: 0 PID: 2236 Comm: iw Not tainted 6.11.0-rc7-wt-ath+ #1772\nHardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xa4/0xe0\n dump_stack+0x10/0x20\n __might_resched+0x363/0x5a0\n ? __alloc_skb+0x165/0x340\n __might_sleep+0xad/0x160\n ath12k_wmi_cmd_send+0xb1/0x3d0 [ath12k]\n ? ath12k_wmi_init_wcn7850+0xa40/0xa40 [ath12k]\n ? __netdev_alloc_skb+0x45/0x7b0\n ? __asan_memset+0x39/0x40\n ? ath12k_wmi_alloc_skb+0xf0/0x150 [ath12k]\n ? reacquire_held_locks+0x4d0/0x4d0\n ath12k_wmi_set_peer_param+0x340/0x5b0 [ath12k]\n ath12k_mac_disable_peer_fixed_rate+0xa3/0x110 [ath12k]\n ? ath12k_mac_vdev_stop+0x4f0/0x4f0 [ath12k]\n ieee80211_iterate_stations_atomic+0xd4/0x200 [mac80211]\n ath12k_mac_op_set_bitrate_mask+0x5d2/0x1080 [ath12k]\n ? ath12k_mac_vif_chan+0x320/0x320 [ath12k]\n drv_set_bitrate_mask+0x267/0x470 [mac80211]\n ieee80211_set_bitrate_mask+0x4cc/0x8a0 [mac80211]\n ? __this_cpu_preempt_check+0x13/0x20\n nl80211_set_tx_bitrate_mask+0x2bc/0x530 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? trace_contention_end+0xef/0x140\n ? rtnl_unlock+0x9/0x10\n ? nl80211_pre_doit+0x557/0x800 [cfg80211]\n genl_family_rcv_msg_doit+0x1f0/0x2e0\n ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250\n ? ns_capable+0x57/0xd0\n genl_family_rcv_msg+0x34c/0x600\n ? genl_family_rcv_msg_dumpit+0x310/0x310\n ? __lock_acquire+0xc62/0x1de0\n ? he_set_mcs_mask.isra.0+0x8d0/0x8d0 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? cfg80211_external_auth_request+0x690/0x690 [cfg80211]\n genl_rcv_msg+0xa0/0x130\n netlink_rcv_skb+0x14c/0x400\n ? genl_family_rcv_msg+0x600/0x600\n ? netlink_ack+0xd70/0xd70\n ? rwsem_optimistic_spin+0x4f0/0x4f0\n ? genl_rcv+0x14/0x40\n ? down_read_killable+0x580/0x580\n ? netlink_deliver_tap+0x13e/0x350\n ? __this_cpu_preempt_check+0x13/0x20\n genl_rcv+0x23/0x40\n netlink_unicast+0x45e/0x790\n ? netlink_attachskb+0x7f0/0x7f0\n netlink_sendmsg+0x7eb/0xdb0\n ? netlink_unicast+0x790/0x790\n ? __this_cpu_preempt_check+0x13/0x20\n ? selinux_socket_sendmsg+0x31/0x40\n ? netlink_unicast+0x790/0x790\n __sock_sendmsg+0xc9/0x160\n ____sys_sendmsg+0x620/0x990\n ? kernel_sendmsg+0x30/0x30\n ? __copy_msghdr+0x410/0x410\n ? __kasan_check_read+0x11/0x20\n ? mark_lock+0xe6/0x1470\n ___sys_sendmsg+0xe9/0x170\n ? copy_msghdr_from_user+0x120/0x120\n ? __lock_acquire+0xc62/0x1de0\n ? do_fault_around+0x2c6/0x4e0\n ? do_user_addr_fault+0x8c1/0xde0\n ? reacquire_held_locks+0x220/0x4d0\n ? do_user_addr_fault+0x8c1/0xde0\n ? __kasan_check_read+0x11/0x20\n ? __fdget+0x4e/0x1d0\n ? sockfd_lookup_light+0x1a/0x170\n __sys_sendmsg+0xd2/0x180\n ? __sys_sendmsg_sock+0x20/0x20\n ? reacquire_held_locks+0x4d0/0x4d0\n ? debug_smp_processor_id+0x17/0x20\n __x64_sys_sendmsg+0x72/0xb0\n ? lockdep_hardirqs_on+0x7d/0x100\n x64_sys_call+0x894/0x9f0\n do_syscall_64+0x64/0x130\n entry_SYSCALL_64_after_\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56607",
"url": "https://www.suse.com/security/cve/CVE-2024-56607"
},
{
"category": "external",
"summary": "SUSE Bug 1235423 for CVE-2024-56607",
"url": "https://bugzilla.suse.com/1235423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56607"
},
{
"cve": "CVE-2024-56609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56609"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb\n\nWhen removing kernel modules by:\n rmmod rtw88_8723cs rtw88_8703b rtw88_8723x rtw88_sdio rtw88_core\n\nDriver uses skb_queue_purge() to purge TX skb, but not report tx status\ncausing \"Have pending ack frames!\" warning. Use ieee80211_purge_tx_queue()\nto correct this.\n\nSince ieee80211_purge_tx_queue() doesn\u0027t take locks, to prevent racing\nbetween TX work and purge TX queue, flush and destroy TX work in advance.\n\n wlan0: deauthenticating from aa:f5:fd:60:4c:a8 by local\n choice (Reason: 3=DEAUTH_LEAVING)\n ------------[ cut here ]------------\n Have pending ack frames!\n WARNING: CPU: 3 PID: 9232 at net/mac80211/main.c:1691\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n CPU: 3 PID: 9232 Comm: rmmod Tainted: G C\n 6.10.1-200.fc40.aarch64 #1\n Hardware name: pine64 Pine64 PinePhone Braveheart\n (1.1)/Pine64 PinePhone Braveheart (1.1), BIOS 2024.01 01/01/2024\n pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n lr : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n sp : ffff80008c1b37b0\n x29: ffff80008c1b37b0 x28: ffff000003be8000 x27: 0000000000000000\n x26: 0000000000000000 x25: ffff000003dc14b8 x24: ffff80008c1b37d0\n x23: ffff000000ff9f80 x22: 0000000000000000 x21: 000000007fffffff\n x20: ffff80007c7e93d8 x19: ffff00006e66f400 x18: 0000000000000000\n x17: ffff7ffffd2b3000 x16: ffff800083fc0000 x15: 0000000000000000\n x14: 0000000000000000 x13: 2173656d61726620 x12: 6b636120676e6964\n x11: 0000000000000000 x10: 000000000000005d x9 : ffff8000802af2b0\n x8 : ffff80008c1b3430 x7 : 0000000000000001 x6 : 0000000000000001\n x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000003be8000\n Call trace:\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n idr_for_each+0x74/0x110\n ieee80211_free_hw+0x44/0xe8 [mac80211]\n rtw_sdio_remove+0x9c/0xc0 [rtw88_sdio]\n sdio_bus_remove+0x44/0x180\n device_remove+0x54/0x90\n device_release_driver_internal+0x1d4/0x238\n driver_detach+0x54/0xc0\n bus_remove_driver+0x78/0x108\n driver_unregister+0x38/0x78\n sdio_unregister_driver+0x2c/0x40\n rtw_8723cs_driver_exit+0x18/0x1000 [rtw88_8723cs]\n __do_sys_delete_module.isra.0+0x190/0x338\n __arm64_sys_delete_module+0x1c/0x30\n invoke_syscall+0x74/0x100\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x158\n el0t_64_sync_handler+0x120/0x138\n el0t_64_sync+0x194/0x198\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56609",
"url": "https://www.suse.com/security/cve/CVE-2024-56609"
},
{
"category": "external",
"summary": "SUSE Bug 1235389 for CVE-2024-56609",
"url": "https://bugzilla.suse.com/1235389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56609"
},
{
"cve": "CVE-2024-56611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM\n\nWe currently assume that there is at least one VMA in a MM, which isn\u0027t\ntrue.\n\nSo we might end up having find_vma() return NULL, to then de-reference\nNULL. So properly handle find_vma() returning NULL.\n\nThis fixes the report:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nCPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nRIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]\nRIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194\nCode: ...\nRSP: 0018:ffffc9000375fd08 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000\nRDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044\nRBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1\nR10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003\nR13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8\nFS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709\n __do_sys_migrate_pages mm/mempolicy.c:1727 [inline]\n __se_sys_migrate_pages mm/mempolicy.c:1723 [inline]\n __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n[akpm@linux-foundation.org: add unlikely()]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56611",
"url": "https://www.suse.com/security/cve/CVE-2024-56611"
},
{
"category": "external",
"summary": "SUSE Bug 1235391 for CVE-2024-56611",
"url": "https://bugzilla.suse.com/1235391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56611"
},
{
"cve": "CVE-2024-56614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56614"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix OOB map writes when deleting elements\n\nJordy says:\n\n\"\nIn the xsk_map_delete_elem function an unsigned integer\n(map-\u003emax_entries) is compared with a user-controlled signed integer\n(k). Due to implicit type conversion, a large unsigned value for\nmap-\u003emax_entries can bypass the intended bounds check:\n\n\tif (k \u003e= map-\u003emax_entries)\n\t\treturn -EINVAL;\n\nThis allows k to hold a negative value (between -2147483648 and -2),\nwhich is then used as an array index in m-\u003exsk_map[k], which results\nin an out-of-bounds access.\n\n\tspin_lock_bh(\u0026m-\u003elock);\n\tmap_entry = \u0026m-\u003exsk_map[k]; // Out-of-bounds map_entry\n\told_xs = unrcu_pointer(xchg(map_entry, NULL)); // Oob write\n\tif (old_xs)\n\t\txsk_map_sock_delete(old_xs, map_entry);\n\tspin_unlock_bh(\u0026m-\u003elock);\n\nThe xchg operation can then be used to cause an out-of-bounds write.\nMoreover, the invalid map_entry passed to xsk_map_sock_delete can lead\nto further memory corruption.\n\"\n\nIt indeed results in following splat:\n\n[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108\n[76612.904330] #PF: supervisor write access in kernel mode\n[76612.909639] #PF: error_code(0x0002) - not-present page\n[76612.914855] PGD 0 P4D 0\n[76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP\n[76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470\n[76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60\n[76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff \u003c48\u003e 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31\n[76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246\n[76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000\n[76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000\n[76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007\n[76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8\n[76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0\n[76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000\n[76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0\n[76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[76613.041086] PKRU: 55555554\n[76613.043842] Call Trace:\n[76613.046331] \u003cTASK\u003e\n[76613.048468] ? __die+0x20/0x60\n[76613.051581] ? page_fault_oops+0x15a/0x450\n[76613.055747] ? search_extable+0x22/0x30\n[76613.059649] ? search_bpf_extables+0x5f/0x80\n[76613.063988] ? exc_page_fault+0xa9/0x140\n[76613.067975] ? asm_exc_page_fault+0x22/0x30\n[76613.072229] ? xsk_map_delete_elem+0x2d/0x60\n[76613.076573] ? xsk_map_delete_elem+0x23/0x60\n[76613.080914] __sys_bpf+0x19b7/0x23c0\n[76613.084555] __x64_sys_bpf+0x1a/0x20\n[76613.088194] do_syscall_64+0x37/0xb0\n[76613.091832] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n[76613.096962] RIP: 0033:0x7f80b6d1e88d\n[76613.100592] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[76613.119631] RSP: 002b:00007ffd1ae0ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000141\n[76613.131330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80b6d1e88d\n[76613.142632] RDX: 0000000000000098 RSI: 00007ffd1ae0ad20 RDI: 0000000000000003\n[76613.153967] RBP: 00007ffd1ae0adc0 R08: 0000000000000000 R09: 0000000000000000\n[76613.166030] R10: 00007f80b6f77040 R11: 0000000000000206 R12: 00007ffd1ae0aed8\n[76613.177130] R13: 000055ddf42ce1e9 R14: 000055ddf42d0d98 R15: 00\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56614",
"url": "https://www.suse.com/security/cve/CVE-2024-56614"
},
{
"category": "external",
"summary": "SUSE Bug 1235424 for CVE-2024-56614",
"url": "https://bugzilla.suse.com/1235424"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56614"
},
{
"cve": "CVE-2024-56615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix OOB devmap writes when deleting elements\n\nJordy reported issue against XSKMAP which also applies to DEVMAP - the\nindex used for accessing map entry, due to being a signed integer,\ncauses the OOB writes. Fix is simple as changing the type from int to\nu32, however, when compared to XSKMAP case, one more thing needs to be\naddressed.\n\nWhen map is released from system via dev_map_free(), we iterate through\nall of the entries and an iterator variable is also an int, which\nimplies OOB accesses. Again, change it to be u32.\n\nExample splat below:\n\n[ 160.724676] BUG: unable to handle page fault for address: ffffc8fc2c001000\n[ 160.731662] #PF: supervisor read access in kernel mode\n[ 160.736876] #PF: error_code(0x0000) - not-present page\n[ 160.742095] PGD 0 P4D 0\n[ 160.744678] Oops: Oops: 0000 [#1] PREEMPT SMP\n[ 160.749106] CPU: 1 UID: 0 PID: 520 Comm: kworker/u145:12 Not tainted 6.12.0-rc1+ #487\n[ 160.757050] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[ 160.767642] Workqueue: events_unbound bpf_map_free_deferred\n[ 160.773308] RIP: 0010:dev_map_free+0x77/0x170\n[ 160.777735] Code: 00 e8 fd 91 ed ff e8 b8 73 ed ff 41 83 7d 18 19 74 6e 41 8b 45 24 49 8b bd f8 00 00 00 31 db 85 c0 74 48 48 63 c3 48 8d 04 c7 \u003c48\u003e 8b 28 48 85 ed 74 30 48 8b 7d 18 48 85 ff 74 05 e8 b3 52 fa ff\n[ 160.796777] RSP: 0018:ffffc9000ee1fe38 EFLAGS: 00010202\n[ 160.802086] RAX: ffffc8fc2c001000 RBX: 0000000080000000 RCX: 0000000000000024\n[ 160.809331] RDX: 0000000000000000 RSI: 0000000000000024 RDI: ffffc9002c001000\n[ 160.816576] RBP: 0000000000000000 R08: 0000000000000023 R09: 0000000000000001\n[ 160.823823] R10: 0000000000000001 R11: 00000000000ee6b2 R12: dead000000000122\n[ 160.831066] R13: ffff88810c928e00 R14: ffff8881002df405 R15: 0000000000000000\n[ 160.838310] FS: 0000000000000000(0000) GS:ffff8897e0c40000(0000) knlGS:0000000000000000\n[ 160.846528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 160.852357] CR2: ffffc8fc2c001000 CR3: 0000000005c32006 CR4: 00000000007726f0\n[ 160.859604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 160.866847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 160.874092] PKRU: 55555554\n[ 160.876847] Call Trace:\n[ 160.879338] \u003cTASK\u003e\n[ 160.881477] ? __die+0x20/0x60\n[ 160.884586] ? page_fault_oops+0x15a/0x450\n[ 160.888746] ? search_extable+0x22/0x30\n[ 160.892647] ? search_bpf_extables+0x5f/0x80\n[ 160.896988] ? exc_page_fault+0xa9/0x140\n[ 160.900973] ? asm_exc_page_fault+0x22/0x30\n[ 160.905232] ? dev_map_free+0x77/0x170\n[ 160.909043] ? dev_map_free+0x58/0x170\n[ 160.912857] bpf_map_free_deferred+0x51/0x90\n[ 160.917196] process_one_work+0x142/0x370\n[ 160.921272] worker_thread+0x29e/0x3b0\n[ 160.925082] ? rescuer_thread+0x4b0/0x4b0\n[ 160.929157] kthread+0xd4/0x110\n[ 160.932355] ? kthread_park+0x80/0x80\n[ 160.936079] ret_from_fork+0x2d/0x50\n[ 160.943396] ? kthread_park+0x80/0x80\n[ 160.950803] ret_from_fork_asm+0x11/0x20\n[ 160.958482] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56615",
"url": "https://www.suse.com/security/cve/CVE-2024-56615"
},
{
"category": "external",
"summary": "SUSE Bug 1235426 for CVE-2024-56615",
"url": "https://bugzilla.suse.com/1235426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56616"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix MST sideband message body length check\n\nFix the MST sideband message body length check, which must be at least 1\nbyte accounting for the message body CRC (aka message data CRC) at the\nend of the message.\n\nThis fixes a case where an MST branch device returns a header with a\ncorrect header CRC (indicating a correctly received body length), with\nthe body length being incorrectly set to 0. This will later lead to a\nmemory corruption in drm_dp_sideband_append_payload() and the following\nerrors in dmesg:\n\n UBSAN: array-index-out-of-bounds in drivers/gpu/drm/display/drm_dp_mst_topology.c:786:25\n index -1 is out of range for type \u0027u8 [48]\u0027\n Call Trace:\n drm_dp_sideband_append_payload+0x33d/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]\n\n memcpy: detected field-spanning write (size 18446744073709551615) of single field \"\u0026msg-\u003emsg[msg-\u003ecurlen]\" at drivers/gpu/drm/display/drm_dp_mst_topology.c:791 (size 256)\n Call Trace:\n drm_dp_sideband_append_payload+0x324/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56616",
"url": "https://www.suse.com/security/cve/CVE-2024-56616"
},
{
"category": "external",
"summary": "SUSE Bug 1235427 for CVE-2024-56616",
"url": "https://bugzilla.suse.com/1235427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56616"
},
{
"cve": "CVE-2024-56617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56617"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU\n\nCommit\n\n 5944ce092b97 (\"arch_topology: Build cacheinfo from primary CPU\")\n\nadds functionality that architectures can use to optionally allocate and\nbuild cacheinfo early during boot. Commit\n\n 6539cffa9495 (\"cacheinfo: Add arch specific early level initializer\")\n\nlets secondary CPUs correct (and reallocate memory) cacheinfo data if\nneeded.\n\nIf the early build functionality is not used and cacheinfo does not need\ncorrection, memory for cacheinfo is never allocated. x86 does not use\nthe early build functionality. Consequently, during the cacheinfo CPU\nhotplug callback, last_level_cache_is_valid() attempts to dereference\na NULL pointer:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000100\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEPMT SMP NOPTI\n CPU: 0 PID 19 Comm: cpuhp/0 Not tainted 6.4.0-rc2 #1\n RIP: 0010: last_level_cache_is_valid+0x95/0xe0a\n\nAllocate memory for cacheinfo during the cacheinfo CPU hotplug callback\nif not done earlier.\n\nMoreover, before determining the validity of the last-level cache info,\nensure that it has been allocated. Simply checking for non-zero\ncache_leaves() is not sufficient, as some architectures (e.g., Intel\nprocessors) have non-zero cache_leaves() before allocation.\n\nDereferencing NULL cacheinfo can occur in update_per_cpu_data_slice_size().\nThis function iterates over all online CPUs. However, a CPU may have come\nonline recently, but its cacheinfo may not have been allocated yet.\n\nWhile here, remove an unnecessary indentation in allocate_cache_info().\n\n [ bp: Massage. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56617",
"url": "https://www.suse.com/security/cve/CVE-2024-56617"
},
{
"category": "external",
"summary": "SUSE Bug 1235429 for CVE-2024-56617",
"url": "https://bugzilla.suse.com/1235429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56617"
},
{
"cve": "CVE-2024-56619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()\n\nSyzbot reported that when searching for records in a directory where the\ninode\u0027s i_size is corrupted and has a large value, memory access outside\nthe folio/page range may occur, or a use-after-free bug may be detected if\nKASAN is enabled.\n\nThis is because nilfs_last_byte(), which is called by nilfs_find_entry()\nand others to calculate the number of valid bytes of directory data in a\npage from i_size and the page index, loses the upper 32 bits of the 64-bit\nsize information due to an inappropriate type of local variable to which\nthe i_size value is assigned.\n\nThis caused a large byte offset value due to underflow in the end address\ncalculation in the calling nilfs_find_entry(), resulting in memory access\nthat exceeds the folio/page size.\n\nFix this issue by changing the type of the local variable causing the bit\nloss from \"unsigned int\" to \"u64\". The return value of nilfs_last_byte()\nis also of type \"unsigned int\", but it is truncated so as not to exceed\nPAGE_SIZE and no bit loss occurs, so no change is required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56619",
"url": "https://www.suse.com/security/cve/CVE-2024-56619"
},
{
"category": "external",
"summary": "SUSE Bug 1235224 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "external",
"summary": "SUSE Bug 1235225 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56619"
},
{
"cve": "CVE-2024-56620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56620"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: qcom: Only free platform MSIs when ESI is enabled\n\nOtherwise, it will result in a NULL pointer dereference as below:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000008\nCall trace:\n mutex_lock+0xc/0x54\n platform_device_msi_free_irqs_all+0x14/0x20\n ufs_qcom_remove+0x34/0x48 [ufs_qcom]\n platform_remove+0x28/0x44\n device_remove+0x4c/0x80\n device_release_driver_internal+0xd8/0x178\n driver_detach+0x50/0x9c\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n platform_driver_unregister+0x14/0x20\n ufs_qcom_pltform_exit+0x18/0xb94 [ufs_qcom]\n __arm64_sys_delete_module+0x180/0x260\n invoke_syscall+0x44/0x100\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0xdc\n el0t_64_sync_handler+0xc0/0xc4\n el0t_64_sync+0x190/0x194",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56620",
"url": "https://www.suse.com/security/cve/CVE-2024-56620"
},
{
"category": "external",
"summary": "SUSE Bug 1235227 for CVE-2024-56620",
"url": "https://bugzilla.suse.com/1235227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56620"
},
{
"cve": "CVE-2024-56622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56622"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: sysfs: Prevent div by zero\n\nPrevent a division by 0 when monitoring is not enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56622",
"url": "https://www.suse.com/security/cve/CVE-2024-56622"
},
{
"category": "external",
"summary": "SUSE Bug 1235251 for CVE-2024-56622",
"url": "https://bugzilla.suse.com/1235251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56622"
},
{
"cve": "CVE-2024-56623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread. Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022] ? __dentry_kill+0x121/0x170\n[596663.813030] ? _cond_resched+0x15/0x30\n[596663.813034] ? _cond_resched+0x15/0x30\n[596663.813039] ? wait_for_completion+0x35/0x190\n[596663.813048] ? try_to_wake_up+0x63/0x540\n[596663.813055] free_task+0x5a/0x60\n[596663.813061] kthread_stop+0xf3/0x100\n[596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56623",
"url": "https://www.suse.com/security/cve/CVE-2024-56623"
},
{
"category": "external",
"summary": "SUSE Bug 1235466 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "external",
"summary": "SUSE Bug 1235468 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56625"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: can_set_termination(): allow sleeping GPIOs\n\nIn commit 6e86a1543c37 (\"can: dev: provide optional GPIO based\ntermination support\") GPIO based termination support was added.\n\nFor no particular reason that patch uses gpiod_set_value() to set the\nGPIO. This leads to the following warning, if the systems uses a\nsleeping GPIO, i.e. behind an I2C port expander:\n\n| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c\n| CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c\n\nReplace gpiod_set_value() by gpiod_set_value_cansleep() to allow the\nuse of sleeping GPIOs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56625",
"url": "https://www.suse.com/security/cve/CVE-2024-56625"
},
{
"category": "external",
"summary": "SUSE Bug 1235223 for CVE-2024-56625",
"url": "https://bugzilla.suse.com/1235223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56625"
},
{
"cve": "CVE-2024-56629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56629"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix when get product name maybe null pointer\n\nDue to incorrect dev-\u003eproduct reporting by certain devices, null\npointer dereferences occur when dev-\u003eproduct is empty, leading to\npotential system crashes.\n\nThis issue was found on EXCELSIOR DL37-D05 device with\nLoongson-LS3A6000-7A2000-DL37 motherboard.\n\nKernel logs:\n[ 56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci\n[ 56.671638] usb 4-3: string descriptor 0 read error: -22\n[ 56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07\n[ 56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3\n[ 56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0\n[ 56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80\n[ 56.697732] Oops[#1]:\n[ 56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G OE 6.6.0-loong64-desktop #25.00.2000.015\n[ 56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00 10/11/2024\n[ 56.697739] pc 90000000066e35c8 ra ffff800004f98a80 tp 9000000125478000 sp 900000012547b8a0\n[ 56.697741] a0 0000000000000000 a1 ffff800004818b28 a2 0000000000000000 a3 0000000000000000\n[ 56.697743] a4 900000012547b8f0 a5 0000000000000000 a6 0000000000000000 a7 0000000000000000\n[ 56.697745] t0 ffff800004818b2d t1 0000000000000000 t2 0000000000000003 t3 0000000000000005\n[ 56.697747] t4 0000000000000000 t5 0000000000000000 t6 0000000000000000 t7 0000000000000000\n[ 56.697748] t8 0000000000000000 u0 0000000000000000 s9 0000000000000000 s0 900000011aa48028\n[ 56.697750] s1 0000000000000000 s2 0000000000000000 s3 ffff800004818e80 s4 ffff800004810000\n[ 56.697751] s5 90000001000b98d0 s6 ffff800004811f88 s7 ffff800005470440 s8 0000000000000000\n[ 56.697753] ra: ffff800004f98a80 wacom_update_name+0xe0/0x300 [wacom]\n[ 56.697802] ERA: 90000000066e35c8 strstr+0x28/0x120\n[ 56.697806] CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)\n[ 56.697816] PRMD: 0000000c (PPLV0 +PIE +PWE)\n[ 56.697821] EUEN: 00000000 (-FPE -SXE -ASXE -BTE)\n[ 56.697827] ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)\n[ 56.697831] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)\n[ 56.697835] BADV: 0000000000000000\n[ 56.697836] PRID: 0014d000 (Loongson-64bit, Loongson-3A6000)\n[ 56.697838] Modules linked in: wacom(+) bnep bluetooth rfkill qrtr nls_iso8859_1 nls_cp437 snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_timer snd soundcore input_leds mousedev led_class joydev deepin_netmonitor(OE) fuse nfnetlink dmi_sysfs ip_tables x_tables overlay amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_suballoc_helper i2c_algo_bit drm_ttm_helper r8169 ttm drm_display_helper spi_loongson_pci xhci_pci cec xhci_pci_renesas spi_loongson_core hid_generic realtek gpio_loongson_64bit\n[ 56.697887] Process (udev-worker) (pid: 2742, threadinfo=00000000aee0d8b4, task=00000000a9eff1f3)\n[ 56.697890] Stack : 0000000000000000 ffff800004817e00 0000000000000000 0000251c00000000\n[ 56.697896] 0000000000000000 00000011fffffffd 0000000000000000 0000000000000000\n[ 56.697901] 0000000000000000 1b67a968695184b9 0000000000000000 90000001000b98d0\n[ 56.697906] 90000001000bb8d0 900000011aa48028 0000000000000000 ffff800004f9d74c\n[ 56.697911] 90000001000ba000 ffff800004f9ce58 0000000000000000 ffff800005470440\n[ 56.697916] ffff800004811f88 90000001000b98d0 9000000100da2aa8 90000001000bb8d0\n[ 56.697921] 0000000000000000 90000001000ba000 900000011aa48028 ffff800004f9d74c\n[ 56.697926] ffff8000054704e8 90000001000bb8b8 90000001000ba000 0000000000000000\n[ 56.697931] 90000001000bb8d0 \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56629",
"url": "https://www.suse.com/security/cve/CVE-2024-56629"
},
{
"category": "external",
"summary": "SUSE Bug 1235473 for CVE-2024-56629",
"url": "https://bugzilla.suse.com/1235473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56629"
},
{
"cve": "CVE-2024-56630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: free inode when ocfs2_get_init_inode() fails\n\nsyzbot is reporting busy inodes after unmount, for commit 9c89fe0af826\n(\"ocfs2: Handle error from dquot_initialize()\") forgot to call iput() when\nnew_inode() succeeded and dquot_initialize() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56630",
"url": "https://www.suse.com/security/cve/CVE-2024-56630"
},
{
"category": "external",
"summary": "SUSE Bug 1235479 for CVE-2024-56630",
"url": "https://bugzilla.suse.com/1235479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56631"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Fix slab-use-after-free read in sg_release()\n\nFix a use-after-free bug in sg_release(), detected by syzbot with KASAN:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30\nkernel/locking/lockdep.c:5838\n__mutex_unlock_slowpath+0xe2/0x750 kernel/locking/mutex.c:912\nsg_release+0x1f4/0x2e0 drivers/scsi/sg.c:407\n\nIn sg_release(), the function kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) is\ncalled before releasing the open_rel_lock mutex. The kref_put() call may\ndecrement the reference count of sfp to zero, triggering its cleanup\nthrough sg_remove_sfp(). This cleanup includes scheduling deferred work\nvia sg_remove_sfp_usercontext(), which ultimately frees sfp.\n\nAfter kref_put(), sg_release() continues to unlock open_rel_lock and may\nreference sfp or sdp. If sfp has already been freed, this results in a\nslab-use-after-free error.\n\nMove the kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) call after unlocking the\nopen_rel_lock mutex. This ensures:\n\n - No references to sfp or sdp occur after the reference count is\n decremented.\n\n - Cleanup functions such as sg_remove_sfp() and\n sg_remove_sfp_usercontext() can safely execute without impacting the\n mutex handling in sg_release().\n\nThe fix has been tested and validated by syzbot. This patch closes the\nbug reported at the following syzkaller link and ensures proper\nsequencing of resource cleanup and mutex operations, eliminating the\nrisk of use-after-free errors in sg_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56631",
"url": "https://www.suse.com/security/cve/CVE-2024-56631"
},
{
"category": "external",
"summary": "SUSE Bug 1235480 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "external",
"summary": "SUSE Bug 1235482 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56631"
},
{
"cve": "CVE-2024-56632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix the memleak while create new ctrl failed\n\nNow while we create new ctrl failed, we have not free the\ntagset occupied by admin_q, here try to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56632",
"url": "https://www.suse.com/security/cve/CVE-2024-56632"
},
{
"category": "external",
"summary": "SUSE Bug 1235483 for CVE-2024-56632",
"url": "https://bugzilla.suse.com/1235483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56632"
},
{
"cve": "CVE-2024-56634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56634"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: grgpio: Add NULL check in grgpio_probe\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in grgpio_probe is not checked.\nAdd NULL check in grgpio_probe, to handle kernel NULL\npointer dereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56634",
"url": "https://www.suse.com/security/cve/CVE-2024-56634"
},
{
"category": "external",
"summary": "SUSE Bug 1235486 for CVE-2024-56634",
"url": "https://bugzilla.suse.com/1235486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56634"
},
{
"cve": "CVE-2024-56635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56635"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid potential UAF in default_operstate()\n\nsyzbot reported an UAF in default_operstate() [1]\n\nIssue is a race between device and netns dismantles.\n\nAfter calling __rtnl_unlock() from netdev_run_todo(),\nwe can not assume the netns of each device is still alive.\n\nMake sure the device is not in NETREG_UNREGISTERED state,\nand add an ASSERT_RTNL() before the call to\n__dev_get_by_index().\n\nWe might move this ASSERT_RTNL() in __dev_get_by_index()\nin the future.\n\n[1]\n\nBUG: KASAN: slab-use-after-free in __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\nRead of size 8 at addr ffff888043eba1b0 by task syz.0.0/5339\n\nCPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\n default_operstate net/core/link_watch.c:51 [inline]\n rfc2863_policy+0x224/0x300 net/core/link_watch.c:67\n linkwatch_do_dev+0x3e/0x170 net/core/link_watch.c:170\n netdev_run_todo+0x461/0x1000 net/core/dev.c:10894\n rtnl_unlock net/core/rtnetlink.c:152 [inline]\n rtnl_net_unlock include/linux/rtnetlink.h:133 [inline]\n rtnl_dellink+0x760/0x8d0 net/core/rtnetlink.c:3520\n rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:726\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583\n ___sys_sendmsg net/socket.c:2637 [inline]\n __sys_sendmsg+0x269/0x350 net/socket.c:2669\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f2a3cb80809\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f2a3d9cd058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f2a3cd45fa0 RCX: 00007f2a3cb80809\nRDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008\nRBP: 00007f2a3cbf393e R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007f2a3cd45fa0 R15: 00007ffd03bc65c8\n \u003c/TASK\u003e\n\nAllocated by task 5339:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4314\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kmalloc_array_noprof include/linux/slab.h:945 [inline]\n netdev_create_hash net/core/dev.c:11870 [inline]\n netdev_init+0x10c/0x250 net/core/dev.c:11890\n ops_init+0x31e/0x590 net/core/net_namespace.c:138\n setup_net+0x287/0x9e0 net/core/net_namespace.c:362\n copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500\n create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228\n ksys_unshare+0x57d/0xa70 kernel/fork.c:3314\n __do_sys_unshare kernel/fork.c:3385 [inline]\n __se_sys_unshare kernel/fork.c:3383 [inline]\n __x64_sys_unshare+0x38/0x40 kernel/fork.c:3383\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x8\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56635",
"url": "https://www.suse.com/security/cve/CVE-2024-56635"
},
{
"category": "external",
"summary": "SUSE Bug 1235519 for CVE-2024-56635",
"url": "https://bugzilla.suse.com/1235519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56635"
},
{
"cve": "CVE-2024-56636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56636"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: do not assume mac header is set in geneve_xmit_skb()\n\nWe should not assume mac header is set in output path.\n\nUse skb_eth_hdr() instead of eth_hdr() to fix the issue.\n\nsysbot reported the following :\n\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 skb_mac_header include/linux/skbuff.h:3052 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 eth_hdr include/linux/if_ether.h:24 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nModules linked in:\nCPU: 0 UID: 0 PID: 11635 Comm: syz.4.1423 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_mac_header include/linux/skbuff.h:3052 [inline]\n RIP: 0010:eth_hdr include/linux/if_ether.h:24 [inline]\n RIP: 0010:geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n RIP: 0010:geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nCode: 21 c6 02 e9 35 d4 ff ff e8 a5 48 4c fb 90 0f 0b 90 e9 fd f5 ff ff e8 97 48 4c fb 90 0f 0b 90 e9 d8 f5 ff ff e8 89 48 4c fb 90 \u003c0f\u003e 0b 90 e9 41 e4 ff ff e8 7b 48 4c fb 90 0f 0b 90 e9 cd e7 ff ff\nRSP: 0018:ffffc90003b2f870 EFLAGS: 00010283\nRAX: 000000000000037a RBX: 000000000000ffff RCX: ffffc9000dc3d000\nRDX: 0000000000080000 RSI: ffffffff86428417 RDI: 0000000000000003\nRBP: ffffc90003b2f9f0 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000002 R12: ffff88806603c000\nR13: 0000000000000000 R14: ffff8880685b2780 R15: 0000000000000e23\nFS: 00007fdc2deed6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b30a1dff8 CR3: 0000000056b8c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n __dev_direct_xmit+0x58a/0x720 net/core/dev.c:4490\n dev_direct_xmit include/linux/netdevice.h:3181 [inline]\n packet_xmit+0x1e4/0x360 net/packet/af_packet.c:285\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x2700/0x5660 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x488/0x4f0 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2200\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56636",
"url": "https://www.suse.com/security/cve/CVE-2024-56636"
},
{
"category": "external",
"summary": "SUSE Bug 1235520 for CVE-2024-56636",
"url": "https://bugzilla.suse.com/1235520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56636"
},
{
"cve": "CVE-2024-56637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56637"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: Hold module reference while requesting a module\n\nUser space may unload ip_set.ko while it is itself requesting a set type\nbackend module, leading to a kernel crash. The race condition may be\nprovoked by inserting an mdelay() right after the nfnl_unlock() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56637",
"url": "https://www.suse.com/security/cve/CVE-2024-56637"
},
{
"category": "external",
"summary": "SUSE Bug 1235523 for CVE-2024-56637",
"url": "https://bugzilla.suse.com/1235523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n Workqueue: events smc_lgr_terminate_work [smc]\n RIP: 0010:__flush_work+0x19e/0x1b0\n Call Trace:\n ? __wake_up_common+0x7a/0x190\n ? work_busy+0x80/0x80\n __cancel_work_timer+0xe3/0x160\n smc_close_cancel_work+0x1a/0x70 [smc]\n smc_close_active_abort+0x207/0x360 [smc]\n __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n process_one_work+0x19e/0x340\n worker_thread+0x30/0x370\n ? process_one_work+0x340/0x340\n kthread+0x117/0x130\n ? __kthread_cancel_work+0x50/0x50\n ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn-\u003eclose_work is\nflushed before initialization, resulting in WARN_ON(!work-\u003efunc).\n\n__smc_lgr_terminate | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr-\u003econns_all |\n\\- smc_conn_kill |\n \\- smc_close_active_abort |\n \\- smc_close_cancel_work |\n \\- cancel_work_sync |\n \\- __flush_work |\n\t (close_work) |\n\t | smc_close_init\n\t | \\- INIT_WORK(\u0026close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56641",
"url": "https://www.suse.com/security/cve/CVE-2024-56641"
},
{
"category": "external",
"summary": "SUSE Bug 1235526 for CVE-2024-56641",
"url": "https://bugzilla.suse.com/1235526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56641"
},
{
"cve": "CVE-2024-56642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56642"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free of kernel socket in cleanup_bearer().\n\nsyzkaller reported a use-after-free of UDP kernel socket\nin cleanup_bearer() without repro. [0][1]\n\nWhen bearer_disable() calls tipc_udp_disable(), cleanup\nof the UDP kernel socket is deferred by work calling\ncleanup_bearer().\n\ntipc_exit_net() waits for such works to finish by checking\ntipc_net(net)-\u003ewq_count. However, the work decrements the\ncount too early before releasing the kernel socket,\nunblocking cleanup_net() and resulting in use-after-free.\n\nLet\u0027s move the decrement after releasing the socket in\ncleanup_bearer().\n\n[0]:\nref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at\n sk_alloc+0x438/0x608\n inet_create+0x4c8/0xcb0\n __sock_create+0x350/0x6b8\n sock_create_kern+0x58/0x78\n udp_sock_create4+0x68/0x398\n udp_sock_create+0x88/0xc8\n tipc_udp_enable+0x5e8/0x848\n __tipc_nl_bearer_enable+0x84c/0xed8\n tipc_nl_bearer_enable+0x38/0x60\n genl_family_rcv_msg_doit+0x170/0x248\n genl_rcv_msg+0x400/0x5b0\n netlink_rcv_skb+0x1dc/0x398\n genl_rcv+0x44/0x68\n netlink_unicast+0x678/0x8b0\n netlink_sendmsg+0x5e4/0x898\n ____sys_sendmsg+0x500/0x830\n\n[1]:\nBUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline]\nBUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n udp_hashslot include/net/udp.h:85 [inline]\n udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n sk_common_release+0xaf/0x3f0 net/core/sock.c:3820\n inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437\n inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489\n __sock_release net/socket.c:658 [inline]\n sock_release+0xa0/0x210 net/socket.c:686\n cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\n slab_free_hook mm/slub.c:2269 [inline]\n slab_free mm/slub.c:4580 [inline]\n kmem_cache_free+0x207/0xc40 mm/slub.c:4682\n net_free net/core/net_namespace.c:454 [inline]\n cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: events cleanup_bearer",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56642",
"url": "https://www.suse.com/security/cve/CVE-2024-56642"
},
{
"category": "external",
"summary": "SUSE Bug 1235433 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "external",
"summary": "SUSE Bug 1235434 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56642"
},
{
"cve": "CVE-2024-56643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56643"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: Fix memory leak in dccp_feat_change_recv\n\nIf dccp_feat_push_confirm() fails after new value for SP feature was accepted\nwithout reconciliation (\u0027entry == NULL\u0027 branch), memory allocated for that value\nwith dccp_feat_clone_sp_val() is never freed.\n\nHere is the kmemleak stack for this:\n\nunreferenced object 0xffff88801d4ab488 (size 8):\n comm \"syz-executor310\", pid 1127, jiffies 4295085598 (age 41.666s)\n hex dump (first 8 bytes):\n 01 b4 4a 1d 80 88 ff ff ..J.....\n backtrace:\n [\u003c00000000db7cabfe\u003e] kmemdup+0x23/0x50 mm/util.c:128\n [\u003c0000000019b38405\u003e] kmemdup include/linux/string.h:465 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:371 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:367 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_change_recv net/dccp/feat.c:1145 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_parse_options+0x1196/0x2180 net/dccp/feat.c:1416\n [\u003c00000000b1f6d94a\u003e] dccp_parse_options+0xa2a/0x1260 net/dccp/options.c:125\n [\u003c0000000030d7b621\u003e] dccp_rcv_state_process+0x197/0x13d0 net/dccp/input.c:650\n [\u003c000000001f74c72e\u003e] dccp_v4_do_rcv+0xf9/0x1a0 net/dccp/ipv4.c:688\n [\u003c00000000a6c24128\u003e] sk_backlog_rcv include/net/sock.h:1041 [inline]\n [\u003c00000000a6c24128\u003e] __release_sock+0x139/0x3b0 net/core/sock.c:2570\n [\u003c00000000cf1f3a53\u003e] release_sock+0x54/0x1b0 net/core/sock.c:3111\n [\u003c000000008422fa23\u003e] inet_wait_for_connect net/ipv4/af_inet.c:603 [inline]\n [\u003c000000008422fa23\u003e] __inet_stream_connect+0x5d0/0xf70 net/ipv4/af_inet.c:696\n [\u003c0000000015b6f64d\u003e] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:735\n [\u003c0000000010122488\u003e] __sys_connect_file+0x15c/0x1a0 net/socket.c:1865\n [\u003c00000000b4b70023\u003e] __sys_connect+0x165/0x1a0 net/socket.c:1882\n [\u003c00000000f4cb3815\u003e] __do_sys_connect net/socket.c:1892 [inline]\n [\u003c00000000f4cb3815\u003e] __se_sys_connect net/socket.c:1889 [inline]\n [\u003c00000000f4cb3815\u003e] __x64_sys_connect+0x6e/0xb0 net/socket.c:1889\n [\u003c00000000e7b1e839\u003e] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46\n [\u003c0000000055e91434\u003e] entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nClean up the allocated memory in case of dccp_feat_push_confirm() failure\nand bail out with an error reset code.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56643",
"url": "https://www.suse.com/security/cve/CVE-2024-56643"
},
{
"category": "external",
"summary": "SUSE Bug 1235132 for CVE-2024-56643",
"url": "https://bugzilla.suse.com/1235132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56644"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: release expired exception dst cached in socket\n\nDst objects get leaked in ip6_negative_advice() when this function is\nexecuted for an expired IPv6 route located in the exception table. There\nare several conditions that must be fulfilled for the leak to occur:\n* an ICMPv6 packet indicating a change of the MTU for the path is received,\n resulting in an exception dst being created\n* a TCP connection that uses the exception dst for routing packets must\n start timing out so that TCP begins retransmissions\n* after the exception dst expires, the FIB6 garbage collector must not run\n before TCP executes ip6_negative_advice() for the expired exception dst\n\nWhen TCP executes ip6_negative_advice() for an exception dst that has\nexpired and if no other socket holds a reference to the exception dst, the\nrefcount of the exception dst is 2, which corresponds to the increment\nmade by dst_init() and the increment made by the TCP socket for which the\nconnection is timing out. The refcount made by the socket is never\nreleased. The refcount of the dst is decremented in sk_dst_reset() but\nthat decrement is counteracted by a dst_hold() intentionally placed just\nbefore the sk_dst_reset() in ip6_negative_advice(). After\nip6_negative_advice() has finished, there is no other object tied to the\ndst. The socket lost its reference stored in sk_dst_cache and the dst is\nno longer in the exception table. The exception dst becomes a leaked\nobject.\n\nAs a result of this dst leak, an unbalanced refcount is reported for the\nloopback device of a net namespace being destroyed under kernels that do\nnot contain e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"):\nunregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFix the dst leak by removing the dst_hold() in ip6_negative_advice(). The\npatch that introduced the dst_hold() in ip6_negative_advice() was\n92f1655aa2b22 (\"net: fix __dst_negative_advice() race\"). But 92f1655aa2b22\nmerely refactored the code with regards to the dst refcount so the issue\nwas present even before 92f1655aa2b22. The bug was introduced in\n54c1a859efd9f (\"ipv6: Don\u0027t drop cache route entry unless timer actually\nexpired.\") where the expired cached route is deleted and the sk_dst_cache\nmember of the socket is set to NULL by calling dst_negative_advice() but\nthe refcount belonging to the socket is left unbalanced.\n\nThe IPv4 version - ipv4_negative_advice() - is not affected by this bug.\nWhen the TCP connection times out ipv4_negative_advice() merely resets the\nsk_dst_cache of the socket while decrementing the refcount of the\nexception dst.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56644",
"url": "https://www.suse.com/security/cve/CVE-2024-56644"
},
{
"category": "external",
"summary": "SUSE Bug 1235133 for CVE-2024-56644",
"url": "https://bugzilla.suse.com/1235133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: j1939: j1939_session_new(): fix skb reference counting\n\nSince j1939_session_skb_queue() does an extra skb_get() for each new\nskb, do the same for the initial one in j1939_session_new() to avoid\nrefcount underflow.\n\n[mkl: clean up commit message]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56645",
"url": "https://www.suse.com/security/cve/CVE-2024-56645"
},
{
"category": "external",
"summary": "SUSE Bug 1235134 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "external",
"summary": "SUSE Bug 1235135 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235135"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56645"
},
{
"cve": "CVE-2024-56648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: avoid potential out-of-bound access in fill_frame_info()\n\nsyzbot is able to feed a packet with 14 bytes, pretending\nit is a vlan one.\n\nSince fill_frame_info() is relying on skb-\u003emac_len already,\nextend the check to cover this case.\n\nBUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606\n __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x91ae/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4091 [inline]\n slab_alloc_node mm/slub.c:4134 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1323 [inline]\n alloc_skb_with_frags+0xc8/0xd00 net/core/skbuff.c:6612\n sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2881\n packet_alloc_skb net/packet/af_packet.c:2995 [inline]\n packet_snd net/packet/af_packet.c:3089 [inline]\n packet_sendmsg+0x74c6/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56648",
"url": "https://www.suse.com/security/cve/CVE-2024-56648"
},
{
"category": "external",
"summary": "SUSE Bug 1235451 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "external",
"summary": "SUSE Bug 1235452 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56648"
},
{
"cve": "CVE-2024-56649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: enetc: Do not configure preemptible TCs if SIs do not support\n\nBoth ENETC PF and VF drivers share enetc_setup_tc_mqprio() to configure\nMQPRIO. And enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs()\nto configure preemptible TCs. However, only PF is able to configure\npreemptible TCs. Because only PF has related registers, while VF does not\nhave these registers. So for VF, its hw-\u003eport pointer is NULL. Therefore,\nVF will access an invalid pointer when accessing a non-existent register,\nwhich will cause a crash issue. The simplified log is as follows.\n\nroot@ls1028ardb:~# tc qdisc add dev eno0vf0 parent root handle 100: \\\nmqprio num_tc 4 map 0 0 1 1 2 2 3 3 queues 1@0 1@1 1@2 1@3 hw 1\n[ 187.290775] Unable to handle kernel paging request at virtual address 0000000000001f00\n[ 187.424831] pc : enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.430518] lr : enetc_mm_commit_preemptible_tcs+0x30c/0x400\n[ 187.511140] Call trace:\n[ 187.513588] enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.518918] enetc_setup_tc_mqprio+0x180/0x214\n[ 187.523374] enetc_vf_setup_tc+0x1c/0x30\n[ 187.527306] mqprio_enable_offload+0x144/0x178\n[ 187.531766] mqprio_init+0x3ec/0x668\n[ 187.535351] qdisc_create+0x15c/0x488\n[ 187.539023] tc_modify_qdisc+0x398/0x73c\n[ 187.542958] rtnetlink_rcv_msg+0x128/0x378\n[ 187.547064] netlink_rcv_skb+0x60/0x130\n[ 187.550910] rtnetlink_rcv+0x18/0x24\n[ 187.554492] netlink_unicast+0x300/0x36c\n[ 187.558425] netlink_sendmsg+0x1a8/0x420\n[ 187.606759] ---[ end trace 0000000000000000 ]---\n\nIn addition, some PFs also do not support configuring preemptible TCs,\nsuch as eno1 and eno3 on LS1028A. It won\u0027t crash like it does for VFs,\nbut we should prevent these PFs from accessing these unimplemented\nregisters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56649",
"url": "https://www.suse.com/security/cve/CVE-2024-56649"
},
{
"category": "external",
"summary": "SUSE Bug 1235449 for CVE-2024-56649",
"url": "https://bugzilla.suse.com/1235449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56649"
},
{
"cve": "CVE-2024-56651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: hi311x: hi3110_can_ist(): fix potential use-after-free\n\nThe commit a22bd630cfff (\"can: hi311x: do not report txerr and rxerr\nduring bus-off\") removed the reporting of rxerr and txerr even in case\nof correct operation (i. e. not bus-off).\n\nThe error count information added to the CAN frame after netif_rx() is\na potential use after free, since there is no guarantee that the skb\nis in the same state. It might be freed or reused.\n\nFix the issue by postponing the netif_rx() call in case of txerr and\nrxerr reporting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56651",
"url": "https://www.suse.com/security/cve/CVE-2024-56651"
},
{
"category": "external",
"summary": "SUSE Bug 1235528 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "external",
"summary": "SUSE Bug 1236570 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1236570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56651"
},
{
"cve": "CVE-2024-56654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56654"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating\n\nThe usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is\nnot safe since for the most part entries fetched this way shall be\ntreated as rcu_dereference:\n\n\tNote that the value returned by rcu_dereference() is valid\n\tonly within the enclosing RCU read-side critical section [1]_.\n\tFor example, the following is **not** legal::\n\n\t\trcu_read_lock();\n\t\tp = rcu_dereference(head.next);\n\t\trcu_read_unlock();\n\t\tx = p-\u003eaddress;\t/* BUG!!! */\n\t\trcu_read_lock();\n\t\ty = p-\u003edata;\t/* BUG!!! */\n\t\trcu_read_unlock();",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56654",
"url": "https://www.suse.com/security/cve/CVE-2024-56654"
},
{
"category": "external",
"summary": "SUSE Bug 1235532 for CVE-2024-56654",
"url": "https://bugzilla.suse.com/1235532"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56654"
},
{
"cve": "CVE-2024-56656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips\n\nThe 5760X (P7) chip\u0027s HW GRO/LRO interface is very similar to that of\nthe previous generation (5750X or P5). However, the aggregation ID\nfields in the completion structures on P7 have been redefined from\n16 bits to 12 bits. The freed up 4 bits are redefined for part of the\nmetadata such as the VLAN ID. The aggregation ID mask was not modified\nwhen adding support for P7 chips. Including the extra 4 bits for the\naggregation ID can potentially cause the driver to store or fetch the\npacket header of GRO/LRO packets in the wrong TPA buffer. It may hit\nthe BUG() condition in __skb_pull() because the SKB contains no valid\npacket header:\n\nkernel BUG at include/linux/skbuff.h:2766!\nOops: invalid opcode: 0000 1 PREEMPT SMP NOPTI\nCPU: 4 UID: 0 PID: 0 Comm: swapper/4 Kdump: loaded Tainted: G OE 6.12.0-rc2+ #7\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: Dell Inc. PowerEdge R760/0VRV9X, BIOS 1.0.1 12/27/2022\nRIP: 0010:eth_type_trans+0xda/0x140\nCode: 80 00 00 00 eb c1 8b 47 70 2b 47 74 48 8b 97 d0 00 00 00 83 f8 01 7e 1b 48 85 d2 74 06 66 83 3a ff 74 09 b8 00 04 00 00 eb a5 \u003c0f\u003e 0b b8 00 01 00 00 eb 9c 48 85 ff 74 eb 31 f6 b9 02 00 00 00 48\nRSP: 0018:ff615003803fcc28 EFLAGS: 00010283\nRAX: 00000000000022d2 RBX: 0000000000000003 RCX: ff2e8c25da334040\nRDX: 0000000000000040 RSI: ff2e8c25c1ce8000 RDI: ff2e8c25869f9000\nRBP: ff2e8c258c31c000 R08: ff2e8c25da334000 R09: 0000000000000001\nR10: ff2e8c25da3342c0 R11: ff2e8c25c1ce89c0 R12: ff2e8c258e0990b0\nR13: ff2e8c25bb120000 R14: ff2e8c25c1ce89c0 R15: ff2e8c25869f9000\nFS: 0000000000000000(0000) GS:ff2e8c34be300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055f05317e4c8 CR3: 000000108bac6006 CR4: 0000000000773ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n ? die+0x33/0x90\n ? do_trap+0xd9/0x100\n ? eth_type_trans+0xda/0x140\n ? do_error_trap+0x65/0x80\n ? eth_type_trans+0xda/0x140\n ? exc_invalid_op+0x4e/0x70\n ? eth_type_trans+0xda/0x140\n ? asm_exc_invalid_op+0x16/0x20\n ? eth_type_trans+0xda/0x140\n bnxt_tpa_end+0x10b/0x6b0 [bnxt_en]\n ? bnxt_tpa_start+0x195/0x320 [bnxt_en]\n bnxt_rx_pkt+0x902/0xd90 [bnxt_en]\n ? __bnxt_tx_int.constprop.0+0x89/0x300 [bnxt_en]\n ? kmem_cache_free+0x343/0x440\n ? __bnxt_tx_int.constprop.0+0x24f/0x300 [bnxt_en]\n __bnxt_poll_work+0x193/0x370 [bnxt_en]\n bnxt_poll_p5+0x9a/0x300 [bnxt_en]\n ? try_to_wake_up+0x209/0x670\n __napi_poll+0x29/0x1b0\n\nFix it by redefining the aggregation ID mask for P5_PLUS chips to be\n12 bits. This will work because the maximum aggregation ID is less\nthan 4096 on all P5_PLUS chips.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56656",
"url": "https://www.suse.com/security/cve/CVE-2024-56656"
},
{
"category": "external",
"summary": "SUSE Bug 1235444 for CVE-2024-56656",
"url": "https://bugzilla.suse.com/1235444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56656"
},
{
"cve": "CVE-2024-56659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56659"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lapb: increase LAPB_HEADER_LEN\n\nIt is unclear if net/lapb code is supposed to be ready for 8021q.\n\nWe can at least avoid crashes like the following :\n\nskbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2\n------------[ cut here ]------------\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc90002ddf638 EFLAGS: 00010282\nRAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600\nRDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000\nRBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60\nR10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140\nR13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016\nFS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n nr_header+0x36/0x320 net/netrom/nr_dev.c:69\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n vlan_dev_hard_header+0x359/0x480 net/8021q/vlan_dev.c:83\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n lapbeth_data_transmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257\n lapb_data_transmit+0x91/0xb0 net/lapb/lapb_iface.c:447\n lapb_transmit_buffer+0x168/0x1f0 net/lapb/lapb_out.c:149\n lapb_establish_data_link+0x84/0xd0\n lapb_device_event+0x4e0/0x670\n notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93\n __dev_notify_flags+0x207/0x400\n dev_change_flags+0xf0/0x1a0 net/core/dev.c:8922\n devinet_ioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188\n inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1003\n sock_do_ioctl+0x158/0x460 net/socket.c:1227\n sock_ioctl+0x626/0x8e0 net/socket.c:1346\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56659",
"url": "https://www.suse.com/security/cve/CVE-2024-56659"
},
{
"category": "external",
"summary": "SUSE Bug 1235439 for CVE-2024-56659",
"url": "https://bugzilla.suse.com/1235439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56659"
},
{
"cve": "CVE-2024-56660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: DR, prevent potential error pointer dereference\n\nThe dr_domain_add_vport_cap() function generally returns NULL on error\nbut sometimes we want it to return ERR_PTR(-EBUSY) so the caller can\nretry. The problem here is that \"ret\" can be either -EBUSY or -ENOMEM\nand if it\u0027s and -ENOMEM then the error pointer is propogated back and\neventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56660",
"url": "https://www.suse.com/security/cve/CVE-2024-56660"
},
{
"category": "external",
"summary": "SUSE Bug 1235437 for CVE-2024-56660",
"url": "https://bugzilla.suse.com/1235437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56660"
},
{
"cve": "CVE-2024-56661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix NULL deref in cleanup_bearer()\n\nsyzbot found [1] that after blamed commit, ub-\u003eubsock-\u003esk\nwas NULL when attempting the atomic_dec() :\n\natomic_dec(\u0026tipc_net(sock_net(ub-\u003eubsock-\u003esk))-\u003ewq_count);\n\nFix this by caching the tipc_net pointer.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\nCPU: 0 UID: 0 PID: 5896 Comm: kworker/0:3 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events cleanup_bearer\n RIP: 0010:read_pnet include/net/net_namespace.h:387 [inline]\n RIP: 0010:sock_net include/net/sock.h:655 [inline]\n RIP: 0010:cleanup_bearer+0x1f7/0x280 net/tipc/udp_media.c:820\nCode: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c f7 99 f6 48 8b 1b 48 83 c3 30 e8 f0 e4 60 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 80 3c 28 00 74 08 48 89 df e8 1a f7 99 f6 49 83 c7 e8 48 8b 1b\nRSP: 0018:ffffc9000410fb70 EFLAGS: 00010206\nRAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88802fe45a00\nRDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000410f900\nRBP: ffff88807e1f0908 R08: ffffc9000410f907 R09: 1ffff92000821f20\nR10: dffffc0000000000 R11: fffff52000821f21 R12: ffff888031d19980\nR13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e1f0918\nFS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556ca050b000 CR3: 0000000031c0c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56661",
"url": "https://www.suse.com/security/cve/CVE-2024-56661"
},
{
"category": "external",
"summary": "SUSE Bug 1234931 for CVE-2024-56661",
"url": "https://bugzilla.suse.com/1234931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl\n\nFix an issue detected by syzbot with KASAN:\n\nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/\ncore.c:416 [inline]\nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0\ndrivers/acpi/nfit/core.c:459\n\nThe issue occurs in cmd_to_func when the call_pkg-\u003end_reserved2\narray is accessed without verifying that call_pkg points to a buffer\nthat is appropriately sized as a struct nd_cmd_pkg. This can lead\nto out-of-bounds access and undefined behavior if the buffer does not\nhave sufficient space.\n\nTo address this, a check was added in acpi_nfit_ctl() to ensure that\nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)\nbefore accessing it. This ensures safe access to the members of\ncall_pkg, including the nd_reserved2 array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56662",
"url": "https://www.suse.com/security/cve/CVE-2024-56662"
},
{
"category": "external",
"summary": "SUSE Bug 1235533 for CVE-2024-56662",
"url": "https://bugzilla.suse.com/1235533"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one\n\nSince the netlink attribute range validation provides inclusive\nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be\nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.\n\nOne crash stack for demonstration:\n==================================================================\nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508\n\nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106\n print_report+0xe0/0x750 mm/kasan/report.c:398\n kasan_report+0x139/0x170 mm/kasan/report.c:495\n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189\n memcpy+0x25/0x60 mm/kasan/shadow.c:65\n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]\n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453\n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756\n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]\n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850\n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508\n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861\n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]\n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352\n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874\n sock_sendmsg_nosec net/socket.c:716 [inline]\n __sock_sendmsg net/socket.c:728 [inline]\n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499\n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553\n __sys_sendmsg net/socket.c:2582 [inline]\n __do_sys_sendmsg net/socket.c:2591 [inline]\n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUpdate the policy to ensure correct validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56663",
"url": "https://www.suse.com/security/cve/CVE-2024-56663"
},
{
"category": "external",
"summary": "SUSE Bug 1235454 for CVE-2024-56663",
"url": "https://bugzilla.suse.com/1235454"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56663"
},
{
"cve": "CVE-2024-56664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix race between element replace and close()\n\nElement replace (with a socket different from the one stored) may race\nwith socket\u0027s close() link popping \u0026 unlinking. __sock_map_delete()\nunconditionally unrefs the (wrong) element:\n\n// set map[0] = s0\nmap_update_elem(map, 0, s0)\n\n// drop fd of s0\nclose(s0)\n sock_map_close()\n lock_sock(sk) (s0!)\n sock_map_remove_links(sk)\n link = sk_psock_link_pop()\n sock_map_unlink(sk, link)\n sock_map_delete_from_link\n // replace map[0] with s1\n map_update_elem(map, 0, s1)\n sock_map_update_elem\n (s1!) lock_sock(sk)\n sock_map_update_common\n psock = sk_psock(sk)\n spin_lock(\u0026stab-\u003elock)\n osk = stab-\u003esks[idx]\n sock_map_add_link(..., \u0026stab-\u003esks[idx])\n sock_map_unref(osk, \u0026stab-\u003esks[idx])\n psock = sk_psock(osk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test(\u0026psock))\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n unlock_sock(sk)\n __sock_map_delete\n spin_lock(\u0026stab-\u003elock)\n sk = *psk // s1 replaced s0; sk == s1\n if (!sk_test || sk_test == sk) // sk_test (s0) != sk (s1); no branch\n sk = xchg(psk, NULL)\n if (sk)\n sock_map_unref(sk, psk) // unref s1; sks[idx] will dangle\n psock = sk_psock(sk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test())\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n release_sock(sk)\n\nThen close(map) enqueues bpf_map_free_deferred, which finally calls\nsock_map_free(). This results in some refcount_t warnings along with\na KASAN splat [1].\n\nFix __sock_map_delete(), do not allow sock_map_unref() on elements that\nmay have been replaced.\n\n[1]:\nBUG: KASAN: slab-use-after-free in sock_map_free+0x10e/0x330\nWrite of size 4 at addr ffff88811f5b9100 by task kworker/u64:12/1063\n\nCPU: 14 UID: 0 PID: 1063 Comm: kworker/u64:12 Not tainted 6.12.0+ #125\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014\nWorkqueue: events_unbound bpf_map_free_deferred\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x68/0x90\n print_report+0x174/0x4f6\n kasan_report+0xb9/0x190\n kasan_check_range+0x10f/0x1e0\n sock_map_free+0x10e/0x330\n bpf_map_free_deferred+0x173/0x320\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 1202:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n __kasan_slab_alloc+0x85/0x90\n kmem_cache_alloc_noprof+0x131/0x450\n sk_prot_alloc+0x5b/0x220\n sk_alloc+0x2c/0x870\n unix_create1+0x88/0x8a0\n unix_create+0xc5/0x180\n __sock_create+0x241/0x650\n __sys_socketpair+0x1ce/0x420\n __x64_sys_socketpair+0x92/0x100\n do_syscall_64+0x93/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 46:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x37/0x60\n __kasan_slab_free+0x4b/0x70\n kmem_cache_free+0x1a1/0x590\n __sk_destruct+0x388/0x5a0\n sk_psock_destroy+0x73e/0xa50\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nThe bu\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56664",
"url": "https://www.suse.com/security/cve/CVE-2024-56664"
},
{
"category": "external",
"summary": "SUSE Bug 1235249 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "external",
"summary": "SUSE Bug 1235250 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56664"
},
{
"cve": "CVE-2024-56667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56667"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix NULL pointer dereference in capture_engine\n\nWhen the intel_context structure contains NULL,\nit raises a NULL pointer dereference error in drm_info().\n\n(cherry picked from commit 754302a5bc1bd8fd3b7d85c168b0a1af6d4bba4d)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56667",
"url": "https://www.suse.com/security/cve/CVE-2024-56667"
},
{
"category": "external",
"summary": "SUSE Bug 1235016 for CVE-2024-56667",
"url": "https://bugzilla.suse.com/1235016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56667"
},
{
"cve": "CVE-2024-56670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer\n\nConsidering that in some extreme cases,\nwhen u_serial driver is accessed by multiple threads,\nThread A is executing the open operation and calling the gs_open,\nThread B is executing the disconnect operation and calling the\ngserial_disconnect function,The port-\u003eport_usb pointer will be set to NULL.\n\nE.g.\n Thread A Thread B\n gs_open() gadget_unbind_driver()\n gs_start_io() composite_disconnect()\n gs_start_rx() gserial_disconnect()\n ... ...\n spin_unlock(\u0026port-\u003eport_lock)\n status = usb_ep_queue() spin_lock(\u0026port-\u003eport_lock)\n spin_lock(\u0026port-\u003eport_lock) port-\u003eport_usb = NULL\n gs_free_requests(port-\u003eport_usb-\u003ein) spin_unlock(\u0026port-\u003eport_lock)\n Crash\n\nThis causes thread A to access a null pointer (port-\u003eport_usb is null)\nwhen calling the gs_free_requests function, causing a crash.\n\nIf port_usb is NULL, the release request will be skipped as it\nwill be done by gserial_disconnect.\n\nSo add a null pointer check to gs_start_io before attempting\nto access the value of the pointer port-\u003eport_usb.\n\nCall trace:\n gs_start_io+0x164/0x25c\n gs_open+0x108/0x13c\n tty_open+0x314/0x638\n chrdev_open+0x1b8/0x258\n do_dentry_open+0x2c4/0x700\n vfs_open+0x2c/0x3c\n path_openat+0xa64/0xc60\n do_filp_open+0xb8/0x164\n do_sys_openat2+0x84/0xf0\n __arm64_sys_openat+0x70/0x9c\n invoke_syscall+0x58/0x114\n el0_svc_common+0x80/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x38/0x68",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56670",
"url": "https://www.suse.com/security/cve/CVE-2024-56670"
},
{
"category": "external",
"summary": "SUSE Bug 1235488 for CVE-2024-56670",
"url": "https://bugzilla.suse.com/1235488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56670"
},
{
"cve": "CVE-2024-56672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56672"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: Fix UAF in blkcg_unpin_online()\n\nblkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To\nwalk up, it uses blkcg_parent(blkcg) but it was calling that after\nblkcg_destroy_blkgs(blkcg) which could free the blkcg, leading to the\nfollowing UAF:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in blkcg_unpin_online+0x15a/0x270\n Read of size 8 at addr ffff8881057678c0 by task kworker/9:1/117\n\n CPU: 9 UID: 0 PID: 117 Comm: kworker/9:1 Not tainted 6.13.0-rc1-work-00182-gb8f52214c61a-dirty #48\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 02/02/2022\n Workqueue: cgwb_release cgwb_release_workfn\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x27/0x80\n print_report+0x151/0x710\n kasan_report+0xc0/0x100\n blkcg_unpin_online+0x15a/0x270\n cgwb_release_workfn+0x194/0x480\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n ...\n Freed by task 1944:\n kasan_save_track+0x2b/0x70\n kasan_save_free_info+0x3c/0x50\n __kasan_slab_free+0x33/0x50\n kfree+0x10c/0x330\n css_free_rwork_fn+0xe6/0xb30\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n\nNote that the UAF is not easy to trigger as the free path is indirected\nbehind a couple RCU grace periods and a work item execution. I could only\ntrigger it with artifical msleep() injected in blkcg_unpin_online().\n\nFix it by reading the parent pointer before destroying the blkcg\u0027s blkg\u0027s.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56672",
"url": "https://www.suse.com/security/cve/CVE-2024-56672"
},
{
"category": "external",
"summary": "SUSE Bug 1235534 for CVE-2024-56672",
"url": "https://bugzilla.suse.com/1235534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56672"
},
{
"cve": "CVE-2024-56675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors\n\nUprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU\nprotection. But it is possible to attach a non-sleepable BPF program to a\nuprobe, and non-sleepable BPF programs are freed via normal RCU (see\n__bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal\nRCU grace period does not imply a tasks-trace-RCU grace period.\n\nFix it by explicitly waiting for a tasks-trace-RCU grace period after\nremoving the attachment of a bpf_prog to a perf_event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56675",
"url": "https://www.suse.com/security/cve/CVE-2024-56675"
},
{
"category": "external",
"summary": "SUSE Bug 1235555 for CVE-2024-56675",
"url": "https://bugzilla.suse.com/1235555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56675"
},
{
"cve": "CVE-2024-56677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56677"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()\n\nDuring early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE,\nsince pageblock_order is still zero and it gets initialized\nlater during initmem_init() e.g.\nsetup_arch() -\u003e initmem_init() -\u003e sparse_init() -\u003e set_pageblock_order()\n\nOne such use case where this causes issue is -\nearly_setup() -\u003e early_init_devtree() -\u003e fadump_reserve_mem() -\u003e fadump_cma_init()\n\nThis causes CMA memory alignment check to be bypassed in\ncma_init_reserved_mem(). Then later cma_activate_area() can hit\na VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1)) if the reserved memory\narea was not pageblock_order aligned.\n\nFix it by moving the fadump_cma_init() after initmem_init(),\nwhere other such cma reservations also gets called.\n\n\u003cstack trace\u003e\n==============\npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10010\nflags: 0x13ffff800000000(node=1|zone=0|lastcpupid=0x7ffff) CMA\nraw: 013ffff800000000 5deadbeef0000100 5deadbeef0000122 0000000000000000\nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1))\n------------[ cut here ]------------\nkernel BUG at mm/page_alloc.c:778!\n\nCall Trace:\n__free_one_page+0x57c/0x7b0 (unreliable)\nfree_pcppages_bulk+0x1a8/0x2c8\nfree_unref_page_commit+0x3d4/0x4e4\nfree_unref_page+0x458/0x6d0\ninit_cma_reserved_pageblock+0x114/0x198\ncma_init_reserved_areas+0x270/0x3e0\ndo_one_initcall+0x80/0x2f8\nkernel_init_freeable+0x33c/0x530\nkernel_init+0x34/0x26c\nret_from_kernel_user_thread+0x14/0x1c",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56677",
"url": "https://www.suse.com/security/cve/CVE-2024-56677"
},
{
"category": "external",
"summary": "SUSE Bug 1235494 for CVE-2024-56677",
"url": "https://bugzilla.suse.com/1235494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56677"
},
{
"cve": "CVE-2024-56678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/mm/fault: Fix kfence page fault reporting\n\ncopy_from_kernel_nofault() can be called when doing read of /proc/kcore.\n/proc/kcore can have some unmapped kfence objects which when read via\ncopy_from_kernel_nofault() can cause page faults. Since *_nofault()\nfunctions define their own fixup table for handling fault, use that\ninstead of asking kfence to handle such faults.\n\nHence we search the exception tables for the nip which generated the\nfault. If there is an entry then we let the fixup table handler handle the\npage fault by returning an error from within ___do_page_fault().\n\nThis can be easily triggered if someone tries to do dd from /proc/kcore.\neg. dd if=/proc/kcore of=/dev/null bs=1M\n\nSome example false negatives:\n\n ===============================\n BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0\n Invalid read at 0xc0000000fdff0000:\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec\n\n BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0\n Use-after-free read at 0xc0000000fe050000 (in kfence-#2):\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56678",
"url": "https://www.suse.com/security/cve/CVE-2024-56678"
},
{
"category": "external",
"summary": "SUSE Bug 1235495 for CVE-2024-56678",
"url": "https://bugzilla.suse.com/1235495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56678"
},
{
"cve": "CVE-2024-56681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: bcm - add error check in the ahash_hmac_init function\n\nThe ahash_init functions may return fails. The ahash_hmac_init should\nnot return ok when ahash_init returns error. For an example, ahash_init\nwill return -ENOMEM when allocation memory is error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56681",
"url": "https://www.suse.com/security/cve/CVE-2024-56681"
},
{
"category": "external",
"summary": "SUSE Bug 1235557 for CVE-2024-56681",
"url": "https://bugzilla.suse.com/1235557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56683"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hdmi: Avoid hang with debug registers when suspended\n\nTrying to read /sys/kernel/debug/dri/1/hdmi1_regs\nwhen the hdmi is disconnected results in a fatal system hang.\n\nThis is due to the pm suspend code disabling the dvp clock.\nThat is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG,\nwhich results in accesses hanging AXI bus.\n\nProtect against this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56683",
"url": "https://www.suse.com/security/cve/CVE-2024-56683"
},
{
"category": "external",
"summary": "SUSE Bug 1235497 for CVE-2024-56683",
"url": "https://bugzilla.suse.com/1235497"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56683"
},
{
"cve": "CVE-2024-56687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: musb: Fix hardware lockup on first Rx endpoint request\n\nThere is a possibility that a request\u0027s callback could be invoked from\nusb_ep_queue() (call trace below, supplemented with missing calls):\n\nreq-\u003ecomplete from usb_gadget_giveback_request\n\t(drivers/usb/gadget/udc/core.c:999)\nusb_gadget_giveback_request from musb_g_giveback\n\t(drivers/usb/musb/musb_gadget.c:147)\nmusb_g_giveback from rxstate\n\t(drivers/usb/musb/musb_gadget.c:784)\nrxstate from musb_ep_restart\n\t(drivers/usb/musb/musb_gadget.c:1169)\nmusb_ep_restart from musb_ep_restart_resume_work\n\t(drivers/usb/musb/musb_gadget.c:1176)\nmusb_ep_restart_resume_work from musb_queue_resume_work\n\t(drivers/usb/musb/musb_core.c:2279)\nmusb_queue_resume_work from musb_gadget_queue\n\t(drivers/usb/musb/musb_gadget.c:1241)\nmusb_gadget_queue from usb_ep_queue\n\t(drivers/usb/gadget/udc/core.c:300)\n\nAccording to the docstring of usb_ep_queue(), this should not happen:\n\n\"Note that @req\u0027s -\u003ecomplete() callback must never be called from within\nusb_ep_queue() as that can create deadlock situations.\"\n\nIn fact, a hardware lockup might occur in the following sequence:\n\n1. The gadget is initialized using musb_gadget_enable().\n2. Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an\n interrupt.\n3. If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an\n empty queue (next_request() returns NULL). The interrupt flag has\n already been cleared by the glue layer handler, but the RXPKTRDY flag\n remains set.\n4. The first request is enqueued using usb_ep_queue(), leading to the call\n of req-\u003ecomplete(), as shown in the call trace above.\n5. If the callback enables IRQs and another packet is waiting, step (3)\n repeats. The request queue is empty because usb_g_giveback() removes the\n request before invoking the callback.\n6. The endpoint remains locked up, as the interrupt triggered by hardware\n setting the RXPKTRDY flag has been handled, but the flag itself remains\n set.\n\nFor this scenario to occur, it is only necessary for IRQs to be enabled at\nsome point during the complete callback. This happens with the USB Ethernet\ngadget, whose rx_complete() callback calls netif_rx(). If called in the\ntask context, netif_rx() disables the bottom halves (BHs). When the BHs are\nre-enabled, IRQs are also enabled to allow soft IRQs to be processed. The\ngadget itself is initialized at module load (or at boot if built-in), but\nthe first request is enqueued when the network interface is brought up,\ntriggering rx_complete() in the task context via ioctl(). If a packet\narrives while the interface is down, it can prevent the interface from\nreceiving any further packets from the USB host.\n\nThe situation is quite complicated with many parties involved. This\nparticular issue can be resolved in several possible ways:\n\n1. Ensure that callbacks never enable IRQs. This would be difficult to\n enforce, as discovering how netif_rx() interacts with interrupts was\n already quite challenging and u_ether is not the only function driver.\n Similar \"bugs\" could be hidden in other drivers as well.\n2. Disable MUSB interrupts in musb_g_giveback() before calling the callback\n and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(),\n for example). This would ensure that MUSB interrupts are not handled\n during the callback, even if IRQs are enabled. In fact, it would allow\n IRQs to be enabled when releasing the lock. However, this feels like an\n inelegant hack.\n3. Modify the interrupt handler to clear the RXPKTRDY flag if the request\n queue is empty. While this approach also feels like a hack, it wastes\n CPU time by attempting to handle incoming packets when the software is\n not ready to process them.\n4. Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart().\n This ensures that the hardware can receive packets when there is at\n least one request in the queue. Once I\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56687",
"url": "https://www.suse.com/security/cve/CVE-2024-56687"
},
{
"category": "external",
"summary": "SUSE Bug 1235537 for CVE-2024-56687",
"url": "https://bugzilla.suse.com/1235537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56687"
},
{
"cve": "CVE-2024-56688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56688"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport\n\nSince transport-\u003esock has been set to NULL during reset transport,\nXPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the\nxs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request()\nto dereference the transport-\u003esock that has been set to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56688",
"url": "https://www.suse.com/security/cve/CVE-2024-56688"
},
{
"category": "external",
"summary": "SUSE Bug 1235538 for CVE-2024-56688",
"url": "https://bugzilla.suse.com/1235538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56688"
},
{
"cve": "CVE-2024-56690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY\n\nSince commit 8f4f68e788c3 (\"crypto: pcrypt - Fix hungtask for\nPADATA_RESET\"), the pcrypt encryption and decryption operations return\n-EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is\ngenerated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns\n-EAGAIN, the unnecessary panic will occur when panic_on_warn set 1.\nFix this issue by calling crypto layer directly without parallelization\nin that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56690",
"url": "https://www.suse.com/security/cve/CVE-2024-56690"
},
{
"category": "external",
"summary": "SUSE Bug 1235428 for CVE-2024-56690",
"url": "https://bugzilla.suse.com/1235428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56690"
},
{
"cve": "CVE-2024-56691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56691"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56691",
"url": "https://www.suse.com/security/cve/CVE-2024-56691"
},
{
"category": "external",
"summary": "SUSE Bug 1235425 for CVE-2024-56691",
"url": "https://bugzilla.suse.com/1235425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56691"
},
{
"cve": "CVE-2024-56694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix recursive lock when verdict program return SK_PASS\n\nWhen the stream_verdict program returns SK_PASS, it places the received skb\ninto its own receive queue, but a recursive lock eventually occurs, leading\nto an operating system deadlock. This issue has been present since v6.9.\n\n\u0027\u0027\u0027\nsk_psock_strp_data_ready\n write_lock_bh(\u0026sk-\u003esk_callback_lock)\n strp_data_ready\n strp_read_sock\n read_sock -\u003e tcp_read_sock\n strp_recv\n cb.rcv_msg -\u003e sk_psock_strp_read\n # now stream_verdict return SK_PASS without peer sock assign\n __SK_PASS = sk_psock_map_verd(SK_PASS, NULL)\n sk_psock_verdict_apply\n sk_psock_skb_ingress_self\n sk_psock_skb_ingress_enqueue\n sk_psock_data_ready\n read_lock_bh(\u0026sk-\u003esk_callback_lock) \u003c= dead lock\n\n\u0027\u0027\u0027\n\nThis topic has been discussed before, but it has not been fixed.\nPrevious discussion:\nhttps://lore.kernel.org/all/6684a5864ec86_403d20898@john.notmuch",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56694",
"url": "https://www.suse.com/security/cve/CVE-2024-56694"
},
{
"category": "external",
"summary": "SUSE Bug 1235412 for CVE-2024-56694",
"url": "https://bugzilla.suse.com/1235412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56694"
},
{
"cve": "CVE-2024-56698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56698"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Fix looping of queued SG entries\n\nThe dwc3_request-\u003enum_queued_sgs is decremented on completion. If a\npartially completed request is handled, then the\ndwc3_request-\u003enum_queued_sgs no longer reflects the total number of\nnum_queued_sgs (it would be cleared).\n\nCorrectly check the number of request SG entries remained to be prepare\nand queued. Failure to do this may cause null pointer dereference when\naccessing non-existent SG entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56698",
"url": "https://www.suse.com/security/cve/CVE-2024-56698"
},
{
"category": "external",
"summary": "SUSE Bug 1235491 for CVE-2024-56698",
"url": "https://bugzilla.suse.com/1235491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56698"
},
{
"cve": "CVE-2024-56700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56700"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: wl128x: Fix atomicity violation in fmc_send_cmd()\n\nAtomicity violation occurs when the fmc_send_cmd() function is executed\nsimultaneously with the modification of the fmdev-\u003eresp_skb value.\nConsider a scenario where, after passing the validity check within the\nfunction, a non-null fmdev-\u003eresp_skb variable is assigned a null value.\nThis results in an invalid fmdev-\u003eresp_skb variable passing the validity\ncheck. As seen in the later part of the function, skb = fmdev-\u003eresp_skb;\nwhen the invalid fmdev-\u003eresp_skb passes the check, a null pointer\ndereference error may occur at line 478, evt_hdr = (void *)skb-\u003edata;\n\nTo address this issue, it is recommended to include the validity check of\nfmdev-\u003eresp_skb within the locked section of the function. This\nmodification ensures that the value of fmdev-\u003eresp_skb does not change\nduring the validation process, thereby maintaining its validity.\n\nThis possible bug is found by an experimental static analysis tool\ndeveloped by our team. This tool analyzes the locking APIs\nto extract function pairs that can be concurrently executed, and then\nanalyzes the instructions in the paired functions to identify possible\nconcurrency bugs including data races and atomicity violations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56700",
"url": "https://www.suse.com/security/cve/CVE-2024-56700"
},
{
"category": "external",
"summary": "SUSE Bug 1235500 for CVE-2024-56700",
"url": "https://bugzilla.suse.com/1235500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix dtl_access_lock to be a rw_semaphore\n\nThe dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because\nthe code calls kmalloc() while holding it, which can sleep:\n\n # echo 1 \u003e /proc/powerpc/vcpudispatch_stats\n BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 199, name: sh\n preempt_count: 1, expected: 0\n 3 locks held by sh/199:\n #0: c00000000a0743f8 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x324/0x438\n #1: c0000000028c7058 (dtl_enable_mutex){+.+.}-{3:3}, at: vcpudispatch_stats_write+0xd4/0x5f4\n #2: c0000000028c70b8 (dtl_access_lock){+.+.}-{2:2}, at: vcpudispatch_stats_write+0x220/0x5f4\n CPU: 0 PID: 199 Comm: sh Not tainted 6.10.0-rc4 #152\n Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1202 0xf000005 of:SLOF,HEAD hv:linux,kvm pSeries\n Call Trace:\n dump_stack_lvl+0x130/0x148 (unreliable)\n __might_resched+0x174/0x410\n kmem_cache_alloc_noprof+0x340/0x3d0\n alloc_dtl_buffers+0x124/0x1ac\n vcpudispatch_stats_write+0x2a8/0x5f4\n proc_reg_write+0xf4/0x150\n vfs_write+0xfc/0x438\n ksys_write+0x88/0x148\n system_call_exception+0x1c4/0x5a0\n system_call_common+0xf4/0x258",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56701",
"url": "https://www.suse.com/security/cve/CVE-2024-56701"
},
{
"category": "external",
"summary": "SUSE Bug 1235496 for CVE-2024-56701",
"url": "https://bugzilla.suse.com/1235496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56701"
},
{
"cve": "CVE-2024-56704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56704"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p/xen: fix release of IRQ\n\nKernel logs indicate an IRQ was double-freed.\n\nPass correct device ID during IRQ release.\n\n[Dominique: remove confusing variable reset to 0]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56704",
"url": "https://www.suse.com/security/cve/CVE-2024-56704"
},
{
"category": "external",
"summary": "SUSE Bug 1235584 for CVE-2024-56704",
"url": "https://bugzilla.suse.com/1235584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56704"
},
{
"cve": "CVE-2024-56705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56705"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Add check for rgby_data memory allocation failure\n\nIn ia_css_3a_statistics_allocate(), there is no check on the allocation\nresult of the rgby_data memory. If rgby_data is not successfully\nallocated, it may trigger the assert(host_stats-\u003ergby_data) assertion in\nia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56705",
"url": "https://www.suse.com/security/cve/CVE-2024-56705"
},
{
"category": "external",
"summary": "SUSE Bug 1235568 for CVE-2024-56705",
"url": "https://bugzilla.suse.com/1235568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56705"
},
{
"cve": "CVE-2024-56708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56708"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/igen6: Avoid segmentation fault on module unload\n\nThe segmentation fault happens because:\n\nDuring modprobe:\n1. In igen6_probe(), igen6_pvt will be allocated with kzalloc()\n2. In igen6_register_mci(), mci-\u003epvt_info will point to\n \u0026igen6_pvt-\u003eimc[mc]\n\nDuring rmmod:\n1. In mci_release() in edac_mc.c, it will kfree(mci-\u003epvt_info)\n2. In igen6_remove(), it will kfree(igen6_pvt);\n\nFix this issue by setting mci-\u003epvt_info to NULL to avoid the double\nkfree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56708",
"url": "https://www.suse.com/security/cve/CVE-2024-56708"
},
{
"category": "external",
"summary": "SUSE Bug 1235564 for CVE-2024-56708",
"url": "https://bugzilla.suse.com/1235564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56708"
},
{
"cve": "CVE-2024-56709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check if iowq is killed before queuing\n\ntask work can be executed after the task has gone through io_uring\ntermination, whether it\u0027s the final task_work run or the fallback path.\nIn this case, task work will find -\u003eio_wq being already killed and\nnull\u0027ed, which is a problem if it then tries to forward the request to\nio_queue_iowq(). Make io_queue_iowq() fail requests in this case.\n\nNote that it also checks PF_KTHREAD, because the user can first close\na DEFER_TASKRUN ring and shortly after kill the task, in which case\n-\u003eiowq check would race.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56709",
"url": "https://www.suse.com/security/cve/CVE-2024-56709"
},
{
"category": "external",
"summary": "SUSE Bug 1235552 for CVE-2024-56709",
"url": "https://bugzilla.suse.com/1235552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56709"
},
{
"cve": "CVE-2024-56712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56712"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: fix memory leak on last export_udmabuf() error path\n\nIn export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a\ndma_buf owning the udmabuf has already been created; but the error handling\nin udmabuf_create() will tear down the udmabuf without doing anything about\nthe containing dma_buf.\n\nThis leaves a dma_buf in memory that contains a dangling pointer; though\nthat doesn\u0027t seem to lead to anything bad except a memory leak.\n\nFix it by moving the dma_buf_fd() call out of export_udmabuf() so that we\ncan give it different error handling.\n\nNote that the shape of this code changed a lot in commit 5e72b2b41a21\n(\"udmabuf: convert udmabuf driver to use folios\"); but the memory leak\nseems to have existed since the introduction of udmabuf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56712",
"url": "https://www.suse.com/security/cve/CVE-2024-56712"
},
{
"category": "external",
"summary": "SUSE Bug 1235565 for CVE-2024-56712",
"url": "https://bugzilla.suse.com/1235565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56712"
},
{
"cve": "CVE-2024-56716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56716"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: prevent bad user input in nsim_dev_health_break_write()\n\nIf either a zero count or a large one is provided, kernel can crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56716",
"url": "https://www.suse.com/security/cve/CVE-2024-56716"
},
{
"category": "external",
"summary": "SUSE Bug 1235587 for CVE-2024-56716",
"url": "https://bugzilla.suse.com/1235587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56716"
},
{
"cve": "CVE-2024-56722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix cpu stuck caused by printings during reset\n\nDuring reset, cmd to destroy resources such as qp, cq, and mr may fail,\nand error logs will be printed. When a large number of resources are\ndestroyed, there will be lots of printings, and it may lead to a cpu\nstuck.\n\nDelete some unnecessary printings and replace other printing functions\nin these paths with the ratelimited version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56722",
"url": "https://www.suse.com/security/cve/CVE-2024-56722"
},
{
"category": "external",
"summary": "SUSE Bug 1235570 for CVE-2024-56722",
"url": "https://bugzilla.suse.com/1235570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56722"
},
{
"cve": "CVE-2024-56723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56723"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56723",
"url": "https://www.suse.com/security/cve/CVE-2024-56723"
},
{
"category": "external",
"summary": "SUSE Bug 1235571 for CVE-2024-56723",
"url": "https://bugzilla.suse.com/1235571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56723"
},
{
"cve": "CVE-2024-56724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56724"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56724",
"url": "https://www.suse.com/security/cve/CVE-2024-56724"
},
{
"category": "external",
"summary": "SUSE Bug 1235577 for CVE-2024-56724",
"url": "https://bugzilla.suse.com/1235577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56724"
},
{
"cve": "CVE-2024-56729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56729"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: Initialize cfid-\u003etcon before performing network ops\n\nAvoid leaking a tcon ref when a lease break races with opening the\ncached directory. Processing the leak break might take a reference to\nthe tcon in cached_dir_lease_break() and then fail to release the ref in\ncached_dir_offload_close, since cfid-\u003etcon is still NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56729",
"url": "https://www.suse.com/security/cve/CVE-2024-56729"
},
{
"category": "external",
"summary": "SUSE Bug 1235503 for CVE-2024-56729",
"url": "https://bugzilla.suse.com/1235503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56729"
},
{
"cve": "CVE-2024-56739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: check if __rtc_read_time was successful in rtc_timer_do_work()\n\nIf the __rtc_read_time call fails,, the struct rtc_time tm; may contain\nuninitialized data, or an illegal date/time read from the RTC hardware.\n\nWhen calling rtc_tm_to_ktime later, the result may be a very large value\n(possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue,\nthey will continually expire, may causing kernel softlockup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56739",
"url": "https://www.suse.com/security/cve/CVE-2024-56739"
},
{
"category": "external",
"summary": "SUSE Bug 1235611 for CVE-2024-56739",
"url": "https://bugzilla.suse.com/1235611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56741"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56741",
"url": "https://www.suse.com/security/cve/CVE-2024-56741"
},
{
"category": "external",
"summary": "SUSE Bug 1235502 for CVE-2024-56741",
"url": "https://bugzilla.suse.com/1235502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56741"
},
{
"cve": "CVE-2024-56745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56745"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reset_method_store() memory leak\n\nIn reset_method_store(), a string is allocated via kstrndup() and assigned\nto the local \"options\". options is then used in with strsep() to find\nspaces:\n\n while ((name = strsep(\u0026options, \" \")) != NULL) {\n\nIf there are no remaining spaces, then options is set to NULL by strsep(),\nso the subsequent kfree(options) doesn\u0027t free the memory allocated via\nkstrndup().\n\nFix by using a separate tmp_options to iterate with strsep() so options is\npreserved.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56745",
"url": "https://www.suse.com/security/cve/CVE-2024-56745"
},
{
"category": "external",
"summary": "SUSE Bug 1235563 for CVE-2024-56745",
"url": "https://bugzilla.suse.com/1235563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56745"
},
{
"cve": "CVE-2024-56746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56746"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()\n\nWhen information such as info-\u003escreen_base is not ready, calling\nsh7760fb_free_mem() does not release memory correctly. Call\ndma_free_coherent() instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56746",
"url": "https://www.suse.com/security/cve/CVE-2024-56746"
},
{
"category": "external",
"summary": "SUSE Bug 1235622 for CVE-2024-56746",
"url": "https://bugzilla.suse.com/1235622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56746"
},
{
"cve": "CVE-2024-56747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()\n\nHook \"qedi_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56747",
"url": "https://www.suse.com/security/cve/CVE-2024-56747"
},
{
"category": "external",
"summary": "SUSE Bug 1234934 for CVE-2024-56747",
"url": "https://bugzilla.suse.com/1234934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()\n\nHook \"qed_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56748",
"url": "https://www.suse.com/security/cve/CVE-2024-56748"
},
{
"category": "external",
"summary": "SUSE Bug 1235627 for CVE-2024-56748",
"url": "https://bugzilla.suse.com/1235627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56752"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()\n\nWhen the call to gf100_grctx_generate() fails, unlock gr-\u003efecs.mutex\nbefore returning the error.\n\nFixes smatch warning:\n\ndrivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480 gf100_gr_chan_new() warn: inconsistent returns \u0027\u0026gr-\u003efecs.mutex\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56752",
"url": "https://www.suse.com/security/cve/CVE-2024-56752"
},
{
"category": "external",
"summary": "SUSE Bug 1234937 for CVE-2024-56752",
"url": "https://bugzilla.suse.com/1234937"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56752"
},
{
"cve": "CVE-2024-56754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56754"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: caam - Fix the pointer passed to caam_qi_shutdown()\n\nThe type of the last parameter given to devm_add_action_or_reset() is\n\"struct caam_drv_private *\", but in caam_qi_shutdown(), it is casted to\n\"struct device *\".\n\nPass the correct parameter to devm_add_action_or_reset() so that the\nresources are released as expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56754",
"url": "https://www.suse.com/security/cve/CVE-2024-56754"
},
{
"category": "external",
"summary": "SUSE Bug 1234918 for CVE-2024-56754",
"url": "https://bugzilla.suse.com/1234918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56754"
},
{
"cve": "CVE-2024-56755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56755"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING\n\nIn fscache_create_volume(), there is a missing memory barrier between the\nbit-clearing operation and the wake-up operation. This may cause a\nsituation where, after a wake-up, the bit-clearing operation hasn\u0027t been\ndetected yet, leading to an indefinite wait. The triggering process is as\nfollows:\n\n [cookie1] [cookie2] [volume_work]\nfscache_perform_lookup\n fscache_create_volume\n fscache_perform_lookup\n fscache_create_volume\n\t\t\t fscache_create_volume_work\n cachefiles_acquire_volume\n clear_and_wake_up_bit\n test_and_set_bit\n test_and_set_bit\n goto maybe_wait\n goto no_wait\n\nIn the above process, cookie1 and cookie2 has the same volume. When cookie1\nenters the -no_wait- process, it will clear the bit and wake up the waiting\nprocess. If a barrier is missing, it may cause cookie2 to remain in the\n-wait- process indefinitely.\n\nIn commit 3288666c7256 (\"fscache: Use clear_and_wake_up_bit() in\nfscache_create_volume_work()\"), barriers were added to similar operations\nin fscache_create_volume_work(), but fscache_create_volume() was missed.\n\nBy combining the clear and wake operations into clear_and_wake_up_bit() to\nfix this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56755",
"url": "https://www.suse.com/security/cve/CVE-2024-56755"
},
{
"category": "external",
"summary": "SUSE Bug 1234920 for CVE-2024-56755",
"url": "https://bugzilla.suse.com/1234920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-56755"
},
{
"cve": "CVE-2024-56756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56756"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix freeing of the HMB descriptor table\n\nThe HMB descriptor table is sized to the maximum number of descriptors\nthat could be used for a given device, but __nvme_alloc_host_mem could\nbreak out of the loop earlier on memory allocation failure and end up\nusing less descriptors than planned for, which leads to an incorrect\nsize passed to dma_free_coherent.\n\nIn practice this was not showing up because the number of descriptors\ntends to be low and the dma coherent allocator always allocates and\nfrees at least a page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56756",
"url": "https://www.suse.com/security/cve/CVE-2024-56756"
},
{
"category": "external",
"summary": "SUSE Bug 1234922 for CVE-2024-56756",
"url": "https://bugzilla.suse.com/1234922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56756"
},
{
"cve": "CVE-2024-56759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free when COWing tree bock and tracing is enabled\n\nWhen a COWing a tree block, at btrfs_cow_block(), and we have the\ntracepoint trace_btrfs_cow_block() enabled and preemption is also enabled\n(CONFIG_PREEMPT=y), we can trigger a use-after-free in the COWed extent\nbuffer while inside the tracepoint code. This is because in some paths\nthat call btrfs_cow_block(), such as btrfs_search_slot(), we are holding\nthe last reference on the extent buffer @buf so btrfs_force_cow_block()\ndrops the last reference on the @buf extent buffer when it calls\nfree_extent_buffer_stale(buf), which schedules the release of the extent\nbuffer with RCU. This means that if we are on a kernel with preemption,\nthe current task may be preempted before calling trace_btrfs_cow_block()\nand the extent buffer already released by the time trace_btrfs_cow_block()\nis called, resulting in a use-after-free.\n\nFix this by moving the trace_btrfs_cow_block() from btrfs_cow_block() to\nbtrfs_force_cow_block() before the COWed extent buffer is freed.\nThis also has a side effect of invoking the tracepoint in the tree defrag\ncode, at defrag.c:btrfs_realloc_node(), since btrfs_force_cow_block() is\ncalled there, but this is fine and it was actually missing there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56759",
"url": "https://www.suse.com/security/cve/CVE-2024-56759"
},
{
"category": "external",
"summary": "SUSE Bug 1235645 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "external",
"summary": "SUSE Bug 1236569 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1236569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56759"
},
{
"cve": "CVE-2024-56760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/MSI: Handle lack of irqdomain gracefully\n\nAlexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a\nRISCV platform which does not provide PCI/MSI support:\n\n WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32\n __pci_enable_msix_range+0x30c/0x596\n pci_msi_setup_msi_irqs+0x2c/0x32\n pci_alloc_irq_vectors_affinity+0xb8/0xe2\n\nRISCV uses hierarchical interrupt domains and correctly does not implement\nthe legacy fallback. The warning triggers from the legacy fallback stub.\n\nThat warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent\ndomain is associated with the device or not. There is a check for MSI-X,\nwhich has a legacy assumption. But that legacy fallback assumption is only\nvalid when legacy support is enabled, but otherwise the check should simply\nreturn -ENOTSUPP.\n\nLoongarch tripped over the same problem and blindly enabled legacy support\nwithout implementing the legacy fallbacks. There are weak implementations\nwhich return an error, so the problem was papered over.\n\nCorrect pci_msi_domain_supports() to evaluate the legacy mode and add\nthe missing supported check into the MSI enable path to complete it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56760",
"url": "https://www.suse.com/security/cve/CVE-2024-56760"
},
{
"category": "external",
"summary": "SUSE Bug 1235616 for CVE-2024-56760",
"url": "https://bugzilla.suse.com/1235616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56760"
},
{
"cve": "CVE-2024-56765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/vas: Add close() callback in vas_vm_ops struct\n\nThe mapping VMA address is saved in VAS window struct when the\npaste address is mapped. This VMA address is used during migration\nto unmap the paste address if the window is active. The paste\naddress mapping will be removed when the window is closed or with\nthe munmap(). But the VMA address in the VAS window is not updated\nwith munmap() which is causing invalid access during migration.\n\nThe KASAN report shows:\n[16386.254991] BUG: KASAN: slab-use-after-free in reconfig_close_windows+0x1a0/0x4e8\n[16386.255043] Read of size 8 at addr c00000014a819670 by task drmgr/696928\n\n[16386.255096] CPU: 29 UID: 0 PID: 696928 Comm: drmgr Kdump: loaded Tainted: G B 6.11.0-rc5-nxgzip #2\n[16386.255128] Tainted: [B]=BAD_PAGE\n[16386.255148] Hardware name: IBM,9080-HEX Power11 (architected) 0x820200 0xf000007 of:IBM,FW1110.00 (NH1110_016) hv:phyp pSeries\n[16386.255181] Call Trace:\n[16386.255202] [c00000016b297660] [c0000000018ad0ac] dump_stack_lvl+0x84/0xe8 (unreliable)\n[16386.255246] [c00000016b297690] [c0000000006e8a90] print_report+0x19c/0x764\n[16386.255285] [c00000016b297760] [c0000000006e9490] kasan_report+0x128/0x1f8\n[16386.255309] [c00000016b297880] [c0000000006eb5c8] __asan_load8+0xac/0xe0\n[16386.255326] [c00000016b2978a0] [c00000000013f898] reconfig_close_windows+0x1a0/0x4e8\n[16386.255343] [c00000016b297990] [c000000000140e58] vas_migration_handler+0x3a4/0x3fc\n[16386.255368] [c00000016b297a90] [c000000000128848] pseries_migrate_partition+0x4c/0x4c4\n...\n\n[16386.256136] Allocated by task 696554 on cpu 31 at 16377.277618s:\n[16386.256149] kasan_save_stack+0x34/0x68\n[16386.256163] kasan_save_track+0x34/0x80\n[16386.256175] kasan_save_alloc_info+0x58/0x74\n[16386.256196] __kasan_slab_alloc+0xb8/0xdc\n[16386.256209] kmem_cache_alloc_noprof+0x200/0x3d0\n[16386.256225] vm_area_alloc+0x44/0x150\n[16386.256245] mmap_region+0x214/0x10c4\n[16386.256265] do_mmap+0x5fc/0x750\n[16386.256277] vm_mmap_pgoff+0x14c/0x24c\n[16386.256292] ksys_mmap_pgoff+0x20c/0x348\n[16386.256303] sys_mmap+0xd0/0x160\n...\n\n[16386.256350] Freed by task 0 on cpu 31 at 16386.204848s:\n[16386.256363] kasan_save_stack+0x34/0x68\n[16386.256374] kasan_save_track+0x34/0x80\n[16386.256384] kasan_save_free_info+0x64/0x10c\n[16386.256396] __kasan_slab_free+0x120/0x204\n[16386.256415] kmem_cache_free+0x128/0x450\n[16386.256428] vm_area_free_rcu_cb+0xa8/0xd8\n[16386.256441] rcu_do_batch+0x2c8/0xcf0\n[16386.256458] rcu_core+0x378/0x3c4\n[16386.256473] handle_softirqs+0x20c/0x60c\n[16386.256495] do_softirq_own_stack+0x6c/0x88\n[16386.256509] do_softirq_own_stack+0x58/0x88\n[16386.256521] __irq_exit_rcu+0x1a4/0x20c\n[16386.256533] irq_exit+0x20/0x38\n[16386.256544] interrupt_async_exit_prepare.constprop.0+0x18/0x2c\n...\n\n[16386.256717] Last potentially related work creation:\n[16386.256729] kasan_save_stack+0x34/0x68\n[16386.256741] __kasan_record_aux_stack+0xcc/0x12c\n[16386.256753] __call_rcu_common.constprop.0+0x94/0xd04\n[16386.256766] vm_area_free+0x28/0x3c\n[16386.256778] remove_vma+0xf4/0x114\n[16386.256797] do_vmi_align_munmap.constprop.0+0x684/0x870\n[16386.256811] __vm_munmap+0xe0/0x1f8\n[16386.256821] sys_munmap+0x54/0x6c\n[16386.256830] system_call_exception+0x1a0/0x4a0\n[16386.256841] system_call_vectored_common+0x15c/0x2ec\n\n[16386.256868] The buggy address belongs to the object at c00000014a819670\n which belongs to the cache vm_area_struct of size 168\n[16386.256887] The buggy address is located 0 bytes inside of\n freed 168-byte region [c00000014a819670, c00000014a819718)\n\n[16386.256915] The buggy address belongs to the physical page:\n[16386.256928] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a81\n[16386.256950] memcg:c0000000ba430001\n[16386.256961] anon flags: 0x43ffff800000000(node=4|zone=0|lastcpupid=0x7ffff)\n[16386.256975] page_type: 0xfdffffff(slab)\n[16386\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56765",
"url": "https://www.suse.com/security/cve/CVE-2024-56765"
},
{
"category": "external",
"summary": "SUSE Bug 1235643 for CVE-2024-56765",
"url": "https://bugzilla.suse.com/1235643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56765"
},
{
"cve": "CVE-2024-56766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56766"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc(). Calling kfree(user) will lead to a\ndouble free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56766",
"url": "https://www.suse.com/security/cve/CVE-2024-56766"
},
{
"category": "external",
"summary": "SUSE Bug 1235219 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "external",
"summary": "SUSE Bug 1240426 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1240426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-56766"
},
{
"cve": "CVE-2024-56767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56767"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset\n\nThe at_xdmac_memset_create_desc may return NULL, which will lead to a\nnull pointer dereference. For example, the len input is error, or the\natchan-\u003efree_descs_list is empty and memory is exhausted. Therefore, add\ncheck to avoid this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56767",
"url": "https://www.suse.com/security/cve/CVE-2024-56767"
},
{
"category": "external",
"summary": "SUSE Bug 1235160 for CVE-2024-56767",
"url": "https://bugzilla.suse.com/1235160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56767"
},
{
"cve": "CVE-2024-56769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg\n\nSyzbot reports [1] an uninitialized value issue found by KMSAN in\ndib3000_read_reg().\n\nLocal u8 rb[2] is used in i2c_transfer() as a read buffer; in case\nthat call fails, the buffer may end up with some undefined values.\n\nSince no elaborate error handling is expected in dib3000_write_reg(),\nsimply zero out rb buffer to mitigate the problem.\n\n[1] Syzkaller report\ndvb-usb: bulk message failed: -22 (6/0)\n=====================================================\nBUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31\n dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290\n dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline]\n dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]\n dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310\n dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110\n...\nLocal variable rb created at:\n dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54\n dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56769",
"url": "https://www.suse.com/security/cve/CVE-2024-56769"
},
{
"category": "external",
"summary": "SUSE Bug 1235155 for CVE-2024-56769",
"url": "https://bugzilla.suse.com/1235155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56769"
},
{
"cve": "CVE-2024-56774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56774"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: add a sanity check for btrfs root in btrfs_search_slot()\n\nSyzbot reports a null-ptr-deref in btrfs_search_slot().\n\nThe reproducer is using rescue=ibadroots, and the extent tree root is\ncorrupted thus the extent tree is NULL.\n\nWhen scrub tries to search the extent tree to gather the needed extent\ninfo, btrfs_search_slot() doesn\u0027t check if the target root is NULL or\nnot, resulting the null-ptr-deref.\n\nAdd sanity check for btrfs root before using it in btrfs_search_slot().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56774",
"url": "https://www.suse.com/security/cve/CVE-2024-56774"
},
{
"category": "external",
"summary": "SUSE Bug 1235653 for CVE-2024-56774",
"url": "https://bugzilla.suse.com/1235653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56774"
},
{
"cve": "CVE-2024-56775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56775"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix handling of plane refcount\n\n[Why]\nThe mechanism to backup and restore plane states doesn\u0027t maintain\nrefcount, which can cause issues if the refcount of the plane changes\nin between backup and restore operations, such as memory leaks if the\nrefcount was supposed to go down, or double frees / invalid memory\naccesses if the refcount was supposed to go up.\n\n[How]\nCache and re-apply current refcount when restoring plane states.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56775",
"url": "https://www.suse.com/security/cve/CVE-2024-56775"
},
{
"category": "external",
"summary": "SUSE Bug 1235657 for CVE-2024-56775",
"url": "https://bugzilla.suse.com/1235657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56775"
},
{
"cve": "CVE-2024-56776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56776"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56776",
"url": "https://www.suse.com/security/cve/CVE-2024-56776"
},
{
"category": "external",
"summary": "SUSE Bug 1235647 for CVE-2024-56776",
"url": "https://bugzilla.suse.com/1235647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56776"
},
{
"cve": "CVE-2024-56777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56777"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56777",
"url": "https://www.suse.com/security/cve/CVE-2024-56777"
},
{
"category": "external",
"summary": "SUSE Bug 1235641 for CVE-2024-56777",
"url": "https://bugzilla.suse.com/1235641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56777"
},
{
"cve": "CVE-2024-56778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56778",
"url": "https://www.suse.com/security/cve/CVE-2024-56778"
},
{
"category": "external",
"summary": "SUSE Bug 1235635 for CVE-2024-56778",
"url": "https://bugzilla.suse.com/1235635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56778"
},
{
"cve": "CVE-2024-56779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\n\nThe action force umount(umount -f) will attempt to kill all rpc_task even\numount operation may ultimately fail if some files remain open.\nConsequently, if an action attempts to open a file, it can potentially\nsend two rpc_task to nfs server.\n\n NFS CLIENT\nthread1 thread2\nopen(\"file\")\n...\nnfs4_do_open\n _nfs4_do_open\n _nfs4_open_and_get_state\n _nfs4_proc_open\n nfs4_run_open_task\n /* rpc_task1 */\n rpc_run_task\n rpc_wait_for_completion_task\n\n umount -f\n nfs_umount_begin\n rpc_killall_tasks\n rpc_signal_task\n rpc_task1 been wakeup\n and return -512\n _nfs4_do_open // while loop\n ...\n nfs4_run_open_task\n /* rpc_task2 */\n rpc_run_task\n rpc_wait_for_completion_task\n\nWhile processing an open request, nfsd will first attempt to find or\nallocate an nfs4_openowner. If it finds an nfs4_openowner that is not\nmarked as NFS4_OO_CONFIRMED, this nfs4_openowner will released. Since\ntwo rpc_task can attempt to open the same file simultaneously from the\nclient to server, and because two instances of nfsd can run\nconcurrently, this situation can lead to lots of memory leak.\nAdditionally, when we echo 0 to /proc/fs/nfsd/threads, warning will be\ntriggered.\n\n NFS SERVER\nnfsd1 nfsd2 echo 0 \u003e /proc/fs/nfsd/threads\n\nnfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // alloc oo1, stateid1\n nfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // find oo1, without NFS4_OO_CONFIRMED\n release_openowner\n unhash_openowner_locked\n list_del_init(\u0026oo-\u003eoo_perclient)\n // cannot find this oo\n // from client, LEAK!!!\n alloc_stateowner // alloc oo2\n\n nfsd4_process_open2\n init_open_stateid\n // associate oo1\n // with stateid1, stateid1 LEAK!!!\n nfs4_get_vfs_file\n // alloc nfsd_file1 and nfsd_file_mark1\n // all LEAK!!!\n\n nfsd4_process_open2\n ...\n\n write_threads\n ...\n nfsd_destroy_serv\n nfsd_shutdown_net\n nfs4_state_shutdown_net\n nfs4_state_destroy_net\n destroy_client\n __destroy_client\n // won\u0027t find oo1!!!\n nfsd_shutdown_generic\n nfsd_file_cache_shutdown\n kmem_cache_destroy\n for nfsd_file_slab\n and nfsd_file_mark_slab\n // bark since nfsd_file1\n // and nfsd_file_mark1\n // still alive\n\n=======================================================================\nBUG nfsd_file (Not tainted): Objects remaining in nfsd_file on\n__kmem_cache_shutdown()\n-----------------------------------------------------------------------\n\nSlab 0xffd4000004438a80 objects=34 used=1 fp=0xff11000110e2ad28\nflags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff)\nCPU: 4 UID: 0 PID: 757 Comm: sh Not tainted 6.12.0-rc6+ #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dum\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56779",
"url": "https://www.suse.com/security/cve/CVE-2024-56779"
},
{
"category": "external",
"summary": "SUSE Bug 1235632 for CVE-2024-56779",
"url": "https://bugzilla.suse.com/1235632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: flush quota_release_work upon quota writeback\n\nOne of the paths quota writeback is called from is:\n\nfreeze_super()\n sync_filesystem()\n ext4_sync_fs()\n dquot_writeback_dquots()\n\nSince we currently don\u0027t always flush the quota_release_work queue in\nthis path, we can end up with the following race:\n\n 1. dquot are added to releasing_dquots list during regular operations.\n 2. FS Freeze starts, however, this does not flush the quota_release_work queue.\n 3. Freeze completes.\n 4. Kernel eventually tries to flush the workqueue while FS is frozen which\n hits a WARN_ON since transaction gets started during frozen state:\n\n ext4_journal_check_start+0x28/0x110 [ext4] (unreliable)\n __ext4_journal_start_sb+0x64/0x1c0 [ext4]\n ext4_release_dquot+0x90/0x1d0 [ext4]\n quota_release_workfn+0x43c/0x4d0\n\nWhich is the following line:\n\n WARN_ON(sb-\u003es_writers.frozen == SB_FREEZE_COMPLETE);\n\nWhich ultimately results in generic/390 failing due to dmesg\nnoise. This was detected on powerpc machine 15 cores.\n\nTo avoid this, make sure to flush the workqueue during\ndquot_writeback_dquots() so we dont have any pending workitems after\nfreeze.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56780",
"url": "https://www.suse.com/security/cve/CVE-2024-56780"
},
{
"category": "external",
"summary": "SUSE Bug 1235650 for CVE-2024-56780",
"url": "https://bugzilla.suse.com/1235650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-56787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56787"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: imx8m: Probe the SoC driver as platform driver\n\nWith driver_async_probe=* on kernel command line, the following trace is\nproduced because on i.MX8M Plus hardware because the soc-imx8m.c driver\ncalls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock\ndriver is not yet probed. This was not detected during regular testing\nwithout driver_async_probe.\n\nConvert the SoC code to platform driver and instantiate a platform device\nin its current device_initcall() to probe the platform driver. Rework\n.soc_revision callback to always return valid error code and return SoC\nrevision via parameter. This way, if anything in the .soc_revision callback\nreturn -EPROBE_DEFER, it gets propagated to .probe and the .probe will get\nretried later.\n\n\"\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180\nCPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603\nHardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : imx8mm_soc_revision+0xdc/0x180\nlr : imx8mm_soc_revision+0xd0/0x180\nsp : ffff8000821fbcc0\nx29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120\nx26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311\nx23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb\nx20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff\nx17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8\nx14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801\nx11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c\nx8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3\nx5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000\nx2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb\nCall trace:\n imx8mm_soc_revision+0xdc/0x180\n imx8_soc_init+0xb0/0x1e0\n do_one_initcall+0x94/0x1a8\n kernel_init_freeable+0x240/0x2a8\n kernel_init+0x28/0x140\n ret_from_fork+0x10/0x20\n---[ end trace 0000000000000000 ]---\nSoC: i.MX8MP revision 1.1\n\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56787",
"url": "https://www.suse.com/security/cve/CVE-2024-56787"
},
{
"category": "external",
"summary": "SUSE Bug 1235663 for CVE-2024-56787",
"url": "https://bugzilla.suse.com/1235663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-56787"
},
{
"cve": "CVE-2024-57791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check return value of sock_recvmsg when draining clc data\n\nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the\nlength of msg should be received from network and the value should not be\nfully trusted as it is from the network. Once the value of length exceeds\nthe value of buflen in function smc_clc_wait_msg it may run into deadloop\nwhen trying to drain the remaining data exceeding buflen.\n\nThis patch checks the return value of sock_recvmsg when draining data in\ncase of deadloop in draining.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57791",
"url": "https://www.suse.com/security/cve/CVE-2024-57791"
},
{
"category": "external",
"summary": "SUSE Bug 1235759 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "external",
"summary": "SUSE Bug 1235760 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235760"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57791"
},
{
"cve": "CVE-2024-57792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57792"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57792",
"url": "https://www.suse.com/security/cve/CVE-2024-57792"
},
{
"category": "external",
"summary": "SUSE Bug 1235764 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "external",
"summary": "SUSE Bug 1236568 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1236568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57792"
},
{
"cve": "CVE-2024-57793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57793"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors\n\nIn CoCo VMs it is possible for the untrusted host to cause\nset_memory_decrypted() to fail such that an error is returned\nand the resulting memory is shared. Callers need to take care\nto handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional\nor security issues.\n\nLeak the decrypted memory when set_memory_decrypted() fails,\nand don\u0027t need to print an error since set_memory_decrypted()\nwill call WARN_ONCE().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57793",
"url": "https://www.suse.com/security/cve/CVE-2024-57793"
},
{
"category": "external",
"summary": "SUSE Bug 1235768 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "external",
"summary": "SUSE Bug 1235769 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57793"
},
{
"cve": "CVE-2024-57795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Remove the direct link to net_device\n\nThe similar patch in siw is in the link:\nhttps://git.kernel.org/rdma/rdma/c/16b87037b48889\n\nThis problem also occurred in RXE. The following analyze this problem.\nIn the following Call Traces:\n\"\nBUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\nRead of size 4 at addr ffff8880554640b0 by task kworker/1:4/5295\n\nCPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted\n6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0\nHardware name: Google Compute Engine/Google Compute Engine,\nBIOS Google 09/13/2024\nWorkqueue: infiniband ib_cache_event_task\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\n rxe_query_port+0x12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60\n __ib_query_port drivers/infiniband/core/device.c:2111 [inline]\n ib_query_port+0x168/0x7d0 drivers/infiniband/core/device.c:2143\n ib_cache_update+0x1a9/0xb80 drivers/infiniband/core/cache.c:1494\n ib_cache_event_task+0xf3/0x1e0 drivers/infiniband/core/cache.c:1568\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f2/0x390 kernel/kthread.c:389\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\"\n\n1). In the link [1],\n\n\"\n infiniband syz2: set down\n\"\n\nThis means that on 839.350575, the event ib_cache_event_task was sent andi\nqueued in ib_wq.\n\n2). In the link [1],\n\n\"\n team0 (unregistering): Port device team_slave_0 removed\n\"\n\nIt indicates that before 843.251853, the net device should be freed.\n\n3). In the link [1],\n\n\"\n BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0\n\"\n\nThis means that on 850.559070, this slab-use-after-free problem occurred.\n\nIn all, on 839.350575, the event ib_cache_event_task was sent and queued\nin ib_wq,\n\nbefore 843.251853, the net device veth was freed.\n\non 850.559070, this event was executed, and the mentioned freed net device\nwas called. Thus, the above call trace occurred.\n\n[1] https://syzkaller.appspot.com/x/log.txt?x=12e7025f980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57795",
"url": "https://www.suse.com/security/cve/CVE-2024-57795"
},
{
"category": "external",
"summary": "SUSE Bug 1235906 for CVE-2024-57795",
"url": "https://bugzilla.suse.com/1235906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57795"
},
{
"cve": "CVE-2024-57798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57798"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()\n\nWhile receiving an MST up request message from one thread in\ndrm_dp_mst_handle_up_req(), the MST topology could be removed from\nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing\nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.\nThis could lead to a NULL deref/use-after-free of mst_primary in\ndrm_dp_mst_handle_up_req().\n\nAvoid the above by holding a reference for mst_primary in\ndrm_dp_mst_handle_up_req() while it\u0027s used.\n\nv2: Fix kfreeing the request if getting an mst_primary reference fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57798",
"url": "https://www.suse.com/security/cve/CVE-2024-57798"
},
{
"category": "external",
"summary": "SUSE Bug 1235818 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "external",
"summary": "SUSE Bug 1235819 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57798"
},
{
"cve": "CVE-2024-57801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Skip restore TC rules for vport rep without loaded flag\n\nDuring driver unload, unregister_netdev is called after unloading\nvport rep. So, the mlx5e_rep_priv is already freed while trying to get\nrpriv-\u003enetdev, or walk rpriv-\u003etc_ht, which results in use-after-free.\nSo add the checking to make sure access the data of vport rep which is\nstill loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57801",
"url": "https://www.suse.com/security/cve/CVE-2024-57801"
},
{
"category": "external",
"summary": "SUSE Bug 1235940 for CVE-2024-57801",
"url": "https://bugzilla.suse.com/1235940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57801"
},
{
"cve": "CVE-2024-57804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57804"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs\n\nThe driver, through the SAS transport, exposes a sysfs interface to\nenable/disable PHYs in a controller/expander setup. When multiple PHYs\nare disabled and enabled in rapid succession, the persistent and current\nconfig pages related to SAS IO unit/SAS Expander pages could get\ncorrupted.\n\nUse separate memory for each config request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57804",
"url": "https://www.suse.com/security/cve/CVE-2024-57804"
},
{
"category": "external",
"summary": "SUSE Bug 1235779 for CVE-2024-57804",
"url": "https://bugzilla.suse.com/1235779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57804"
},
{
"cve": "CVE-2024-57809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: imx6: Fix suspend/resume support on i.MX6QDL\n\nThe suspend/resume functionality is currently broken on the i.MX6QDL\nplatform, as documented in the NXP errata (ERR005723):\n\n https://www.nxp.com/docs/en/errata/IMX6DQCE.pdf\n\nThis patch addresses the issue by sharing most of the suspend/resume\nsequences used by other i.MX devices, while avoiding modifications to\ncritical registers that disrupt the PCIe functionality. It targets the\nsame problem as the following downstream commit:\n\n https://github.com/nxp-imx/linux-imx/commit/4e92355e1f79d225ea842511fcfd42b343b32995\n\nUnlike the downstream commit, this patch also resets the connected PCIe\ndevice if possible. Without this reset, certain drivers, such as ath10k\nor iwlwifi, will crash on resume. The device reset is also done by the\ndriver on other i.MX platforms, making this patch consistent with\nexisting practices.\n\nUpon resuming, the kernel will hang and display an error. Here\u0027s an\nexample of the error encountered with the ath10k driver:\n\n ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible\n Unhandled fault: imprecise external abort (0x1406) at 0x0106f944\n\nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a\nPCIe device is connected.\n\n[kwilczynski: commit log, added tag for stable releases]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57809",
"url": "https://www.suse.com/security/cve/CVE-2024-57809"
},
{
"category": "external",
"summary": "SUSE Bug 1235793 for CVE-2024-57809",
"url": "https://bugzilla.suse.com/1235793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57809"
},
{
"cve": "CVE-2024-57838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Mark IRQ entries to fix stack depot warnings\n\nThe stack depot filters out everything outside of the top interrupt\ncontext as an uninteresting or irrelevant part of the stack traces. This\nhelps with stack trace de-duplication, avoiding an explosion of saved\nstack traces that share the same IRQ context code path but originate\nfrom different randomly interrupted points, eventually exhausting the\nstack depot.\n\nFiltering uses in_irqentry_text() to identify functions within the\n.irqentry.text and .softirqentry.text sections, which then become the\nlast stack trace entries being saved.\n\nWhile __do_softirq() is placed into the .softirqentry.text section by\ncommon code, populating .irqentry.text is architecture-specific.\n\nCurrently, the .irqentry.text section on s390 is empty, which prevents\nstack depot filtering and de-duplication and could result in warnings\nlike:\n\nStack depot reached limit capacity\nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8\n\nwith PREEMPT and KASAN enabled.\n\nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into\nthe .irqentry.text section and updating the kprobes blacklist to include\nthe .irqentry.text section.\n\nThis is done only for asynchronous interrupts and explicitly not for\nprogram checks, which are synchronous and where the context beyond the\nprogram check is important to preserve. Despite machine checks being\nsomewhat in between, they are extremely rare, and preserving context\nwhen possible is also of value.\n\nSVCs and Restart Interrupts are not relevant, one being always at the\nboundary to user space and the other being a one-time thing.\n\nIRQ entries filtering is also optionally used in ftrace function graph,\nwhere the same logic applies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57838",
"url": "https://www.suse.com/security/cve/CVE-2024-57838"
},
{
"category": "external",
"summary": "SUSE Bug 1235798 for CVE-2024-57838",
"url": "https://bugzilla.suse.com/1235798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57838"
},
{
"cve": "CVE-2024-57849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_sf: Handle CPU hotplug remove during sampling\n\nCPU hotplug remove handling triggers the following function\ncall sequence:\n\n CPUHP_AP_PERF_S390_SF_ONLINE --\u003e s390_pmu_sf_offline_cpu()\n ...\n CPUHP_AP_PERF_ONLINE --\u003e perf_event_exit_cpu()\n\nThe s390 CPUMF sampling CPU hotplug handler invokes:\n\n s390_pmu_sf_offline_cpu()\n +--\u003e cpusf_pmu_setup()\n +--\u003e setup_pmc_cpu()\n +--\u003e deallocate_buffers()\n\nThis function de-allocates all sampling data buffers (SDBs) allocated\nfor that CPU at event initialization. It also clears the\nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.\n\nWith the event still being active on the removed CPU, the CPU event\nhotplug support in kernel performance subsystem triggers the\nfollowing function calls on the removed CPU:\n\n perf_event_exit_cpu()\n +--\u003e perf_event_exit_cpu_context()\n +--\u003e __perf_event_exit_context()\n\t +--\u003e __perf_remove_from_context()\n\t +--\u003e event_sched_out()\n\t +--\u003e cpumsf_pmu_del()\n\t +--\u003e cpumsf_pmu_stop()\n +--\u003e hw_perf_event_update()\n\nto stop and remove the event. During removal of the event, the\nsampling device driver tries to read out the remaining samples from\nthe sample data buffers (SDBs). But they have already been freed\n(and may have been re-assigned). This may lead to a use after free\nsituation in which case the samples are most likely invalid. In the\nbest case the memory has not been reassigned and still contains\nvalid data.\n\nRemedy this situation and check if the CPU is still in reserved\nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been\nreleased an contain valid data. This is always the case when\nthe event is removed (and no CPU hotplug off occured).\nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57849",
"url": "https://www.suse.com/security/cve/CVE-2024-57849"
},
{
"category": "external",
"summary": "SUSE Bug 1235814 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "external",
"summary": "SUSE Bug 1235815 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57849"
},
{
"cve": "CVE-2024-57850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: Prevent rtime decompress memory corruption\n\nThe rtime decompression routine does not fully check bounds during the\nentirety of the decompression pass and can corrupt memory outside the\ndecompression buffer if the compressed data is corrupted. This adds the\nrequired check to prevent this failure mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57850",
"url": "https://www.suse.com/security/cve/CVE-2024-57850"
},
{
"category": "external",
"summary": "SUSE Bug 1235812 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "external",
"summary": "SUSE Bug 1235813 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57850"
},
{
"cve": "CVE-2024-57857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Remove direct link to net_device\n\nDo not manage a per device direct link to net_device. Rely\non associated ib_devices net_device management, not doubling\nthe effort locally. A badly managed local link to net_device\nwas causing a \u0027KASAN: slab-use-after-free\u0027 exception during\nsiw_query_port() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57857",
"url": "https://www.suse.com/security/cve/CVE-2024-57857"
},
{
"category": "external",
"summary": "SUSE Bug 1235946 for CVE-2024-57857",
"url": "https://bugzilla.suse.com/1235946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57857"
},
{
"cve": "CVE-2024-57874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57874"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL\n\nCurrently tagged_addr_ctrl_set() doesn\u0027t initialize the temporary \u0027ctrl\u0027\nvariable, and a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently tagged_addr_ctrl_set() will consume an\narbitrary value, potentially leaking up to 64 bits of memory from the\nkernel stack. The read is limited to a specific slot on the stack, and\nthe issue does not provide a write mechanism.\n\nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and\nrejects other values, a partial SETREGSET attempt will randomly succeed\nor fail depending on the value of the uninitialized value, and the\nexposure is significantly limited.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\nvalue of the tagged address ctrl will be retained.\n\nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the\nuser_aarch64_view used by a native AArch64 task to manipulate another\nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error\nvalue when called for a compat task, tagged_addr_ctrl_get() and\ntagged_addr_ctrl_set() should never observe an error value from\nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that\nsuch an error would be unexpected, and error handlnig is not missing in\neither case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57874",
"url": "https://www.suse.com/security/cve/CVE-2024-57874"
},
{
"category": "external",
"summary": "SUSE Bug 1235808 for CVE-2024-57874",
"url": "https://bugzilla.suse.com/1235808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-57874"
},
{
"cve": "CVE-2024-57876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57876"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix resetting msg rx state after topology removal\n\nIf the MST topology is removed during the reception of an MST down reply\nor MST up request sideband message, the\ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset\nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with\nthe reading/parsing of the message from another thread via\ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is\npossible since the reader/parser doesn\u0027t hold any lock while accessing\nthe reception state. This in turn can lead to a memory corruption in the\nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST\nsideband message body length check\").\n\nFix the above by resetting the message reception state if needed before\nreading/parsing a message. Another solution would be to hold the\ndrm_dp_mst_topology_mgr::lock for the whole duration of the message\nreception/parsing in drm_dp_mst_handle_down_rep() and\ndrm_dp_mst_handle_up_req(), however this would require a bigger change.\nSince the fix is also needed for stable, opting for the simpler solution\nin this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57876",
"url": "https://www.suse.com/security/cve/CVE-2024-57876"
},
{
"category": "external",
"summary": "SUSE Bug 1235806 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "external",
"summary": "SUSE Bug 1235807 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57876"
},
{
"cve": "CVE-2024-57887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()\n\nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and\nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue\nby dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()\nin error path of probe() and also in the remove().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57887",
"url": "https://www.suse.com/security/cve/CVE-2024-57887"
},
{
"category": "external",
"summary": "SUSE Bug 1235952 for CVE-2024-57887",
"url": "https://bugzilla.suse.com/1235952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57887"
},
{
"cve": "CVE-2024-57888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57888"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker\n\nAfter commit\n746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")\namdgpu started seeing the following warning:\n\n [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu]\n...\n [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched]\n...\n [ ] Call Trace:\n [ ] \u003cTASK\u003e\n...\n [ ] ? check_flush_dependency+0xf5/0x110\n...\n [ ] cancel_delayed_work_sync+0x6e/0x80\n [ ] amdgpu_gfx_off_ctrl+0xab/0x140 [amdgpu]\n [ ] amdgpu_ring_alloc+0x40/0x50 [amdgpu]\n [ ] amdgpu_ib_schedule+0xf4/0x810 [amdgpu]\n [ ] ? drm_sched_run_job_work+0x22c/0x430 [gpu_sched]\n [ ] amdgpu_job_run+0xaa/0x1f0 [amdgpu]\n [ ] drm_sched_run_job_work+0x257/0x430 [gpu_sched]\n [ ] process_one_work+0x217/0x720\n...\n [ ] \u003c/TASK\u003e\n\nThe intent of the verifcation done in check_flush_depedency is to ensure\nforward progress during memory reclaim, by flagging cases when either a\nmemory reclaim process, or a memory reclaim work item is flushed from a\ncontext not marked as memory reclaim safe.\n\nThis is correct when flushing, but when called from the\ncancel(_delayed)_work_sync() paths it is a false positive because work is\neither already running, or will not be running at all. Therefore\ncancelling it is safe and we can relax the warning criteria by letting the\nhelper know of the calling context.\n\nReferences: 746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57888",
"url": "https://www.suse.com/security/cve/CVE-2024-57888"
},
{
"category": "external",
"summary": "SUSE Bug 1235918 for CVE-2024-57888",
"url": "https://bugzilla.suse.com/1235918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57888"
},
{
"cve": "CVE-2024-57890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping. Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap. The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it\u0027s fine on\n64bit systems.\n\nThis patch does two things. First, I\u0027ve re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math. Then I\u0027ve modified\nall the callers to use size_mul() for the multiplications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57890",
"url": "https://www.suse.com/security/cve/CVE-2024-57890"
},
{
"category": "external",
"summary": "SUSE Bug 1235919 for CVE-2024-57890",
"url": "https://bugzilla.suse.com/1235919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57890"
},
{
"cve": "CVE-2024-57892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57892"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv\n\nWhen mounting ocfs2 and then remounting it as read-only, a\nslab-use-after-free occurs after the user uses a syscall to\nquota_getnextquota. Specifically, sb_dqinfo(sb, type)-\u003edqi_priv is the\ndangling pointer.\n\nDuring the remounting process, the pointer dqi_priv is freed but is never\nset as null leaving it to be accessed. Additionally, the read-only option\nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the\nDQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the\nnext quota, the function ocfs2_get_next_id is called and only checks the\nquota usage flags and not the quota suspended flags.\n\nTo fix this, I set dqi_priv to null when it is freed after remounting with\nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.\n\n[akpm@linux-foundation.org: coding-style cleanups]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57892",
"url": "https://www.suse.com/security/cve/CVE-2024-57892"
},
{
"category": "external",
"summary": "SUSE Bug 1235964 for CVE-2024-57892",
"url": "https://bugzilla.suse.com/1235964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57892"
},
{
"cve": "CVE-2024-57893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix races at processing SysEx messages\n\nOSS sequencer handles the SysEx messages split in 6 bytes packets, and\nALSA sequencer OSS layer tries to combine those. It stores the data\nin the internal buffer and this access is racy as of now, which may\nlead to the out-of-bounds access.\n\nAs a temporary band-aid fix, introduce a mutex for serializing the\nprocess of the SysEx message packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57893",
"url": "https://www.suse.com/security/cve/CVE-2024-57893"
},
{
"category": "external",
"summary": "SUSE Bug 1235920 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "external",
"summary": "SUSE Bug 1235921 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57893"
},
{
"cve": "CVE-2024-57896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57896",
"url": "https://www.suse.com/security/cve/CVE-2024-57896"
},
{
"category": "external",
"summary": "SUSE Bug 1235965 for CVE-2024-57896",
"url": "https://bugzilla.suse.com/1235965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57896"
},
{
"cve": "CVE-2024-57897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Correct the migration DMA map direction\n\nThe SVM DMA device map direction should be set the same as\nthe DMA unmap setting, otherwise the DMA core will report\nthe following warning.\n\nBefore finialize this solution, there\u0027re some discussion on\nthe DMA mapping type(stream-based or coherent) in this KFD\nmigration case, followed by https://lore.kernel.org/all/04d4ab32\n-45a1-4b88-86ee-fb0f35a0ca40@amd.com/T/.\n\nAs there\u0027s no dma_sync_single_for_*() in the DMA buffer accessed\nthat because this migration operation should be sync properly and\nautomatically. Give that there\u0027s might not be a performance problem\nin various cache sync policy of DMA sync. Therefore, in order to\nsimplify the DMA direction setting alignment, let\u0027s set the DMA map\ndirection as BIDIRECTIONAL.\n\n[ 150.834218] WARNING: CPU: 8 PID: 1812 at kernel/dma/debug.c:1028 check_unmap+0x1cc/0x930\n[ 150.834225] Modules linked in: amdgpu(OE) amdxcp drm_exec(OE) gpu_sched drm_buddy(OE) drm_ttm_helper(OE) ttm(OE) drm_suballoc_helper(OE) drm_display_helper(OE) drm_kms_helper(OE) i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc sch_fq_codel intel_rapl_msr amd_atl intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd snd_pci_acp6x snd_hda_codec snd_acp_config snd_hda_core snd_hwdep snd_soc_acpi kvm_amd sunrpc snd_pcm kvm binfmt_misc snd_seq_midi crct10dif_pclmul snd_seq_midi_event ghash_clmulni_intel sha512_ssse3 snd_rawmidi nls_iso8859_1 sha256_ssse3 sha1_ssse3 snd_seq aesni_intel snd_seq_device crypto_simd snd_timer cryptd input_leds\n[ 150.834310] wmi_bmof serio_raw k10temp rapl snd sp5100_tco ipmi_devintf soundcore ccp ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport efi_pstore drm(OE) ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 150.834354] CPU: 8 PID: 1812 Comm: rocrtst64 Tainted: G OE 6.10.0-custom #492\n[ 150.834358] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 150.834360] RIP: 0010:check_unmap+0x1cc/0x930\n[ 150.834363] Code: c0 4c 89 4d c8 e8 34 bf 86 00 4c 8b 4d c8 4c 8b 45 c0 48 8b 4d b8 48 89 c6 41 57 4c 89 ea 48 c7 c7 80 49 b4 84 e8 b4 81 f3 ff \u003c0f\u003e 0b 48 c7 c7 04 83 ac 84 e8 76 ba fc ff 41 8b 76 4c 49 8d 7e 50\n[ 150.834365] RSP: 0018:ffffaac5023739e0 EFLAGS: 00010086\n[ 150.834368] RAX: 0000000000000000 RBX: ffffffff8566a2e0 RCX: 0000000000000027\n[ 150.834370] RDX: ffff8f6a8f621688 RSI: 0000000000000001 RDI: ffff8f6a8f621680\n[ 150.834372] RBP: ffffaac502373a30 R08: 00000000000000c9 R09: ffffaac502373850\n[ 150.834373] R10: ffffaac502373848 R11: ffffffff84f46328 R12: ffffaac502373a40\n[ 150.834375] R13: ffff8f6741045330 R14: ffff8f6741a77700 R15: ffffffff84ac831b\n[ 150.834377] FS: 00007faf0fc94c00(0000) GS:ffff8f6a8f600000(0000) knlGS:0000000000000000\n[ 150.834379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 150.834381] CR2: 00007faf0b600020 CR3: 000000010a52e000 CR4: 0000000000350ef0\n[ 150.834383] Call Trace:\n[ 150.834385] \u003cTASK\u003e\n[ 150.834387] ? show_regs+0x6d/0x80\n[ 150.834393] ? __warn+0x8c/0x140\n[ 150.834397] ? check_unmap+0x1cc/0x930\n[ 150.834400] ? report_bug+0x193/0x1a0\n[ 150.834406] ? handle_bug+0x46/0x80\n[ 150.834410] ? exc_invalid_op+0x1d/0x80\n[ 150.834413] ? asm_exc_invalid_op+0x1f/0x30\n[ 150.834420] ? check_unmap+0x1cc/0x930\n[ 150.834425] debug_dma_unmap_page+0x86/0x90\n[ 150.834431] ? srso_return_thunk+0x5/0x5f\n[ 150.834435] \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57897",
"url": "https://www.suse.com/security/cve/CVE-2024-57897"
},
{
"category": "external",
"summary": "SUSE Bug 1235969 for CVE-2024-57897",
"url": "https://bugzilla.suse.com/1235969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57897"
},
{
"cve": "CVE-2024-57899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, \u0026bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n ? show_regs+0x54/0x58\n ? __warn+0x6b/0xd4\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? report_bug+0x113/0x150\n ? exc_overflow+0x30/0x30\n ? handle_bug+0x27/0x44\n ? exc_invalid_op+0x18/0x50\n ? handle_exception+0xf6/0xf6\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n ? process_one_work+0xf1/0x1fc\n ? worker_thread+0x2c0/0x3b4\n ? kthread+0xc7/0xf0\n ? mod_delayed_work_on+0x4c/0x4c\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork+0x24/0x38\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork_asm+0xf/0x14\n ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57899",
"url": "https://www.suse.com/security/cve/CVE-2024-57899"
},
{
"category": "external",
"summary": "SUSE Bug 1235924 for CVE-2024-57899",
"url": "https://bugzilla.suse.com/1235924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57899"
},
{
"cve": "CVE-2024-57903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_REUSEPORT to inet sockets\n\nAfter blamed commit, crypto sockets could accidentally be destroyed\nfrom RCU call back, as spotted by zyzbot [1].\n\nTrying to acquire a mutex in RCU callback is not allowed.\n\nRestrict SO_REUSEPORT socket option to inet sockets.\n\nv1 of this patch supported TCP, UDP and SCTP sockets,\nbut fcnal-test.sh test needed RAW and ICMP support.\n\n[1]\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1\npreempt_count: 100, expected: 0\nRCU nest depth: 0, expected: 0\n1 lock held by ksoftirqd/1/24:\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823\nPreemption disabled at:\n [\u003cffffffff8161c8c8\u003e] softirq_handle_begin kernel/softirq.c:402 [inline]\n [\u003cffffffff8161c8c8\u003e] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537\nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n __might_resched+0x5d4/0x780 kernel/sched/core.c:8758\n __mutex_lock_common kernel/locking/mutex.c:562 [inline]\n __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735\n crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179\n aead_release+0x3d/0x50 crypto/algif_aead.c:489\n alg_do_release crypto/af_alg.c:118 [inline]\n alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502\n __sk_destruct+0x58/0x5f0 net/core/sock.c:2260\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:950\n smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57903",
"url": "https://www.suse.com/security/cve/CVE-2024-57903"
},
{
"category": "external",
"summary": "SUSE Bug 1235967 for CVE-2024-57903",
"url": "https://bugzilla.suse.com/1235967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57903"
},
{
"cve": "CVE-2024-57904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: at91: call input_free_device() on allocated iio_dev\n\nCurrent implementation of at91_ts_register() calls input_free_deivce()\non st-\u003ets_input, however, the err label can be reached before the\nallocated iio_dev is stored to st-\u003ets_input. Thus call\ninput_free_device() on input instead of st-\u003ets_input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57904",
"url": "https://www.suse.com/security/cve/CVE-2024-57904"
},
{
"category": "external",
"summary": "SUSE Bug 1236078 for CVE-2024-57904",
"url": "https://bugzilla.suse.com/1236078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57904"
},
{
"cve": "CVE-2024-57906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads8688: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57906",
"url": "https://www.suse.com/security/cve/CVE-2024-57906"
},
{
"category": "external",
"summary": "SUSE Bug 1236088 for CVE-2024-57906",
"url": "https://bugzilla.suse.com/1236088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-57906"
},
{
"cve": "CVE-2024-57907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe \u0027data\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57907",
"url": "https://www.suse.com/security/cve/CVE-2024-57907"
},
{
"category": "external",
"summary": "SUSE Bug 1236090 for CVE-2024-57907",
"url": "https://bugzilla.suse.com/1236090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2024-57907"
},
{
"cve": "CVE-2024-57908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57908",
"url": "https://www.suse.com/security/cve/CVE-2024-57908"
},
{
"category": "external",
"summary": "SUSE Bug 1236091 for CVE-2024-57908",
"url": "https://bugzilla.suse.com/1236091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57908"
},
{
"cve": "CVE-2024-57910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57910"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: vcnl4035: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to userspace from a\ntriggered buffer, but it does not set an initial value for the single\ndata element, which is an u16 aligned to 8 bytes. That leaves at least\n4 bytes uninitialized even after writing an integer value with\nregmap_read().\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57910",
"url": "https://www.suse.com/security/cve/CVE-2024-57910"
},
{
"category": "external",
"summary": "SUSE Bug 1236097 for CVE-2024-57910",
"url": "https://bugzilla.suse.com/1236097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57910"
},
{
"cve": "CVE-2024-57911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n\nThe \u0027data\u0027 array is allocated via kmalloc() and it is used to push data\nto user space from a triggered buffer, but it does not set values for\ninactive channels, as it only uses iio_for_each_active_channel()\nto assign new values.\n\nUse kzalloc for the memory allocation to avoid pushing uninitialized\ninformation to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57911",
"url": "https://www.suse.com/security/cve/CVE-2024-57911"
},
{
"category": "external",
"summary": "SUSE Bug 1236098 for CVE-2024-57911",
"url": "https://bugzilla.suse.com/1236098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57911"
},
{
"cve": "CVE-2024-57912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe \u0027sample\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57912",
"url": "https://www.suse.com/security/cve/CVE-2024-57912"
},
{
"category": "external",
"summary": "SUSE Bug 1236101 for CVE-2024-57912",
"url": "https://bugzilla.suse.com/1236101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57912"
},
{
"cve": "CVE-2024-57913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n\nThis commit addresses an issue related to below kernel panic where\npanic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON\nin functionsfs_bind, which easily leads to the following scenarios.\n\n1.adb_write in adbd 2. UDC write via configfs\n =================\t =====================\n\n-\u003eusb_ffs_open_thread() -\u003eUDC write\n -\u003eopen_functionfs() -\u003econfigfs_write_iter()\n -\u003eadb_open() -\u003egadget_dev_desc_UDC_store()\n -\u003eadb_write() -\u003eusb_gadget_register_driver_owner\n -\u003edriver_register()\n-\u003eStartMonitor() -\u003ebus_add_driver()\n -\u003eadb_read() -\u003egadget_bind_driver()\n\u003ctimes-out without BIND event\u003e -\u003econfigfs_composite_bind()\n -\u003eusb_add_function()\n-\u003eopen_functionfs() -\u003effs_func_bind()\n -\u003eadb_open() -\u003efunctionfs_bind()\n \u003cffs-\u003estate !=FFS_ACTIVE\u003e\n\nThe adb_open, adb_read, and adb_write operations are invoked from the\ndaemon, but trying to bind the function is a process that is invoked by\nUDC write through configfs, which opens up the possibility of a race\ncondition between the two paths. In this race scenario, the kernel panic\noccurs due to the WARN_ON from functionfs_bind when panic_on_warn is\nenabled. This commit fixes the kernel panic by removing the unnecessary\nWARN_ON.\n\nKernel panic - not syncing: kernel: panic_on_warn set ...\n[ 14.542395] Call trace:\n[ 14.542464] ffs_func_bind+0x1c8/0x14a8\n[ 14.542468] usb_add_function+0xcc/0x1f0\n[ 14.542473] configfs_composite_bind+0x468/0x588\n[ 14.542478] gadget_bind_driver+0x108/0x27c\n[ 14.542483] really_probe+0x190/0x374\n[ 14.542488] __driver_probe_device+0xa0/0x12c\n[ 14.542492] driver_probe_device+0x3c/0x220\n[ 14.542498] __driver_attach+0x11c/0x1fc\n[ 14.542502] bus_for_each_dev+0x104/0x160\n[ 14.542506] driver_attach+0x24/0x34\n[ 14.542510] bus_add_driver+0x154/0x270\n[ 14.542514] driver_register+0x68/0x104\n[ 14.542518] usb_gadget_register_driver_owner+0x48/0xf4\n[ 14.542523] gadget_dev_desc_UDC_store+0xf8/0x144\n[ 14.542526] configfs_write_iter+0xf0/0x138",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57913",
"url": "https://www.suse.com/security/cve/CVE-2024-57913"
},
{
"category": "external",
"summary": "SUSE Bug 1236102 for CVE-2024-57913",
"url": "https://bugzilla.suse.com/1236102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57913"
},
{
"cve": "CVE-2024-57915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57915"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57915",
"url": "https://www.suse.com/security/cve/CVE-2024-57915"
},
{
"category": "external",
"summary": "SUSE Bug 1236120 for CVE-2024-57915",
"url": "https://bugzilla.suse.com/1236120"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57915"
},
{
"cve": "CVE-2024-57916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n\nResolve kernel panic caused by improper handling of IRQs while\naccessing GPIO values. This is done by replacing generic_handle_irq with\nhandle_nested_irq.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57916",
"url": "https://www.suse.com/security/cve/CVE-2024-57916"
},
{
"category": "external",
"summary": "SUSE Bug 1236125 for CVE-2024-57916",
"url": "https://bugzilla.suse.com/1236125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57916"
},
{
"cve": "CVE-2024-57922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57922",
"url": "https://www.suse.com/security/cve/CVE-2024-57922"
},
{
"category": "external",
"summary": "SUSE Bug 1236080 for CVE-2024-57922",
"url": "https://bugzilla.suse.com/1236080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57922"
},
{
"cve": "CVE-2024-57926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57926"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err\n\nThe pointer need to be set to NULL, otherwise KASAN complains about\nuse-after-free. Because in mtk_drm_bind, all private\u0027s drm are set\nas follows.\n\nprivate-\u003eall_drm_private[i]-\u003edrm = drm;\n\nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns\nfailure. However, the shutdown path still accesses the previous allocated\nmemory in drm_atomic_helper_shutdown.\n\n[ 84.874820] watchdog: watchdog0: watchdog did not stop!\n[ 86.512054] ==================================================================\n[ 86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1\n[ 86.515213]\n[ 86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55\n[ 86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022\n[ 86.517960] Call trace:\n[ 86.518333] show_stack+0x20/0x38 (C)\n[ 86.518891] dump_stack_lvl+0x90/0xd0\n[ 86.519443] print_report+0xf8/0x5b0\n[ 86.519985] kasan_report+0xb4/0x100\n[ 86.520526] __asan_report_load8_noabort+0x20/0x30\n[ 86.521240] drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.521966] mtk_drm_shutdown+0x54/0x80\n[ 86.522546] platform_shutdown+0x64/0x90\n[ 86.523137] device_shutdown+0x260/0x5b8\n[ 86.523728] kernel_restart+0x78/0xf0\n[ 86.524282] __do_sys_reboot+0x258/0x2f0\n[ 86.524871] __arm64_sys_reboot+0x90/0xd8\n[ 86.525473] invoke_syscall+0x74/0x268\n[ 86.526041] el0_svc_common.constprop.0+0xb0/0x240\n[ 86.526751] do_el0_svc+0x4c/0x70\n[ 86.527251] el0_svc+0x4c/0xc0\n[ 86.527719] el0t_64_sync_handler+0x144/0x168\n[ 86.528367] el0t_64_sync+0x198/0x1a0\n[ 86.528920]\n[ 86.529157] The buggy address belongs to the physical page:\n[ 86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc\n[ 86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)\n[ 86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000\n[ 86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000\n[ 86.534511] page dumped because: kasan: bad access detected\n[ 86.535323]\n[ 86.535559] Memory state around the buggy address:\n[ 86.536265] ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.537314] ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.538363] \u003effff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.544733] ^\n[ 86.551057] ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.557510] ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.563928] ==================================================================\n[ 86.571093] Disabling lock debugging due to kernel taint\n[ 86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b\n[ 86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57926",
"url": "https://www.suse.com/security/cve/CVE-2024-57926"
},
{
"category": "external",
"summary": "SUSE Bug 1236082 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "external",
"summary": "SUSE Bug 1236084 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-57926"
},
{
"cve": "CVE-2024-57929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: fix releasing a faulty array block twice in dm_array_cursor_end\n\nWhen dm_bm_read_lock() fails due to locking or checksum errors, it\nreleases the faulty block implicitly while leaving an invalid output\npointer behind. The caller of dm_bm_read_lock() should not operate on\nthis invalid dm_block pointer, or it will lead to undefined result.\nFor example, the dm_array_cursor incorrectly caches the invalid pointer\non reading a faulty array block, causing a double release in\ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().\n\nReproduce steps:\n\n1. initialize a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. wipe the second array block offline\n\ndmsteup remove cache cmeta cdata corig\nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock\n\n3. try reopen the cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10\ndevice-mapper: block manager: array validator check failed for block 10\ndevice-mapper: array: get_ablock failed\ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed\n------------[ cut here ]------------\nkernel BUG at drivers/md/dm-bufio.c:638!\n\nFix by setting the cached block pointer to NULL on errors.\n\nIn addition to the reproducer described above, this fix can be\nverified using the \"array_cursor/damaged\" test in dm-unit:\n dm-unit run /pdata/array_cursor/damaged --kernel-dir \u003cKERNEL_DIR\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57929",
"url": "https://www.suse.com/security/cve/CVE-2024-57929"
},
{
"category": "external",
"summary": "SUSE Bug 1236096 for CVE-2024-57929",
"url": "https://bugzilla.suse.com/1236096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57929"
},
{
"cve": "CVE-2024-57932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv-\u003enum_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57932",
"url": "https://www.suse.com/security/cve/CVE-2024-57932"
},
{
"category": "external",
"summary": "SUSE Bug 1236190 for CVE-2024-57932",
"url": "https://bugzilla.suse.com/1236190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57932"
},
{
"cve": "CVE-2024-57933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XSK operations on the existence of queues\n\nThis patch predicates the enabling and disabling of XSK pools on the\nexistence of queues. As it stands, if the interface is down, disabling\nor enabling XSK pools would result in a crash, as the RX queue pointer\nwould be NULL. XSK pool registration will occur as part of the next\ninterface up.\n\nSimilarly, xsk_wakeup needs be guarded against queues disappearing\nwhile the function is executing, so a check against the\nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the\ndisabling of the bit and the synchronize_net() in gve_turndown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57933",
"url": "https://www.suse.com/security/cve/CVE-2024-57933"
},
{
"category": "external",
"summary": "SUSE Bug 1236178 for CVE-2024-57933",
"url": "https://bugzilla.suse.com/1236178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57933"
},
{
"cve": "CVE-2024-57935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57935",
"url": "https://www.suse.com/security/cve/CVE-2024-57935"
},
{
"category": "external",
"summary": "SUSE Bug 1236180 for CVE-2024-57935",
"url": "https://bugzilla.suse.com/1236180"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57935"
},
{
"cve": "CVE-2024-57936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Fix max SGEs for the Work Request\n\nGen P7 supports up to 13 SGEs for now. WQE software structure\ncan hold only 6 now. Since the max send sge is reported as\n13, the stack can give requests up to 13 SGEs. This is causing\ntraffic failures and system crashes.\n\nUse the define for max SGE supported for variable size. This\nwill work for both static and variable WQEs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57936",
"url": "https://www.suse.com/security/cve/CVE-2024-57936"
},
{
"category": "external",
"summary": "SUSE Bug 1236181 for CVE-2024-57936",
"url": "https://bugzilla.suse.com/1236181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57936"
},
{
"cve": "CVE-2024-57940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix the infinite loop in exfat_readdir()\n\nIf the file system is corrupted so that a cluster is linked to\nitself in the cluster chain, and there is an unused directory\nentry in the cluster, \u0027dentry\u0027 will not be incremented, causing\ncondition \u0027dentry \u003c max_dentries\u0027 unable to prevent an infinite\nloop.\n\nThis infinite loop causes s_lock not to be released, and other\ntasks will hang, such as exfat_sync_fs().\n\nThis commit stops traversing the cluster chain when there is unused\ndirectory entry in the cluster to avoid this infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57940",
"url": "https://www.suse.com/security/cve/CVE-2024-57940"
},
{
"category": "external",
"summary": "SUSE Bug 1236227 for CVE-2024-57940",
"url": "https://bugzilla.suse.com/1236227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2024-57940"
},
{
"cve": "CVE-2024-8805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-8805"
}
],
"notes": [
{
"category": "general",
"text": "BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-8805",
"url": "https://www.suse.com/security/cve/CVE-2024-8805"
},
{
"category": "external",
"summary": "SUSE Bug 1230697 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "external",
"summary": "SUSE Bug 1240804 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1240804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "important"
}
],
"title": "CVE-2024-8805"
},
{
"cve": "CVE-2025-21632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Ensure shadow stack is active before \"getting\" registers\n\nThe x86 shadow stack support has its own set of registers. Those registers\nare XSAVE-managed, but they are \"supervisor state components\" which means\nthat userspace can not touch them with XSAVE/XRSTOR. It also means that\nthey are not accessible from the existing ptrace ABI for XSAVE state.\nThus, there is a new ptrace get/set interface for it.\n\nThe regset code that ptrace uses provides an -\u003eactive() handler in\naddition to the get/set ones. For shadow stack this -\u003eactive() handler\nverifies that shadow stack is enabled via the ARCH_SHSTK_SHSTK bit in the\nthread struct. The -\u003eactive() handler is checked from some call sites of\nthe regset get/set handlers, but not the ptrace ones. This was not\nunderstood when shadow stack support was put in place.\n\nAs a result, both the set/get handlers can be called with\nXFEATURE_CET_USER in its init state, which would cause get_xsave_addr() to\nreturn NULL and trigger a WARN_ON(). The ssp_set() handler luckily has an\nssp_active() check to avoid surprising the kernel with shadow stack\nbehavior when the kernel is not ready for it (ARCH_SHSTK_SHSTK==0). That\ncheck just happened to avoid the warning.\n\nBut the -\u003eget() side wasn\u0027t so lucky. It can be called with shadow stacks\ndisabled, triggering the warning in practice, as reported by Christina\nSchimpe:\n\nWARNING: CPU: 5 PID: 1773 at arch/x86/kernel/fpu/regset.c:198 ssp_get+0x89/0xa0\n[...]\nCall Trace:\n\u003cTASK\u003e\n? show_regs+0x6e/0x80\n? ssp_get+0x89/0xa0\n? __warn+0x91/0x150\n? ssp_get+0x89/0xa0\n? report_bug+0x19d/0x1b0\n? handle_bug+0x46/0x80\n? exc_invalid_op+0x1d/0x80\n? asm_exc_invalid_op+0x1f/0x30\n? __pfx_ssp_get+0x10/0x10\n? ssp_get+0x89/0xa0\n? ssp_get+0x52/0xa0\n__regset_get+0xad/0xf0\ncopy_regset_to_user+0x52/0xc0\nptrace_regset+0x119/0x140\nptrace_request+0x13c/0x850\n? wait_task_inactive+0x142/0x1d0\n? do_syscall_64+0x6d/0x90\narch_ptrace+0x102/0x300\n[...]\n\nEnsure that shadow stacks are active in a thread before looking them up\nin the XSAVE buffer. Since ARCH_SHSTK_SHSTK and user_ssp[SHSTK_EN] are\nset at the same time, the active check ensures that there will be\nsomething to find in the XSAVE buffer.\n\n[ dhansen: changelog/subject tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21632",
"url": "https://www.suse.com/security/cve/CVE-2025-21632"
},
{
"category": "external",
"summary": "SUSE Bug 1236106 for CVE-2025-21632",
"url": "https://bugzilla.suse.com/1236106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2025-21632"
},
{
"cve": "CVE-2025-21645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it\n\nWakeup for IRQ1 should be disabled only in cases where i8042 had\nactually enabled it, otherwise \"wake_depth\" for this IRQ will try to\ndrop below zero and there will be an unpleasant WARN() logged:\n\nkernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug\nkernel: ------------[ cut here ]------------\nkernel: Unbalanced IRQ 1 wake disable\nkernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0\n\nThe PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops\nwhich sets amd_pmc_suspend_handler() to the .suspend, .freeze, and\n.poweroff handlers. i8042_pm_suspend(), however, is only set as\nthe .suspend handler.\n\nFix the issue by call PMC suspend handler only from the same set of\ndev_pm_ops handlers as i8042_pm_suspend(), which currently means just\nthe .suspend handler.\n\nTo reproduce this issue try hibernating (S4) the machine after a fresh boot\nwithout putting it into s2idle first.\n\n[ij: edited the commit message.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21645",
"url": "https://www.suse.com/security/cve/CVE-2025-21645"
},
{
"category": "external",
"summary": "SUSE Bug 1236131 for CVE-2025-21645",
"url": "https://bugzilla.suse.com/1236131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2025-21645"
},
{
"cve": "CVE-2025-21646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21646"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the maximum cell name length\n\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\nproblem occurs if someone actually does that: kafs tries to create a\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\nwith a warning:\n\n WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\n\nbecause procfs limits the maximum filename length to 255.\n\nHowever, the DNS limits the maximum lookup length and, by extension, the\nmaximum cell name, to 255 less two (length count and trailing NUL).\n\nFix this by limiting the maximum acceptable cellname length to 253. This\nalso allows us to be sure we can create the \"/afs/.\u003ccell\u003e/\" mountpoint too.\n\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\nexceeds 253.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21646",
"url": "https://www.suse.com/security/cve/CVE-2025-21646"
},
{
"category": "external",
"summary": "SUSE Bug 1236168 for CVE-2025-21646",
"url": "https://bugzilla.suse.com/1236168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2025-21646"
},
{
"cve": "CVE-2025-21649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is sent on HIP08 devices\n\nCurrently, HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL. But the tx process would still try to set hardware time\nstamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.\n\n[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge]\n[ 128.292938] sp : ffff800059b93140\n[ 128.297200] x29: ffff800059b93140 x28: 0000000000003280\n[ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080\n[ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001\n[ 128.315969] x23: 0000000000000000 x22: 0000000000000194\n[ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000\n[ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000\n[ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24\n[ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000\n[ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368\n[ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02\n[ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0\n[ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000\n[ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff\n[ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294\n[ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080\n[ 128.390626] Call trace:\n[ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3]\n[ 128.405468] xmit_one.constprop.0+0xc4/0x200\n[ 128.410600] dev_hard_start_xmit+0x54/0xf0\n[ 128.415556] sch_direct_xmit+0xe8/0x634\n[ 128.420246] __dev_queue_xmit+0x224/0xc70\n[ 128.425101] dev_queue_xmit+0x1c/0x40\n[ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch]\n[ 128.435409] do_output+0x60/0x17c [openvswitch]\n[ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch]\n[ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch]\n[ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch]\n[ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch]\n[ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch]\n[ 128.471460] xmit_one.constprop.0+0xc4/0x200\n[ 128.476561] dev_hard_start_xmit+0x54/0xf0\n[ 128.481489] __dev_queue_xmit+0x968/0xc70\n[ 128.486330] dev_queue_xmit+0x1c/0x40\n[ 128.490856] ip_finish_output2+0x250/0x570\n[ 128.495810] __ip_finish_output+0x170/0x1e0\n[ 128.500832] ip_finish_output+0x3c/0xf0\n[ 128.505504] ip_output+0xbc/0x160\n[ 128.509654] ip_send_skb+0x58/0xd4\n[ 128.513892] udp_send_skb+0x12c/0x354\n[ 128.518387] udp_sendmsg+0x7a8/0x9c0\n[ 128.522793] inet_sendmsg+0x4c/0x8c\n[ 128.527116] __sock_sendmsg+0x48/0x80\n[ 128.531609] __sys_sendto+0x124/0x164\n[ 128.536099] __arm64_sys_sendto+0x30/0x5c\n[ 128.540935] invoke_syscall+0x50/0x130\n[ 128.545508] el0_svc_common.constprop.0+0x10c/0x124\n[ 128.551205] do_el0_svc+0x34/0xdc\n[ 128.555347] el0_svc+0x20/0x30\n[ 128.559227] el0_sync_handler+0xb8/0xc0\n[ 128.563883] el0_sync+0x160/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21649",
"url": "https://www.suse.com/security/cve/CVE-2025-21649"
},
{
"category": "external",
"summary": "SUSE Bug 1236143 for CVE-2025-21649",
"url": "https://bugzilla.suse.com/1236143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2025-21649"
},
{
"cve": "CVE-2025-21650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue\n\nThe TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs\n1024-1279 are in different BAR space addresses. However,\nhclge_fetch_pf_reg does not distinguish the tqp space information when\nreading the tqp space information. When the number of TQPs is greater\nthan 1024, access bar space overwriting occurs.\nThe problem of different segments has been considered during the\ninitialization of tqp.io_base. Therefore, tqp.io_base is directly used\nwhen the queue is read in hclge_fetch_pf_reg.\n\nThe error message:\n\nUnable to handle kernel paging request at virtual address ffff800037200000\npc : hclge_fetch_pf_reg+0x138/0x250 [hclge]\nlr : hclge_get_regs+0x84/0x1d0 [hclge]\nCall trace:\n hclge_fetch_pf_reg+0x138/0x250 [hclge]\n hclge_get_regs+0x84/0x1d0 [hclge]\n hns3_get_regs+0x2c/0x50 [hns3]\n ethtool_get_regs+0xf4/0x270\n dev_ethtool+0x674/0x8a0\n dev_ioctl+0x270/0x36c\n sock_do_ioctl+0x110/0x2a0\n sock_ioctl+0x2ac/0x530\n __arm64_sys_ioctl+0xa8/0x100\n invoke_syscall+0x4c/0x124\n el0_svc_common.constprop.0+0x140/0x15c\n do_el0_svc+0x30/0xd0\n el0_svc+0x1c/0x2c\n el0_sync_handler+0xb0/0xb4\n el0_sync+0x168/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21650",
"url": "https://www.suse.com/security/cve/CVE-2025-21650"
},
{
"category": "external",
"summary": "SUSE Bug 1236144 for CVE-2025-21650",
"url": "https://bugzilla.suse.com/1236144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2025-21650"
},
{
"cve": "CVE-2025-21651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: don\u0027t auto enable misc vector\n\nCurrently, there is a time window between misc irq enabled\nand service task inited. If an interrupte is reported at\nthis time, it will cause warning like below:\n\n[ 16.324639] Call trace:\n[ 16.324641] __queue_delayed_work+0xb8/0xe0\n[ 16.324643] mod_delayed_work_on+0x78/0xd0\n[ 16.324655] hclge_errhand_task_schedule+0x58/0x90 [hclge]\n[ 16.324662] hclge_misc_irq_handle+0x168/0x240 [hclge]\n[ 16.324666] __handle_irq_event_percpu+0x64/0x1e0\n[ 16.324667] handle_irq_event+0x80/0x170\n[ 16.324670] handle_fasteoi_edge_irq+0x110/0x2bc\n[ 16.324671] __handle_domain_irq+0x84/0xfc\n[ 16.324673] gic_handle_irq+0x88/0x2c0\n[ 16.324674] el1_irq+0xb8/0x140\n[ 16.324677] arch_cpu_idle+0x18/0x40\n[ 16.324679] default_idle_call+0x5c/0x1bc\n[ 16.324682] cpuidle_idle_call+0x18c/0x1c4\n[ 16.324684] do_idle+0x174/0x17c\n[ 16.324685] cpu_startup_entry+0x30/0x6c\n[ 16.324687] secondary_start_kernel+0x1a4/0x280\n[ 16.324688] ---[ end trace 6aa0bff672a964aa ]---\n\nSo don\u0027t auto enable misc vector when request irq..",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21651",
"url": "https://www.suse.com/security/cve/CVE-2025-21651"
},
{
"category": "external",
"summary": "SUSE Bug 1236145 for CVE-2025-21651",
"url": "https://bugzilla.suse.com/1236145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2025-21651"
},
{
"cve": "CVE-2025-21656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur\n\nscsi_execute_cmd() function can return both negative (linux codes) and\npositive (scsi_cmnd result field) error codes.\n\nCurrently the driver just passes error codes of scsi_execute_cmd() to\nhwmon core, which is incorrect because hwmon only checks for negative\nerror codes. This leads to hwmon reporting uninitialized data to\nuserspace in case of SCSI errors (for example if the disk drive was\ndisconnected).\n\nThis patch checks scsi_execute_cmd() output and returns -EIO if it\u0027s\nerror code is positive.\n\n[groeck: Avoid inline variable declaration for portability]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21656",
"url": "https://www.suse.com/security/cve/CVE-2025-21656"
},
{
"category": "external",
"summary": "SUSE Bug 1236248 for CVE-2025-21656",
"url": "https://bugzilla.suse.com/1236248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "low"
}
],
"title": "CVE-2025-21656"
},
{
"cve": "CVE-2025-21662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix variable not being completed when function returns\n\nWhen cmd_alloc_index(), fails cmd_work_handler() needs\nto complete ent-\u003eslotted before returning early.\nOtherwise the task which issued the command may hang:\n\n mlx5_core 0000:01:00.0: cmd_work_handler:877:(pid 3880418): failed to allocate command entry\n INFO: task kworker/13:2:4055883 blocked for more than 120 seconds.\n Not tainted 4.19.90-25.44.v2101.ky10.aarch64 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n kworker/13:2 D 0 4055883 2 0x00000228\n Workqueue: events mlx5e_tx_dim_work [mlx5_core]\n Call trace:\n __switch_to+0xe8/0x150\n __schedule+0x2a8/0x9b8\n schedule+0x2c/0x88\n schedule_timeout+0x204/0x478\n wait_for_common+0x154/0x250\n wait_for_completion+0x28/0x38\n cmd_exec+0x7a0/0xa00 [mlx5_core]\n mlx5_cmd_exec+0x54/0x80 [mlx5_core]\n mlx5_core_modify_cq+0x6c/0x80 [mlx5_core]\n mlx5_core_modify_cq_moderation+0xa0/0xb8 [mlx5_core]\n mlx5e_tx_dim_work+0x54/0x68 [mlx5_core]\n process_one_work+0x1b0/0x448\n worker_thread+0x54/0x468\n kthread+0x134/0x138\n ret_from_fork+0x10/0x18",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21662",
"url": "https://www.suse.com/security/cve/CVE-2025-21662"
},
{
"category": "external",
"summary": "SUSE Bug 1236198 for CVE-2025-21662",
"url": "https://bugzilla.suse.com/1236198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-coco_debug-devel-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-devel-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-source-coco-6.4.0-15061.12.coco15sp6.1.noarch",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:kernel-syms-coco-6.4.0-15061.12.coco15sp6.1.x86_64",
"SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6:reiserfs-kmp-coco-6.4.0-15061.12.coco15sp6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-01-29T16:11:29Z",
"details": "moderate"
}
],
"title": "CVE-2025-21662"
}
]
}
suse-su-2025:20166-1
Vulnerability from csaf_suse
Published
2025-03-28 07:51
Modified
2025-03-28 07:51
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
- CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
- CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).
- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).
- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).
- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
- CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before "getting" registers (bsc#1236106).
- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
Features added:
* - Disable ceph (jsc#PED-7242)
* - RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).
* - ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).
* - supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)
The following non-security bugs were fixed:
- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).
- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).
- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).
- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).
- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).
- ACPI: resource: Fix memory resource type union access (git-fixes).
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).
- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).
- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).
- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).
- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).
- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).
- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: seq: Check UMP support for midi_version change (git-fixes).
- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).
- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).
- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).
- ALSA: seq: ump: Use guard() for locking (stable-fixes).
- ALSA: ump: Use guard() for locking (stable-fixes).
- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).
- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).
- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).
- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).
- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).
- ASoC: amd: yc: Fix the wrong return value (git-fixes).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).
- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).
- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).
- ASoC: samsung: Add missing depends on I2C (git-fixes).
- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).
- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).
- ASoC: wm8994: Add depends on MFD core (stable-fixes).
- Add already cherry-picked ids to AMDGPU patch
- Align git commit ID abbreviation guidelines and checks (git-fixes).
- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).
- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).
- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).
- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).
- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).
- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).
- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).
- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).
- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).
- Bluetooth: iso: Fix recursive locking warning (git-fixes).
- Delete XHCI patch for regression (bsc#1235550)
- Disable ceph (jsc#PED-7242)
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).
- Drop downstream TPM fix patch (bsc#1233260 bsc#1233259 bsc#1232421)
- Drop uvcvideo fix due to regression (bsc#1235894)
- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).
- HID: fix generic desktop D-Pad controls (git-fixes).
- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).
- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).
- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).
- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).
- Input: bbnsm_pwrkey - add remove hook (git-fixes).
- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).
- Input: davinci-keyscan - remove leftover header (git-fixes).
- Input: xpad - add QH Electronics VID/PID (stable-fixes).
- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).
- Input: xpad - add support for Nacon Pro Compact (stable-fixes).
- Input: xpad - add support for wooting two he (arm) (stable-fixes).
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).
- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).
- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).
- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).
- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).
- Move kABI workaround patch to correct folder
- Move upstreamed DRM patch into sorted section
- Move upstreamed NFS patch into sorted section
- Move upstreamed TPM patch into sorted section
- Move upstreamed lpfc patches into sorted section
- Move upstreamed ppc patch into sorted section
- Move upstreamed sound patch into sorted section
- Move upstreamed sound patches into sorted section
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).
- NFSD: Async COPY result needs to return a write verifier (git-fixes).
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).
- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).
- NFSD: Prevent a potential integer overflow (git-fixes).
- NFSD: Remove a never-true comparison (git-fixes).
- NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (git-fixes).
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).
- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).
- PCI/AER: Disable AER service on suspend (stable-fixes).
- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (stable-fixes).
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).
- PCI: Add T_PERST_CLK_US macro (git-fixes).
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).
- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).
- PCI: Fix use-after-free of slot->bus on hot remove (stable-fixes).
- PCI: Use preserve_config in place of pci_flags (stable-fixes).
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).
- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).
- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).
- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).
- PCI: j721e: Add per platform maximum lane settings (stable-fixes).
- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).
- PCI: j721e: Add suspend and resume support (git-fixes).
- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).
- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).
- PCI: qcom: Add support for IPQ9574 (stable-fixes).
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).
- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).
- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).
- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)
- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)
- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)
- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)
- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)
- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)
- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)
- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)
- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)
- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)
- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)
- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)
- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)
- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)
- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)
- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)
- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)
- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)
- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)
- RDMA/rtrs: Ensure 'ib_sge list' is accessible (git-fixes)
- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)
- RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (git-fixes)
- RDMA/srp: Fix error handling in srp_add_port (git-fixes)
- RDMA/uverbs: Prevent integer overflow issue (git-fixes)
- README.BRANCH: Remove copy of branch name
- Refresh patches.suse/ALSA-hda-realtek-Add-support-for-Samsung-Galaxy-Book.patch.
- Refresh patches.suse/cpufreq-intel_pstate-Temporarily-boost-P-state-when-.patch.
- Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad" (stable-fixes).
- Revert "block/mq-deadline: use correct way to throttling write requests" (bsc#1234146).
- Revert "btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)"
- Revert "drm/i915/dpt: Make DPT object unshrinkable" (stable-fixes).
- Revert "igb: Disable threaded IRQ for igb_msix_other" (git-fixes).
- Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (git-fixes).
- Revert "unicode: Do not special case ignorable code points" (stable-fixes).
- Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (stable-fixes).
- Revert 'arm64: Kconfig: Make SME depend on BROKEN for now' This reverts commit 2ccfee6be929dd4ea49ef59a7ae686473aae40b6 CONFIG_ARM64_SME is enabled by default so some customers may rely on SME. We need further analysis to evaluate to what extent we are impacted and in case we'll disable SME support later.
- Revert 0dd78566990 ("Disable ceph (jsc#PED-7242)") Apparently, jsc#PED-7242 is only deprecate ceph for 15-SP6 and disable for 15-SP7. Revert the disabling.
- SUNRPC: make sure cache entry active before cache_show (git-fixes).
- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).
- USB: core: Disable LPM only for non-suspended ports (git-fixes).
- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).
- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).
- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).
- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
- USB: serial: option: add Neoway N723-EA support (stable-fixes).
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).
- USB: serial: option: add TCL IK512 MBIM & ECM (stable-fixes).
- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).
- USB: usblp: return error when setting unsupported protocol (git-fixes).
- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
- VMCI: fix reference to ioctl-number.rst (git-fixes).
- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).
- accel/habanalabs: fix debugfs files permissions (stable-fixes).
- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).
- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).
- afs: Automatically generate trace tag enums (git-fixes).
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).
- afs: Fix cleanup of immediately failed async calls (git-fixes).
- afs: Fix directory format encoding struct (git-fixes).
- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).
- afs: Fix the maximum cell name length (git-fixes).
- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).
- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).
- arch: Remove cmpxchg_double (bsc#1220773).
- arch: consolidate arch_irq_work_raise prototypes (git-fixes).
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (git-fixes)
- arm64: Force position-independent veneers (git-fixes).
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245) Update arm64 default configuration file
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes).
- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).
- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).
- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)
- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).
- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).
- batman-adv: Do not send uninitialized TT changes (git-fixes).
- batman-adv: Remove uninitialized data in full table TT response (git-fixes).
- blacklist.conf: printk/sysctl: breaks kernel without pre-requisite patches (bsc#1229025)
- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).
- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).
- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).
- blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (bsc#1234140).
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).
- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).
- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).
- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).
- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).
- block/mq-deadline: Fix the tag reservation code (bsc#1234148).
- block: Call .limit_depth() after .hctx has been set (bsc#1234148).
- block: Fix where bio IO priority gets set (bsc#1234145).
- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).
- block: update the stable_writes flag in bdev_add (bsc#1234141).
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)
- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).
- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).
- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).
- bpf: verifier: prevent userspace memory access (git-fixes).
- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).
- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).
- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).
- can: j1939: fix error in J1939 documentation (stable-fixes).
- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
- checkpatch: always parse orig_commit in fixes tag (git-fixes).
- checkpatch: check for missing Fixes tags (stable-fixes).
- cleanup: Add conditional guard support (stable-fixes).
- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).
- cleanup: Remove address space of returned pointer (git-fixes).
- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).
- clocksource/drivers:sp804: Make user selectable (git-fixes).
- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).
- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).
- cpufreq: ACPI: Fix max-frequency computation (git-fixes).
- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).
- cpufreq: amd-pstate: remove global header file (git-fixes).
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).
- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).
- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).
- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).
- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).
- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).
- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).
- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).
- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).
- cpupower: fix TSC MHz calculation (git-fixes).
- crypto: caam - use JobR's space to access page 0 regs (git-fixes).
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).
- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).
- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).
- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (git-fixes).
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).
- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).
- crypto: qce - fix goto jump in error path (git-fixes).
- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).
- crypto: qce - unregister previously registered algos in error path (git-fixes).
- crypto: x86/sha256 - Add parentheses around macros' single arguments (stable-fixes).
- cyrpto/b128ops: Remove struct u128 (bsc#1220773).
- devcoredump: cleanup some comments (git-fixes).
- devlink: Fix length of eswitch inline-mode (git-fixes).
- dlm: fix possible lkb_resource null dereference (git-fixes).
- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).
- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).
- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).
- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).
- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).
- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).
- dmaengine: tegra: Return correct DMA status when paused (git-fixes).
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).
- docs: media: update location of the media patches (stable-fixes).
- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).
- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).
- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).
- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).
- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).
- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).
- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).
- drm/amd/display: Fix DSC-re-computing (stable-fixes).
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).
- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).
- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).
- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).
- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).
- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).
- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).
- drm/amdgpu/pm: Remove gpu_od if it's an empty directory (stable-fixes).
- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).
- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).
- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).
- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).
- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).
- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).
- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).
- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).
- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).
- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).
- drm/amdgpu: do not access invalid sched (git-fixes).
- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).
- drm/amdgpu: fix usage slab after free (stable-fixes).
- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).
- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).
- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).
- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).
- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).
- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).
- drm/amdkfd: Use device based logging for errors (stable-fixes).
- drm/amdkfd: Use the correct wptr size (stable-fixes).
- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).
- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).
- drm/bridge: it6505: Enable module autoloading (stable-fixes).
- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).
- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).
- drm/display: Fix building with GCC 15 (stable-fixes).
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).
- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).
- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).
- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).
- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).
- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).
- drm/i915/dg1: Fix power gate sequence (git-fixes).
- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).
- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).
- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).
- drm/mcde: Enable module autoloading (stable-fixes).
- drm/mediatek: Add return value check when reading DPCD (git-fixes).
- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).
- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).
- drm/mediatek: Fix mode valid issue for dp (git-fixes).
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (git-fixes).
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).
- drm/mediatek: stop selecting foreign drivers (git-fixes).
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).
- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).
- drm/msm: Check return value of of_dma_configure() (git-fixes).
- drm/msm: do not clean up priv->kms prematurely (git-fixes).
- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).
- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).
- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).
- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).
- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).
- drm/radeon: change rdev->ddev to rdev_to_drm(rdev) (stable-fixes).
- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).
- drm/sched: memset() 'job' in drm_sched_job_init() (stable-fixes).
- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).
- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).
- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).
- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).
- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).
- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).
- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).
- drm/vmwgfx: Add new keep_resv BO param (git-fixes).
- drm: adv7511: Drop dsi single lane support (git-fixes).
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).
- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- erofs: avoid debugging output for (de)compressed data (git-fixes).
- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).
- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).
- exfat: fix the infinite loop in exfat_readdir() (git-fixes).
- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).
- ext4: add a new helper to check if es must be kept (bsc#1234170).
- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).
- ext4: add missed brelse in update_backups (bsc#1234171).
- ext4: allow for the last group to be marked as trimmed (bsc#1234278).
- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).
- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).
- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).
- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).
- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).
- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).
- ext4: check the extent status again before inserting delalloc block (bsc#1234186).
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).
- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).
- ext4: correct best extent lstart adjustment logic (bsc#1234179).
- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).
- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).
- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).
- ext4: correct the start block of counting reserved clusters (bsc#1234169).
- ext4: do not let fstrim block system suspend (https://bugzilla.kernel.org/show_bug.cgi?id=216322 bsc#1234166).
- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).
- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).
- ext4: factor out a common helper to query extent map (bsc#1234186).
- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix potential unnitialized variable (bsc#1234183).
- ext4: fix race between writepages and remount (bsc#1234168).
- ext4: fix rec_len verify error (bsc#1234167).
- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).
- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).
- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).
- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).
- ext4: make ext4_es_insert_extent() return void (bsc#1234170).
- ext4: make ext4_es_remove_extent() return void (bsc#1234170).
- ext4: make ext4_zeroout_es() return void (bsc#1234170).
- ext4: make sure allocate pending entry not fail (bsc#1234170).
- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).
- ext4: move 'ix' sanity check to corrent position (bsc#1234174).
- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).
- ext4: nested locking for xattr inode (bsc#1234189).
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).
- ext4: refactor ext4_da_map_blocks() (bsc#1234178).
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).
- ext4: remove the redundant folio_wait_stable() (bsc#1234184).
- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).
- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).
- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).
- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).
- filemap: Fix bounds checking in filemap_read() (bsc#1234209).
- filemap: add a per-mapping stable writes flag (bsc#1234141).
- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).
- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).
- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).
- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).
- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).
- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).
- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).
- genksyms: fix memory leak when the same symbol is added from source (git-fixes).
- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).
- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).
- gpio: grgpio: use a helper variable to store the address of ofdev->dev (stable-fixes).
- gpio: mxc: remove dead code after switch to DT-only (git-fixes).
- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
- hfsplus: do not query the device logical block size multiple times (git-fixes).
- hvc/xen: fix console unplug (git-fixes).
- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).
- hvc/xen: fix event channel handling for secondary consoles (git-fixes).
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).
- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).
- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).
- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).
- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).
- hwmon: (tmp513) Do not use "proxy" headers (stable-fixes).
- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).
- hwmon: (tmp513) Fix division of negative numbers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).
- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).
- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).
- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).
- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).
- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
- i2c: i801: Add support for Intel Panther Lake (stable-fixes).
- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).
- i2c: microchip-core: actually use repeated sends (git-fixes).
- i2c: microchip-core: fix "ghost" detections (git-fixes).
- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).
- i2c: pnx: Fix timeout in wait functions (git-fixes).
- i2c: rcar: fix NACK handling when being a target (git-fixes).
- i2c: riic: Always round-up when calculating bus period (git-fixes).
- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).
- i40e: Fix handling changed priv flags (git-fixes).
- i915/guc: Accumulate active runtime on gt reset (git-fixes).
- i915/guc: Ensure busyness counter increases motonically (git-fixes).
- i915/guc: Reset engine utilization buffer before registration (git-fixes).
- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
- ice: Unbind the workqueue (bsc#1234989)
- ice: change q_index variable type to s16 to store -1 value (git-fixes).
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).
- ice: fix PHY Clock Recovery availability check (git-fixes).
- idpf: add support for SW triggered interrupts (bsc#1235507).
- idpf: enable WB_ON_ITR (bsc#1235507).
- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).
- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).
- iio: adc: ad7124: Disable all channels at probe time (git-fixes).
- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).
- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).
- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).
- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).
- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).
- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).
- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).
- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).
- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).
- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).
- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).
- instrumentation: Wire up cmpxchg128() (bsc#1220773).
- intel_th: core: fix kernel-doc warnings (git-fixes).
- io_uring/rw: avoid punting to io-wq directly (git-fixes).
- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).
- io_uring: Fix registered ring file refcount leak (git-fixes).
- io_uring: always lock __io_cqring_overflow_flush (git-fixes).
- io_uring: check if iowq is killed before queuing (git-fixes).
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).
- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).
- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).
- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).
- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).
- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).
- jffs2: Fix rtime decompressor (git-fixes).
- jffs2: Prevent rtime decompress memory corruption (git-fixes).
- jffs2: fix use of uninitialized variable (git-fixes).
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).
- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).
- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).
- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).
- jfs: xattr: check invalid xattr size more strictly (git-fixes).
- kABI workaround for struct auto_pin_cfg_item change (git-fixes).
- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).
- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)
- kasan: make report_lock a raw spinlock (git-fixes).
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).
- kdb: Fix buffer overflow during tab-complete (bsc#1234652).
- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).
- kdb: Merge identical case statements in kdb_read() (bsc#1234657).
- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).
- kdb: Use format-strings rather than '\0' injection in kdb_read() (bsc#1234654).
- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).
- kdb: address -Wformat-security warnings (bsc#1234659).
- kgdb: Flush console before entering kgdb on panic (bsc#1234651).
- kheaders: Ignore silly-rename files (stable-fixes).
- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).
- ktest.pl: Check kernelrelease return in get_version (git-fixes).
- ktest.pl: Fix typo "accesing" (git-fixes).
- ktest.pl: Fix typo in comment (git-fixes).
- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).
- ktest: force $buildonly = 1 for 'make_warnings_file' test type (stable-fixes).
- landlock: Handle weird files (git-fixes).
- latencytop: use correct kernel-doc format for func params (git-fixes).
- leds: class: Protect brightness_show() with led_cdev->led_access mutex (stable-fixes).
- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).
- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).
- lib/inflate.c: remove dead code (git-fixes).
- lib/stackdepot: print disabled message only if truly disabled (git-fixes).
- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).
- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).
- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).
- mac80211: fix user-power when emulating chanctx (stable-fixes).
- mac802154: check local interfaces before deleting sdata list (stable-fixes).
- mailbox: pcc: Add support for platform notification handling (stable-fixes).
- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).
- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).
- maple_tree: simplify split calculation (git-fixes).
- media: camif-core: Add check for clk_enable() (git-fixes).
- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).
- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).
- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).
- media: i2c: imx412: Add missing newline to prints (git-fixes).
- media: i2c: ov9282: Correct the exposure offset (git-fixes).
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).
- media: imx296: Add standby delay during probe (git-fixes).
- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).
- media: marvell: Add check for clk_enable() (git-fixes).
- media: mc: fix endpoint iteration (git-fixes).
- media: mipi-csis: Add check for clk_enable() (git-fixes).
- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).
- media: ov5640: fix get_light_freq on auto (git-fixes).
- media: rc: iguanair: handle timeouts (git-fixes).
- media: rkisp1: Fix unused value issue (git-fixes).
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).
- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).
- media: uvcvideo: Fix double free in error path (git-fixes).
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).
- media: uvcvideo: Only save async fh if success (git-fixes).
- media: uvcvideo: Propagate buf->error to userspace (git-fixes).
- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).
- media: uvcvideo: Remove dangling pointers (git-fixes).
- media: uvcvideo: Remove redundant NULL assignment (git-fixes).
- media: uvcvideo: Support partial control reads (git-fixes).
- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).
- memory-failure: use a folio in me_huge_page() (git-fixes).
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).
- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).
- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).
- misc: fastrpc: Fix copy buffer page size (git-fixes).
- misc: fastrpc: Fix registered buffer page address (git-fixes).
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).
- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).
- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).
- mm/memory-failure: check the mapcount of the precise page (git-fixes).
- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).
- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).
- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).
- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).
- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).
- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).
- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).
- mm/migrate: putback split folios when numa hint migration fails (git-fixes).
- mm/migrate: split source folio if it is on deferred split list (git-fixes).
- mm/page_owner: remove free_ts from page_owner output (git-fixes).
- mm/readahead: do not allow order-1 folio (bsc#1234205).
- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).
- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).
- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).
- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).
- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).
- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).
- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).
- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).
- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).
- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).
- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).
- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).
- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).
- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).
- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).
- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).
- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).
- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).
- net/ipv6: release expired exception dst cached in socket (bsc#1216813).
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).
- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).
- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).
- net/qed: allow old cards not supporting "num_images" to work (git-fixes).
- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).
- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).
- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).
- net: rose: fix timer races against user threads (git-fixes).
- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).
- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).
- net: usb: rtl8150: enable basic endpoint checking (git-fixes).
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).
- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).
- nfsd: make sure exp active before svc_export_show (git-fixes).
- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).
- nfsd: restore callback functionality for NFSv4.0 (git-fixes).
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).
- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).
- nilfs2: prevent use of deleted inode (git-fixes).
- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).
- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).
- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).
- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).
- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).
- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).
- nvme: apple: fix device reference counting (git-fixes).
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).
- nvme: fix metadata handling in nvme-passthrough (git-fixes).
- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).
- nvmet: propagate npwg topology (git-fixes).
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).
- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).
- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).
- of: address: Report error on resource bounds overflow (stable-fixes).
- padata: add pd get/put refcnt helper (git-fixes).
- padata: avoid UAF for reorder_work (git-fixes).
- padata: fix UAF in padata_reorder (git-fixes).
- parisc: Raise minimal GCC version (bsc#1220773).
- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).
- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).
- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).
- percpu: Wire up cmpxchg128 (bsc#1220773).
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).
- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).
- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).
- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).
- phy: usb: Toggle the PHY power during init (git-fixes).
- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).
- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).
- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).
- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).
- pinmux: Use sequential access to access desc->pinmux data (stable-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).
- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).
- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).
- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).
- platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed (stable-fixes).
- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).
- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).
- power: supply: gpio-charger: Fix set charge current limits (git-fixes).
- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).
- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).
- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).
- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).
- pps: add an error check in parport_attach (git-fixes).
- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- printk: Add is_printk_legacy_deferred() (bsc#1236733).
- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).
- pwm: stm32-lp: Add check for clk_enable() (git-fixes).
- pwm: stm32: Add check for clk_enable() (git-fixes).
- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).
- quota: explicitly forbid quota files from being encrypted (bsc#1234196).
- quota: flush quota_release_work upon quota writeback (bsc#1234195).
- quota: simplify drop_dquot_ref() (bsc#1234197).
- rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (git-fixes)
- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)
- rcu: Dump memory object info if callback function is invalid (git-fixes)
- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)
- rcuscale: Move rcu_scale_writer() (git-fixes)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)
- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).
- regmap: Use correct format specifier for logging range errors (stable-fixes).
- regulator: core: Add missing newline character (git-fixes).
- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).
- remoteproc: core: Fix ida_free call while not allocated (git-fixes).
- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).
- rtc: zynqmp: Fix optional clock name property (git-fixes).
- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).
- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).
- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).
- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).
- s390/facility: Disable compile time optimization for decompressor code (git-fixes).
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).
- s390/pageattr: Implement missing kernel_page_present() (git-fixes).
- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)
- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).
- scatterlist: fix incorrect func name in kernel-doc (git-fixes).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).
- sched/numa: fix memory leak due to the overwritten vma->numab_state (git fixes (sched/numa)).
- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).
- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).
- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).
- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).
- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).
- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).
- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).
- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).
- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).
- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).
- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).
- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).
- scsi: qla2xxx: Remove the unused 'del_list_entry' field in struct fc_port (bsc#1235406).
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).
- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).
- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).
- selftest: media_tests: fix trivial UAF typo (git-fixes).
- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).
- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).
- selftests/landlock: Fix error message (git-fixes).
- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).
- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).
- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).
- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).
- selftests: tc-testing: reduce rshift value (stable-fixes).
- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).
- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).
- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).
- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).
- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).
- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).
- serial: 8250_fintek: Add support for F81216E (stable-fixes).
- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).
- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).
- serial: amba-pl011: Use port lock wrappers (stable-fixes).
- serial: amba-pl011: fix build regression (git-fixes).
- serial: do not use uninitialized value in uart_poll_init() (git-fixes).
- serial: imx: only set receiver level if it is zero (git-fixes).
- serial: imx: set receiver level before starting uart (git-fixes).
- serial: qcom-geni: Do not cancel/abort if we can't get the port lock (git-fixes).
- serial: qcom-geni: disable interrupts during console writes (git-fixes).
- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).
- serial: qcom-geni: fix console corruption (git-fixes).
- serial: qcom-geni: fix dma rx cancellation (git-fixes).
- serial: qcom-geni: fix false console tx restart (git-fixes).
- serial: qcom-geni: fix fifo polling timeout (git-fixes).
- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).
- serial: qcom-geni: fix polled console corruption (git-fixes).
- serial: qcom-geni: fix polled console initialisation (git-fixes).
- serial: qcom-geni: fix receiver enable (git-fixes).
- serial: qcom-geni: fix shutdown race (git-fixes).
- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).
- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).
- serial: qcom-geni: revert broken hibernation support (git-fixes).
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).
- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).
- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).
- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).
- series.conf: temporarily disable upstream patch patches.suse/ocfs2-fix-UBSAN-warning-in-ocfs2_verify_volume.patch (bsc#1236138)
- slub: Replace cmpxchg_double() (bsc#1220773).
- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).
- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]
- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).
- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).
- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).
- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).
- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).
- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).
- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).
- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).
- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).
- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).
- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).
- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).
- spi: zynq-qspi: Add check for clk_enable() (git-fixes).
- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)
- srcu: Only accelerate on enqueue time (git-fixes)
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).
- staging: iio: ad9832: Correct phase range check (git-fixes).
- staging: iio: ad9834: Correct phase range check (git-fixes).
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).
- staging: media: max96712: fix kernel oops when removing module (git-fixes).
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).
- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)
- svcrdma: Address an integer overflow (git-fixes).
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).
- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).
- swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (git-fixes).
- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).
- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).
- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).
- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
- tools: Sync if_xdp.h uapi tooling header (git-fixes).
- tools: hv: change permissions of NetworkManager configuration file (git-fixes).
- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)
- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).
- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).
- types: Introduce [us]128 (bsc#1220773).
- ubifs: Correct the total block count by deducting journal reservation (git-fixes).
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).
- ubifs: skip dumping tnc tree when zroot is null (git-fixes).
- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).
- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).
- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).
- udf: refactor inode_bmap() to handle error (bsc#1234242).
- udf: refactor udf_current_aext() to handle error (bsc#1234240).
- udf: refactor udf_next_aext() to handle error (bsc#1234241).
- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).
- uio: Fix return value of poll (git-fixes).
- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).
- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).
- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).
- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).
- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).
- usb: dwc2: Fix HCD port connection race (git-fixes).
- usb: dwc2: Fix HCD resume (git-fixes).
- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (git-fixes).
- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).
- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).
- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).
- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).
- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).
- usb: fix reference leak in usb_new_device() (git-fixes).
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).
- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).
- usb: gadget: f_tcm: Do not free command immediately (git-fixes).
- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).
- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).
- usb: gadget: f_tcm: Translate error to sense (git-fixes).
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).
- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).
- usb: host: xhci-plat: Assign shared_hcd->rsrc_start (git-fixes).
- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).
- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)
- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).
- usb: typec: use cleanup facility for 'altmodes_node' (stable-fixes).
- usbnet: ipheth: break up NCM header size computation (git-fixes).
- usbnet: ipheth: check that DPE points past NCM header (git-fixes).
- usbnet: ipheth: fix DPE OoB read (git-fixes).
- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).
- usbnet: ipheth: refactor NCM datagram loop (git-fixes).
- usbnet: ipheth: use static NDP16 location in URB (git-fixes).
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).
- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).
- vdpa: solidrun: Fix UB bug with devres (git-fixes).
- vfs: fix readahead(2) on block devices (bsc#1234201).
- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).
- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).
- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).
- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).
- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).
- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).
- wifi: ath5k: add PCI ID for SX76X (git-fixes).
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).
- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).
- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).
- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).
- wifi: cw1200: Fix potential NULL dereference (git-fixes).
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).
- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).
- wifi: mac80211: Add non-atomic station iterator (stable-fixes).
- wifi: mac80211: Fix common size calculation for ML element (git-fixes).
- wifi: mac80211: clean up 'ret' in sta_link_apply_parameters() (stable-fixes).
- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).
- wifi: mac80211: fix station NSS capability initialization order (git-fixes).
- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).
- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).
- wifi: mac80211: prohibit deactivating all links (git-fixes).
- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).
- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7915: fix register mapping (git-fixes).
- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).
- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).
- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).
- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).
- wifi: mt76: mt7996: fix ldpc setting (git-fixes).
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7996: fix register mapping (git-fixes).
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).
- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).
- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).
- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).
- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).
- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).
- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).
- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).
- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).
- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).
- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).
- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).
- xfs: do not allocate COW extents when unsharing a hole (git-fixes).
- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).
- xfs: remove unknown compat feature check in superblock write validation (git-fixes).
- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).
- xfs: sb_spino_align is not verified (git-fixes).
- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).
- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).
- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).
Patchnames
SUSE-SLE-Micro-6.0-kernel-4
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nThe SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).\n- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).\n- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).\n- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).\n- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).\n- CVE-2024-44996: vsock: fix recursive -\u003erecvmsg calls (bsc#1230205).\n- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).\n- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).\n- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).\n- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).\n- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).\n- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).\n- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).\n- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).\n- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).\n- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).\n- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).\n- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).\n- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).\n- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).\n- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).\n- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).\n- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).\n- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).\n- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).\n- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).\n- CVE-2024-53099: bpf: Check validity of link-\u003etype in bpf_link_show_fdinfo() (bsc#1233772).\n- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).\n- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).\n- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).\n- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).\n- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).\n- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).\n- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).\n- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).\n- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).\n- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).\n- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)\n- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).\n- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).\n- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).\n- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).\n- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).\n- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).\n- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).\n- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).\n- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).\n- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).\n- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).\n- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).\n- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).\n- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).\n- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).\n- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).\n- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).\n- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).\n- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).\n- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).\n- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).\n- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).\n- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).\n- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).\n- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).\n- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).\n- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).\n- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).\n- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object-\u003efile (bsc#1234912).\n- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).\n- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).\n- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).\n- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).\n- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).\n- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).\n- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).\n- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).\n- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).\n- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).\n- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).\n- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).\n- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).\n- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027 (bsc#1235487).\n- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).\n- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).\n- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).\n- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).\n- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).\n- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).\n- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).\n- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).\n- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).\n- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).\n- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).\n- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).\n- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).\n- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).\n- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).\n- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).\n- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).\n- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).\n- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).\n- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).\n- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).\n- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).\n- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).\n- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).\n- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).\n- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).\n- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).\n- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).\n- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).\n- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).\n- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).\n- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).\n- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).\n- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).\n- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).\n- CVE-2024-56729: smb: Initialize cfid-\u003etcon before performing network ops (bsc#1235503).\n- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).\n- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).\n- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).\n- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).\n- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).\n- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).\n- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).\n- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).\n- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).\n- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).\n- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).\n- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).\n- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).\n- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).\n- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).\n- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).\n- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).\n- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).\n- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).\n- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).\n- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).\n- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).\n- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).\n- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).\n- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).\n- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).\n- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).\n- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before \"getting\" registers (bsc#1236106).\n- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).\n- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).\n- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).\n- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).\n- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).\n- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).\n- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).\n- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).\n- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).\n- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).\n- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).\n- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).\n\nFeatures added:\n\n * - Disable ceph (jsc#PED-7242)\n * - RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).\n * - ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).\n * - supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)\n\n\nThe following non-security bugs were fixed:\n\n- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).\n- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).\n- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).\n- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).\n- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).\n- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).\n- ACPI: resource: Fix memory resource type union access (git-fixes).\n- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).\n- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).\n- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).\n- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).\n- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).\n- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).\n- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).\n- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).\n- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).\n- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).\n- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).\n- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).\n- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).\n- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).\n- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).\n- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).\n- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).\n- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).\n- ALSA: line6: Fix racy access to midibuf (stable-fixes).\n- ALSA: seq: Check UMP support for midi_version change (git-fixes).\n- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).\n- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).\n- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).\n- ALSA: seq: ump: Use guard() for locking (stable-fixes).\n- ALSA: ump: Use guard() for locking (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).\n- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).\n- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).\n- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).\n- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).\n- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).\n- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).\n- ASoC: SOF: Remove libraries from topology lookups (git-fixes).\n- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).\n- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).\n- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).\n- ASoC: amd: yc: Fix the wrong return value (git-fixes).\n- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).\n- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).\n- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).\n- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).\n- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).\n- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).\n- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).\n- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).\n- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).\n- ASoC: nau8822: Lower debug print priority (stable-fixes).\n- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).\n- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).\n- ASoC: samsung: Add missing depends on I2C (git-fixes).\n- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).\n- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).\n- ASoC: wm8994: Add depends on MFD core (stable-fixes).\n- Add already cherry-picked ids to AMDGPU patch\n- Align git commit ID abbreviation guidelines and checks (git-fixes).\n- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).\n- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).\n- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).\n- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).\n- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).\n- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).\n- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).\n- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).\n- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).\n- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).\n- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).\n- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).\n- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).\n- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).\n- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).\n- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).\n- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).\n- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).\n- Bluetooth: iso: Fix recursive locking warning (git-fixes).\n- Delete XHCI patch for regression (bsc#1235550)\n- Disable ceph (jsc#PED-7242)\n- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).\n- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).\n- Drop downstream TPM fix patch (bsc#1233260 bsc#1233259 bsc#1232421)\n- Drop uvcvideo fix due to regression (bsc#1235894)\n- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).\n- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).\n- HID: fix generic desktop D-Pad controls (git-fixes).\n- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).\n- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).\n- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).\n- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).\n- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).\n- Input: bbnsm_pwrkey - add remove hook (git-fixes).\n- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).\n- Input: davinci-keyscan - remove leftover header (git-fixes).\n- Input: xpad - add QH Electronics VID/PID (stable-fixes).\n- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).\n- Input: xpad - add support for Nacon Pro Compact (stable-fixes).\n- Input: xpad - add support for wooting two he (arm) (stable-fixes).\n- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).\n- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).\n- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).\n- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).\n- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).\n- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).\n- Move kABI workaround patch to correct folder\n- Move upstreamed DRM patch into sorted section\n- Move upstreamed NFS patch into sorted section\n- Move upstreamed TPM patch into sorted section\n- Move upstreamed lpfc patches into sorted section\n- Move upstreamed ppc patch into sorted section\n- Move upstreamed sound patch into sorted section\n- Move upstreamed sound patches into sorted section\n- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).\n- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).\n- NFSD: Async COPY result needs to return a write verifier (git-fixes).\n- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).\n- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).\n- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).\n- NFSD: Prevent a potential integer overflow (git-fixes).\n- NFSD: Remove a never-true comparison (git-fixes).\n- NFSD: initialize copy-\u003ecp_clp early in nfsd4_copy for use by trace point (git-fixes).\n- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).\n- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).\n- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).\n- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).\n- PCI/AER: Disable AER service on suspend (stable-fixes).\n- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).\n- PCI: Add \u0027reset_subordinate\u0027 to reset hierarchy below bridge (stable-fixes).\n- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).\n- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).\n- PCI: Add T_PERST_CLK_US macro (git-fixes).\n- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).\n- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).\n- PCI: Fix use-after-free of slot-\u003ebus on hot remove (stable-fixes).\n- PCI: Use preserve_config in place of pci_flags (stable-fixes).\n- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).\n- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).\n- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).\n- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).\n- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).\n- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).\n- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).\n- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).\n- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).\n- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).\n- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).\n- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).\n- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).\n- PCI: j721e: Add per platform maximum lane settings (stable-fixes).\n- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).\n- PCI: j721e: Add suspend and resume support (git-fixes).\n- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).\n- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).\n- PCI: qcom: Add support for IPQ9574 (stable-fixes).\n- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).\n- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).\n- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).\n- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).\n- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).\n- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)\n- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)\n- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)\n- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)\n- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)\n- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)\n- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)\n- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)\n- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)\n- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)\n- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)\n- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)\n- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)\n- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)\n- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)\n- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)\n- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)\n- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)\n- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)\n- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)\n- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)\n- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)\n- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)\n- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)\n- RDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible (git-fixes)\n- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)\n- RDMA/rxe: Fix the warning \"__rxe_cleanup+0x12c/0x170 [rdma_rxe]\" (git-fixes)\n- RDMA/srp: Fix error handling in srp_add_port (git-fixes)\n- RDMA/uverbs: Prevent integer overflow issue (git-fixes)\n- README.BRANCH: Remove copy of branch name\n- Refresh patches.suse/ALSA-hda-realtek-Add-support-for-Samsung-Galaxy-Book.patch.\n- Refresh patches.suse/cpufreq-intel_pstate-Temporarily-boost-P-state-when-.patch.\n- Revert \"HID: multitouch: Add support for lenovo Y9000P Touchpad\" (stable-fixes).\n- Revert \"block/mq-deadline: use correct way to throttling write requests\" (bsc#1234146).\n- Revert \"btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\"\n- Revert \"drm/i915/dpt: Make DPT object unshrinkable\" (stable-fixes).\n- Revert \"igb: Disable threaded IRQ for igb_msix_other\" (git-fixes).\n- Revert \"mtd: spi-nor: core: replace dummy buswidth from addr to data\" (git-fixes).\n- Revert \"unicode: Do not special case ignorable code points\" (stable-fixes).\n- Revert \"usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null\" (stable-fixes).\n- Revert \u0027arm64: Kconfig: Make SME depend on BROKEN for now\u0027 This reverts commit 2ccfee6be929dd4ea49ef59a7ae686473aae40b6 CONFIG_ARM64_SME is enabled by default so some customers may rely on SME. We need further analysis to evaluate to what extent we are impacted and in case we\u0027ll disable SME support later.\n- Revert 0dd78566990 (\"Disable ceph (jsc#PED-7242)\") Apparently, jsc#PED-7242 is only deprecate ceph for 15-SP6 and disable for 15-SP7. Revert the disabling.\n- SUNRPC: make sure cache entry active before cache_show (git-fixes).\n- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).\n- USB: core: Disable LPM only for non-suspended ports (git-fixes).\n- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).\n- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).\n- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).\n- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).\n- USB: serial: option: add Neoway N723-EA support (stable-fixes).\n- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).\n- USB: serial: option: add TCL IK512 MBIM \u0026 ECM (stable-fixes).\n- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).\n- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).\n- USB: usblp: return error when setting unsupported protocol (git-fixes).\n- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).\n- VMCI: fix reference to ioctl-number.rst (git-fixes).\n- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).\n- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).\n- accel/habanalabs: fix debugfs files permissions (stable-fixes).\n- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).\n- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).\n- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).\n- afs: Automatically generate trace tag enums (git-fixes).\n- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).\n- afs: Fix cleanup of immediately failed async calls (git-fixes).\n- afs: Fix directory format encoding struct (git-fixes).\n- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).\n- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).\n- afs: Fix the maximum cell name length (git-fixes).\n- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).\n- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).\n- arch: Remove cmpxchg_double (bsc#1220773).\n- arch: consolidate arch_irq_work_raise prototypes (git-fixes).\n- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)\n- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)\n- arm64: Filter out SVE hwcaps when FEAT_SVE isn\u0027t implemented (git-fixes)\n- arm64: Force position-independent veneers (git-fixes).\n- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245) Update arm64 default configuration file\n- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes).\n- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).\n- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)\n- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).\n- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)\n- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).\n- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)\n- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)\n- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)\n- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).\n- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).\n- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).\n- batman-adv: Do not send uninitialized TT changes (git-fixes).\n- batman-adv: Remove uninitialized data in full table TT response (git-fixes).\n- blacklist.conf: printk/sysctl: breaks kernel without pre-requisite patches (bsc#1229025)\n- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).\n- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).\n- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).\n- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).\n- blk-throttle: fix lockdep warning of \"cgroup_mutex or RCU read lock required!\" (bsc#1234140).\n- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).\n- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).\n- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).\n- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).\n- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).\n- block/mq-deadline: Fix the tag reservation code (bsc#1234148).\n- block: Call .limit_depth() after .hctx has been set (bsc#1234148).\n- block: Fix where bio IO priority gets set (bsc#1234145).\n- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).\n- block: update the stable_writes flag in bdev_add (bsc#1234141).\n- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)\n- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).\n- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).\n- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).\n- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).\n- bpf: verifier: prevent userspace memory access (git-fixes).\n- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).\n- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).\n- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).\n- can: j1939: fix error in J1939 documentation (stable-fixes).\n- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).\n- checkpatch: always parse orig_commit in fixes tag (git-fixes).\n- checkpatch: check for missing Fixes tags (stable-fixes).\n- cleanup: Add conditional guard support (stable-fixes).\n- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).\n- cleanup: Remove address space of returned pointer (git-fixes).\n- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).\n- clocksource/drivers:sp804: Make user selectable (git-fixes).\n- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).\n- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).\n- cpufreq: ACPI: Fix max-frequency computation (git-fixes).\n- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).\n- cpufreq: amd-pstate: remove global header file (git-fixes).\n- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).\n- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).\n- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).\n- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).\n- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).\n- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).\n- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).\n- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).\n- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).\n- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).\n- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).\n- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).\n- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).\n- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).\n- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).\n- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).\n- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).\n- cpupower: fix TSC MHz calculation (git-fixes).\n- crypto: caam - use JobR\u0027s space to access page 0 regs (git-fixes).\n- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).\n- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).\n- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).\n- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).\n- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).\n- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to \u0027async\u0027 (git-fixes).\n- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).\n- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).\n- crypto: qce - fix goto jump in error path (git-fixes).\n- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).\n- crypto: qce - unregister previously registered algos in error path (git-fixes).\n- crypto: x86/sha256 - Add parentheses around macros\u0027 single arguments (stable-fixes).\n- cyrpto/b128ops: Remove struct u128 (bsc#1220773).\n- devcoredump: cleanup some comments (git-fixes).\n- devlink: Fix length of eswitch inline-mode (git-fixes).\n- dlm: fix possible lkb_resource null dereference (git-fixes).\n- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).\n- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).\n- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).\n- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).\n- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).\n- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).\n- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).\n- dmaengine: tegra: Return correct DMA status when paused (git-fixes).\n- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).\n- docs: media: update location of the media patches (stable-fixes).\n- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).\n- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).\n- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).\n- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).\n- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).\n- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).\n- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).\n- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).\n- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).\n- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).\n- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).\n- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).\n- drm/amd/display: Fix DSC-re-computing (stable-fixes).\n- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).\n- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).\n- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).\n- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).\n- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).\n- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).\n- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).\n- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).\n- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).\n- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).\n- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).\n- drm/amdgpu/pm: Remove gpu_od if it\u0027s an empty directory (stable-fixes).\n- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).\n- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).\n- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).\n- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).\n- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).\n- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).\n- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).\n- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).\n- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).\n- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).\n- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).\n- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).\n- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).\n- drm/amdgpu: do not access invalid sched (git-fixes).\n- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).\n- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).\n- drm/amdgpu: fix usage slab after free (stable-fixes).\n- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).\n- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).\n- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).\n- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).\n- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).\n- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).\n- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).\n- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).\n- drm/amdkfd: Use device based logging for errors (stable-fixes).\n- drm/amdkfd: Use the correct wptr size (stable-fixes).\n- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).\n- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).\n- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).\n- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).\n- drm/bridge: it6505: Enable module autoloading (stable-fixes).\n- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).\n- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).\n- drm/display: Fix building with GCC 15 (stable-fixes).\n- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).\n- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).\n- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).\n- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).\n- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).\n- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).\n- drm/i915/dg1: Fix power gate sequence (git-fixes).\n- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).\n- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).\n- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).\n- drm/mcde: Enable module autoloading (stable-fixes).\n- drm/mediatek: Add return value check when reading DPCD (git-fixes).\n- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).\n- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).\n- drm/mediatek: Fix mode valid issue for dp (git-fixes).\n- drm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err (git-fixes).\n- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).\n- drm/mediatek: stop selecting foreign drivers (git-fixes).\n- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).\n- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).\n- drm/msm: Check return value of of_dma_configure() (git-fixes).\n- drm/msm: do not clean up priv-\u003ekms prematurely (git-fixes).\n- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).\n- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).\n- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).\n- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).\n- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).\n- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).\n- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).\n- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).\n- drm/radeon: change rdev-\u003eddev to rdev_to_drm(rdev) (stable-fixes).\n- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).\n- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).\n- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).\n- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).\n- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).\n- drm/sched: memset() \u0027job\u0027 in drm_sched_job_init() (stable-fixes).\n- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).\n- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).\n- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).\n- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).\n- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).\n- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).\n- drm/vmwgfx: Add new keep_resv BO param (git-fixes).\n- drm: adv7511: Drop dsi single lane support (git-fixes).\n- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).\n- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- erofs: avoid debugging output for (de)compressed data (git-fixes).\n- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).\n- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).\n- exfat: fix the infinite loop in exfat_readdir() (git-fixes).\n- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).\n- ext4: add a new helper to check if es must be kept (bsc#1234170).\n- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).\n- ext4: add missed brelse in update_backups (bsc#1234171).\n- ext4: allow for the last group to be marked as trimmed (bsc#1234278).\n- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).\n- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).\n- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).\n- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).\n- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).\n- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).\n- ext4: check the extent status again before inserting delalloc block (bsc#1234186).\n- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).\n- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).\n- ext4: correct best extent lstart adjustment logic (bsc#1234179).\n- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).\n- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).\n- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).\n- ext4: correct the start block of counting reserved clusters (bsc#1234169).\n- ext4: do not let fstrim block system suspend (https://bugzilla.kernel.org/show_bug.cgi?id=216322 bsc#1234166).\n- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).\n- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).\n- ext4: factor out a common helper to query extent map (bsc#1234186).\n- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).\n- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).\n- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).\n- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).\n- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).\n- ext4: fix potential unnitialized variable (bsc#1234183).\n- ext4: fix race between writepages and remount (bsc#1234168).\n- ext4: fix rec_len verify error (bsc#1234167).\n- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).\n- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).\n- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).\n- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).\n- ext4: make ext4_es_insert_extent() return void (bsc#1234170).\n- ext4: make ext4_es_remove_extent() return void (bsc#1234170).\n- ext4: make ext4_zeroout_es() return void (bsc#1234170).\n- ext4: make sure allocate pending entry not fail (bsc#1234170).\n- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).\n- ext4: move \u0027ix\u0027 sanity check to corrent position (bsc#1234174).\n- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).\n- ext4: nested locking for xattr inode (bsc#1234189).\n- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).\n- ext4: refactor ext4_da_map_blocks() (bsc#1234178).\n- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).\n- ext4: remove the redundant folio_wait_stable() (bsc#1234184).\n- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).\n- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).\n- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).\n- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).\n- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).\n- filemap: Fix bounds checking in filemap_read() (bsc#1234209).\n- filemap: add a per-mapping stable writes flag (bsc#1234141).\n- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).\n- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).\n- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).\n- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).\n- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).\n- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).\n- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).\n- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).\n- genksyms: fix memory leak when the same symbol is added from source (git-fixes).\n- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).\n- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).\n- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).\n- gpio: grgpio: use a helper variable to store the address of ofdev-\u003edev (stable-fixes).\n- gpio: mxc: remove dead code after switch to DT-only (git-fixes).\n- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).\n- hfsplus: do not query the device logical block size multiple times (git-fixes).\n- hvc/xen: fix console unplug (git-fixes).\n- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).\n- hvc/xen: fix event channel handling for secondary consoles (git-fixes).\n- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).\n- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).\n- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).\n- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).\n- hwmon: (tmp513) Do not use \"proxy\" headers (stable-fixes).\n- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).\n- hwmon: (tmp513) Fix division of negative numbers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).\n- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).\n- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).\n- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).\n- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).\n- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).\n- i2c: i801: Add support for Intel Panther Lake (stable-fixes).\n- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).\n- i2c: microchip-core: actually use repeated sends (git-fixes).\n- i2c: microchip-core: fix \"ghost\" detections (git-fixes).\n- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).\n- i2c: pnx: Fix timeout in wait functions (git-fixes).\n- i2c: rcar: fix NACK handling when being a target (git-fixes).\n- i2c: riic: Always round-up when calculating bus period (git-fixes).\n- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).\n- i40e: Fix handling changed priv flags (git-fixes).\n- i915/guc: Accumulate active runtime on gt reset (git-fixes).\n- i915/guc: Ensure busyness counter increases motonically (git-fixes).\n- i915/guc: Reset engine utilization buffer before registration (git-fixes).\n- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).\n- ice: Unbind the workqueue (bsc#1234989)\n- ice: change q_index variable type to s16 to store -1 value (git-fixes).\n- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).\n- ice: fix PHY Clock Recovery availability check (git-fixes).\n- idpf: add support for SW triggered interrupts (bsc#1235507).\n- idpf: enable WB_ON_ITR (bsc#1235507).\n- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).\n- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).\n- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).\n- iio: adc: ad7124: Disable all channels at probe time (git-fixes).\n- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).\n- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).\n- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).\n- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).\n- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).\n- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).\n- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).\n- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).\n- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).\n- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).\n- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).\n- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).\n- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).\n- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).\n- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).\n- instrumentation: Wire up cmpxchg128() (bsc#1220773).\n- intel_th: core: fix kernel-doc warnings (git-fixes).\n- io_uring/rw: avoid punting to io-wq directly (git-fixes).\n- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).\n- io_uring: Fix registered ring file refcount leak (git-fixes).\n- io_uring: always lock __io_cqring_overflow_flush (git-fixes).\n- io_uring: check if iowq is killed before queuing (git-fixes).\n- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).\n- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).\n- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).\n- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).\n- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).\n- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).\n- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).\n- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).\n- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).\n- jffs2: Fix rtime decompressor (git-fixes).\n- jffs2: Prevent rtime decompress memory corruption (git-fixes).\n- jffs2: fix use of uninitialized variable (git-fixes).\n- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).\n- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).\n- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).\n- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).\n- jfs: xattr: check invalid xattr size more strictly (git-fixes).\n- kABI workaround for struct auto_pin_cfg_item change (git-fixes).\n- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).\n- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)\n- kasan: make report_lock a raw spinlock (git-fixes).\n- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).\n- kdb: Fix buffer overflow during tab-complete (bsc#1234652).\n- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).\n- kdb: Merge identical case statements in kdb_read() (bsc#1234657).\n- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).\n- kdb: Use format-strings rather than \u0027\\0\u0027 injection in kdb_read() (bsc#1234654).\n- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).\n- kdb: address -Wformat-security warnings (bsc#1234659).\n- kgdb: Flush console before entering kgdb on panic (bsc#1234651).\n- kheaders: Ignore silly-rename files (stable-fixes).\n- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).\n- ktest.pl: Check kernelrelease return in get_version (git-fixes).\n- ktest.pl: Fix typo \"accesing\" (git-fixes).\n- ktest.pl: Fix typo in comment (git-fixes).\n- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).\n- ktest: force $buildonly = 1 for \u0027make_warnings_file\u0027 test type (stable-fixes).\n- landlock: Handle weird files (git-fixes).\n- latencytop: use correct kernel-doc format for func params (git-fixes).\n- leds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex (stable-fixes).\n- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).\n- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).\n- lib/inflate.c: remove dead code (git-fixes).\n- lib/stackdepot: print disabled message only if truly disabled (git-fixes).\n- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).\n- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).\n- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).\n- mac80211: fix user-power when emulating chanctx (stable-fixes).\n- mac802154: check local interfaces before deleting sdata list (stable-fixes).\n- mailbox: pcc: Add support for platform notification handling (stable-fixes).\n- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).\n- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).\n- maple_tree: simplify split calculation (git-fixes).\n- media: camif-core: Add check for clk_enable() (git-fixes).\n- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).\n- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).\n- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).\n- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).\n- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).\n- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).\n- media: i2c: imx412: Add missing newline to prints (git-fixes).\n- media: i2c: ov9282: Correct the exposure offset (git-fixes).\n- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).\n- media: imx296: Add standby delay during probe (git-fixes).\n- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).\n- media: marvell: Add check for clk_enable() (git-fixes).\n- media: mc: fix endpoint iteration (git-fixes).\n- media: mipi-csis: Add check for clk_enable() (git-fixes).\n- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).\n- media: ov5640: fix get_light_freq on auto (git-fixes).\n- media: rc: iguanair: handle timeouts (git-fixes).\n- media: rkisp1: Fix unused value issue (git-fixes).\n- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).\n- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).\n- media: uvcvideo: Fix double free in error path (git-fixes).\n- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).\n- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).\n- media: uvcvideo: Only save async fh if success (git-fixes).\n- media: uvcvideo: Propagate buf-\u003eerror to userspace (git-fixes).\n- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).\n- media: uvcvideo: Remove dangling pointers (git-fixes).\n- media: uvcvideo: Remove redundant NULL assignment (git-fixes).\n- media: uvcvideo: Support partial control reads (git-fixes).\n- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).\n- memory-failure: use a folio in me_huge_page() (git-fixes).\n- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).\n- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).\n- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).\n- misc: fastrpc: Fix copy buffer page size (git-fixes).\n- misc: fastrpc: Fix registered buffer page address (git-fixes).\n- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).\n- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).\n- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).\n- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).\n- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).\n- mm/memory-failure: check the mapcount of the precise page (git-fixes).\n- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).\n- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).\n- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).\n- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).\n- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).\n- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).\n- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).\n- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).\n- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).\n- mm/migrate: putback split folios when numa hint migration fails (git-fixes).\n- mm/migrate: split source folio if it is on deferred split list (git-fixes).\n- mm/page_owner: remove free_ts from page_owner output (git-fixes).\n- mm/readahead: do not allow order-1 folio (bsc#1234205).\n- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).\n- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).\n- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).\n- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).\n- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).\n- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).\n- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).\n- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).\n- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).\n- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).\n- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).\n- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).\n- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).\n- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).\n- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).\n- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).\n- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).\n- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).\n- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).\n- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).\n- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).\n- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).\n- net/ipv6: release expired exception dst cached in socket (bsc#1216813).\n- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).\n- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).\n- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).\n- net/qed: allow old cards not supporting \"num_images\" to work (git-fixes).\n- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).\n- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).\n- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).\n- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).\n- net: rose: fix timer races against user threads (git-fixes).\n- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).\n- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).\n- net: usb: rtl8150: enable basic endpoint checking (git-fixes).\n- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).\n- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).\n- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).\n- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).\n- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).\n- nfsd: make sure exp active before svc_export_show (git-fixes).\n- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).\n- nfsd: restore callback functionality for NFSv4.0 (git-fixes).\n- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).\n- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).\n- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).\n- nilfs2: prevent use of deleted inode (git-fixes).\n- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).\n- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).\n- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).\n- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).\n- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).\n- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).\n- nvme: apple: fix device reference counting (git-fixes).\n- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).\n- nvme: fix metadata handling in nvme-passthrough (git-fixes).\n- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).\n- nvmet: propagate npwg topology (git-fixes).\n- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).\n- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).\n- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).\n- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).\n- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).\n- of: address: Report error on resource bounds overflow (stable-fixes).\n- padata: add pd get/put refcnt helper (git-fixes).\n- padata: avoid UAF for reorder_work (git-fixes).\n- padata: fix UAF in padata_reorder (git-fixes).\n- parisc: Raise minimal GCC version (bsc#1220773).\n- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).\n- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).\n- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).\n- percpu: Wire up cmpxchg128 (bsc#1220773).\n- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).\n- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).\n- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).\n- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).\n- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).\n- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).\n- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).\n- phy: usb: Toggle the PHY power during init (git-fixes).\n- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).\n- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).\n- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).\n- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).\n- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).\n- pinmux: Use sequential access to access desc-\u003epinmux data (stable-fixes).\n- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).\n- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).\n- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).\n- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).\n- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).\n- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).\n- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).\n- platform/x86: thinkpad_acpi: Fix for ThinkPad\u0027s with ECFW showing incorrect fan speed (stable-fixes).\n- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).\n- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).\n- power: supply: gpio-charger: Fix set charge current limits (git-fixes).\n- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).\n- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).\n- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).\n- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).\n- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).\n- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).\n- pps: add an error check in parport_attach (git-fixes).\n- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).\n- printk: Add is_printk_legacy_deferred() (bsc#1236733).\n- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).\n- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).\n- pwm: stm32-lp: Add check for clk_enable() (git-fixes).\n- pwm: stm32: Add check for clk_enable() (git-fixes).\n- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).\n- quota: explicitly forbid quota files from being encrypted (bsc#1234196).\n- quota: flush quota_release_work upon quota writeback (bsc#1234195).\n- quota: simplify drop_dquot_ref() (bsc#1234197).\n- rcu-tasks: Pull sampling of -\u003epercpu_dequeue_lim out of loop (git-fixes)\n- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)\n- rcu: Dump memory object info if callback function is invalid (git-fixes)\n- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)\n- rcuscale: Move rcu_scale_writer() (git-fixes)\n- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)\n- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).\n- regmap: Use correct format specifier for logging range errors (stable-fixes).\n- regulator: core: Add missing newline character (git-fixes).\n- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).\n- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).\n- remoteproc: core: Fix ida_free call while not allocated (git-fixes).\n- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).\n- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).\n- rtc: zynqmp: Fix optional clock name property (git-fixes).\n- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).\n- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).\n- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).\n- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).\n- s390/facility: Disable compile time optimization for decompressor code (git-fixes).\n- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).\n- s390/pageattr: Implement missing kernel_page_present() (git-fixes).\n- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)\n- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).\n- scatterlist: fix incorrect func name in kernel-doc (git-fixes).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).\n- sched/numa: fix memory leak due to the overwritten vma-\u003enumab_state (git fixes (sched/numa)).\n- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).\n- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).\n- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).\n- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).\n- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).\n- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).\n- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).\n- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).\n- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).\n- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).\n- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).\n- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).\n- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).\n- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).\n- scsi: qla2xxx: Remove the unused \u0027del_list_entry\u0027 field in struct fc_port (bsc#1235406).\n- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).\n- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).\n- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).\n- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).\n- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).\n- selftest: media_tests: fix trivial UAF typo (git-fixes).\n- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).\n- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).\n- selftests/landlock: Fix error message (git-fixes).\n- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).\n- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).\n- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).\n- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).\n- selftests: tc-testing: reduce rshift value (stable-fixes).\n- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).\n- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).\n- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).\n- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).\n- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).\n- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).\n- serial: 8250_fintek: Add support for F81216E (stable-fixes).\n- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).\n- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).\n- serial: amba-pl011: Use port lock wrappers (stable-fixes).\n- serial: amba-pl011: fix build regression (git-fixes).\n- serial: do not use uninitialized value in uart_poll_init() (git-fixes).\n- serial: imx: only set receiver level if it is zero (git-fixes).\n- serial: imx: set receiver level before starting uart (git-fixes).\n- serial: qcom-geni: Do not cancel/abort if we can\u0027t get the port lock (git-fixes).\n- serial: qcom-geni: disable interrupts during console writes (git-fixes).\n- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).\n- serial: qcom-geni: fix console corruption (git-fixes).\n- serial: qcom-geni: fix dma rx cancellation (git-fixes).\n- serial: qcom-geni: fix false console tx restart (git-fixes).\n- serial: qcom-geni: fix fifo polling timeout (git-fixes).\n- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).\n- serial: qcom-geni: fix polled console corruption (git-fixes).\n- serial: qcom-geni: fix polled console initialisation (git-fixes).\n- serial: qcom-geni: fix receiver enable (git-fixes).\n- serial: qcom-geni: fix shutdown race (git-fixes).\n- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).\n- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).\n- serial: qcom-geni: revert broken hibernation support (git-fixes).\n- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).\n- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).\n- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).\n- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).\n- series.conf: temporarily disable upstream patch patches.suse/ocfs2-fix-UBSAN-warning-in-ocfs2_verify_volume.patch (bsc#1236138)\n- slub: Replace cmpxchg_double() (bsc#1220773).\n- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).\n- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]\n- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).\n- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).\n- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).\n- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).\n- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).\n- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).\n- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).\n- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).\n- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).\n- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).\n- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).\n- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).\n- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).\n- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).\n- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).\n- spi: zynq-qspi: Add check for clk_enable() (git-fixes).\n- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)\n- srcu: Only accelerate on enqueue time (git-fixes)\n- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).\n- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).\n- staging: iio: ad9832: Correct phase range check (git-fixes).\n- staging: iio: ad9834: Correct phase range check (git-fixes).\n- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).\n- staging: media: max96712: fix kernel oops when removing module (git-fixes).\n- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).\n- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).\n- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).\n- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)\n- svcrdma: Address an integer overflow (git-fixes).\n- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).\n- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).\n- swiotlb: Reinstate page-alignment for mappings \u003e= PAGE_SIZE (git-fixes).\n- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).\n- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).\n- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).\n- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).\n- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).\n- tools: Sync if_xdp.h uapi tooling header (git-fixes).\n- tools: hv: change permissions of NetworkManager configuration file (git-fixes).\n- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)\n- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).\n- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).\n- types: Introduce [us]128 (bsc#1220773).\n- ubifs: Correct the total block count by deducting journal reservation (git-fixes).\n- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).\n- ubifs: skip dumping tnc tree when zroot is null (git-fixes).\n- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).\n- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).\n- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).\n- udf: refactor inode_bmap() to handle error (bsc#1234242).\n- udf: refactor udf_current_aext() to handle error (bsc#1234240).\n- udf: refactor udf_next_aext() to handle error (bsc#1234241).\n- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).\n- uio: Fix return value of poll (git-fixes).\n- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).\n- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).\n- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).\n- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).\n- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).\n- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).\n- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).\n- usb: dwc2: Fix HCD port connection race (git-fixes).\n- usb: dwc2: Fix HCD resume (git-fixes).\n- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).\n- usb: dwc2: hcd: Fix GetPortStatus \u0026 SetPortFeature (git-fixes).\n- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).\n- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).\n- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).\n- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).\n- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).\n- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).\n- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).\n- usb: fix reference leak in usb_new_device() (git-fixes).\n- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).\n- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).\n- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).\n- usb: gadget: f_tcm: Do not free command immediately (git-fixes).\n- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).\n- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).\n- usb: gadget: f_tcm: Translate error to sense (git-fixes).\n- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).\n- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).\n- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).\n- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).\n- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).\n- usb: host: xhci-plat: Assign shared_hcd-\u003ersrc_start (git-fixes).\n- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).\n- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).\n- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)\n- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).\n- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).\n- usb: typec: use cleanup facility for \u0027altmodes_node\u0027 (stable-fixes).\n- usbnet: ipheth: break up NCM header size computation (git-fixes).\n- usbnet: ipheth: check that DPE points past NCM header (git-fixes).\n- usbnet: ipheth: fix DPE OoB read (git-fixes).\n- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).\n- usbnet: ipheth: refactor NCM datagram loop (git-fixes).\n- usbnet: ipheth: use static NDP16 location in URB (git-fixes).\n- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).\n- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).\n- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).\n- vdpa: solidrun: Fix UB bug with devres (git-fixes).\n- vfs: fix readahead(2) on block devices (bsc#1234201).\n- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).\n- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).\n- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).\n- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).\n- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).\n- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).\n- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).\n- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).\n- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).\n- wifi: ath5k: add PCI ID for SX76X (git-fixes).\n- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).\n- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).\n- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).\n- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).\n- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).\n- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).\n- wifi: mac80211: Add non-atomic station iterator (stable-fixes).\n- wifi: mac80211: Fix common size calculation for ML element (git-fixes).\n- wifi: mac80211: clean up \u0027ret\u0027 in sta_link_apply_parameters() (stable-fixes).\n- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).\n- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).\n- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).\n- wifi: mac80211: fix station NSS capability initialization order (git-fixes).\n- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).\n- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).\n- wifi: mac80211: prohibit deactivating all links (git-fixes).\n- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).\n- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).\n- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).\n- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).\n- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).\n- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7915: fix register mapping (git-fixes).\n- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).\n- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).\n- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).\n- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).\n- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).\n- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).\n- wifi: mt76: mt7996: fix ldpc setting (git-fixes).\n- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7996: fix register mapping (git-fixes).\n- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).\n- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).\n- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).\n- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).\n- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).\n- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).\n- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).\n- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).\n- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).\n- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).\n- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).\n- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).\n- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).\n- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).\n- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).\n- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).\n- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).\n- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).\n- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).\n- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).\n- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).\n- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).\n- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).\n- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).\n- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).\n- xfs: do not allocate COW extents when unsharing a hole (git-fixes).\n- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).\n- xfs: remove unknown compat feature check in superblock write validation (git-fixes).\n- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).\n- xfs: sb_spino_align is not verified (git-fixes).\n- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).\n- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).\n- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-kernel-4",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20166-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:20166-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520166-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:20166-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021176.html"
},
{
"category": "self",
"summary": "SUSE Bug 1012628",
"url": "https://bugzilla.suse.com/1012628"
},
{
"category": "self",
"summary": "SUSE Bug 1065729",
"url": "https://bugzilla.suse.com/1065729"
},
{
"category": "self",
"summary": "SUSE Bug 1181674",
"url": "https://bugzilla.suse.com/1181674"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1207948",
"url": "https://bugzilla.suse.com/1207948"
},
{
"category": "self",
"summary": "SUSE Bug 1214954",
"url": "https://bugzilla.suse.com/1214954"
},
{
"category": "self",
"summary": "SUSE Bug 1215199",
"url": "https://bugzilla.suse.com/1215199"
},
{
"category": "self",
"summary": "SUSE Bug 1216702",
"url": "https://bugzilla.suse.com/1216702"
},
{
"category": "self",
"summary": "SUSE Bug 1216813",
"url": "https://bugzilla.suse.com/1216813"
},
{
"category": "self",
"summary": "SUSE Bug 1218470",
"url": "https://bugzilla.suse.com/1218470"
},
{
"category": "self",
"summary": "SUSE Bug 1219170",
"url": "https://bugzilla.suse.com/1219170"
},
{
"category": "self",
"summary": "SUSE Bug 1219596",
"url": "https://bugzilla.suse.com/1219596"
},
{
"category": "self",
"summary": "SUSE Bug 1220021",
"url": "https://bugzilla.suse.com/1220021"
},
{
"category": "self",
"summary": "SUSE Bug 1220328",
"url": "https://bugzilla.suse.com/1220328"
},
{
"category": "self",
"summary": "SUSE Bug 1220430",
"url": "https://bugzilla.suse.com/1220430"
},
{
"category": "self",
"summary": "SUSE Bug 1220711",
"url": "https://bugzilla.suse.com/1220711"
},
{
"category": "self",
"summary": "SUSE Bug 1220773",
"url": "https://bugzilla.suse.com/1220773"
},
{
"category": "self",
"summary": "SUSE Bug 1221044",
"url": "https://bugzilla.suse.com/1221044"
},
{
"category": "self",
"summary": "SUSE Bug 1221303",
"url": "https://bugzilla.suse.com/1221303"
},
{
"category": "self",
"summary": "SUSE Bug 1221858",
"url": "https://bugzilla.suse.com/1221858"
},
{
"category": "self",
"summary": "SUSE Bug 1222426",
"url": "https://bugzilla.suse.com/1222426"
},
{
"category": "self",
"summary": "SUSE Bug 1222608",
"url": "https://bugzilla.suse.com/1222608"
},
{
"category": "self",
"summary": "SUSE Bug 1222721",
"url": "https://bugzilla.suse.com/1222721"
},
{
"category": "self",
"summary": "SUSE Bug 1222775",
"url": "https://bugzilla.suse.com/1222775"
},
{
"category": "self",
"summary": "SUSE Bug 1222780",
"url": "https://bugzilla.suse.com/1222780"
},
{
"category": "self",
"summary": "SUSE Bug 1223020",
"url": "https://bugzilla.suse.com/1223020"
},
{
"category": "self",
"summary": "SUSE Bug 1223023",
"url": "https://bugzilla.suse.com/1223023"
},
{
"category": "self",
"summary": "SUSE Bug 1223024",
"url": "https://bugzilla.suse.com/1223024"
},
{
"category": "self",
"summary": "SUSE Bug 1223038",
"url": "https://bugzilla.suse.com/1223038"
},
{
"category": "self",
"summary": "SUSE Bug 1223039",
"url": "https://bugzilla.suse.com/1223039"
},
{
"category": "self",
"summary": "SUSE Bug 1223041",
"url": "https://bugzilla.suse.com/1223041"
},
{
"category": "self",
"summary": "SUSE Bug 1223046",
"url": "https://bugzilla.suse.com/1223046"
},
{
"category": "self",
"summary": "SUSE Bug 1223051",
"url": "https://bugzilla.suse.com/1223051"
},
{
"category": "self",
"summary": "SUSE Bug 1223052",
"url": "https://bugzilla.suse.com/1223052"
},
{
"category": "self",
"summary": "SUSE Bug 1223058",
"url": "https://bugzilla.suse.com/1223058"
},
{
"category": "self",
"summary": "SUSE Bug 1223061",
"url": "https://bugzilla.suse.com/1223061"
},
{
"category": "self",
"summary": "SUSE Bug 1223076",
"url": "https://bugzilla.suse.com/1223076"
},
{
"category": "self",
"summary": "SUSE Bug 1223113",
"url": "https://bugzilla.suse.com/1223113"
},
{
"category": "self",
"summary": "SUSE Bug 1223187",
"url": "https://bugzilla.suse.com/1223187"
},
{
"category": "self",
"summary": "SUSE Bug 1223285",
"url": "https://bugzilla.suse.com/1223285"
},
{
"category": "self",
"summary": "SUSE Bug 1223315",
"url": "https://bugzilla.suse.com/1223315"
},
{
"category": "self",
"summary": "SUSE Bug 1223591",
"url": "https://bugzilla.suse.com/1223591"
},
{
"category": "self",
"summary": "SUSE Bug 1223592",
"url": "https://bugzilla.suse.com/1223592"
},
{
"category": "self",
"summary": "SUSE Bug 1223633",
"url": "https://bugzilla.suse.com/1223633"
},
{
"category": "self",
"summary": "SUSE Bug 1223637",
"url": "https://bugzilla.suse.com/1223637"
},
{
"category": "self",
"summary": "SUSE Bug 1223641",
"url": "https://bugzilla.suse.com/1223641"
},
{
"category": "self",
"summary": "SUSE Bug 1223649",
"url": "https://bugzilla.suse.com/1223649"
},
{
"category": "self",
"summary": "SUSE Bug 1223650",
"url": "https://bugzilla.suse.com/1223650"
},
{
"category": "self",
"summary": "SUSE Bug 1223651",
"url": "https://bugzilla.suse.com/1223651"
},
{
"category": "self",
"summary": "SUSE Bug 1223652",
"url": "https://bugzilla.suse.com/1223652"
},
{
"category": "self",
"summary": "SUSE Bug 1223654",
"url": "https://bugzilla.suse.com/1223654"
},
{
"category": "self",
"summary": "SUSE Bug 1223660",
"url": "https://bugzilla.suse.com/1223660"
},
{
"category": "self",
"summary": "SUSE Bug 1223661",
"url": "https://bugzilla.suse.com/1223661"
},
{
"category": "self",
"summary": "SUSE Bug 1223665",
"url": "https://bugzilla.suse.com/1223665"
},
{
"category": "self",
"summary": "SUSE Bug 1223666",
"url": "https://bugzilla.suse.com/1223666"
},
{
"category": "self",
"summary": "SUSE Bug 1223671",
"url": "https://bugzilla.suse.com/1223671"
},
{
"category": "self",
"summary": "SUSE Bug 1223675",
"url": "https://bugzilla.suse.com/1223675"
},
{
"category": "self",
"summary": "SUSE Bug 1223677",
"url": "https://bugzilla.suse.com/1223677"
},
{
"category": "self",
"summary": "SUSE Bug 1223678",
"url": "https://bugzilla.suse.com/1223678"
},
{
"category": "self",
"summary": "SUSE Bug 1223696",
"url": "https://bugzilla.suse.com/1223696"
},
{
"category": "self",
"summary": "SUSE Bug 1223698",
"url": "https://bugzilla.suse.com/1223698"
},
{
"category": "self",
"summary": "SUSE Bug 1223705",
"url": "https://bugzilla.suse.com/1223705"
},
{
"category": "self",
"summary": "SUSE Bug 1223712",
"url": "https://bugzilla.suse.com/1223712"
},
{
"category": "self",
"summary": "SUSE Bug 1223718",
"url": "https://bugzilla.suse.com/1223718"
},
{
"category": "self",
"summary": "SUSE Bug 1223728",
"url": "https://bugzilla.suse.com/1223728"
},
{
"category": "self",
"summary": "SUSE Bug 1223739",
"url": "https://bugzilla.suse.com/1223739"
},
{
"category": "self",
"summary": "SUSE Bug 1223741",
"url": "https://bugzilla.suse.com/1223741"
},
{
"category": "self",
"summary": "SUSE Bug 1223744",
"url": "https://bugzilla.suse.com/1223744"
},
{
"category": "self",
"summary": "SUSE Bug 1223747",
"url": "https://bugzilla.suse.com/1223747"
},
{
"category": "self",
"summary": "SUSE Bug 1223748",
"url": "https://bugzilla.suse.com/1223748"
},
{
"category": "self",
"summary": "SUSE Bug 1223750",
"url": "https://bugzilla.suse.com/1223750"
},
{
"category": "self",
"summary": "SUSE Bug 1223752",
"url": "https://bugzilla.suse.com/1223752"
},
{
"category": "self",
"summary": "SUSE Bug 1223754",
"url": "https://bugzilla.suse.com/1223754"
},
{
"category": "self",
"summary": "SUSE Bug 1223757",
"url": "https://bugzilla.suse.com/1223757"
},
{
"category": "self",
"summary": "SUSE Bug 1223759",
"url": "https://bugzilla.suse.com/1223759"
},
{
"category": "self",
"summary": "SUSE Bug 1223761",
"url": "https://bugzilla.suse.com/1223761"
},
{
"category": "self",
"summary": "SUSE Bug 1223762",
"url": "https://bugzilla.suse.com/1223762"
},
{
"category": "self",
"summary": "SUSE Bug 1223782",
"url": "https://bugzilla.suse.com/1223782"
},
{
"category": "self",
"summary": "SUSE Bug 1223787",
"url": "https://bugzilla.suse.com/1223787"
},
{
"category": "self",
"summary": "SUSE Bug 1223788",
"url": "https://bugzilla.suse.com/1223788"
},
{
"category": "self",
"summary": "SUSE Bug 1223789",
"url": "https://bugzilla.suse.com/1223789"
},
{
"category": "self",
"summary": "SUSE Bug 1223790",
"url": "https://bugzilla.suse.com/1223790"
},
{
"category": "self",
"summary": "SUSE Bug 1223802",
"url": "https://bugzilla.suse.com/1223802"
},
{
"category": "self",
"summary": "SUSE Bug 1223805",
"url": "https://bugzilla.suse.com/1223805"
},
{
"category": "self",
"summary": "SUSE Bug 1223827",
"url": "https://bugzilla.suse.com/1223827"
},
{
"category": "self",
"summary": "SUSE Bug 1223831",
"url": "https://bugzilla.suse.com/1223831"
},
{
"category": "self",
"summary": "SUSE Bug 1223834",
"url": "https://bugzilla.suse.com/1223834"
},
{
"category": "self",
"summary": "SUSE Bug 1223869",
"url": "https://bugzilla.suse.com/1223869"
},
{
"category": "self",
"summary": "SUSE Bug 1223874",
"url": "https://bugzilla.suse.com/1223874"
},
{
"category": "self",
"summary": "SUSE Bug 1224095",
"url": "https://bugzilla.suse.com/1224095"
},
{
"category": "self",
"summary": "SUSE Bug 1224174",
"url": "https://bugzilla.suse.com/1224174"
},
{
"category": "self",
"summary": "SUSE Bug 1224177",
"url": "https://bugzilla.suse.com/1224177"
},
{
"category": "self",
"summary": "SUSE Bug 1224180",
"url": "https://bugzilla.suse.com/1224180"
},
{
"category": "self",
"summary": "SUSE Bug 1224423",
"url": "https://bugzilla.suse.com/1224423"
},
{
"category": "self",
"summary": "SUSE Bug 1224432",
"url": "https://bugzilla.suse.com/1224432"
},
{
"category": "self",
"summary": "SUSE Bug 1224433",
"url": "https://bugzilla.suse.com/1224433"
},
{
"category": "self",
"summary": "SUSE Bug 1224437",
"url": "https://bugzilla.suse.com/1224437"
},
{
"category": "self",
"summary": "SUSE Bug 1224438",
"url": "https://bugzilla.suse.com/1224438"
},
{
"category": "self",
"summary": "SUSE Bug 1224443",
"url": "https://bugzilla.suse.com/1224443"
},
{
"category": "self",
"summary": "SUSE Bug 1224445",
"url": "https://bugzilla.suse.com/1224445"
},
{
"category": "self",
"summary": "SUSE Bug 1224449",
"url": "https://bugzilla.suse.com/1224449"
},
{
"category": "self",
"summary": "SUSE Bug 1224479",
"url": "https://bugzilla.suse.com/1224479"
},
{
"category": "self",
"summary": "SUSE Bug 1224480",
"url": "https://bugzilla.suse.com/1224480"
},
{
"category": "self",
"summary": "SUSE Bug 1224482",
"url": "https://bugzilla.suse.com/1224482"
},
{
"category": "self",
"summary": "SUSE Bug 1224486",
"url": "https://bugzilla.suse.com/1224486"
},
{
"category": "self",
"summary": "SUSE Bug 1224487",
"url": "https://bugzilla.suse.com/1224487"
},
{
"category": "self",
"summary": "SUSE Bug 1224491",
"url": "https://bugzilla.suse.com/1224491"
},
{
"category": "self",
"summary": "SUSE Bug 1224492",
"url": "https://bugzilla.suse.com/1224492"
},
{
"category": "self",
"summary": "SUSE Bug 1224494",
"url": "https://bugzilla.suse.com/1224494"
},
{
"category": "self",
"summary": "SUSE Bug 1224495",
"url": "https://bugzilla.suse.com/1224495"
},
{
"category": "self",
"summary": "SUSE Bug 1224500",
"url": "https://bugzilla.suse.com/1224500"
},
{
"category": "self",
"summary": "SUSE Bug 1224501",
"url": "https://bugzilla.suse.com/1224501"
},
{
"category": "self",
"summary": "SUSE Bug 1224504",
"url": "https://bugzilla.suse.com/1224504"
},
{
"category": "self",
"summary": "SUSE Bug 1224505",
"url": "https://bugzilla.suse.com/1224505"
},
{
"category": "self",
"summary": "SUSE Bug 1224506",
"url": "https://bugzilla.suse.com/1224506"
},
{
"category": "self",
"summary": "SUSE Bug 1224507",
"url": "https://bugzilla.suse.com/1224507"
},
{
"category": "self",
"summary": "SUSE Bug 1224508",
"url": "https://bugzilla.suse.com/1224508"
},
{
"category": "self",
"summary": "SUSE Bug 1224509",
"url": "https://bugzilla.suse.com/1224509"
},
{
"category": "self",
"summary": "SUSE Bug 1224513",
"url": "https://bugzilla.suse.com/1224513"
},
{
"category": "self",
"summary": "SUSE Bug 1224517",
"url": "https://bugzilla.suse.com/1224517"
},
{
"category": "self",
"summary": "SUSE Bug 1224519",
"url": "https://bugzilla.suse.com/1224519"
},
{
"category": "self",
"summary": "SUSE Bug 1224521",
"url": "https://bugzilla.suse.com/1224521"
},
{
"category": "self",
"summary": "SUSE Bug 1224524",
"url": "https://bugzilla.suse.com/1224524"
},
{
"category": "self",
"summary": "SUSE Bug 1224526",
"url": "https://bugzilla.suse.com/1224526"
},
{
"category": "self",
"summary": "SUSE Bug 1224537",
"url": "https://bugzilla.suse.com/1224537"
},
{
"category": "self",
"summary": "SUSE Bug 1224542",
"url": "https://bugzilla.suse.com/1224542"
},
{
"category": "self",
"summary": "SUSE Bug 1224546",
"url": "https://bugzilla.suse.com/1224546"
},
{
"category": "self",
"summary": "SUSE Bug 1224552",
"url": "https://bugzilla.suse.com/1224552"
},
{
"category": "self",
"summary": "SUSE Bug 1224555",
"url": "https://bugzilla.suse.com/1224555"
},
{
"category": "self",
"summary": "SUSE Bug 1224557",
"url": "https://bugzilla.suse.com/1224557"
},
{
"category": "self",
"summary": "SUSE Bug 1224558",
"url": "https://bugzilla.suse.com/1224558"
},
{
"category": "self",
"summary": "SUSE Bug 1224559",
"url": "https://bugzilla.suse.com/1224559"
},
{
"category": "self",
"summary": "SUSE Bug 1224562",
"url": "https://bugzilla.suse.com/1224562"
},
{
"category": "self",
"summary": "SUSE Bug 1224566",
"url": "https://bugzilla.suse.com/1224566"
},
{
"category": "self",
"summary": "SUSE Bug 1224567",
"url": "https://bugzilla.suse.com/1224567"
},
{
"category": "self",
"summary": "SUSE Bug 1224568",
"url": "https://bugzilla.suse.com/1224568"
},
{
"category": "self",
"summary": "SUSE Bug 1224569",
"url": "https://bugzilla.suse.com/1224569"
},
{
"category": "self",
"summary": "SUSE Bug 1224571",
"url": "https://bugzilla.suse.com/1224571"
},
{
"category": "self",
"summary": "SUSE Bug 1224573",
"url": "https://bugzilla.suse.com/1224573"
},
{
"category": "self",
"summary": "SUSE Bug 1224576",
"url": "https://bugzilla.suse.com/1224576"
},
{
"category": "self",
"summary": "SUSE Bug 1224577",
"url": "https://bugzilla.suse.com/1224577"
},
{
"category": "self",
"summary": "SUSE Bug 1224578",
"url": "https://bugzilla.suse.com/1224578"
},
{
"category": "self",
"summary": "SUSE Bug 1224579",
"url": "https://bugzilla.suse.com/1224579"
},
{
"category": "self",
"summary": "SUSE Bug 1224582",
"url": "https://bugzilla.suse.com/1224582"
},
{
"category": "self",
"summary": "SUSE Bug 1224585",
"url": "https://bugzilla.suse.com/1224585"
},
{
"category": "self",
"summary": "SUSE Bug 1224586",
"url": "https://bugzilla.suse.com/1224586"
},
{
"category": "self",
"summary": "SUSE Bug 1224587",
"url": "https://bugzilla.suse.com/1224587"
},
{
"category": "self",
"summary": "SUSE Bug 1224588",
"url": "https://bugzilla.suse.com/1224588"
},
{
"category": "self",
"summary": "SUSE Bug 1224592",
"url": "https://bugzilla.suse.com/1224592"
},
{
"category": "self",
"summary": "SUSE Bug 1224596",
"url": "https://bugzilla.suse.com/1224596"
},
{
"category": "self",
"summary": "SUSE Bug 1224598",
"url": "https://bugzilla.suse.com/1224598"
},
{
"category": "self",
"summary": "SUSE Bug 1224600",
"url": "https://bugzilla.suse.com/1224600"
},
{
"category": "self",
"summary": "SUSE Bug 1224601",
"url": "https://bugzilla.suse.com/1224601"
},
{
"category": "self",
"summary": "SUSE Bug 1224603",
"url": "https://bugzilla.suse.com/1224603"
},
{
"category": "self",
"summary": "SUSE Bug 1224605",
"url": "https://bugzilla.suse.com/1224605"
},
{
"category": "self",
"summary": "SUSE Bug 1224607",
"url": "https://bugzilla.suse.com/1224607"
},
{
"category": "self",
"summary": "SUSE Bug 1224609",
"url": "https://bugzilla.suse.com/1224609"
},
{
"category": "self",
"summary": "SUSE Bug 1224611",
"url": "https://bugzilla.suse.com/1224611"
},
{
"category": "self",
"summary": "SUSE Bug 1224613",
"url": "https://bugzilla.suse.com/1224613"
},
{
"category": "self",
"summary": "SUSE Bug 1224615",
"url": "https://bugzilla.suse.com/1224615"
},
{
"category": "self",
"summary": "SUSE Bug 1224617",
"url": "https://bugzilla.suse.com/1224617"
},
{
"category": "self",
"summary": "SUSE Bug 1224618",
"url": "https://bugzilla.suse.com/1224618"
},
{
"category": "self",
"summary": "SUSE Bug 1224620",
"url": "https://bugzilla.suse.com/1224620"
},
{
"category": "self",
"summary": "SUSE Bug 1224622",
"url": "https://bugzilla.suse.com/1224622"
},
{
"category": "self",
"summary": "SUSE Bug 1224623",
"url": "https://bugzilla.suse.com/1224623"
},
{
"category": "self",
"summary": "SUSE Bug 1224624",
"url": "https://bugzilla.suse.com/1224624"
},
{
"category": "self",
"summary": "SUSE Bug 1224626",
"url": "https://bugzilla.suse.com/1224626"
},
{
"category": "self",
"summary": "SUSE Bug 1224627",
"url": "https://bugzilla.suse.com/1224627"
},
{
"category": "self",
"summary": "SUSE Bug 1224629",
"url": "https://bugzilla.suse.com/1224629"
},
{
"category": "self",
"summary": "SUSE Bug 1224630",
"url": "https://bugzilla.suse.com/1224630"
},
{
"category": "self",
"summary": "SUSE Bug 1224632",
"url": "https://bugzilla.suse.com/1224632"
},
{
"category": "self",
"summary": "SUSE Bug 1224633",
"url": "https://bugzilla.suse.com/1224633"
},
{
"category": "self",
"summary": "SUSE Bug 1224634",
"url": "https://bugzilla.suse.com/1224634"
},
{
"category": "self",
"summary": "SUSE Bug 1224637",
"url": "https://bugzilla.suse.com/1224637"
},
{
"category": "self",
"summary": "SUSE Bug 1224639",
"url": "https://bugzilla.suse.com/1224639"
},
{
"category": "self",
"summary": "SUSE Bug 1224640",
"url": "https://bugzilla.suse.com/1224640"
},
{
"category": "self",
"summary": "SUSE Bug 1224643",
"url": "https://bugzilla.suse.com/1224643"
},
{
"category": "self",
"summary": "SUSE Bug 1224644",
"url": "https://bugzilla.suse.com/1224644"
},
{
"category": "self",
"summary": "SUSE Bug 1224646",
"url": "https://bugzilla.suse.com/1224646"
},
{
"category": "self",
"summary": "SUSE Bug 1224647",
"url": "https://bugzilla.suse.com/1224647"
},
{
"category": "self",
"summary": "SUSE Bug 1224650",
"url": "https://bugzilla.suse.com/1224650"
},
{
"category": "self",
"summary": "SUSE Bug 1224651",
"url": "https://bugzilla.suse.com/1224651"
},
{
"category": "self",
"summary": "SUSE Bug 1224653",
"url": "https://bugzilla.suse.com/1224653"
},
{
"category": "self",
"summary": "SUSE Bug 1224654",
"url": "https://bugzilla.suse.com/1224654"
},
{
"category": "self",
"summary": "SUSE Bug 1224657",
"url": "https://bugzilla.suse.com/1224657"
},
{
"category": "self",
"summary": "SUSE Bug 1224660",
"url": "https://bugzilla.suse.com/1224660"
},
{
"category": "self",
"summary": "SUSE Bug 1224663",
"url": "https://bugzilla.suse.com/1224663"
},
{
"category": "self",
"summary": "SUSE Bug 1224665",
"url": "https://bugzilla.suse.com/1224665"
},
{
"category": "self",
"summary": "SUSE Bug 1224666",
"url": "https://bugzilla.suse.com/1224666"
},
{
"category": "self",
"summary": "SUSE Bug 1224671",
"url": "https://bugzilla.suse.com/1224671"
},
{
"category": "self",
"summary": "SUSE Bug 1224675",
"url": "https://bugzilla.suse.com/1224675"
},
{
"category": "self",
"summary": "SUSE Bug 1224676",
"url": "https://bugzilla.suse.com/1224676"
},
{
"category": "self",
"summary": "SUSE Bug 1224677",
"url": "https://bugzilla.suse.com/1224677"
},
{
"category": "self",
"summary": "SUSE Bug 1224680",
"url": "https://bugzilla.suse.com/1224680"
},
{
"category": "self",
"summary": "SUSE Bug 1224681",
"url": "https://bugzilla.suse.com/1224681"
},
{
"category": "self",
"summary": "SUSE Bug 1224682",
"url": "https://bugzilla.suse.com/1224682"
},
{
"category": "self",
"summary": "SUSE Bug 1224683",
"url": "https://bugzilla.suse.com/1224683"
},
{
"category": "self",
"summary": "SUSE Bug 1224685",
"url": "https://bugzilla.suse.com/1224685"
},
{
"category": "self",
"summary": "SUSE Bug 1224686",
"url": "https://bugzilla.suse.com/1224686"
},
{
"category": "self",
"summary": "SUSE Bug 1224687",
"url": "https://bugzilla.suse.com/1224687"
},
{
"category": "self",
"summary": "SUSE Bug 1224688",
"url": "https://bugzilla.suse.com/1224688"
},
{
"category": "self",
"summary": "SUSE Bug 1224692",
"url": "https://bugzilla.suse.com/1224692"
},
{
"category": "self",
"summary": "SUSE Bug 1224696",
"url": "https://bugzilla.suse.com/1224696"
},
{
"category": "self",
"summary": "SUSE Bug 1224697",
"url": "https://bugzilla.suse.com/1224697"
},
{
"category": "self",
"summary": "SUSE Bug 1224699",
"url": "https://bugzilla.suse.com/1224699"
},
{
"category": "self",
"summary": "SUSE Bug 1224701",
"url": "https://bugzilla.suse.com/1224701"
},
{
"category": "self",
"summary": "SUSE Bug 1224703",
"url": "https://bugzilla.suse.com/1224703"
},
{
"category": "self",
"summary": "SUSE Bug 1224704",
"url": "https://bugzilla.suse.com/1224704"
},
{
"category": "self",
"summary": "SUSE Bug 1224705",
"url": "https://bugzilla.suse.com/1224705"
},
{
"category": "self",
"summary": "SUSE Bug 1224706",
"url": "https://bugzilla.suse.com/1224706"
},
{
"category": "self",
"summary": "SUSE Bug 1224707",
"url": "https://bugzilla.suse.com/1224707"
},
{
"category": "self",
"summary": "SUSE Bug 1224709",
"url": "https://bugzilla.suse.com/1224709"
},
{
"category": "self",
"summary": "SUSE Bug 1224710",
"url": "https://bugzilla.suse.com/1224710"
},
{
"category": "self",
"summary": "SUSE Bug 1224712",
"url": "https://bugzilla.suse.com/1224712"
},
{
"category": "self",
"summary": "SUSE Bug 1224714",
"url": "https://bugzilla.suse.com/1224714"
},
{
"category": "self",
"summary": "SUSE Bug 1224716",
"url": "https://bugzilla.suse.com/1224716"
},
{
"category": "self",
"summary": "SUSE Bug 1224717",
"url": "https://bugzilla.suse.com/1224717"
},
{
"category": "self",
"summary": "SUSE Bug 1224719",
"url": "https://bugzilla.suse.com/1224719"
},
{
"category": "self",
"summary": "SUSE Bug 1224722",
"url": "https://bugzilla.suse.com/1224722"
},
{
"category": "self",
"summary": "SUSE Bug 1224723",
"url": "https://bugzilla.suse.com/1224723"
},
{
"category": "self",
"summary": "SUSE Bug 1224726",
"url": "https://bugzilla.suse.com/1224726"
},
{
"category": "self",
"summary": "SUSE Bug 1224728",
"url": "https://bugzilla.suse.com/1224728"
},
{
"category": "self",
"summary": "SUSE Bug 1224729",
"url": "https://bugzilla.suse.com/1224729"
},
{
"category": "self",
"summary": "SUSE Bug 1224730",
"url": "https://bugzilla.suse.com/1224730"
},
{
"category": "self",
"summary": "SUSE Bug 1224731",
"url": "https://bugzilla.suse.com/1224731"
},
{
"category": "self",
"summary": "SUSE Bug 1224732",
"url": "https://bugzilla.suse.com/1224732"
},
{
"category": "self",
"summary": "SUSE Bug 1224733",
"url": "https://bugzilla.suse.com/1224733"
},
{
"category": "self",
"summary": "SUSE Bug 1224736",
"url": "https://bugzilla.suse.com/1224736"
},
{
"category": "self",
"summary": "SUSE Bug 1224738",
"url": "https://bugzilla.suse.com/1224738"
},
{
"category": "self",
"summary": "SUSE Bug 1224739",
"url": "https://bugzilla.suse.com/1224739"
},
{
"category": "self",
"summary": "SUSE Bug 1224740",
"url": "https://bugzilla.suse.com/1224740"
},
{
"category": "self",
"summary": "SUSE Bug 1224741",
"url": "https://bugzilla.suse.com/1224741"
},
{
"category": "self",
"summary": "SUSE Bug 1224747",
"url": "https://bugzilla.suse.com/1224747"
},
{
"category": "self",
"summary": "SUSE Bug 1224749",
"url": "https://bugzilla.suse.com/1224749"
},
{
"category": "self",
"summary": "SUSE Bug 1224803",
"url": "https://bugzilla.suse.com/1224803"
},
{
"category": "self",
"summary": "SUSE Bug 1224804",
"url": "https://bugzilla.suse.com/1224804"
},
{
"category": "self",
"summary": "SUSE Bug 1225502",
"url": "https://bugzilla.suse.com/1225502"
},
{
"category": "self",
"summary": "SUSE Bug 1225579",
"url": "https://bugzilla.suse.com/1225579"
},
{
"category": "self",
"summary": "SUSE Bug 1225593",
"url": "https://bugzilla.suse.com/1225593"
},
{
"category": "self",
"summary": "SUSE Bug 1225692",
"url": "https://bugzilla.suse.com/1225692"
},
{
"category": "self",
"summary": "SUSE Bug 1225694",
"url": "https://bugzilla.suse.com/1225694"
},
{
"category": "self",
"summary": "SUSE Bug 1225695",
"url": "https://bugzilla.suse.com/1225695"
},
{
"category": "self",
"summary": "SUSE Bug 1225698",
"url": "https://bugzilla.suse.com/1225698"
},
{
"category": "self",
"summary": "SUSE Bug 1225699",
"url": "https://bugzilla.suse.com/1225699"
},
{
"category": "self",
"summary": "SUSE Bug 1225704",
"url": "https://bugzilla.suse.com/1225704"
},
{
"category": "self",
"summary": "SUSE Bug 1225705",
"url": "https://bugzilla.suse.com/1225705"
},
{
"category": "self",
"summary": "SUSE Bug 1225708",
"url": "https://bugzilla.suse.com/1225708"
},
{
"category": "self",
"summary": "SUSE Bug 1225710",
"url": "https://bugzilla.suse.com/1225710"
},
{
"category": "self",
"summary": "SUSE Bug 1225715",
"url": "https://bugzilla.suse.com/1225715"
},
{
"category": "self",
"summary": "SUSE Bug 1225720",
"url": "https://bugzilla.suse.com/1225720"
},
{
"category": "self",
"summary": "SUSE Bug 1225722",
"url": "https://bugzilla.suse.com/1225722"
},
{
"category": "self",
"summary": "SUSE Bug 1225728",
"url": "https://bugzilla.suse.com/1225728"
},
{
"category": "self",
"summary": "SUSE Bug 1225734",
"url": "https://bugzilla.suse.com/1225734"
},
{
"category": "self",
"summary": "SUSE Bug 1225735",
"url": "https://bugzilla.suse.com/1225735"
},
{
"category": "self",
"summary": "SUSE Bug 1225736",
"url": "https://bugzilla.suse.com/1225736"
},
{
"category": "self",
"summary": "SUSE Bug 1225743",
"url": "https://bugzilla.suse.com/1225743"
},
{
"category": "self",
"summary": "SUSE Bug 1225747",
"url": "https://bugzilla.suse.com/1225747"
},
{
"category": "self",
"summary": "SUSE Bug 1225748",
"url": "https://bugzilla.suse.com/1225748"
},
{
"category": "self",
"summary": "SUSE Bug 1225749",
"url": "https://bugzilla.suse.com/1225749"
},
{
"category": "self",
"summary": "SUSE Bug 1225750",
"url": "https://bugzilla.suse.com/1225750"
},
{
"category": "self",
"summary": "SUSE Bug 1225769",
"url": "https://bugzilla.suse.com/1225769"
},
{
"category": "self",
"summary": "SUSE Bug 1225775",
"url": "https://bugzilla.suse.com/1225775"
},
{
"category": "self",
"summary": "SUSE Bug 1225820",
"url": "https://bugzilla.suse.com/1225820"
},
{
"category": "self",
"summary": "SUSE Bug 1225897",
"url": "https://bugzilla.suse.com/1225897"
},
{
"category": "self",
"summary": "SUSE Bug 1226980",
"url": "https://bugzilla.suse.com/1226980"
},
{
"category": "self",
"summary": "SUSE Bug 1227445",
"url": "https://bugzilla.suse.com/1227445"
},
{
"category": "self",
"summary": "SUSE Bug 1228526",
"url": "https://bugzilla.suse.com/1228526"
},
{
"category": "self",
"summary": "SUSE Bug 1228592",
"url": "https://bugzilla.suse.com/1228592"
},
{
"category": "self",
"summary": "SUSE Bug 1229025",
"url": "https://bugzilla.suse.com/1229025"
},
{
"category": "self",
"summary": "SUSE Bug 1229809",
"url": "https://bugzilla.suse.com/1229809"
},
{
"category": "self",
"summary": "SUSE Bug 1229833",
"url": "https://bugzilla.suse.com/1229833"
},
{
"category": "self",
"summary": "SUSE Bug 1230205",
"url": "https://bugzilla.suse.com/1230205"
},
{
"category": "self",
"summary": "SUSE Bug 1230697",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "self",
"summary": "SUSE Bug 1231016",
"url": "https://bugzilla.suse.com/1231016"
},
{
"category": "self",
"summary": "SUSE Bug 1231854",
"url": "https://bugzilla.suse.com/1231854"
},
{
"category": "self",
"summary": "SUSE Bug 1231909",
"url": "https://bugzilla.suse.com/1231909"
},
{
"category": "self",
"summary": "SUSE Bug 1231963",
"url": "https://bugzilla.suse.com/1231963"
},
{
"category": "self",
"summary": "SUSE Bug 1232087",
"url": "https://bugzilla.suse.com/1232087"
},
{
"category": "self",
"summary": "SUSE Bug 1232101",
"url": "https://bugzilla.suse.com/1232101"
},
{
"category": "self",
"summary": "SUSE Bug 1232158",
"url": "https://bugzilla.suse.com/1232158"
},
{
"category": "self",
"summary": "SUSE Bug 1232161",
"url": "https://bugzilla.suse.com/1232161"
},
{
"category": "self",
"summary": "SUSE Bug 1232193",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "self",
"summary": "SUSE Bug 1232198",
"url": "https://bugzilla.suse.com/1232198"
},
{
"category": "self",
"summary": "SUSE Bug 1232201",
"url": "https://bugzilla.suse.com/1232201"
},
{
"category": "self",
"summary": "SUSE Bug 1232418",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "self",
"summary": "SUSE Bug 1232419",
"url": "https://bugzilla.suse.com/1232419"
},
{
"category": "self",
"summary": "SUSE Bug 1232420",
"url": "https://bugzilla.suse.com/1232420"
},
{
"category": "self",
"summary": "SUSE Bug 1232421",
"url": "https://bugzilla.suse.com/1232421"
},
{
"category": "self",
"summary": "SUSE Bug 1232436",
"url": "https://bugzilla.suse.com/1232436"
},
{
"category": "self",
"summary": "SUSE Bug 1232882",
"url": "https://bugzilla.suse.com/1232882"
},
{
"category": "self",
"summary": "SUSE Bug 1233038",
"url": "https://bugzilla.suse.com/1233038"
},
{
"category": "self",
"summary": "SUSE Bug 1233055",
"url": "https://bugzilla.suse.com/1233055"
},
{
"category": "self",
"summary": "SUSE Bug 1233070",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "self",
"summary": "SUSE Bug 1233096",
"url": "https://bugzilla.suse.com/1233096"
},
{
"category": "self",
"summary": "SUSE Bug 1233112",
"url": "https://bugzilla.suse.com/1233112"
},
{
"category": "self",
"summary": "SUSE Bug 1233200",
"url": "https://bugzilla.suse.com/1233200"
},
{
"category": "self",
"summary": "SUSE Bug 1233204",
"url": "https://bugzilla.suse.com/1233204"
},
{
"category": "self",
"summary": "SUSE Bug 1233239",
"url": "https://bugzilla.suse.com/1233239"
},
{
"category": "self",
"summary": "SUSE Bug 1233259",
"url": "https://bugzilla.suse.com/1233259"
},
{
"category": "self",
"summary": "SUSE Bug 1233260",
"url": "https://bugzilla.suse.com/1233260"
},
{
"category": "self",
"summary": "SUSE Bug 1233324",
"url": "https://bugzilla.suse.com/1233324"
},
{
"category": "self",
"summary": "SUSE Bug 1233328",
"url": "https://bugzilla.suse.com/1233328"
},
{
"category": "self",
"summary": "SUSE Bug 1233461",
"url": "https://bugzilla.suse.com/1233461"
},
{
"category": "self",
"summary": "SUSE Bug 1233467",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "self",
"summary": "SUSE Bug 1233469",
"url": "https://bugzilla.suse.com/1233469"
},
{
"category": "self",
"summary": "SUSE Bug 1233488",
"url": "https://bugzilla.suse.com/1233488"
},
{
"category": "self",
"summary": "SUSE Bug 1233546",
"url": "https://bugzilla.suse.com/1233546"
},
{
"category": "self",
"summary": "SUSE Bug 1233558",
"url": "https://bugzilla.suse.com/1233558"
},
{
"category": "self",
"summary": "SUSE Bug 1233637",
"url": "https://bugzilla.suse.com/1233637"
},
{
"category": "self",
"summary": "SUSE Bug 1233638",
"url": "https://bugzilla.suse.com/1233638"
},
{
"category": "self",
"summary": "SUSE Bug 1233642",
"url": "https://bugzilla.suse.com/1233642"
},
{
"category": "self",
"summary": "SUSE Bug 1233772",
"url": "https://bugzilla.suse.com/1233772"
},
{
"category": "self",
"summary": "SUSE Bug 1233778",
"url": "https://bugzilla.suse.com/1233778"
},
{
"category": "self",
"summary": "SUSE Bug 1233837",
"url": "https://bugzilla.suse.com/1233837"
},
{
"category": "self",
"summary": "SUSE Bug 1234024",
"url": "https://bugzilla.suse.com/1234024"
},
{
"category": "self",
"summary": "SUSE Bug 1234069",
"url": "https://bugzilla.suse.com/1234069"
},
{
"category": "self",
"summary": "SUSE Bug 1234071",
"url": "https://bugzilla.suse.com/1234071"
},
{
"category": "self",
"summary": "SUSE Bug 1234073",
"url": "https://bugzilla.suse.com/1234073"
},
{
"category": "self",
"summary": "SUSE Bug 1234075",
"url": "https://bugzilla.suse.com/1234075"
},
{
"category": "self",
"summary": "SUSE Bug 1234076",
"url": "https://bugzilla.suse.com/1234076"
},
{
"category": "self",
"summary": "SUSE Bug 1234077",
"url": "https://bugzilla.suse.com/1234077"
},
{
"category": "self",
"summary": "SUSE Bug 1234079",
"url": "https://bugzilla.suse.com/1234079"
},
{
"category": "self",
"summary": "SUSE Bug 1234086",
"url": "https://bugzilla.suse.com/1234086"
},
{
"category": "self",
"summary": "SUSE Bug 1234139",
"url": "https://bugzilla.suse.com/1234139"
},
{
"category": "self",
"summary": "SUSE Bug 1234140",
"url": "https://bugzilla.suse.com/1234140"
},
{
"category": "self",
"summary": "SUSE Bug 1234141",
"url": "https://bugzilla.suse.com/1234141"
},
{
"category": "self",
"summary": "SUSE Bug 1234142",
"url": "https://bugzilla.suse.com/1234142"
},
{
"category": "self",
"summary": "SUSE Bug 1234143",
"url": "https://bugzilla.suse.com/1234143"
},
{
"category": "self",
"summary": "SUSE Bug 1234144",
"url": "https://bugzilla.suse.com/1234144"
},
{
"category": "self",
"summary": "SUSE Bug 1234145",
"url": "https://bugzilla.suse.com/1234145"
},
{
"category": "self",
"summary": "SUSE Bug 1234146",
"url": "https://bugzilla.suse.com/1234146"
},
{
"category": "self",
"summary": "SUSE Bug 1234147",
"url": "https://bugzilla.suse.com/1234147"
},
{
"category": "self",
"summary": "SUSE Bug 1234148",
"url": "https://bugzilla.suse.com/1234148"
},
{
"category": "self",
"summary": "SUSE Bug 1234149",
"url": "https://bugzilla.suse.com/1234149"
},
{
"category": "self",
"summary": "SUSE Bug 1234150",
"url": "https://bugzilla.suse.com/1234150"
},
{
"category": "self",
"summary": "SUSE Bug 1234153",
"url": "https://bugzilla.suse.com/1234153"
},
{
"category": "self",
"summary": "SUSE Bug 1234155",
"url": "https://bugzilla.suse.com/1234155"
},
{
"category": "self",
"summary": "SUSE Bug 1234156",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "self",
"summary": "SUSE Bug 1234158",
"url": "https://bugzilla.suse.com/1234158"
},
{
"category": "self",
"summary": "SUSE Bug 1234159",
"url": "https://bugzilla.suse.com/1234159"
},
{
"category": "self",
"summary": "SUSE Bug 1234160",
"url": "https://bugzilla.suse.com/1234160"
},
{
"category": "self",
"summary": "SUSE Bug 1234161",
"url": "https://bugzilla.suse.com/1234161"
},
{
"category": "self",
"summary": "SUSE Bug 1234162",
"url": "https://bugzilla.suse.com/1234162"
},
{
"category": "self",
"summary": "SUSE Bug 1234163",
"url": "https://bugzilla.suse.com/1234163"
},
{
"category": "self",
"summary": "SUSE Bug 1234164",
"url": "https://bugzilla.suse.com/1234164"
},
{
"category": "self",
"summary": "SUSE Bug 1234165",
"url": "https://bugzilla.suse.com/1234165"
},
{
"category": "self",
"summary": "SUSE Bug 1234166",
"url": "https://bugzilla.suse.com/1234166"
},
{
"category": "self",
"summary": "SUSE Bug 1234167",
"url": "https://bugzilla.suse.com/1234167"
},
{
"category": "self",
"summary": "SUSE Bug 1234168",
"url": "https://bugzilla.suse.com/1234168"
},
{
"category": "self",
"summary": "SUSE Bug 1234169",
"url": "https://bugzilla.suse.com/1234169"
},
{
"category": "self",
"summary": "SUSE Bug 1234170",
"url": "https://bugzilla.suse.com/1234170"
},
{
"category": "self",
"summary": "SUSE Bug 1234171",
"url": "https://bugzilla.suse.com/1234171"
},
{
"category": "self",
"summary": "SUSE Bug 1234172",
"url": "https://bugzilla.suse.com/1234172"
},
{
"category": "self",
"summary": "SUSE Bug 1234173",
"url": "https://bugzilla.suse.com/1234173"
},
{
"category": "self",
"summary": "SUSE Bug 1234174",
"url": "https://bugzilla.suse.com/1234174"
},
{
"category": "self",
"summary": "SUSE Bug 1234175",
"url": "https://bugzilla.suse.com/1234175"
},
{
"category": "self",
"summary": "SUSE Bug 1234176",
"url": "https://bugzilla.suse.com/1234176"
},
{
"category": "self",
"summary": "SUSE Bug 1234177",
"url": "https://bugzilla.suse.com/1234177"
},
{
"category": "self",
"summary": "SUSE Bug 1234178",
"url": "https://bugzilla.suse.com/1234178"
},
{
"category": "self",
"summary": "SUSE Bug 1234179",
"url": "https://bugzilla.suse.com/1234179"
},
{
"category": "self",
"summary": "SUSE Bug 1234180",
"url": "https://bugzilla.suse.com/1234180"
},
{
"category": "self",
"summary": "SUSE Bug 1234181",
"url": "https://bugzilla.suse.com/1234181"
},
{
"category": "self",
"summary": "SUSE Bug 1234182",
"url": "https://bugzilla.suse.com/1234182"
},
{
"category": "self",
"summary": "SUSE Bug 1234183",
"url": "https://bugzilla.suse.com/1234183"
},
{
"category": "self",
"summary": "SUSE Bug 1234184",
"url": "https://bugzilla.suse.com/1234184"
},
{
"category": "self",
"summary": "SUSE Bug 1234185",
"url": "https://bugzilla.suse.com/1234185"
},
{
"category": "self",
"summary": "SUSE Bug 1234186",
"url": "https://bugzilla.suse.com/1234186"
},
{
"category": "self",
"summary": "SUSE Bug 1234187",
"url": "https://bugzilla.suse.com/1234187"
},
{
"category": "self",
"summary": "SUSE Bug 1234188",
"url": "https://bugzilla.suse.com/1234188"
},
{
"category": "self",
"summary": "SUSE Bug 1234189",
"url": "https://bugzilla.suse.com/1234189"
},
{
"category": "self",
"summary": "SUSE Bug 1234190",
"url": "https://bugzilla.suse.com/1234190"
},
{
"category": "self",
"summary": "SUSE Bug 1234191",
"url": "https://bugzilla.suse.com/1234191"
},
{
"category": "self",
"summary": "SUSE Bug 1234192",
"url": "https://bugzilla.suse.com/1234192"
},
{
"category": "self",
"summary": "SUSE Bug 1234193",
"url": "https://bugzilla.suse.com/1234193"
},
{
"category": "self",
"summary": "SUSE Bug 1234194",
"url": "https://bugzilla.suse.com/1234194"
},
{
"category": "self",
"summary": "SUSE Bug 1234195",
"url": "https://bugzilla.suse.com/1234195"
},
{
"category": "self",
"summary": "SUSE Bug 1234196",
"url": "https://bugzilla.suse.com/1234196"
},
{
"category": "self",
"summary": "SUSE Bug 1234197",
"url": "https://bugzilla.suse.com/1234197"
},
{
"category": "self",
"summary": "SUSE Bug 1234198",
"url": "https://bugzilla.suse.com/1234198"
},
{
"category": "self",
"summary": "SUSE Bug 1234199",
"url": "https://bugzilla.suse.com/1234199"
},
{
"category": "self",
"summary": "SUSE Bug 1234200",
"url": "https://bugzilla.suse.com/1234200"
},
{
"category": "self",
"summary": "SUSE Bug 1234201",
"url": "https://bugzilla.suse.com/1234201"
},
{
"category": "self",
"summary": "SUSE Bug 1234203",
"url": "https://bugzilla.suse.com/1234203"
},
{
"category": "self",
"summary": "SUSE Bug 1234204",
"url": "https://bugzilla.suse.com/1234204"
},
{
"category": "self",
"summary": "SUSE Bug 1234205",
"url": "https://bugzilla.suse.com/1234205"
},
{
"category": "self",
"summary": "SUSE Bug 1234207",
"url": "https://bugzilla.suse.com/1234207"
},
{
"category": "self",
"summary": "SUSE Bug 1234208",
"url": "https://bugzilla.suse.com/1234208"
},
{
"category": "self",
"summary": "SUSE Bug 1234209",
"url": "https://bugzilla.suse.com/1234209"
},
{
"category": "self",
"summary": "SUSE Bug 1234219",
"url": "https://bugzilla.suse.com/1234219"
},
{
"category": "self",
"summary": "SUSE Bug 1234220",
"url": "https://bugzilla.suse.com/1234220"
},
{
"category": "self",
"summary": "SUSE Bug 1234221",
"url": "https://bugzilla.suse.com/1234221"
},
{
"category": "self",
"summary": "SUSE Bug 1234237",
"url": "https://bugzilla.suse.com/1234237"
},
{
"category": "self",
"summary": "SUSE Bug 1234238",
"url": "https://bugzilla.suse.com/1234238"
},
{
"category": "self",
"summary": "SUSE Bug 1234239",
"url": "https://bugzilla.suse.com/1234239"
},
{
"category": "self",
"summary": "SUSE Bug 1234240",
"url": "https://bugzilla.suse.com/1234240"
},
{
"category": "self",
"summary": "SUSE Bug 1234241",
"url": "https://bugzilla.suse.com/1234241"
},
{
"category": "self",
"summary": "SUSE Bug 1234242",
"url": "https://bugzilla.suse.com/1234242"
},
{
"category": "self",
"summary": "SUSE Bug 1234243",
"url": "https://bugzilla.suse.com/1234243"
},
{
"category": "self",
"summary": "SUSE Bug 1234278",
"url": "https://bugzilla.suse.com/1234278"
},
{
"category": "self",
"summary": "SUSE Bug 1234279",
"url": "https://bugzilla.suse.com/1234279"
},
{
"category": "self",
"summary": "SUSE Bug 1234280",
"url": "https://bugzilla.suse.com/1234280"
},
{
"category": "self",
"summary": "SUSE Bug 1234281",
"url": "https://bugzilla.suse.com/1234281"
},
{
"category": "self",
"summary": "SUSE Bug 1234282",
"url": "https://bugzilla.suse.com/1234282"
},
{
"category": "self",
"summary": "SUSE Bug 1234294",
"url": "https://bugzilla.suse.com/1234294"
},
{
"category": "self",
"summary": "SUSE Bug 1234338",
"url": "https://bugzilla.suse.com/1234338"
},
{
"category": "self",
"summary": "SUSE Bug 1234357",
"url": "https://bugzilla.suse.com/1234357"
},
{
"category": "self",
"summary": "SUSE Bug 1234381",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "self",
"summary": "SUSE Bug 1234454",
"url": "https://bugzilla.suse.com/1234454"
},
{
"category": "self",
"summary": "SUSE Bug 1234464",
"url": "https://bugzilla.suse.com/1234464"
},
{
"category": "self",
"summary": "SUSE Bug 1234605",
"url": "https://bugzilla.suse.com/1234605"
},
{
"category": "self",
"summary": "SUSE Bug 1234619",
"url": "https://bugzilla.suse.com/1234619"
},
{
"category": "self",
"summary": "SUSE Bug 1234635",
"url": "https://bugzilla.suse.com/1234635"
},
{
"category": "self",
"summary": "SUSE Bug 1234651",
"url": "https://bugzilla.suse.com/1234651"
},
{
"category": "self",
"summary": "SUSE Bug 1234652",
"url": "https://bugzilla.suse.com/1234652"
},
{
"category": "self",
"summary": "SUSE Bug 1234654",
"url": "https://bugzilla.suse.com/1234654"
},
{
"category": "self",
"summary": "SUSE Bug 1234655",
"url": "https://bugzilla.suse.com/1234655"
},
{
"category": "self",
"summary": "SUSE Bug 1234657",
"url": "https://bugzilla.suse.com/1234657"
},
{
"category": "self",
"summary": "SUSE Bug 1234658",
"url": "https://bugzilla.suse.com/1234658"
},
{
"category": "self",
"summary": "SUSE Bug 1234659",
"url": "https://bugzilla.suse.com/1234659"
},
{
"category": "self",
"summary": "SUSE Bug 1234668",
"url": "https://bugzilla.suse.com/1234668"
},
{
"category": "self",
"summary": "SUSE Bug 1234683",
"url": "https://bugzilla.suse.com/1234683"
},
{
"category": "self",
"summary": "SUSE Bug 1234690",
"url": "https://bugzilla.suse.com/1234690"
},
{
"category": "self",
"summary": "SUSE Bug 1234693",
"url": "https://bugzilla.suse.com/1234693"
},
{
"category": "self",
"summary": "SUSE Bug 1234725",
"url": "https://bugzilla.suse.com/1234725"
},
{
"category": "self",
"summary": "SUSE Bug 1234726",
"url": "https://bugzilla.suse.com/1234726"
},
{
"category": "self",
"summary": "SUSE Bug 1234810",
"url": "https://bugzilla.suse.com/1234810"
},
{
"category": "self",
"summary": "SUSE Bug 1234811",
"url": "https://bugzilla.suse.com/1234811"
},
{
"category": "self",
"summary": "SUSE Bug 1234825",
"url": "https://bugzilla.suse.com/1234825"
},
{
"category": "self",
"summary": "SUSE Bug 1234826",
"url": "https://bugzilla.suse.com/1234826"
},
{
"category": "self",
"summary": "SUSE Bug 1234827",
"url": "https://bugzilla.suse.com/1234827"
},
{
"category": "self",
"summary": "SUSE Bug 1234829",
"url": "https://bugzilla.suse.com/1234829"
},
{
"category": "self",
"summary": "SUSE Bug 1234832",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "self",
"summary": "SUSE Bug 1234834",
"url": "https://bugzilla.suse.com/1234834"
},
{
"category": "self",
"summary": "SUSE Bug 1234843",
"url": "https://bugzilla.suse.com/1234843"
},
{
"category": "self",
"summary": "SUSE Bug 1234846",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "self",
"summary": "SUSE Bug 1234848",
"url": "https://bugzilla.suse.com/1234848"
},
{
"category": "self",
"summary": "SUSE Bug 1234853",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "self",
"summary": "SUSE Bug 1234855",
"url": "https://bugzilla.suse.com/1234855"
},
{
"category": "self",
"summary": "SUSE Bug 1234856",
"url": "https://bugzilla.suse.com/1234856"
},
{
"category": "self",
"summary": "SUSE Bug 1234863",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "self",
"summary": "SUSE Bug 1234884",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "self",
"summary": "SUSE Bug 1234887",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "self",
"summary": "SUSE Bug 1234888",
"url": "https://bugzilla.suse.com/1234888"
},
{
"category": "self",
"summary": "SUSE Bug 1234889",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "self",
"summary": "SUSE Bug 1234891",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "self",
"summary": "SUSE Bug 1234893",
"url": "https://bugzilla.suse.com/1234893"
},
{
"category": "self",
"summary": "SUSE Bug 1234898",
"url": "https://bugzilla.suse.com/1234898"
},
{
"category": "self",
"summary": "SUSE Bug 1234899",
"url": "https://bugzilla.suse.com/1234899"
},
{
"category": "self",
"summary": "SUSE Bug 1234900",
"url": "https://bugzilla.suse.com/1234900"
},
{
"category": "self",
"summary": "SUSE Bug 1234901",
"url": "https://bugzilla.suse.com/1234901"
},
{
"category": "self",
"summary": "SUSE Bug 1234905",
"url": "https://bugzilla.suse.com/1234905"
},
{
"category": "self",
"summary": "SUSE Bug 1234906",
"url": "https://bugzilla.suse.com/1234906"
},
{
"category": "self",
"summary": "SUSE Bug 1234907",
"url": "https://bugzilla.suse.com/1234907"
},
{
"category": "self",
"summary": "SUSE Bug 1234909",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "self",
"summary": "SUSE Bug 1234911",
"url": "https://bugzilla.suse.com/1234911"
},
{
"category": "self",
"summary": "SUSE Bug 1234912",
"url": "https://bugzilla.suse.com/1234912"
},
{
"category": "self",
"summary": "SUSE Bug 1234916",
"url": "https://bugzilla.suse.com/1234916"
},
{
"category": "self",
"summary": "SUSE Bug 1234918",
"url": "https://bugzilla.suse.com/1234918"
},
{
"category": "self",
"summary": "SUSE Bug 1234920",
"url": "https://bugzilla.suse.com/1234920"
},
{
"category": "self",
"summary": "SUSE Bug 1234921",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "self",
"summary": "SUSE Bug 1234922",
"url": "https://bugzilla.suse.com/1234922"
},
{
"category": "self",
"summary": "SUSE Bug 1234923",
"url": "https://bugzilla.suse.com/1234923"
},
{
"category": "self",
"summary": "SUSE Bug 1234929",
"url": "https://bugzilla.suse.com/1234929"
},
{
"category": "self",
"summary": "SUSE Bug 1234930",
"url": "https://bugzilla.suse.com/1234930"
},
{
"category": "self",
"summary": "SUSE Bug 1234931",
"url": "https://bugzilla.suse.com/1234931"
},
{
"category": "self",
"summary": "SUSE Bug 1234934",
"url": "https://bugzilla.suse.com/1234934"
},
{
"category": "self",
"summary": "SUSE Bug 1234937",
"url": "https://bugzilla.suse.com/1234937"
},
{
"category": "self",
"summary": "SUSE Bug 1234947",
"url": "https://bugzilla.suse.com/1234947"
},
{
"category": "self",
"summary": "SUSE Bug 1234948",
"url": "https://bugzilla.suse.com/1234948"
},
{
"category": "self",
"summary": "SUSE Bug 1234950",
"url": "https://bugzilla.suse.com/1234950"
},
{
"category": "self",
"summary": "SUSE Bug 1234952",
"url": "https://bugzilla.suse.com/1234952"
},
{
"category": "self",
"summary": "SUSE Bug 1234957",
"url": "https://bugzilla.suse.com/1234957"
},
{
"category": "self",
"summary": "SUSE Bug 1234960",
"url": "https://bugzilla.suse.com/1234960"
},
{
"category": "self",
"summary": "SUSE Bug 1234962",
"url": "https://bugzilla.suse.com/1234962"
},
{
"category": "self",
"summary": "SUSE Bug 1234963",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "self",
"summary": "SUSE Bug 1234968",
"url": "https://bugzilla.suse.com/1234968"
},
{
"category": "self",
"summary": "SUSE Bug 1234969",
"url": "https://bugzilla.suse.com/1234969"
},
{
"category": "self",
"summary": "SUSE Bug 1234970",
"url": "https://bugzilla.suse.com/1234970"
},
{
"category": "self",
"summary": "SUSE Bug 1234971",
"url": "https://bugzilla.suse.com/1234971"
},
{
"category": "self",
"summary": "SUSE Bug 1234973",
"url": "https://bugzilla.suse.com/1234973"
},
{
"category": "self",
"summary": "SUSE Bug 1234974",
"url": "https://bugzilla.suse.com/1234974"
},
{
"category": "self",
"summary": "SUSE Bug 1234989",
"url": "https://bugzilla.suse.com/1234989"
},
{
"category": "self",
"summary": "SUSE Bug 1234999",
"url": "https://bugzilla.suse.com/1234999"
},
{
"category": "self",
"summary": "SUSE Bug 1235000",
"url": "https://bugzilla.suse.com/1235000"
},
{
"category": "self",
"summary": "SUSE Bug 1235001",
"url": "https://bugzilla.suse.com/1235001"
},
{
"category": "self",
"summary": "SUSE Bug 1235002",
"url": "https://bugzilla.suse.com/1235002"
},
{
"category": "self",
"summary": "SUSE Bug 1235003",
"url": "https://bugzilla.suse.com/1235003"
},
{
"category": "self",
"summary": "SUSE Bug 1235004",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "self",
"summary": "SUSE Bug 1235007",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "self",
"summary": "SUSE Bug 1235009",
"url": "https://bugzilla.suse.com/1235009"
},
{
"category": "self",
"summary": "SUSE Bug 1235011",
"url": "https://bugzilla.suse.com/1235011"
},
{
"category": "self",
"summary": "SUSE Bug 1235016",
"url": "https://bugzilla.suse.com/1235016"
},
{
"category": "self",
"summary": "SUSE Bug 1235019",
"url": "https://bugzilla.suse.com/1235019"
},
{
"category": "self",
"summary": "SUSE Bug 1235031",
"url": "https://bugzilla.suse.com/1235031"
},
{
"category": "self",
"summary": "SUSE Bug 1235032",
"url": "https://bugzilla.suse.com/1235032"
},
{
"category": "self",
"summary": "SUSE Bug 1235033",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "self",
"summary": "SUSE Bug 1235035",
"url": "https://bugzilla.suse.com/1235035"
},
{
"category": "self",
"summary": "SUSE Bug 1235037",
"url": "https://bugzilla.suse.com/1235037"
},
{
"category": "self",
"summary": "SUSE Bug 1235038",
"url": "https://bugzilla.suse.com/1235038"
},
{
"category": "self",
"summary": "SUSE Bug 1235039",
"url": "https://bugzilla.suse.com/1235039"
},
{
"category": "self",
"summary": "SUSE Bug 1235040",
"url": "https://bugzilla.suse.com/1235040"
},
{
"category": "self",
"summary": "SUSE Bug 1235042",
"url": "https://bugzilla.suse.com/1235042"
},
{
"category": "self",
"summary": "SUSE Bug 1235043",
"url": "https://bugzilla.suse.com/1235043"
},
{
"category": "self",
"summary": "SUSE Bug 1235045",
"url": "https://bugzilla.suse.com/1235045"
},
{
"category": "self",
"summary": "SUSE Bug 1235046",
"url": "https://bugzilla.suse.com/1235046"
},
{
"category": "self",
"summary": "SUSE Bug 1235050",
"url": "https://bugzilla.suse.com/1235050"
},
{
"category": "self",
"summary": "SUSE Bug 1235051",
"url": "https://bugzilla.suse.com/1235051"
},
{
"category": "self",
"summary": "SUSE Bug 1235053",
"url": "https://bugzilla.suse.com/1235053"
},
{
"category": "self",
"summary": "SUSE Bug 1235054",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "self",
"summary": "SUSE Bug 1235056",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "self",
"summary": "SUSE Bug 1235057",
"url": "https://bugzilla.suse.com/1235057"
},
{
"category": "self",
"summary": "SUSE Bug 1235059",
"url": "https://bugzilla.suse.com/1235059"
},
{
"category": "self",
"summary": "SUSE Bug 1235061",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "self",
"summary": "SUSE Bug 1235065",
"url": "https://bugzilla.suse.com/1235065"
},
{
"category": "self",
"summary": "SUSE Bug 1235070",
"url": "https://bugzilla.suse.com/1235070"
},
{
"category": "self",
"summary": "SUSE Bug 1235073",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "self",
"summary": "SUSE Bug 1235075",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "self",
"summary": "SUSE Bug 1235100",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "self",
"summary": "SUSE Bug 1235108",
"url": "https://bugzilla.suse.com/1235108"
},
{
"category": "self",
"summary": "SUSE Bug 1235112",
"url": "https://bugzilla.suse.com/1235112"
},
{
"category": "self",
"summary": "SUSE Bug 1235115",
"url": "https://bugzilla.suse.com/1235115"
},
{
"category": "self",
"summary": "SUSE Bug 1235117",
"url": "https://bugzilla.suse.com/1235117"
},
{
"category": "self",
"summary": "SUSE Bug 1235122",
"url": "https://bugzilla.suse.com/1235122"
},
{
"category": "self",
"summary": "SUSE Bug 1235123",
"url": "https://bugzilla.suse.com/1235123"
},
{
"category": "self",
"summary": "SUSE Bug 1235125",
"url": "https://bugzilla.suse.com/1235125"
},
{
"category": "self",
"summary": "SUSE Bug 1235128",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "self",
"summary": "SUSE Bug 1235132",
"url": "https://bugzilla.suse.com/1235132"
},
{
"category": "self",
"summary": "SUSE Bug 1235133",
"url": "https://bugzilla.suse.com/1235133"
},
{
"category": "self",
"summary": "SUSE Bug 1235134",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "self",
"summary": "SUSE Bug 1235138",
"url": "https://bugzilla.suse.com/1235138"
},
{
"category": "self",
"summary": "SUSE Bug 1235155",
"url": "https://bugzilla.suse.com/1235155"
},
{
"category": "self",
"summary": "SUSE Bug 1235160",
"url": "https://bugzilla.suse.com/1235160"
},
{
"category": "self",
"summary": "SUSE Bug 1235217",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "self",
"summary": "SUSE Bug 1235219",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "self",
"summary": "SUSE Bug 1235220",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "self",
"summary": "SUSE Bug 1235222",
"url": "https://bugzilla.suse.com/1235222"
},
{
"category": "self",
"summary": "SUSE Bug 1235223",
"url": "https://bugzilla.suse.com/1235223"
},
{
"category": "self",
"summary": "SUSE Bug 1235224",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "self",
"summary": "SUSE Bug 1235227",
"url": "https://bugzilla.suse.com/1235227"
},
{
"category": "self",
"summary": "SUSE Bug 1235230",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "self",
"summary": "SUSE Bug 1235241",
"url": "https://bugzilla.suse.com/1235241"
},
{
"category": "self",
"summary": "SUSE Bug 1235246",
"url": "https://bugzilla.suse.com/1235246"
},
{
"category": "self",
"summary": "SUSE Bug 1235249",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "self",
"summary": "SUSE Bug 1235251",
"url": "https://bugzilla.suse.com/1235251"
},
{
"category": "self",
"summary": "SUSE Bug 1235252",
"url": "https://bugzilla.suse.com/1235252"
},
{
"category": "self",
"summary": "SUSE Bug 1235389",
"url": "https://bugzilla.suse.com/1235389"
},
{
"category": "self",
"summary": "SUSE Bug 1235390",
"url": "https://bugzilla.suse.com/1235390"
},
{
"category": "self",
"summary": "SUSE Bug 1235391",
"url": "https://bugzilla.suse.com/1235391"
},
{
"category": "self",
"summary": "SUSE Bug 1235406",
"url": "https://bugzilla.suse.com/1235406"
},
{
"category": "self",
"summary": "SUSE Bug 1235409",
"url": "https://bugzilla.suse.com/1235409"
},
{
"category": "self",
"summary": "SUSE Bug 1235410",
"url": "https://bugzilla.suse.com/1235410"
},
{
"category": "self",
"summary": "SUSE Bug 1235412",
"url": "https://bugzilla.suse.com/1235412"
},
{
"category": "self",
"summary": "SUSE Bug 1235413",
"url": "https://bugzilla.suse.com/1235413"
},
{
"category": "self",
"summary": "SUSE Bug 1235415",
"url": "https://bugzilla.suse.com/1235415"
},
{
"category": "self",
"summary": "SUSE Bug 1235416",
"url": "https://bugzilla.suse.com/1235416"
},
{
"category": "self",
"summary": "SUSE Bug 1235417",
"url": "https://bugzilla.suse.com/1235417"
},
{
"category": "self",
"summary": "SUSE Bug 1235418",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "self",
"summary": "SUSE Bug 1235423",
"url": "https://bugzilla.suse.com/1235423"
},
{
"category": "self",
"summary": "SUSE Bug 1235424",
"url": "https://bugzilla.suse.com/1235424"
},
{
"category": "self",
"summary": "SUSE Bug 1235425",
"url": "https://bugzilla.suse.com/1235425"
},
{
"category": "self",
"summary": "SUSE Bug 1235426",
"url": "https://bugzilla.suse.com/1235426"
},
{
"category": "self",
"summary": "SUSE Bug 1235427",
"url": "https://bugzilla.suse.com/1235427"
},
{
"category": "self",
"summary": "SUSE Bug 1235428",
"url": "https://bugzilla.suse.com/1235428"
},
{
"category": "self",
"summary": "SUSE Bug 1235429",
"url": "https://bugzilla.suse.com/1235429"
},
{
"category": "self",
"summary": "SUSE Bug 1235430",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "self",
"summary": "SUSE Bug 1235433",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "self",
"summary": "SUSE Bug 1235437",
"url": "https://bugzilla.suse.com/1235437"
},
{
"category": "self",
"summary": "SUSE Bug 1235439",
"url": "https://bugzilla.suse.com/1235439"
},
{
"category": "self",
"summary": "SUSE Bug 1235444",
"url": "https://bugzilla.suse.com/1235444"
},
{
"category": "self",
"summary": "SUSE Bug 1235445",
"url": "https://bugzilla.suse.com/1235445"
},
{
"category": "self",
"summary": "SUSE Bug 1235449",
"url": "https://bugzilla.suse.com/1235449"
},
{
"category": "self",
"summary": "SUSE Bug 1235451",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "self",
"summary": "SUSE Bug 1235454",
"url": "https://bugzilla.suse.com/1235454"
},
{
"category": "self",
"summary": "SUSE Bug 1235458",
"url": "https://bugzilla.suse.com/1235458"
},
{
"category": "self",
"summary": "SUSE Bug 1235459",
"url": "https://bugzilla.suse.com/1235459"
},
{
"category": "self",
"summary": "SUSE Bug 1235464",
"url": "https://bugzilla.suse.com/1235464"
},
{
"category": "self",
"summary": "SUSE Bug 1235466",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "self",
"summary": "SUSE Bug 1235473",
"url": "https://bugzilla.suse.com/1235473"
},
{
"category": "self",
"summary": "SUSE Bug 1235479",
"url": "https://bugzilla.suse.com/1235479"
},
{
"category": "self",
"summary": "SUSE Bug 1235480",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "self",
"summary": "SUSE Bug 1235483",
"url": "https://bugzilla.suse.com/1235483"
},
{
"category": "self",
"summary": "SUSE Bug 1235486",
"url": "https://bugzilla.suse.com/1235486"
},
{
"category": "self",
"summary": "SUSE Bug 1235487",
"url": "https://bugzilla.suse.com/1235487"
},
{
"category": "self",
"summary": "SUSE Bug 1235488",
"url": "https://bugzilla.suse.com/1235488"
},
{
"category": "self",
"summary": "SUSE Bug 1235489",
"url": "https://bugzilla.suse.com/1235489"
},
{
"category": "self",
"summary": "SUSE Bug 1235491",
"url": "https://bugzilla.suse.com/1235491"
},
{
"category": "self",
"summary": "SUSE Bug 1235494",
"url": "https://bugzilla.suse.com/1235494"
},
{
"category": "self",
"summary": "SUSE Bug 1235495",
"url": "https://bugzilla.suse.com/1235495"
},
{
"category": "self",
"summary": "SUSE Bug 1235496",
"url": "https://bugzilla.suse.com/1235496"
},
{
"category": "self",
"summary": "SUSE Bug 1235497",
"url": "https://bugzilla.suse.com/1235497"
},
{
"category": "self",
"summary": "SUSE Bug 1235498",
"url": "https://bugzilla.suse.com/1235498"
},
{
"category": "self",
"summary": "SUSE Bug 1235500",
"url": "https://bugzilla.suse.com/1235500"
},
{
"category": "self",
"summary": "SUSE Bug 1235502",
"url": "https://bugzilla.suse.com/1235502"
},
{
"category": "self",
"summary": "SUSE Bug 1235503",
"url": "https://bugzilla.suse.com/1235503"
},
{
"category": "self",
"summary": "SUSE Bug 1235507",
"url": "https://bugzilla.suse.com/1235507"
},
{
"category": "self",
"summary": "SUSE Bug 1235519",
"url": "https://bugzilla.suse.com/1235519"
},
{
"category": "self",
"summary": "SUSE Bug 1235520",
"url": "https://bugzilla.suse.com/1235520"
},
{
"category": "self",
"summary": "SUSE Bug 1235521",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "self",
"summary": "SUSE Bug 1235523",
"url": "https://bugzilla.suse.com/1235523"
},
{
"category": "self",
"summary": "SUSE Bug 1235526",
"url": "https://bugzilla.suse.com/1235526"
},
{
"category": "self",
"summary": "SUSE Bug 1235528",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "self",
"summary": "SUSE Bug 1235532",
"url": "https://bugzilla.suse.com/1235532"
},
{
"category": "self",
"summary": "SUSE Bug 1235533",
"url": "https://bugzilla.suse.com/1235533"
},
{
"category": "self",
"summary": "SUSE Bug 1235534",
"url": "https://bugzilla.suse.com/1235534"
},
{
"category": "self",
"summary": "SUSE Bug 1235537",
"url": "https://bugzilla.suse.com/1235537"
},
{
"category": "self",
"summary": "SUSE Bug 1235538",
"url": "https://bugzilla.suse.com/1235538"
},
{
"category": "self",
"summary": "SUSE Bug 1235545",
"url": "https://bugzilla.suse.com/1235545"
},
{
"category": "self",
"summary": "SUSE Bug 1235550",
"url": "https://bugzilla.suse.com/1235550"
},
{
"category": "self",
"summary": "SUSE Bug 1235552",
"url": "https://bugzilla.suse.com/1235552"
},
{
"category": "self",
"summary": "SUSE Bug 1235555",
"url": "https://bugzilla.suse.com/1235555"
},
{
"category": "self",
"summary": "SUSE Bug 1235557",
"url": "https://bugzilla.suse.com/1235557"
},
{
"category": "self",
"summary": "SUSE Bug 1235563",
"url": "https://bugzilla.suse.com/1235563"
},
{
"category": "self",
"summary": "SUSE Bug 1235564",
"url": "https://bugzilla.suse.com/1235564"
},
{
"category": "self",
"summary": "SUSE Bug 1235565",
"url": "https://bugzilla.suse.com/1235565"
},
{
"category": "self",
"summary": "SUSE Bug 1235568",
"url": "https://bugzilla.suse.com/1235568"
},
{
"category": "self",
"summary": "SUSE Bug 1235570",
"url": "https://bugzilla.suse.com/1235570"
},
{
"category": "self",
"summary": "SUSE Bug 1235571",
"url": "https://bugzilla.suse.com/1235571"
},
{
"category": "self",
"summary": "SUSE Bug 1235577",
"url": "https://bugzilla.suse.com/1235577"
},
{
"category": "self",
"summary": "SUSE Bug 1235578",
"url": "https://bugzilla.suse.com/1235578"
},
{
"category": "self",
"summary": "SUSE Bug 1235582",
"url": "https://bugzilla.suse.com/1235582"
},
{
"category": "self",
"summary": "SUSE Bug 1235583",
"url": "https://bugzilla.suse.com/1235583"
},
{
"category": "self",
"summary": "SUSE Bug 1235584",
"url": "https://bugzilla.suse.com/1235584"
},
{
"category": "self",
"summary": "SUSE Bug 1235587",
"url": "https://bugzilla.suse.com/1235587"
},
{
"category": "self",
"summary": "SUSE Bug 1235611",
"url": "https://bugzilla.suse.com/1235611"
},
{
"category": "self",
"summary": "SUSE Bug 1235612",
"url": "https://bugzilla.suse.com/1235612"
},
{
"category": "self",
"summary": "SUSE Bug 1235616",
"url": "https://bugzilla.suse.com/1235616"
},
{
"category": "self",
"summary": "SUSE Bug 1235622",
"url": "https://bugzilla.suse.com/1235622"
},
{
"category": "self",
"summary": "SUSE Bug 1235627",
"url": "https://bugzilla.suse.com/1235627"
},
{
"category": "self",
"summary": "SUSE Bug 1235632",
"url": "https://bugzilla.suse.com/1235632"
},
{
"category": "self",
"summary": "SUSE Bug 1235635",
"url": "https://bugzilla.suse.com/1235635"
},
{
"category": "self",
"summary": "SUSE Bug 1235638",
"url": "https://bugzilla.suse.com/1235638"
},
{
"category": "self",
"summary": "SUSE Bug 1235641",
"url": "https://bugzilla.suse.com/1235641"
},
{
"category": "self",
"summary": "SUSE Bug 1235643",
"url": "https://bugzilla.suse.com/1235643"
},
{
"category": "self",
"summary": "SUSE Bug 1235645",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "self",
"summary": "SUSE Bug 1235646",
"url": "https://bugzilla.suse.com/1235646"
},
{
"category": "self",
"summary": "SUSE Bug 1235647",
"url": "https://bugzilla.suse.com/1235647"
},
{
"category": "self",
"summary": "SUSE Bug 1235650",
"url": "https://bugzilla.suse.com/1235650"
},
{
"category": "self",
"summary": "SUSE Bug 1235653",
"url": "https://bugzilla.suse.com/1235653"
},
{
"category": "self",
"summary": "SUSE Bug 1235656",
"url": "https://bugzilla.suse.com/1235656"
},
{
"category": "self",
"summary": "SUSE Bug 1235657",
"url": "https://bugzilla.suse.com/1235657"
},
{
"category": "self",
"summary": "SUSE Bug 1235663",
"url": "https://bugzilla.suse.com/1235663"
},
{
"category": "self",
"summary": "SUSE Bug 1235686",
"url": "https://bugzilla.suse.com/1235686"
},
{
"category": "self",
"summary": "SUSE Bug 1235700",
"url": "https://bugzilla.suse.com/1235700"
},
{
"category": "self",
"summary": "SUSE Bug 1235705",
"url": "https://bugzilla.suse.com/1235705"
},
{
"category": "self",
"summary": "SUSE Bug 1235707",
"url": "https://bugzilla.suse.com/1235707"
},
{
"category": "self",
"summary": "SUSE Bug 1235708",
"url": "https://bugzilla.suse.com/1235708"
},
{
"category": "self",
"summary": "SUSE Bug 1235710",
"url": "https://bugzilla.suse.com/1235710"
},
{
"category": "self",
"summary": "SUSE Bug 1235714",
"url": "https://bugzilla.suse.com/1235714"
},
{
"category": "self",
"summary": "SUSE Bug 1235716",
"url": "https://bugzilla.suse.com/1235716"
},
{
"category": "self",
"summary": "SUSE Bug 1235720",
"url": "https://bugzilla.suse.com/1235720"
},
{
"category": "self",
"summary": "SUSE Bug 1235723",
"url": "https://bugzilla.suse.com/1235723"
},
{
"category": "self",
"summary": "SUSE Bug 1235727",
"url": "https://bugzilla.suse.com/1235727"
},
{
"category": "self",
"summary": "SUSE Bug 1235730",
"url": "https://bugzilla.suse.com/1235730"
},
{
"category": "self",
"summary": "SUSE Bug 1235737",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "self",
"summary": "SUSE Bug 1235739",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "self",
"summary": "SUSE Bug 1235745",
"url": "https://bugzilla.suse.com/1235745"
},
{
"category": "self",
"summary": "SUSE Bug 1235747",
"url": "https://bugzilla.suse.com/1235747"
},
{
"category": "self",
"summary": "SUSE Bug 1235750",
"url": "https://bugzilla.suse.com/1235750"
},
{
"category": "self",
"summary": "SUSE Bug 1235753",
"url": "https://bugzilla.suse.com/1235753"
},
{
"category": "self",
"summary": "SUSE Bug 1235759",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "self",
"summary": "SUSE Bug 1235764",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "self",
"summary": "SUSE Bug 1235768",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "self",
"summary": "SUSE Bug 1235776",
"url": "https://bugzilla.suse.com/1235776"
},
{
"category": "self",
"summary": "SUSE Bug 1235777",
"url": "https://bugzilla.suse.com/1235777"
},
{
"category": "self",
"summary": "SUSE Bug 1235778",
"url": "https://bugzilla.suse.com/1235778"
},
{
"category": "self",
"summary": "SUSE Bug 1235779",
"url": "https://bugzilla.suse.com/1235779"
},
{
"category": "self",
"summary": "SUSE Bug 1235793",
"url": "https://bugzilla.suse.com/1235793"
},
{
"category": "self",
"summary": "SUSE Bug 1235798",
"url": "https://bugzilla.suse.com/1235798"
},
{
"category": "self",
"summary": "SUSE Bug 1235806",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "self",
"summary": "SUSE Bug 1235808",
"url": "https://bugzilla.suse.com/1235808"
},
{
"category": "self",
"summary": "SUSE Bug 1235812",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "self",
"summary": "SUSE Bug 1235814",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "self",
"summary": "SUSE Bug 1235818",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "self",
"summary": "SUSE Bug 1235842",
"url": "https://bugzilla.suse.com/1235842"
},
{
"category": "self",
"summary": "SUSE Bug 1235865",
"url": "https://bugzilla.suse.com/1235865"
},
{
"category": "self",
"summary": "SUSE Bug 1235894",
"url": "https://bugzilla.suse.com/1235894"
},
{
"category": "self",
"summary": "SUSE Bug 1235902",
"url": "https://bugzilla.suse.com/1235902"
},
{
"category": "self",
"summary": "SUSE Bug 1235903",
"url": "https://bugzilla.suse.com/1235903"
},
{
"category": "self",
"summary": "SUSE Bug 1235906",
"url": "https://bugzilla.suse.com/1235906"
},
{
"category": "self",
"summary": "SUSE Bug 1235918",
"url": "https://bugzilla.suse.com/1235918"
},
{
"category": "self",
"summary": "SUSE Bug 1235919",
"url": "https://bugzilla.suse.com/1235919"
},
{
"category": "self",
"summary": "SUSE Bug 1235920",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "self",
"summary": "SUSE Bug 1235924",
"url": "https://bugzilla.suse.com/1235924"
},
{
"category": "self",
"summary": "SUSE Bug 1235940",
"url": "https://bugzilla.suse.com/1235940"
},
{
"category": "self",
"summary": "SUSE Bug 1235941",
"url": "https://bugzilla.suse.com/1235941"
},
{
"category": "self",
"summary": "SUSE Bug 1235946",
"url": "https://bugzilla.suse.com/1235946"
},
{
"category": "self",
"summary": "SUSE Bug 1235948",
"url": "https://bugzilla.suse.com/1235948"
},
{
"category": "self",
"summary": "SUSE Bug 1235952",
"url": "https://bugzilla.suse.com/1235952"
},
{
"category": "self",
"summary": "SUSE Bug 1235964",
"url": "https://bugzilla.suse.com/1235964"
},
{
"category": "self",
"summary": "SUSE Bug 1235965",
"url": "https://bugzilla.suse.com/1235965"
},
{
"category": "self",
"summary": "SUSE Bug 1235967",
"url": "https://bugzilla.suse.com/1235967"
},
{
"category": "self",
"summary": "SUSE Bug 1235969",
"url": "https://bugzilla.suse.com/1235969"
},
{
"category": "self",
"summary": "SUSE Bug 1235976",
"url": "https://bugzilla.suse.com/1235976"
},
{
"category": "self",
"summary": "SUSE Bug 1235977",
"url": "https://bugzilla.suse.com/1235977"
},
{
"category": "self",
"summary": "SUSE Bug 1236078",
"url": "https://bugzilla.suse.com/1236078"
},
{
"category": "self",
"summary": "SUSE Bug 1236080",
"url": "https://bugzilla.suse.com/1236080"
},
{
"category": "self",
"summary": "SUSE Bug 1236082",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "self",
"summary": "SUSE Bug 1236088",
"url": "https://bugzilla.suse.com/1236088"
},
{
"category": "self",
"summary": "SUSE Bug 1236090",
"url": "https://bugzilla.suse.com/1236090"
},
{
"category": "self",
"summary": "SUSE Bug 1236091",
"url": "https://bugzilla.suse.com/1236091"
},
{
"category": "self",
"summary": "SUSE Bug 1236096",
"url": "https://bugzilla.suse.com/1236096"
},
{
"category": "self",
"summary": "SUSE Bug 1236097",
"url": "https://bugzilla.suse.com/1236097"
},
{
"category": "self",
"summary": "SUSE Bug 1236098",
"url": "https://bugzilla.suse.com/1236098"
},
{
"category": "self",
"summary": "SUSE Bug 1236101",
"url": "https://bugzilla.suse.com/1236101"
},
{
"category": "self",
"summary": "SUSE Bug 1236102",
"url": "https://bugzilla.suse.com/1236102"
},
{
"category": "self",
"summary": "SUSE Bug 1236104",
"url": "https://bugzilla.suse.com/1236104"
},
{
"category": "self",
"summary": "SUSE Bug 1236106",
"url": "https://bugzilla.suse.com/1236106"
},
{
"category": "self",
"summary": "SUSE Bug 1236120",
"url": "https://bugzilla.suse.com/1236120"
},
{
"category": "self",
"summary": "SUSE Bug 1236125",
"url": "https://bugzilla.suse.com/1236125"
},
{
"category": "self",
"summary": "SUSE Bug 1236127",
"url": "https://bugzilla.suse.com/1236127"
},
{
"category": "self",
"summary": "SUSE Bug 1236131",
"url": "https://bugzilla.suse.com/1236131"
},
{
"category": "self",
"summary": "SUSE Bug 1236138",
"url": "https://bugzilla.suse.com/1236138"
},
{
"category": "self",
"summary": "SUSE Bug 1236143",
"url": "https://bugzilla.suse.com/1236143"
},
{
"category": "self",
"summary": "SUSE Bug 1236144",
"url": "https://bugzilla.suse.com/1236144"
},
{
"category": "self",
"summary": "SUSE Bug 1236145",
"url": "https://bugzilla.suse.com/1236145"
},
{
"category": "self",
"summary": "SUSE Bug 1236160",
"url": "https://bugzilla.suse.com/1236160"
},
{
"category": "self",
"summary": "SUSE Bug 1236161",
"url": "https://bugzilla.suse.com/1236161"
},
{
"category": "self",
"summary": "SUSE Bug 1236163",
"url": "https://bugzilla.suse.com/1236163"
},
{
"category": "self",
"summary": "SUSE Bug 1236168",
"url": "https://bugzilla.suse.com/1236168"
},
{
"category": "self",
"summary": "SUSE Bug 1236178",
"url": "https://bugzilla.suse.com/1236178"
},
{
"category": "self",
"summary": "SUSE Bug 1236180",
"url": "https://bugzilla.suse.com/1236180"
},
{
"category": "self",
"summary": "SUSE Bug 1236181",
"url": "https://bugzilla.suse.com/1236181"
},
{
"category": "self",
"summary": "SUSE Bug 1236182",
"url": "https://bugzilla.suse.com/1236182"
},
{
"category": "self",
"summary": "SUSE Bug 1236190",
"url": "https://bugzilla.suse.com/1236190"
},
{
"category": "self",
"summary": "SUSE Bug 1236192",
"url": "https://bugzilla.suse.com/1236192"
},
{
"category": "self",
"summary": "SUSE Bug 1236198",
"url": "https://bugzilla.suse.com/1236198"
},
{
"category": "self",
"summary": "SUSE Bug 1236227",
"url": "https://bugzilla.suse.com/1236227"
},
{
"category": "self",
"summary": "SUSE Bug 1236245",
"url": "https://bugzilla.suse.com/1236245"
},
{
"category": "self",
"summary": "SUSE Bug 1236247",
"url": "https://bugzilla.suse.com/1236247"
},
{
"category": "self",
"summary": "SUSE Bug 1236248",
"url": "https://bugzilla.suse.com/1236248"
},
{
"category": "self",
"summary": "SUSE Bug 1236260",
"url": "https://bugzilla.suse.com/1236260"
},
{
"category": "self",
"summary": "SUSE Bug 1236262",
"url": "https://bugzilla.suse.com/1236262"
},
{
"category": "self",
"summary": "SUSE Bug 1236628",
"url": "https://bugzilla.suse.com/1236628"
},
{
"category": "self",
"summary": "SUSE Bug 1236688",
"url": "https://bugzilla.suse.com/1236688"
},
{
"category": "self",
"summary": "SUSE Bug 1236696",
"url": "https://bugzilla.suse.com/1236696"
},
{
"category": "self",
"summary": "SUSE Bug 1236703",
"url": "https://bugzilla.suse.com/1236703"
},
{
"category": "self",
"summary": "SUSE Bug 1236732",
"url": "https://bugzilla.suse.com/1236732"
},
{
"category": "self",
"summary": "SUSE Bug 1236733",
"url": "https://bugzilla.suse.com/1236733"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-47233 page",
"url": "https://www.suse.com/security/cve/CVE-2023-47233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52463 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52463/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52472 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52472/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52591 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52591/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52653 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52657 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52658 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52660 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52661 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52662 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52663 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52664 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52667 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52669 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52669/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52670 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52671 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52671/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52673 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52673/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52675 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52676 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52678 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52679 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52681 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52683 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52685 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52686 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52686/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52687 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52690 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52691 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52693 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52694 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52695 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52695/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52696 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52696/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52697 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52697/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52882 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52923 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-22099 page",
"url": "https://www.suse.com/security/cve/CVE-2024-22099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26611 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26742 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26742/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26761 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26764 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26786 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26794 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26846 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26846/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26853 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26854 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26855 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26856 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26856/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26858 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26861 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26861/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26866 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26866/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26868 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26870 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26900 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26900/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26924 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26934 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26937 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26943 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26943/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26949 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26950 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26957 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26957/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26961 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26962 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26962/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26963 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26964 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26964/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26973 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26983 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26984 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26986 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26988 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26988/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26989 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26994 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26994/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26995 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26996 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26997 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26997/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26999 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26999/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27000 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27001 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27002 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27003 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27003/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27004 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27008 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27008/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27027 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27027/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27028 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27028/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27029 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27030 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27030/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27031 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27031/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27046 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27046/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27057 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27057/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27062 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27062/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27067 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27067/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27080 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27080/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27388 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27389 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27397 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27398 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27398/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27399 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27399/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27400 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27400/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27405 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27405/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27410 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27411 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27411/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27412 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27412/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27413 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27413/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27416 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27416/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27432 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27432/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27434 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27434/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27435 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27435/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27436 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27436/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35784 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35784/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35786 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35788 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35789 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35790 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35790/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35794 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35795 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35796 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35796/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35799 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35799/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35800 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35800/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35801 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35806 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35806/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35808 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35808/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35810 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35810/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35811 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35811/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35812 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35813 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35813/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35815 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35817 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35819 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35819/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35821 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35822 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35822/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35823 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35823/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35824 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35824/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35825 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35825/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35829 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35830 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35833 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35834 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35835 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35836 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35836/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35837 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35837/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35838 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35839 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35841 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35842 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35842/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35845 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35845/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35847 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35847/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35849 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35850 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35851 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35851/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35875 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35875/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35878 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35879 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35883 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35885 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35887 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35889 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35889/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35891 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35891/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35901 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35901/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35909 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35909/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35912 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35914 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35924 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35927 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35927/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35928 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35930 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35933 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35937 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35945 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35945/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35946 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35947 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35947/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35950 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35952 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35952/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35953 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35953/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35954 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35954/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35955 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35958 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35958/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35959 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35960 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35960/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35961 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35961/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35963 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35963/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35965 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35965/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35966 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35966/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35967 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35967/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35971 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35971/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35972 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35973 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35973/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35974 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35974/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35975 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35975/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35977 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35977/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35978 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35982 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35984 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35986 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35989 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35989/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35990 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35990/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35992 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35992/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35995 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35995/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35997 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35997/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36002 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36009 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36009/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36011 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36011/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36012 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36012/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36014 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36014/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36018 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36019 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36020 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36021 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36021/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36025 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36025/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36026 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36029 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36029/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36032 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36032/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36476 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36880 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36885 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36891 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36891/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36893 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36894 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36894/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36895 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36895/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36898 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36898/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36906 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36921 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36921/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36928 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36930 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36941 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36941/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36942 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36942/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36944 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36944/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36949 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36949/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36950 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36950/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36955 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36955/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36959 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36959/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39282 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39480 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41042 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44934 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44996 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48873 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49854 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49948 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49978 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49998 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50016 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50018 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50039 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50047 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50051 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50106 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50211 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50228 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50256 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50256/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50262 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50272 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50272/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50278 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50280 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50299 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52332 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53050 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53064 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53090 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53091 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53095 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53099 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53103 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53105 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53111 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53113 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53117 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53118 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53119 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53120 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53122 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53125 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53127 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53129 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53130 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53131 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53133 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53134 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53136 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53142 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53144 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53148 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53150 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53155 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53156 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53157 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53158 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53159 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53160 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53161 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53162 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53164 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53166 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53168 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53169 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53170 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53171 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53172 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53173 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53174 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53175 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53179 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53180 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53187 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53188 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53190 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53191 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53194 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53195 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53196 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53197 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53198 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53200 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53201 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53206 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53207 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53208 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53209 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53210 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53213 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53214 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53215 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53216 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53217 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53222 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53224 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53229 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53230 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53231 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53232 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53233 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53234 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53236 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53237 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53239 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53240 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53241 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53685 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-54680 page",
"url": "https://www.suse.com/security/cve/CVE-2024-54680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55639 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56369 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56372 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56531 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56533 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56536 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56538 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56539 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56543 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56546 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56548 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56549 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56551 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56557 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56558 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56562 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56566 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56567 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56568 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56570 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56571 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56572 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56573 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56574 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56575 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56576 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56577 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56578 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56582 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56584 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56587 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56588 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56589 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56590 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56593 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56594 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56595 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56596 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56597 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56598 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56599 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-5660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-5660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56600 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56601 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56602 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56603 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56604 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56605 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56606 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56607 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56608 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56609 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56610 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56611 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56614 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56616 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56617 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56619 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56620 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56622 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56623 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56625 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56629 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56631 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56632 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56634 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56635 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56636 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56637 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56641 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56642 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56643 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56644 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56645 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56648 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56649 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56650 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56651 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56654 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56656 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56659 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56661 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56662 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56663 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56664 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56665 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56667 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56670 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56672 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56675 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56677 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56679 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56681 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56683 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56687 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56688 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56691 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56693 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56694 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56698 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56700 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56701 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56704 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56705 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56707 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56708 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56709 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56712 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56715 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56716 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56722 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56723 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56724 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56725 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56726 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56727 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56728 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56729 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56741 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56745 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56746 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56747 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56748 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56752 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56754 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56755 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56756 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56759 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56760 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56763 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56765 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56766 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56767 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56769 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56774 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56775 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56776 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56777 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56778 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56779 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56780 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56787 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57791 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57792 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57793 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57795 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57798 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57801 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57802 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57804 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57838 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57849 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57850 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57874 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57876 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57887 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57888 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57890 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57892 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57893 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57906 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57910 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57912 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57917 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57926 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57933 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57946 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-8805 page",
"url": "https://www.suse.com/security/cve/CVE-2024-8805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21632 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21645 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21646 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21649 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21650 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21651 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21652 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21653 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21655 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21656 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21662 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21663 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21664 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21674 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21676 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21682 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21682/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2025-03-28T07:51:47Z",
"generator": {
"date": "2025-03-28T07:51:47Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:20166-1",
"initial_release_date": "2025-03-28T07:51:47Z",
"revision_history": [
{
"date": "2025-03-28T07:51:47Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-rt-6.4.0-25.1.noarch",
"product": {
"name": "kernel-devel-rt-6.4.0-25.1.noarch",
"product_id": "kernel-devel-rt-6.4.0-25.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-rt-6.4.0-25.1.noarch",
"product": {
"name": "kernel-source-rt-6.4.0-25.1.noarch",
"product_id": "kernel-source-rt-6.4.0-25.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"product_id": "kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-rt-6.4.0-25.1.x86_64",
"product_id": "kernel-rt-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-livepatch-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-rt-livepatch-6.4.0-25.1.x86_64",
"product_id": "kernel-rt-livepatch-6.4.0-25.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-rt-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch"
},
"product_reference": "kernel-devel-rt-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-rt-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-livepatch-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-rt-livepatch-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-rt-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
},
"product_reference": "kernel-source-rt-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-47233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-47233"
}
],
"notes": [
{
"category": "general",
"text": "The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this \"could be exploited in a real world scenario.\" This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-47233",
"url": "https://www.suse.com/security/cve/CVE-2023-47233"
},
{
"category": "external",
"summary": "SUSE Bug 1216702 for CVE-2023-47233",
"url": "https://bugzilla.suse.com/1216702"
},
{
"category": "external",
"summary": "SUSE Bug 1224592 for CVE-2023-47233",
"url": "https://bugzilla.suse.com/1224592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-47233"
},
{
"cve": "CVE-2023-52463",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52463"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefivarfs: force RO when remounting if SetVariable is not supported\n\nIf SetVariable at runtime is not supported by the firmware we never assign\na callback for that function. At the same time mount the efivarfs as\nRO so no one can call that. However, we never check the permission flags\nwhen someone remounts the filesystem as RW. As a result this leads to a\ncrash looking like this:\n\n$ mount -o remount,rw /sys/firmware/efi/efivars\n$ efi-updatevar -f PK.auth PK\n\n[ 303.279166] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n[ 303.280482] Mem abort info:\n[ 303.280854] ESR = 0x0000000086000004\n[ 303.281338] EC = 0x21: IABT (current EL), IL = 32 bits\n[ 303.282016] SET = 0, FnV = 0\n[ 303.282414] EA = 0, S1PTW = 0\n[ 303.282821] FSC = 0x04: level 0 translation fault\n[ 303.283771] user pgtable: 4k pages, 48-bit VAs, pgdp=000000004258c000\n[ 303.284913] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000\n[ 303.286076] Internal error: Oops: 0000000086000004 [#1] PREEMPT SMP\n[ 303.286936] Modules linked in: qrtr tpm_tis tpm_tis_core crct10dif_ce arm_smccc_trng rng_core drm fuse ip_tables x_tables ipv6\n[ 303.288586] CPU: 1 PID: 755 Comm: efi-updatevar Not tainted 6.3.0-rc1-00108-gc7d0c4695c68 #1\n[ 303.289748] Hardware name: Unknown Unknown Product/Unknown Product, BIOS 2023.04-00627-g88336918701d 04/01/2023\n[ 303.291150] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 303.292123] pc : 0x0\n[ 303.292443] lr : efivar_set_variable_locked+0x74/0xec\n[ 303.293156] sp : ffff800008673c10\n[ 303.293619] x29: ffff800008673c10 x28: ffff0000037e8000 x27: 0000000000000000\n[ 303.294592] x26: 0000000000000800 x25: ffff000002467400 x24: 0000000000000027\n[ 303.295572] x23: ffffd49ea9832000 x22: ffff0000020c9800 x21: ffff000002467000\n[ 303.296566] x20: 0000000000000001 x19: 00000000000007fc x18: 0000000000000000\n[ 303.297531] x17: 0000000000000000 x16: 0000000000000000 x15: 0000aaaac807ab54\n[ 303.298495] x14: ed37489f673633c0 x13: 71c45c606de13f80 x12: 47464259e219acf4\n[ 303.299453] x11: ffff000002af7b01 x10: 0000000000000003 x9 : 0000000000000002\n[ 303.300431] x8 : 0000000000000010 x7 : ffffd49ea8973230 x6 : 0000000000a85201\n[ 303.301412] x5 : 0000000000000000 x4 : ffff0000020c9800 x3 : 00000000000007fc\n[ 303.302370] x2 : 0000000000000027 x1 : ffff000002467400 x0 : ffff000002467000\n[ 303.303341] Call trace:\n[ 303.303679] 0x0\n[ 303.303938] efivar_entry_set_get_size+0x98/0x16c\n[ 303.304585] efivarfs_file_write+0xd0/0x1a4\n[ 303.305148] vfs_write+0xc4/0x2e4\n[ 303.305601] ksys_write+0x70/0x104\n[ 303.306073] __arm64_sys_write+0x1c/0x28\n[ 303.306622] invoke_syscall+0x48/0x114\n[ 303.307156] el0_svc_common.constprop.0+0x44/0xec\n[ 303.307803] do_el0_svc+0x38/0x98\n[ 303.308268] el0_svc+0x2c/0x84\n[ 303.308702] el0t_64_sync_handler+0xf4/0x120\n[ 303.309293] el0t_64_sync+0x190/0x194\n[ 303.309794] Code: ???????? ???????? ???????? ???????? (????????)\n[ 303.310612] ---[ end trace 0000000000000000 ]---\n\nFix this by adding a .reconfigure() function to the fs operations which\nwe can use to check the requested flags and deny anything that\u0027s not RO\nif the firmware doesn\u0027t implement SetVariable at runtime.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52463",
"url": "https://www.suse.com/security/cve/CVE-2023-52463"
},
{
"category": "external",
"summary": "SUSE Bug 1220328 for CVE-2023-52463",
"url": "https://bugzilla.suse.com/1220328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52463"
},
{
"cve": "CVE-2023-52472",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52472"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: rsa - add a check for allocation failure\n\nStatic checkers insist that the mpi_alloc() allocation can fail so add\na check to prevent a NULL dereference. Small allocations like this\ncan\u0027t actually fail in current kernels, but adding a check is very\nsimple and makes the static checkers happy.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52472",
"url": "https://www.suse.com/security/cve/CVE-2023-52472"
},
{
"category": "external",
"summary": "SUSE Bug 1220427 for CVE-2023-52472",
"url": "https://bugzilla.suse.com/1220427"
},
{
"category": "external",
"summary": "SUSE Bug 1220430 for CVE-2023-52472",
"url": "https://bugzilla.suse.com/1220430"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2023-52472"
},
{
"cve": "CVE-2023-52591",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52591"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nreiserfs: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change reiserfs rename code to avoid touching renamed directory\nif its parent does not change as without locking that can corrupt the\nfilesystem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52591",
"url": "https://www.suse.com/security/cve/CVE-2023-52591"
},
{
"category": "external",
"summary": "SUSE Bug 1221044 for CVE-2023-52591",
"url": "https://bugzilla.suse.com/1221044"
},
{
"category": "external",
"summary": "SUSE Bug 1221578 for CVE-2023-52591",
"url": "https://bugzilla.suse.com/1221578"
},
{
"category": "external",
"summary": "SUSE Bug 1221598 for CVE-2023-52591",
"url": "https://bugzilla.suse.com/1221598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2023-52591"
},
{
"cve": "CVE-2023-52653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: fix a memleak in gss_import_v2_context\n\nThe ctx-\u003emech_used.data allocated by kmemdup is not freed in neither\ngss_import_v2_context nor it only caller gss_krb5_import_sec_context,\nwhich frees ctx on error.\n\nThus, this patch reform the last call of gss_import_v2_context to the\ngss_krb5_import_ctx_v2, preventing the memleak while keepping the return\nformation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52653",
"url": "https://www.suse.com/security/cve/CVE-2023-52653"
},
{
"category": "external",
"summary": "SUSE Bug 1223712 for CVE-2023-52653",
"url": "https://bugzilla.suse.com/1223712"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52653"
},
{
"cve": "CVE-2023-52657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52657"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"drm/amd/pm: resolve reboot exception for si oland\"\n\nThis reverts commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86.\n\nThis causes hangs on SI when DC is enabled and errors on driver\nreboot and power off cycles.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52657",
"url": "https://www.suse.com/security/cve/CVE-2023-52657"
},
{
"category": "external",
"summary": "SUSE Bug 1224722 for CVE-2023-52657",
"url": "https://bugzilla.suse.com/1224722"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52657"
},
{
"cve": "CVE-2023-52658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52658"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"net/mlx5: Block entering switchdev mode with ns inconsistency\"\n\nThis reverts commit 662404b24a4c4d839839ed25e3097571f5938b9b.\nThe revert is required due to the suspicion it is not good for anything\nand cause crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52658",
"url": "https://www.suse.com/security/cve/CVE-2023-52658"
},
{
"category": "external",
"summary": "SUSE Bug 1224719 for CVE-2023-52658",
"url": "https://bugzilla.suse.com/1224719"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52658"
},
{
"cve": "CVE-2023-52660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rkisp1: Fix IRQ handling due to shared interrupts\n\nThe driver requests the interrupts as IRQF_SHARED, so the interrupt\nhandlers can be called at any time. If such a call happens while the ISP\nis powered down, the SoC will hang as the driver tries to access the\nISP registers.\n\nThis can be reproduced even without the platform sharing the IRQ line:\nEnable CONFIG_DEBUG_SHIRQ and unload the driver, and the board will\nhang.\n\nFix this by adding a new field, \u0027irqs_enabled\u0027, which is used to bail\nout from the interrupt handler when the ISP is not operational.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52660",
"url": "https://www.suse.com/security/cve/CVE-2023-52660"
},
{
"category": "external",
"summary": "SUSE Bug 1224443 for CVE-2023-52660",
"url": "https://bugzilla.suse.com/1224443"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52660"
},
{
"cve": "CVE-2023-52661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe()\n\nIf clk_get_sys(..., \"pll_d2_out0\") fails, the clk_get_sys() call must be\nundone.\n\nAdd the missing clk_put and a new \u0027put_pll_d_out0\u0027 label in the error\nhandling path, and use it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52661",
"url": "https://www.suse.com/security/cve/CVE-2023-52661"
},
{
"category": "external",
"summary": "SUSE Bug 1224445 for CVE-2023-52661",
"url": "https://bugzilla.suse.com/1224445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2023-52661"
},
{
"cve": "CVE-2023-52662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node\n\nWhen ida_alloc_max fails, resources allocated before should be freed,\nincluding *res allocated by kmalloc and ttm_resource_init.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52662",
"url": "https://www.suse.com/security/cve/CVE-2023-52662"
},
{
"category": "external",
"summary": "SUSE Bug 1224449 for CVE-2023-52662",
"url": "https://bugzilla.suse.com/1224449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52662"
},
{
"cve": "CVE-2023-52663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()\n\nDriver uses kasprintf() to initialize fw_{code,data}_bin members of\nstruct acp_dev_data, but kfree() is never called to deallocate the\nmemory, which results in a memory leak.\n\nFix the issue by switching to devm_kasprintf(). Additionally, ensure the\nallocation was successful by checking the pointer validity.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52663",
"url": "https://www.suse.com/security/cve/CVE-2023-52663"
},
{
"category": "external",
"summary": "SUSE Bug 1224630 for CVE-2023-52663",
"url": "https://bugzilla.suse.com/1224630"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52663"
},
{
"cve": "CVE-2023-52664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atlantic: eliminate double free in error handling logic\n\nDriver has a logic leak in ring data allocation/free,\nwhere aq_ring_free could be called multiple times on same ring,\nif system is under stress and got memory allocation error.\n\nRing pointer was used as an indicator of failure, but this is\nnot correct since only ring data is allocated/deallocated.\nRing itself is an array member.\n\nChanging ring allocation functions to return error code directly.\nThis simplifies error handling and eliminates aq_ring_free\non higher layer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52664",
"url": "https://www.suse.com/security/cve/CVE-2023-52664"
},
{
"category": "external",
"summary": "SUSE Bug 1224747 for CVE-2023-52664",
"url": "https://bugzilla.suse.com/1224747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52664"
},
{
"cve": "CVE-2023-52667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52667"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: fix a potential double-free in fs_any_create_groups\n\nWhen kcalloc() for ft-\u003eg succeeds but kvzalloc() for in fails,\nfs_any_create_groups() will free ft-\u003eg. However, its caller\nfs_any_create_table() will free ft-\u003eg again through calling\nmlx5e_destroy_flow_table(), which will lead to a double-free.\nFix this by setting ft-\u003eg to NULL in fs_any_create_groups().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52667",
"url": "https://www.suse.com/security/cve/CVE-2023-52667"
},
{
"category": "external",
"summary": "SUSE Bug 1224603 for CVE-2023-52667",
"url": "https://bugzilla.suse.com/1224603"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52667"
},
{
"cve": "CVE-2023-52669",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52669"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: s390/aes - Fix buffer overread in CTR mode\n\nWhen processing the last block, the s390 ctr code will always read\na whole block, even if there isn\u0027t a whole block of data left. Fix\nthis by using the actual length left and copy it into a buffer first\nfor processing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52669",
"url": "https://www.suse.com/security/cve/CVE-2023-52669"
},
{
"category": "external",
"summary": "SUSE Bug 1224637 for CVE-2023-52669",
"url": "https://bugzilla.suse.com/1224637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52669"
},
{
"cve": "CVE-2023-52670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrpmsg: virtio: Free driver_override when rpmsg_remove()\n\nFree driver_override when rpmsg_remove(), otherwise\nthe following memory leak will occur:\n\nunreferenced object 0xffff0000d55d7080 (size 128):\n comm \"kworker/u8:2\", pid 56, jiffies 4294893188 (age 214.272s)\n hex dump (first 32 bytes):\n 72 70 6d 73 67 5f 6e 73 00 00 00 00 00 00 00 00 rpmsg_ns........\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace:\n [\u003c000000009c94c9c1\u003e] __kmem_cache_alloc_node+0x1f8/0x320\n [\u003c000000002300d89b\u003e] __kmalloc_node_track_caller+0x44/0x70\n [\u003c00000000228a60c3\u003e] kstrndup+0x4c/0x90\n [\u003c0000000077158695\u003e] driver_set_override+0xd0/0x164\n [\u003c000000003e9c4ea5\u003e] rpmsg_register_device_override+0x98/0x170\n [\u003c000000001c0c89a8\u003e] rpmsg_ns_register_device+0x24/0x30\n [\u003c000000008bbf8fa2\u003e] rpmsg_probe+0x2e0/0x3ec\n [\u003c00000000e65a68df\u003e] virtio_dev_probe+0x1c0/0x280\n [\u003c00000000443331cc\u003e] really_probe+0xbc/0x2dc\n [\u003c00000000391064b1\u003e] __driver_probe_device+0x78/0xe0\n [\u003c00000000a41c9a5b\u003e] driver_probe_device+0xd8/0x160\n [\u003c000000009c3bd5df\u003e] __device_attach_driver+0xb8/0x140\n [\u003c0000000043cd7614\u003e] bus_for_each_drv+0x7c/0xd4\n [\u003c000000003b929a36\u003e] __device_attach+0x9c/0x19c\n [\u003c00000000a94e0ba8\u003e] device_initial_probe+0x14/0x20\n [\u003c000000003c999637\u003e] bus_probe_device+0xa0/0xac",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52670",
"url": "https://www.suse.com/security/cve/CVE-2023-52670"
},
{
"category": "external",
"summary": "SUSE Bug 1224696 for CVE-2023-52670",
"url": "https://bugzilla.suse.com/1224696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52670"
},
{
"cve": "CVE-2023-52671",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52671"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix hang/underflow when transitioning to ODM4:1\n\n[Why]\nUnder some circumstances, disabling an OPTC and attempting to reclaim\nits OPP(s) for a different OPTC could cause a hang/underflow due to OPPs\nnot being properly disconnected from the disabled OPTC.\n\n[How]\nEnsure that all OPPs are unassigned from an OPTC when it gets disabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52671",
"url": "https://www.suse.com/security/cve/CVE-2023-52671"
},
{
"category": "external",
"summary": "SUSE Bug 1224729 for CVE-2023-52671",
"url": "https://bugzilla.suse.com/1224729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52671"
},
{
"cve": "CVE-2023-52673",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52673"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix a debugfs null pointer error\n\n[WHY \u0026 HOW]\nCheck whether get_subvp_en() callback exists before calling it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52673",
"url": "https://www.suse.com/security/cve/CVE-2023-52673"
},
{
"category": "external",
"summary": "SUSE Bug 1224741 for CVE-2023-52673",
"url": "https://bugzilla.suse.com/1224741"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52673"
},
{
"cve": "CVE-2023-52675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/imc-pmu: Add a null pointer check in update_events_in_group()\n\nkasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52675",
"url": "https://www.suse.com/security/cve/CVE-2023-52675"
},
{
"category": "external",
"summary": "SUSE Bug 1224504 for CVE-2023-52675",
"url": "https://bugzilla.suse.com/1224504"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52675"
},
{
"cve": "CVE-2023-52676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52676"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Guard stack limits against 32bit overflow\n\nThis patch promotes the arithmetic around checking stack bounds to be\ndone in the 64-bit domain, instead of the current 32bit. The arithmetic\nimplies adding together a 64-bit register with a int offset. The\nregister was checked to be below 1\u003c\u003c29 when it was variable, but not\nwhen it was fixed. The offset either comes from an instruction (in which\ncase it is 16 bit), from another register (in which case the caller\nchecked it to be below 1\u003c\u003c29 [1]), or from the size of an argument to a\nkfunc (in which case it can be a u32 [2]). Between the register being\ninconsistently checked to be below 1\u003c\u003c29, and the offset being up to an\nu32, it appears that we were open to overflowing the `int`s which were\ncurrently used for arithmetic.\n\n[1] https://github.com/torvalds/linux/blob/815fb87b753055df2d9e50f6cd80eb10235fe3e9/kernel/bpf/verifier.c#L7494-L7498\n[2] https://github.com/torvalds/linux/blob/815fb87b753055df2d9e50f6cd80eb10235fe3e9/kernel/bpf/verifier.c#L11904",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52676",
"url": "https://www.suse.com/security/cve/CVE-2023-52676"
},
{
"category": "external",
"summary": "SUSE Bug 1224730 for CVE-2023-52676",
"url": "https://bugzilla.suse.com/1224730"
},
{
"category": "external",
"summary": "SUSE Bug 1226336 for CVE-2023-52676",
"url": "https://bugzilla.suse.com/1226336"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2023-52676"
},
{
"cve": "CVE-2023-52678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c\n\nBefore using list_first_entry, make sure to check that list is not\nempty, if list is empty return -ENODATA.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1347 kfd_create_indirect_link_prop() warn: can \u0027gpu_link\u0027 even be NULL?\ndrivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1428 kfd_add_peer_prop() warn: can \u0027iolink1\u0027 even be NULL?\ndrivers/gpu/drm/amd/amdgpu/../amdkfd/kfd_topology.c:1433 kfd_add_peer_prop() warn: can \u0027iolink2\u0027 even be NULL?",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52678",
"url": "https://www.suse.com/security/cve/CVE-2023-52678"
},
{
"category": "external",
"summary": "SUSE Bug 1224617 for CVE-2023-52678",
"url": "https://bugzilla.suse.com/1224617"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52678"
},
{
"cve": "CVE-2023-52679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52679"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nof: Fix double free in of_parse_phandle_with_args_map\n\nIn of_parse_phandle_with_args_map() the inner loop that\niterates through the map entries calls of_node_put(new)\nto free the reference acquired by the previous iteration\nof the inner loop. This assumes that the value of \"new\" is\nNULL on the first iteration of the inner loop.\n\nMake sure that this is true in all iterations of the outer\nloop by setting \"new\" to NULL after its value is assigned to \"cur\".\n\nExtend the unittest to detect the double free and add an additional\ntest case that actually triggers this path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52679",
"url": "https://www.suse.com/security/cve/CVE-2023-52679"
},
{
"category": "external",
"summary": "SUSE Bug 1224508 for CVE-2023-52679",
"url": "https://bugzilla.suse.com/1224508"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52679"
},
{
"cve": "CVE-2023-52681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefivarfs: Free s_fs_info on unmount\n\nNow that we allocate a s_fs_info struct on fs context creation, we\nshould ensure that we free it again when the superblock goes away.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52681",
"url": "https://www.suse.com/security/cve/CVE-2023-52681"
},
{
"category": "external",
"summary": "SUSE Bug 1224505 for CVE-2023-52681",
"url": "https://bugzilla.suse.com/1224505"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52681"
},
{
"cve": "CVE-2023-52683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52683"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: LPIT: Avoid u32 multiplication overflow\n\nIn lpit_update_residency() there is a possibility of overflow\nin multiplication, if tsc_khz is large enough (\u003e UINT_MAX/1000).\n\nChange multiplication to mul_u32_u32().\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52683",
"url": "https://www.suse.com/security/cve/CVE-2023-52683"
},
{
"category": "external",
"summary": "SUSE Bug 1224627 for CVE-2023-52683",
"url": "https://bugzilla.suse.com/1224627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52683"
},
{
"cve": "CVE-2023-52685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52685"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52685",
"url": "https://www.suse.com/security/cve/CVE-2023-52685"
},
{
"category": "external",
"summary": "SUSE Bug 1224728 for CVE-2023-52685",
"url": "https://bugzilla.suse.com/1224728"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52685"
},
{
"cve": "CVE-2023-52686",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52686"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/powernv: Add a null pointer check in opal_event_init()\n\nkasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52686",
"url": "https://www.suse.com/security/cve/CVE-2023-52686"
},
{
"category": "external",
"summary": "SUSE Bug 1224682 for CVE-2023-52686",
"url": "https://bugzilla.suse.com/1224682"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52686"
},
{
"cve": "CVE-2023-52687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: safexcel - Add error handling for dma_map_sg() calls\n\nMacro dma_map_sg() may return 0 on error. This patch enables\nchecks in case of the macro failure and ensures unmapping of\npreviously mapped buffers with dma_unmap_sg().\n\nFound by Linux Verification Center (linuxtesting.org) with static\nanalysis tool SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52687",
"url": "https://www.suse.com/security/cve/CVE-2023-52687"
},
{
"category": "external",
"summary": "SUSE Bug 1224501 for CVE-2023-52687",
"url": "https://bugzilla.suse.com/1224501"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52687"
},
{
"cve": "CVE-2023-52690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/powernv: Add a null pointer check to scom_debug_init_one()\n\nkasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure.\nAdd a null pointer check, and release \u0027ent\u0027 to avoid memory leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52690",
"url": "https://www.suse.com/security/cve/CVE-2023-52690"
},
{
"category": "external",
"summary": "SUSE Bug 1224611 for CVE-2023-52690",
"url": "https://bugzilla.suse.com/1224611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52690"
},
{
"cve": "CVE-2023-52691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52691"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm: fix a double-free in si_dpm_init\n\nWhen the allocation of\nadev-\u003epm.dpm.dyn_state.vddc_dependency_on_dispclk.entries fails,\namdgpu_free_extended_power_table is called to free some fields of adev.\nHowever, when the control flow returns to si_dpm_sw_init, it goes to\nlabel dpm_failed and calls si_dpm_fini, which calls\namdgpu_free_extended_power_table again and free those fields again. Thus\na double-free is triggered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52691",
"url": "https://www.suse.com/security/cve/CVE-2023-52691"
},
{
"category": "external",
"summary": "SUSE Bug 1224607 for CVE-2023-52691",
"url": "https://bugzilla.suse.com/1224607"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52691"
},
{
"cve": "CVE-2023-52693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52693"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: video: check for error while searching for backlight device parent\n\nIf acpi_get_parent() called in acpi_video_dev_register_backlight()\nfails, for example, because acpi_ut_acquire_mutex() fails inside\nacpi_get_parent), this can lead to incorrect (uninitialized)\nacpi_parent handle being passed to acpi_get_pci_dev() for detecting\nthe parent pci device.\n\nCheck acpi_get_parent() result and set parent device only in case of success.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52693",
"url": "https://www.suse.com/security/cve/CVE-2023-52693"
},
{
"category": "external",
"summary": "SUSE Bug 1224686 for CVE-2023-52693",
"url": "https://bugzilla.suse.com/1224686"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52693"
},
{
"cve": "CVE-2023-52694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: tpd12s015: Drop buggy __exit annotation for remove function\n\nWith tpd12s015_remove() marked with __exit this function is discarded\nwhen the driver is compiled as a built-in. The result is that when the\ndriver unbinds there is no cleanup done which results in resource\nleakage or worse.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52694",
"url": "https://www.suse.com/security/cve/CVE-2023-52694"
},
{
"category": "external",
"summary": "SUSE Bug 1224598 for CVE-2023-52694",
"url": "https://bugzilla.suse.com/1224598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52694"
},
{
"cve": "CVE-2023-52695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52695"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Check writeback connectors in create_validate_stream_for_sink\n\n[WHY \u0026 HOW]\nThis is to check connector type to avoid\nunhandled null pointer for writeback connectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52695",
"url": "https://www.suse.com/security/cve/CVE-2023-52695"
},
{
"category": "external",
"summary": "SUSE Bug 1224506 for CVE-2023-52695",
"url": "https://bugzilla.suse.com/1224506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52695"
},
{
"cve": "CVE-2023-52696",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52696"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/powernv: Add a null pointer check in opal_powercap_init()\n\nkasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52696",
"url": "https://www.suse.com/security/cve/CVE-2023-52696"
},
{
"category": "external",
"summary": "SUSE Bug 1224601 for CVE-2023-52696",
"url": "https://bugzilla.suse.com/1224601"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52696"
},
{
"cve": "CVE-2023-52697",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52697"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx-\u003eheadset_codec_dev = NULL\n\nsof_sdw_rt_sdca_jack_exit() are used by different codecs, and some of\nthem use the same dai name.\nFor example, rt712 and rt713 both use \"rt712-sdca-aif1\" and\nsof_sdw_rt_sdca_jack_exit().\nAs a result, sof_sdw_rt_sdca_jack_exit() will be called twice by\nmc_dailink_exit_loop(). Set ctx-\u003eheadset_codec_dev = NULL; after\nput_device(ctx-\u003eheadset_codec_dev); to avoid ctx-\u003eheadset_codec_dev\nbeing put twice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52697",
"url": "https://www.suse.com/security/cve/CVE-2023-52697"
},
{
"category": "external",
"summary": "SUSE Bug 1224596 for CVE-2023-52697",
"url": "https://bugzilla.suse.com/1224596"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52697"
},
{
"cve": "CVE-2023-52882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52882"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change\n\nWhile PLL CPUX clock rate change when CPU is running from it works in\nvast majority of cases, now and then it causes instability. This leads\nto system crashes and other undefined behaviour. After a lot of testing\n(30+ hours) while also doing a lot of frequency switches, we can\u0027t\nobserve any instability issues anymore when doing reparenting to stable\nclock like 24 MHz oscillator.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52882",
"url": "https://www.suse.com/security/cve/CVE-2023-52882"
},
{
"category": "external",
"summary": "SUSE Bug 1225692 for CVE-2023-52882",
"url": "https://bugzilla.suse.com/1225692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52882"
},
{
"cve": "CVE-2023-52923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: adapt set backend to use GC transaction API\n\nUse the GC transaction API to replace the old and buggy gc API and the\nbusy mark approach.\n\nNo set elements are removed from async garbage collection anymore,\ninstead the _DEAD bit is set on so the set element is not visible from\nlookup path anymore. Async GC enqueues transaction work that might be\naborted and retried later.\n\nrbtree and pipapo set backends does not set on the _DEAD bit from the\nsync GC path since this runs in control plane path where mutex is held.\nIn this case, set elements are deactivated, removed and then released\nvia RCU callback, sync GC never fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52923",
"url": "https://www.suse.com/security/cve/CVE-2023-52923"
},
{
"category": "external",
"summary": "SUSE Bug 1236104 for CVE-2023-52923",
"url": "https://bugzilla.suse.com/1236104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-52923"
},
{
"cve": "CVE-2024-22099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-22099"
}
],
"notes": [
{
"category": "general",
"text": "NULL Pointer Dereference vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (net, bluetooth modules) allows Overflow Buffers. This vulnerability is associated with program files /net/bluetooth/rfcomm/core.C.\n\nThis issue affects Linux kernel: v2.6.12-rc2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-22099",
"url": "https://www.suse.com/security/cve/CVE-2024-22099"
},
{
"category": "external",
"summary": "SUSE Bug 1219170 for CVE-2024-22099",
"url": "https://bugzilla.suse.com/1219170"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-22099"
},
{
"cve": "CVE-2024-26611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix usage of multi-buffer BPF helpers for ZC XDP\n\nCurrently when packet is shrunk via bpf_xdp_adjust_tail() and memory\ntype is set to MEM_TYPE_XSK_BUFF_POOL, null ptr dereference happens:\n\n[1136314.192256] BUG: kernel NULL pointer dereference, address:\n0000000000000034\n[1136314.203943] #PF: supervisor read access in kernel mode\n[1136314.213768] #PF: error_code(0x0000) - not-present page\n[1136314.223550] PGD 0 P4D 0\n[1136314.230684] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[1136314.239621] CPU: 8 PID: 54203 Comm: xdpsock Not tainted 6.6.0+ #257\n[1136314.250469] Hardware name: Intel Corporation S2600WFT/S2600WFT,\nBIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[1136314.265615] RIP: 0010:__xdp_return+0x6c/0x210\n[1136314.274653] Code: ad 00 48 8b 47 08 49 89 f8 a8 01 0f 85 9b 01 00 00 0f 1f 44 00 00 f0 41 ff 48 34 75 32 4c 89 c7 e9 79 cd 80 ff 83 fe 03 75 17 \u003cf6\u003e 41 34 01 0f 85 02 01 00 00 48 89 cf e9 22 cc 1e 00 e9 3d d2 86\n[1136314.302907] RSP: 0018:ffffc900089f8db0 EFLAGS: 00010246\n[1136314.312967] RAX: ffffc9003168aed0 RBX: ffff8881c3300000 RCX:\n0000000000000000\n[1136314.324953] RDX: 0000000000000000 RSI: 0000000000000003 RDI:\nffffc9003168c000\n[1136314.336929] RBP: 0000000000000ae0 R08: 0000000000000002 R09:\n0000000000010000\n[1136314.348844] R10: ffffc9000e495000 R11: 0000000000000040 R12:\n0000000000000001\n[1136314.360706] R13: 0000000000000524 R14: ffffc9003168aec0 R15:\n0000000000000001\n[1136314.373298] FS: 00007f8df8bbcb80(0000) GS:ffff8897e0e00000(0000)\nknlGS:0000000000000000\n[1136314.386105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[1136314.396532] CR2: 0000000000000034 CR3: 00000001aa912002 CR4:\n00000000007706f0\n[1136314.408377] DR0: 0000000000000000 DR1: 0000000000000000 DR2:\n0000000000000000\n[1136314.420173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7:\n0000000000000400\n[1136314.431890] PKRU: 55555554\n[1136314.439143] Call Trace:\n[1136314.446058] \u003cIRQ\u003e\n[1136314.452465] ? __die+0x20/0x70\n[1136314.459881] ? page_fault_oops+0x15b/0x440\n[1136314.468305] ? exc_page_fault+0x6a/0x150\n[1136314.476491] ? asm_exc_page_fault+0x22/0x30\n[1136314.484927] ? __xdp_return+0x6c/0x210\n[1136314.492863] bpf_xdp_adjust_tail+0x155/0x1d0\n[1136314.501269] bpf_prog_ccc47ae29d3b6570_xdp_sock_prog+0x15/0x60\n[1136314.511263] ice_clean_rx_irq_zc+0x206/0xc60 [ice]\n[1136314.520222] ? ice_xmit_zc+0x6e/0x150 [ice]\n[1136314.528506] ice_napi_poll+0x467/0x670 [ice]\n[1136314.536858] ? ttwu_do_activate.constprop.0+0x8f/0x1a0\n[1136314.546010] __napi_poll+0x29/0x1b0\n[1136314.553462] net_rx_action+0x133/0x270\n[1136314.561619] __do_softirq+0xbe/0x28e\n[1136314.569303] do_softirq+0x3f/0x60\n\nThis comes from __xdp_return() call with xdp_buff argument passed as\nNULL which is supposed to be consumed by xsk_buff_free() call.\n\nTo address this properly, in ZC case, a node that represents the frag\nbeing removed has to be pulled out of xskb_list. Introduce\nappropriate xsk helpers to do such node operation and use them\naccordingly within bpf_xdp_adjust_tail().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26611",
"url": "https://www.suse.com/security/cve/CVE-2024-26611"
},
{
"category": "external",
"summary": "SUSE Bug 1221303 for CVE-2024-26611",
"url": "https://bugzilla.suse.com/1221303"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26611"
},
{
"cve": "CVE-2024-26742",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26742"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: smartpqi: Fix disable_managed_interrupts\n\nCorrect blk-mq registration issue with module parameter\ndisable_managed_interrupts enabled.\n\nWhen we turn off the default PCI_IRQ_AFFINITY flag, the driver needs to\nregister with blk-mq using blk_mq_map_queues(). The driver is currently\ncalling blk_mq_pci_map_queues() which results in a stack trace and possibly\nundefined behavior.\n\nStack Trace:\n[ 7.860089] scsi host2: smartpqi\n[ 7.871934] WARNING: CPU: 0 PID: 238 at block/blk-mq-pci.c:52 blk_mq_pci_map_queues+0xca/0xd0\n[ 7.889231] Modules linked in: sd_mod t10_pi sg uas smartpqi(+) crc32c_intel scsi_transport_sas usb_storage dm_mirror dm_region_hash dm_log dm_mod ipmi_devintf ipmi_msghandler fuse\n[ 7.924755] CPU: 0 PID: 238 Comm: kworker/0:3 Not tainted 4.18.0-372.88.1.el8_6_smartpqi_test.x86_64 #1\n[ 7.944336] Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380 Gen10, BIOS U30 03/08/2022\n[ 7.963026] Workqueue: events work_for_cpu_fn\n[ 7.978275] RIP: 0010:blk_mq_pci_map_queues+0xca/0xd0\n[ 7.978278] Code: 48 89 de 89 c7 e8 f6 0f 4f 00 3b 05 c4 b7 8e 01 72 e1 5b 31 c0 5d 41 5c 41 5d 41 5e 41 5f e9 7d df 73 00 31 c0 e9 76 df 73 00 \u003c0f\u003e 0b eb bc 90 90 0f 1f 44 00 00 41 57 49 89 ff 41 56 41 55 41 54\n[ 7.978280] RSP: 0018:ffffa95fc3707d50 EFLAGS: 00010216\n[ 7.978283] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 0000000000000010\n[ 7.978284] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffff9190c32d4310\n[ 7.978286] RBP: 0000000000000000 R08: ffffa95fc3707d38 R09: ffff91929b81ac00\n[ 7.978287] R10: 0000000000000001 R11: ffffa95fc3707ac0 R12: 0000000000000000\n[ 7.978288] R13: ffff9190c32d4000 R14: 00000000ffffffff R15: ffff9190c4c950a8\n[ 7.978290] FS: 0000000000000000(0000) GS:ffff9193efc00000(0000) knlGS:0000000000000000\n[ 7.978292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 8.172814] CR2: 000055d11166c000 CR3: 00000002dae10002 CR4: 00000000007706f0\n[ 8.172816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 8.172817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 8.172818] PKRU: 55555554\n[ 8.172819] Call Trace:\n[ 8.172823] blk_mq_alloc_tag_set+0x12e/0x310\n[ 8.264339] scsi_add_host_with_dma.cold.9+0x30/0x245\n[ 8.279302] pqi_ctrl_init+0xacf/0xc8e [smartpqi]\n[ 8.294085] ? pqi_pci_probe+0x480/0x4c8 [smartpqi]\n[ 8.309015] pqi_pci_probe+0x480/0x4c8 [smartpqi]\n[ 8.323286] local_pci_probe+0x42/0x80\n[ 8.337855] work_for_cpu_fn+0x16/0x20\n[ 8.351193] process_one_work+0x1a7/0x360\n[ 8.364462] ? create_worker+0x1a0/0x1a0\n[ 8.379252] worker_thread+0x1ce/0x390\n[ 8.392623] ? create_worker+0x1a0/0x1a0\n[ 8.406295] kthread+0x10a/0x120\n[ 8.418428] ? set_kthread_struct+0x50/0x50\n[ 8.431532] ret_from_fork+0x1f/0x40\n[ 8.444137] ---[ end trace 1bf0173d39354506 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26742",
"url": "https://www.suse.com/security/cve/CVE-2024-26742"
},
{
"category": "external",
"summary": "SUSE Bug 1222608 for CVE-2024-26742",
"url": "https://bugzilla.suse.com/1222608"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26742"
},
{
"cve": "CVE-2024-26761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26761"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window\n\nThe Linux CXL subsystem is built on the assumption that HPA == SPA.\nThat is, the host physical address (HPA) the HDM decoder registers are\nprogrammed with are system physical addresses (SPA).\n\nDuring HDM decoder setup, the DVSEC CXL range registers (cxl-3.1,\n8.1.3.8) are checked if the memory is enabled and the CXL range is in\na HPA window that is described in a CFMWS structure of the CXL host\nbridge (cxl-3.1, 9.18.1.3).\n\nNow, if the HPA is not an SPA, the CXL range does not match a CFMWS\nwindow and the CXL memory range will be disabled then. The HDM decoder\nstops working which causes system memory being disabled and further a\nsystem hang during HDM decoder initialization, typically when a CXL\nenabled kernel boots.\n\nPrevent a system hang and do not disable the HDM decoder if the\ndecoder\u0027s CXL range is not found in a CFMWS window.\n\nNote the change only fixes a hardware hang, but does not implement\nHPA/SPA translation. Support for this can be added in a follow on\npatch series.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26761",
"url": "https://www.suse.com/security/cve/CVE-2024-26761"
},
{
"category": "external",
"summary": "SUSE Bug 1230375 for CVE-2024-26761",
"url": "https://bugzilla.suse.com/1230375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26761"
},
{
"cve": "CVE-2024-26764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26764"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio\n\nIf kiocb_set_cancel_fn() is called for I/O submitted via io_uring, the\nfollowing kernel warning appears:\n\nWARNING: CPU: 3 PID: 368 at fs/aio.c:598 kiocb_set_cancel_fn+0x9c/0xa8\nCall trace:\n kiocb_set_cancel_fn+0x9c/0xa8\n ffs_epfile_read_iter+0x144/0x1d0\n io_read+0x19c/0x498\n io_issue_sqe+0x118/0x27c\n io_submit_sqes+0x25c/0x5fc\n __arm64_sys_io_uring_enter+0x104/0xab0\n invoke_syscall+0x58/0x11c\n el0_svc_common+0xb4/0xf4\n do_el0_svc+0x2c/0xb0\n el0_svc+0x2c/0xa4\n el0t_64_sync_handler+0x68/0xb4\n el0t_64_sync+0x1a4/0x1a8\n\nFix this by setting the IOCB_AIO_RW flag for read and write I/O that is\nsubmitted by libaio.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26764",
"url": "https://www.suse.com/security/cve/CVE-2024-26764"
},
{
"category": "external",
"summary": "SUSE Bug 1222721 for CVE-2024-26764",
"url": "https://bugzilla.suse.com/1222721"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26764"
},
{
"cve": "CVE-2024-26786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26786"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Fix iopt_access_list_id overwrite bug\n\nSyzkaller reported the following WARN_ON:\n WARNING: CPU: 1 PID: 4738 at drivers/iommu/iommufd/io_pagetable.c:1360\n\n Call Trace:\n iommufd_access_change_ioas+0x2fe/0x4e0\n iommufd_access_destroy_object+0x50/0xb0\n iommufd_object_remove+0x2a3/0x490\n iommufd_object_destroy_user\n iommufd_access_destroy+0x71/0xb0\n iommufd_test_staccess_release+0x89/0xd0\n __fput+0x272/0xb50\n __fput_sync+0x4b/0x60\n __do_sys_close\n __se_sys_close\n __x64_sys_close+0x8b/0x110\n do_syscall_x64\n\nThe mismatch between the access pointer in the list and the passed-in\npointer is resulting from an overwrite of access-\u003eiopt_access_list_id, in\niopt_add_access(). Called from iommufd_access_change_ioas() when\nxa_alloc() succeeds but iopt_calculate_iova_alignment() fails.\n\nAdd a new_id in iopt_add_access() and only update iopt_access_list_id when\nreturning successfully.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26786",
"url": "https://www.suse.com/security/cve/CVE-2024-26786"
},
{
"category": "external",
"summary": "SUSE Bug 1222780 for CVE-2024-26786",
"url": "https://bugzilla.suse.com/1222780"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26786"
},
{
"cve": "CVE-2024-26794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26794"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26794",
"url": "https://www.suse.com/security/cve/CVE-2024-26794"
},
{
"category": "external",
"summary": "SUSE Bug 1222426 for CVE-2024-26794",
"url": "https://bugzilla.suse.com/1222426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26794"
},
{
"cve": "CVE-2024-26846",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26846"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-fc: do not wait in vain when unloading module\n\nThe module exit path has race between deleting all controllers and\nfreeing \u0027left over IDs\u0027. To prevent double free a synchronization\nbetween nvme_delete_ctrl and ida_destroy has been added by the initial\ncommit.\n\nThere is some logic around trying to prevent from hanging forever in\nwait_for_completion, though it does not handling all cases. E.g.\nblktests is able to reproduce the situation where the module unload\nhangs forever.\n\nIf we completely rely on the cleanup code executed from the\nnvme_delete_ctrl path, all IDs will be freed eventually. This makes\ncalling ida_destroy unnecessary. We only have to ensure that all\nnvme_delete_ctrl code has been executed before we leave\nnvme_fc_exit_module. This is done by flushing the nvme_delete_wq\nworkqueue.\n\nWhile at it, remove the unused nvme_fc_wq workqueue too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26846",
"url": "https://www.suse.com/security/cve/CVE-2024-26846"
},
{
"category": "external",
"summary": "SUSE Bug 1223023 for CVE-2024-26846",
"url": "https://bugzilla.suse.com/1223023"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26846"
},
{
"cve": "CVE-2024-26853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26853"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigc: avoid returning frame twice in XDP_REDIRECT\n\nWhen a frame can not be transmitted in XDP_REDIRECT\n(e.g. due to a full queue), it is necessary to free\nit by calling xdp_return_frame_rx_napi.\n\nHowever, this is the responsibility of the caller of\nthe ndo_xdp_xmit (see for example bq_xmit_all in\nkernel/bpf/devmap.c) and thus calling it inside\nigc_xdp_xmit (which is the ndo_xdp_xmit of the igc\ndriver) as well will lead to memory corruption.\n\nIn fact, bq_xmit_all expects that it can return all\nframes after the last successfully transmitted one.\nTherefore, break for the first not transmitted frame,\nbut do not call xdp_return_frame_rx_napi in igc_xdp_xmit.\nThis is equally implemented in other Intel drivers\nsuch as the igb.\n\nThere are two alternatives to this that were rejected:\n1. Return num_frames as all the frames would have been\n transmitted and release them inside igc_xdp_xmit.\n While it might work technically, it is not what\n the return value is meant to represent (i.e. the\n number of SUCCESSFULLY transmitted packets).\n2. Rework kernel/bpf/devmap.c and all drivers to\n support non-consecutively dropped packets.\n Besides being complex, it likely has a negative\n performance impact without a significant gain\n since it is anyway unlikely that the next frame\n can be transmitted if the previous one was dropped.\n\nThe memory corruption can be reproduced with\nthe following script which leads to a kernel panic\nafter a few seconds. It basically generates more\ntraffic than a i225 NIC can transmit and pushes it\nvia XDP_REDIRECT from a virtual interface to the\nphysical interface where frames get dropped.\n\n #!/bin/bash\n INTERFACE=enp4s0\n INTERFACE_IDX=`cat /sys/class/net/$INTERFACE/ifindex`\n\n sudo ip link add dev veth1 type veth peer name veth2\n sudo ip link set up $INTERFACE\n sudo ip link set up veth1\n sudo ip link set up veth2\n\n cat \u003c\u003c EOF \u003e redirect.bpf.c\n\n SEC(\"prog\")\n int redirect(struct xdp_md *ctx)\n {\n return bpf_redirect($INTERFACE_IDX, 0);\n }\n\n char _license[] SEC(\"license\") = \"GPL\";\n EOF\n clang -O2 -g -Wall -target bpf -c redirect.bpf.c -o redirect.bpf.o\n sudo ip link set veth2 xdp obj redirect.bpf.o\n\n cat \u003c\u003c EOF \u003e pass.bpf.c\n\n SEC(\"prog\")\n int pass(struct xdp_md *ctx)\n {\n return XDP_PASS;\n }\n\n char _license[] SEC(\"license\") = \"GPL\";\n EOF\n clang -O2 -g -Wall -target bpf -c pass.bpf.c -o pass.bpf.o\n sudo ip link set $INTERFACE xdp obj pass.bpf.o\n\n cat \u003c\u003c EOF \u003e trafgen.cfg\n\n {\n /* Ethernet Header */\n 0xe8, 0x6a, 0x64, 0x41, 0xbf, 0x46,\n 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,\n const16(ETH_P_IP),\n\n /* IPv4 Header */\n 0b01000101, 0, # IPv4 version, IHL, TOS\n const16(1028), # IPv4 total length (UDP length + 20 bytes (IP header))\n const16(2), # IPv4 ident\n 0b01000000, 0, # IPv4 flags, fragmentation off\n 64, # IPv4 TTL\n 17, # Protocol UDP\n csumip(14, 33), # IPv4 checksum\n\n /* UDP Header */\n 10, 0, 1, 1, # IP Src - adapt as needed\n 10, 0, 1, 2, # IP Dest - adapt as needed\n const16(6666), # UDP Src Port\n const16(6666), # UDP Dest Port\n const16(1008), # UDP length (UDP header 8 bytes + payload length)\n csumudp(14, 34), # UDP checksum\n\n /* Payload */\n fill(\u0027W\u0027, 1000),\n }\n EOF\n\n sudo trafgen -i trafgen.cfg -b3000MB -o veth1 --cpp",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26853",
"url": "https://www.suse.com/security/cve/CVE-2024-26853"
},
{
"category": "external",
"summary": "SUSE Bug 1223061 for CVE-2024-26853",
"url": "https://bugzilla.suse.com/1223061"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26853"
},
{
"cve": "CVE-2024-26854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix uninitialized dplls mutex usage\n\nThe pf-\u003edplls.lock mutex is initialized too late, after its first use.\nMove it to the top of ice_dpll_init.\nNote that the \"err_exit\" error path destroys the mutex. And the mutex is\nthe last thing destroyed in ice_dpll_deinit.\nThis fixes the following warning with CONFIG_DEBUG_MUTEXES:\n\n ice 0000:10:00.0: The DDP package was successfully loaded: ICE OS Default Package version 1.3.36.0\n ice 0000:10:00.0: 252.048 Gb/s available PCIe bandwidth (16.0 GT/s PCIe x16 link)\n ice 0000:10:00.0: PTP init successful\n ------------[ cut here ]------------\n DEBUG_LOCKS_WARN_ON(lock-\u003emagic != lock)\n WARNING: CPU: 0 PID: 410 at kernel/locking/mutex.c:587 __mutex_lock+0x773/0xd40\n Modules linked in: crct10dif_pclmul crc32_pclmul crc32c_intel polyval_clmulni polyval_generic ice(+) nvme nvme_c\u003e\n CPU: 0 PID: 410 Comm: kworker/0:4 Not tainted 6.8.0-rc5+ #3\n Hardware name: HPE ProLiant DL110 Gen10 Plus/ProLiant DL110 Gen10 Plus, BIOS U56 10/19/2023\n Workqueue: events work_for_cpu_fn\n RIP: 0010:__mutex_lock+0x773/0xd40\n Code: c0 0f 84 1d f9 ff ff 44 8b 35 0d 9c 69 01 45 85 f6 0f 85 0d f9 ff ff 48 c7 c6 12 a2 a9 85 48 c7 c7 12 f1 a\u003e\n RSP: 0018:ff7eb1a3417a7ae0 EFLAGS: 00010286\n RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000000000\n RDX: 0000000000000002 RSI: ffffffff85ac2bff RDI: 00000000ffffffff\n RBP: ff7eb1a3417a7b80 R08: 0000000000000000 R09: 00000000ffffbfff\n R10: ff7eb1a3417a7978 R11: ff32b80f7fd2e568 R12: 0000000000000000\n R13: 0000000000000000 R14: 0000000000000000 R15: ff32b7f02c50e0d8\n FS: 0000000000000000(0000) GS:ff32b80efe800000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 000055b5852cc000 CR3: 000000003c43a004 CR4: 0000000000771ef0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n PKRU: 55555554\n Call Trace:\n \u003cTASK\u003e\n ? __warn+0x84/0x170\n ? __mutex_lock+0x773/0xd40\n ? report_bug+0x1c7/0x1d0\n ? prb_read_valid+0x1b/0x30\n ? handle_bug+0x42/0x70\n ? exc_invalid_op+0x18/0x70\n ? asm_exc_invalid_op+0x1a/0x20\n ? __mutex_lock+0x773/0xd40\n ? rcu_is_watching+0x11/0x50\n ? __kmalloc_node_track_caller+0x346/0x490\n ? ice_dpll_lock_status_get+0x28/0x50 [ice]\n ? __pfx_ice_dpll_lock_status_get+0x10/0x10 [ice]\n ? ice_dpll_lock_status_get+0x28/0x50 [ice]\n ice_dpll_lock_status_get+0x28/0x50 [ice]\n dpll_device_get_one+0x14f/0x2e0\n dpll_device_event_send+0x7d/0x150\n dpll_device_register+0x124/0x180\n ice_dpll_init_dpll+0x7b/0xd0 [ice]\n ice_dpll_init+0x224/0xa40 [ice]\n ? _dev_info+0x70/0x90\n ice_load+0x468/0x690 [ice]\n ice_probe+0x75b/0xa10 [ice]\n ? _raw_spin_unlock_irqrestore+0x4f/0x80\n ? process_one_work+0x1a3/0x500\n local_pci_probe+0x47/0xa0\n work_for_cpu_fn+0x17/0x30\n process_one_work+0x20d/0x500\n worker_thread+0x1df/0x3e0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x103/0x140\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x31/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n irq event stamp: 125197\n hardirqs last enabled at (125197): [\u003cffffffff8416409d\u003e] finish_task_switch.isra.0+0x12d/0x3d0\n hardirqs last disabled at (125196): [\u003cffffffff85134044\u003e] __schedule+0xea4/0x19f0\n softirqs last enabled at (105334): [\u003cffffffff84e1e65a\u003e] napi_get_frags_check+0x1a/0x60\n softirqs last disabled at (105332): [\u003cffffffff84e1e65a\u003e] napi_get_frags_check+0x1a/0x60\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26854",
"url": "https://www.suse.com/security/cve/CVE-2024-26854"
},
{
"category": "external",
"summary": "SUSE Bug 1223039 for CVE-2024-26854",
"url": "https://bugzilla.suse.com/1223039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26854"
},
{
"cve": "CVE-2024-26855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26855"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()\n\nThe function ice_bridge_setlink() may encounter a NULL pointer dereference\nif nlmsg_find_attr() returns NULL and br_spec is dereferenced subsequently\nin nla_for_each_nested(). To address this issue, add a check to ensure that\nbr_spec is not NULL before proceeding with the nested attribute iteration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26855",
"url": "https://www.suse.com/security/cve/CVE-2024-26855"
},
{
"category": "external",
"summary": "SUSE Bug 1223051 for CVE-2024-26855",
"url": "https://bugzilla.suse.com/1223051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26855"
},
{
"cve": "CVE-2024-26856",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26856"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sparx5: Fix use after free inside sparx5_del_mact_entry\n\nBased on the static analyzis of the code it looks like when an entry\nfrom the MAC table was removed, the entry was still used after being\nfreed. More precise the vid of the mac_entry was used after calling\ndevm_kfree on the mac_entry.\nThe fix consists in first using the vid of the mac_entry to delete the\nentry from the HW and after that to free it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26856",
"url": "https://www.suse.com/security/cve/CVE-2024-26856"
},
{
"category": "external",
"summary": "SUSE Bug 1223052 for CVE-2024-26856",
"url": "https://bugzilla.suse.com/1223052"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26856"
},
{
"cve": "CVE-2024-26857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: make sure to pull inner header in geneve_rx()\n\nsyzbot triggered a bug in geneve_rx() [1]\n\nIssue is similar to the one I fixed in commit 8d975c15c0cd\n(\"ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()\")\n\nWe have to save skb-\u003enetwork_header in a temporary variable\nin order to be able to recompute the network_header pointer\nafter a pskb_inet_may_pull() call.\n\npskb_inet_may_pull() makes sure the needed headers are in skb-\u003ehead.\n\n[1]\nBUG: KMSAN: uninit-value in IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n BUG: KMSAN: uninit-value in geneve_rx drivers/net/geneve.c:279 [inline]\n BUG: KMSAN: uninit-value in geneve_udp_encap_recv+0x36f9/0x3c10 drivers/net/geneve.c:391\n IP_ECN_decapsulate include/net/inet_ecn.h:302 [inline]\n geneve_rx drivers/net/geneve.c:279 [inline]\n geneve_udp_encap_recv+0x36f9/0x3c10 drivers/net/geneve.c:391\n udp_queue_rcv_one_skb+0x1d39/0x1f20 net/ipv4/udp.c:2108\n udp_queue_rcv_skb+0x6ae/0x6e0 net/ipv4/udp.c:2186\n udp_unicast_rcv_skb+0x184/0x4b0 net/ipv4/udp.c:2346\n __udp4_lib_rcv+0x1c6b/0x3010 net/ipv4/udp.c:2422\n udp_rcv+0x7d/0xa0 net/ipv4/udp.c:2604\n ip_protocol_deliver_rcu+0x264/0x1300 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x2b8/0x440 net/ipv4/ip_input.c:233\n NF_HOOK include/linux/netfilter.h:314 [inline]\n ip_local_deliver+0x21f/0x490 net/ipv4/ip_input.c:254\n dst_input include/net/dst.h:461 [inline]\n ip_rcv_finish net/ipv4/ip_input.c:449 [inline]\n NF_HOOK include/linux/netfilter.h:314 [inline]\n ip_rcv+0x46f/0x760 net/ipv4/ip_input.c:569\n __netif_receive_skb_one_core net/core/dev.c:5534 [inline]\n __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5648\n process_backlog+0x480/0x8b0 net/core/dev.c:5976\n __napi_poll+0xe3/0x980 net/core/dev.c:6576\n napi_poll net/core/dev.c:6645 [inline]\n net_rx_action+0x8b8/0x1870 net/core/dev.c:6778\n __do_softirq+0x1b7/0x7c5 kernel/softirq.c:553\n do_softirq+0x9a/0xf0 kernel/softirq.c:454\n __local_bh_enable_ip+0x9b/0xa0 kernel/softirq.c:381\n local_bh_enable include/linux/bottom_half.h:33 [inline]\n rcu_read_unlock_bh include/linux/rcupdate.h:820 [inline]\n __dev_queue_xmit+0x2768/0x51c0 net/core/dev.c:4378\n dev_queue_xmit include/linux/netdevice.h:3171 [inline]\n packet_xmit+0x9c/0x6b0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3081 [inline]\n packet_sendmsg+0x8aef/0x9f10 net/packet/af_packet.c:3113\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n __sys_sendto+0x735/0xa10 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:3819 [inline]\n slab_alloc_node mm/slub.c:3860 [inline]\n kmem_cache_alloc_node+0x5cb/0xbc0 mm/slub.c:3903\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x352/0x790 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1296 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6394\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2783\n packet_alloc_skb net/packet/af_packet.c:2930 [inline]\n packet_snd net/packet/af_packet.c:3024 [inline]\n packet_sendmsg+0x70c2/0x9f10 net/packet/af_packet.c:3113\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n __sys_sendto+0x735/0xa10 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26857",
"url": "https://www.suse.com/security/cve/CVE-2024-26857"
},
{
"category": "external",
"summary": "SUSE Bug 1223058 for CVE-2024-26857",
"url": "https://bugzilla.suse.com/1223058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26857"
},
{
"cve": "CVE-2024-26858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26858"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map\n\nJust simply reordering the functions mlx5e_ptp_metadata_map_put and\nmlx5e_ptpsq_track_metadata in the mlx5e_txwqe_complete context is not good\nenough since both the compiler and CPU are free to reorder these two\nfunctions. If reordering does occur, the issue that was supposedly fixed by\n7e3f3ba97e6c (\"net/mlx5e: Track xmit submission to PTP WQ after populating\nmetadata map\") will be seen. This will lead to NULL pointer dereferences in\nmlx5e_ptpsq_mark_ts_cqes_undelivered in the NAPI polling context due to the\ntracking list being populated before the metadata map.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26858",
"url": "https://www.suse.com/security/cve/CVE-2024-26858"
},
{
"category": "external",
"summary": "SUSE Bug 1223020 for CVE-2024-26858",
"url": "https://bugzilla.suse.com/1223020"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26858"
},
{
"cve": "CVE-2024-26861",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26861"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: receive: annotate data-race around receiving_counter.counter\n\nSyzkaller with KCSAN identified a data-race issue when accessing\nkeypair-\u003ereceiving_counter.counter. Use READ_ONCE() and WRITE_ONCE()\nannotations to mark the data race as intentional.\n\n BUG: KCSAN: data-race in wg_packet_decrypt_worker / wg_packet_rx_poll\n\n write to 0xffff888107765888 of 8 bytes by interrupt on cpu 0:\n counter_validate drivers/net/wireguard/receive.c:321 [inline]\n wg_packet_rx_poll+0x3ac/0xf00 drivers/net/wireguard/receive.c:461\n __napi_poll+0x60/0x3b0 net/core/dev.c:6536\n napi_poll net/core/dev.c:6605 [inline]\n net_rx_action+0x32b/0x750 net/core/dev.c:6738\n __do_softirq+0xc4/0x279 kernel/softirq.c:553\n do_softirq+0x5e/0x90 kernel/softirq.c:454\n __local_bh_enable_ip+0x64/0x70 kernel/softirq.c:381\n __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline]\n _raw_spin_unlock_bh+0x36/0x40 kernel/locking/spinlock.c:210\n spin_unlock_bh include/linux/spinlock.h:396 [inline]\n ptr_ring_consume_bh include/linux/ptr_ring.h:367 [inline]\n wg_packet_decrypt_worker+0x6c5/0x700 drivers/net/wireguard/receive.c:499\n process_one_work kernel/workqueue.c:2633 [inline]\n ...\n\n read to 0xffff888107765888 of 8 bytes by task 3196 on cpu 1:\n decrypt_packet drivers/net/wireguard/receive.c:252 [inline]\n wg_packet_decrypt_worker+0x220/0x700 drivers/net/wireguard/receive.c:501\n process_one_work kernel/workqueue.c:2633 [inline]\n process_scheduled_works+0x5b8/0xa30 kernel/workqueue.c:2706\n worker_thread+0x525/0x730 kernel/workqueue.c:2787\n ...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26861",
"url": "https://www.suse.com/security/cve/CVE-2024-26861"
},
{
"category": "external",
"summary": "SUSE Bug 1223076 for CVE-2024-26861",
"url": "https://bugzilla.suse.com/1223076"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26861"
},
{
"cve": "CVE-2024-26866",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26866"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: lpspi: Avoid potential use-after-free in probe()\n\nfsl_lpspi_probe() is allocating/disposing memory manually with\nspi_alloc_host()/spi_alloc_target(), but uses\ndevm_spi_register_controller(). In case of error after the latter call the\nmemory will be explicitly freed in the probe function by\nspi_controller_put() call, but used afterwards by \"devm\" management outside\nprobe() (spi_unregister_controller() \u003c- devm_spi_unregister() below).\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000070\n...\nCall trace:\n kernfs_find_ns\n kernfs_find_and_get_ns\n sysfs_remove_group\n sysfs_remove_groups\n device_remove_attrs\n device_del\n spi_unregister_controller\n devm_spi_unregister\n release_nodes\n devres_release_all\n really_probe\n driver_probe_device\n __device_attach_driver\n bus_for_each_drv\n __device_attach\n device_initial_probe\n bus_probe_device\n deferred_probe_work_func\n process_one_work\n worker_thread\n kthread\n ret_from_fork",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26866",
"url": "https://www.suse.com/security/cve/CVE-2024-26866"
},
{
"category": "external",
"summary": "SUSE Bug 1223024 for CVE-2024-26866",
"url": "https://bugzilla.suse.com/1223024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26866"
},
{
"cve": "CVE-2024-26868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26868"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: fix panic when nfs4_ff_layout_prepare_ds() fails\n\nWe\u0027ve been seeing the following panic in production\n\nBUG: kernel NULL pointer dereference, address: 0000000000000065\nPGD 2f485f067 P4D 2f485f067 PUD 2cc5d8067 PMD 0\nRIP: 0010:ff_layout_cancel_io+0x3a/0x90 [nfs_layout_flexfiles]\nCall Trace:\n \u003cTASK\u003e\n ? __die+0x78/0xc0\n ? page_fault_oops+0x286/0x380\n ? __rpc_execute+0x2c3/0x470 [sunrpc]\n ? rpc_new_task+0x42/0x1c0 [sunrpc]\n ? exc_page_fault+0x5d/0x110\n ? asm_exc_page_fault+0x22/0x30\n ? ff_layout_free_layoutreturn+0x110/0x110 [nfs_layout_flexfiles]\n ? ff_layout_cancel_io+0x3a/0x90 [nfs_layout_flexfiles]\n ? ff_layout_cancel_io+0x6f/0x90 [nfs_layout_flexfiles]\n pnfs_mark_matching_lsegs_return+0x1b0/0x360 [nfsv4]\n pnfs_error_mark_layout_for_return+0x9e/0x110 [nfsv4]\n ? ff_layout_send_layouterror+0x50/0x160 [nfs_layout_flexfiles]\n nfs4_ff_layout_prepare_ds+0x11f/0x290 [nfs_layout_flexfiles]\n ff_layout_pg_init_write+0xf0/0x1f0 [nfs_layout_flexfiles]\n __nfs_pageio_add_request+0x154/0x6c0 [nfs]\n nfs_pageio_add_request+0x26b/0x380 [nfs]\n nfs_do_writepage+0x111/0x1e0 [nfs]\n nfs_writepages_callback+0xf/0x30 [nfs]\n write_cache_pages+0x17f/0x380\n ? nfs_pageio_init_write+0x50/0x50 [nfs]\n ? nfs_writepages+0x6d/0x210 [nfs]\n ? nfs_writepages+0x6d/0x210 [nfs]\n nfs_writepages+0x125/0x210 [nfs]\n do_writepages+0x67/0x220\n ? generic_perform_write+0x14b/0x210\n filemap_fdatawrite_wbc+0x5b/0x80\n file_write_and_wait_range+0x6d/0xc0\n nfs_file_fsync+0x81/0x170 [nfs]\n ? nfs_file_mmap+0x60/0x60 [nfs]\n __x64_sys_fsync+0x53/0x90\n do_syscall_64+0x3d/0x90\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nInspecting the core with drgn I was able to pull this\n\n \u003e\u003e\u003e prog.crashed_thread().stack_trace()[0]\n #0 at 0xffffffffa079657a (ff_layout_cancel_io+0x3a/0x84) in ff_layout_cancel_io at fs/nfs/flexfilelayout/flexfilelayout.c:2021:27\n \u003e\u003e\u003e prog.crashed_thread().stack_trace()[0][\u0027idx\u0027]\n (u32)1\n \u003e\u003e\u003e prog.crashed_thread().stack_trace()[0][\u0027flseg\u0027].mirror_array[1].mirror_ds\n (struct nfs4_ff_layout_ds *)0xffffffffffffffed\n\nThis is clear from the stack trace, we call nfs4_ff_layout_prepare_ds()\nwhich could error out initializing the mirror_ds, and then we go to\nclean it all up and our check is only for if (!mirror-\u003emirror_ds). This\nis inconsistent with the rest of the users of mirror_ds, which have\n\n if (IS_ERR_OR_NULL(mirror_ds))\n\nto keep from tripping over this exact scenario. Fix this up in\nff_layout_cancel_io() to make sure we don\u0027t panic when we get an error.\nI also spot checked all the other instances of checking mirror_ds and we\nappear to be doing the correct checks everywhere, only unconditionally\ndereferencing mirror_ds when we know it would be valid.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26868",
"url": "https://www.suse.com/security/cve/CVE-2024-26868"
},
{
"category": "external",
"summary": "SUSE Bug 1223038 for CVE-2024-26868",
"url": "https://bugzilla.suse.com/1223038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26868"
},
{
"cve": "CVE-2024-26870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26870"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102\n\nA call to listxattr() with a buffer size = 0 returns the actual\nsize of the buffer needed for a subsequent call. When size \u003e 0,\nnfs4_listxattr() does not return an error because either\ngeneric_listxattr() or nfs4_listxattr_nfs4_label() consumes\nexactly all the bytes then size is 0 when calling\nnfs4_listxattr_nfs4_user() which then triggers the following\nkernel BUG:\n\n [ 99.403778] kernel BUG at mm/usercopy.c:102!\n [ 99.404063] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP\n [ 99.408463] CPU: 0 PID: 3310 Comm: python3 Not tainted 6.6.0-61.fc40.aarch64 #1\n [ 99.415827] Call trace:\n [ 99.415985] usercopy_abort+0x70/0xa0\n [ 99.416227] __check_heap_object+0x134/0x158\n [ 99.416505] check_heap_object+0x150/0x188\n [ 99.416696] __check_object_size.part.0+0x78/0x168\n [ 99.416886] __check_object_size+0x28/0x40\n [ 99.417078] listxattr+0x8c/0x120\n [ 99.417252] path_listxattr+0x78/0xe0\n [ 99.417476] __arm64_sys_listxattr+0x28/0x40\n [ 99.417723] invoke_syscall+0x78/0x100\n [ 99.417929] el0_svc_common.constprop.0+0x48/0xf0\n [ 99.418186] do_el0_svc+0x24/0x38\n [ 99.418376] el0_svc+0x3c/0x110\n [ 99.418554] el0t_64_sync_handler+0x120/0x130\n [ 99.418788] el0t_64_sync+0x194/0x198\n [ 99.418994] Code: aa0003e3 d000a3e0 91310000 97f49bdb (d4210000)\n\nIssue is reproduced when generic_listxattr() returns \u0027system.nfs4_acl\u0027,\nthus calling lisxattr() with size = 16 will trigger the bug.\n\nAdd check on nfs4_listxattr() to return ERANGE error when it is\ncalled with size \u003e 0 and the return value is greater than size.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26870",
"url": "https://www.suse.com/security/cve/CVE-2024-26870"
},
{
"category": "external",
"summary": "SUSE Bug 1223113 for CVE-2024-26870",
"url": "https://bugzilla.suse.com/1223113"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26870"
},
{
"cve": "CVE-2024-26881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is received on HIP08 devices\n\nThe HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL, but the hardware can receive 1588 messages,\nand set the HNS3_RXD_TS_VLD_B bit, so, if match this case, the\naccess of hdev-\u003eptp-\u003eflags will cause a kernel crash:\n\n[ 5888.946472] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n[ 5888.946475] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 5889.266118] pc : hclge_ptp_get_rx_hwts+0x40/0x170 [hclge]\n[ 5889.272612] lr : hclge_ptp_get_rx_hwts+0x34/0x170 [hclge]\n[ 5889.279101] sp : ffff800012c3bc50\n[ 5889.283516] x29: ffff800012c3bc50 x28: ffff2040002be040\n[ 5889.289927] x27: ffff800009116484 x26: 0000000080007500\n[ 5889.296333] x25: 0000000000000000 x24: ffff204001c6f000\n[ 5889.302738] x23: ffff204144f53c00 x22: 0000000000000000\n[ 5889.309134] x21: 0000000000000000 x20: ffff204004220080\n[ 5889.315520] x19: ffff204144f53c00 x18: 0000000000000000\n[ 5889.321897] x17: 0000000000000000 x16: 0000000000000000\n[ 5889.328263] x15: 0000004000140ec8 x14: 0000000000000000\n[ 5889.334617] x13: 0000000000000000 x12: 00000000010011df\n[ 5889.340965] x11: bbfeff4d22000000 x10: 0000000000000000\n[ 5889.347303] x9 : ffff800009402124 x8 : 0200f78811dfbb4d\n[ 5889.353637] x7 : 2200000000191b01 x6 : ffff208002a7d480\n[ 5889.359959] x5 : 0000000000000000 x4 : 0000000000000000\n[ 5889.366271] x3 : 0000000000000000 x2 : 0000000000000000\n[ 5889.372567] x1 : 0000000000000000 x0 : ffff20400095c080\n[ 5889.378857] Call trace:\n[ 5889.382285] hclge_ptp_get_rx_hwts+0x40/0x170 [hclge]\n[ 5889.388304] hns3_handle_bdinfo+0x324/0x410 [hns3]\n[ 5889.394055] hns3_handle_rx_bd+0x60/0x150 [hns3]\n[ 5889.399624] hns3_clean_rx_ring+0x84/0x170 [hns3]\n[ 5889.405270] hns3_nic_common_poll+0xa8/0x220 [hns3]\n[ 5889.411084] napi_poll+0xcc/0x264\n[ 5889.415329] net_rx_action+0xd4/0x21c\n[ 5889.419911] __do_softirq+0x130/0x358\n[ 5889.424484] irq_exit+0x134/0x154\n[ 5889.428700] __handle_domain_irq+0x88/0xf0\n[ 5889.433684] gic_handle_irq+0x78/0x2c0\n[ 5889.438319] el1_irq+0xb8/0x140\n[ 5889.442354] arch_cpu_idle+0x18/0x40\n[ 5889.446816] default_idle_call+0x5c/0x1c0\n[ 5889.451714] cpuidle_idle_call+0x174/0x1b0\n[ 5889.456692] do_idle+0xc8/0x160\n[ 5889.460717] cpu_startup_entry+0x30/0xfc\n[ 5889.465523] secondary_start_kernel+0x158/0x1ec\n[ 5889.470936] Code: 97ffab78 f9411c14 91408294 f9457284 (f9400c80)\n[ 5889.477950] SMP: stopping secondary CPUs\n[ 5890.514626] SMP: failed to stop secondary CPUs 0-69,71-95\n[ 5890.522951] Starting crashdump kernel...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26881",
"url": "https://www.suse.com/security/cve/CVE-2024-26881"
},
{
"category": "external",
"summary": "SUSE Bug 1223041 for CVE-2024-26881",
"url": "https://bugzilla.suse.com/1223041"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26881"
},
{
"cve": "CVE-2024-26900",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26900"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: fix kmemleak of rdev-\u003eserial\n\nIf kobject_add() is fail in bind_rdev_to_array(), \u0027rdev-\u003eserial\u0027 will be\nalloc not be freed, and kmemleak occurs.\n\nunreferenced object 0xffff88815a350000 (size 49152):\n comm \"mdadm\", pid 789, jiffies 4294716910\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n backtrace (crc f773277a):\n [\u003c0000000058b0a453\u003e] kmemleak_alloc+0x61/0xe0\n [\u003c00000000366adf14\u003e] __kmalloc_large_node+0x15e/0x270\n [\u003c000000002e82961b\u003e] __kmalloc_node.cold+0x11/0x7f\n [\u003c00000000f206d60a\u003e] kvmalloc_node+0x74/0x150\n [\u003c0000000034bf3363\u003e] rdev_init_serial+0x67/0x170\n [\u003c0000000010e08fe9\u003e] mddev_create_serial_pool+0x62/0x220\n [\u003c00000000c3837bf0\u003e] bind_rdev_to_array+0x2af/0x630\n [\u003c0000000073c28560\u003e] md_add_new_disk+0x400/0x9f0\n [\u003c00000000770e30ff\u003e] md_ioctl+0x15bf/0x1c10\n [\u003c000000006cfab718\u003e] blkdev_ioctl+0x191/0x3f0\n [\u003c0000000085086a11\u003e] vfs_ioctl+0x22/0x60\n [\u003c0000000018b656fe\u003e] __x64_sys_ioctl+0xba/0xe0\n [\u003c00000000e54e675e\u003e] do_syscall_64+0x71/0x150\n [\u003c000000008b0ad622\u003e] entry_SYSCALL_64_after_hwframe+0x6c/0x74",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26900",
"url": "https://www.suse.com/security/cve/CVE-2024-26900"
},
{
"category": "external",
"summary": "SUSE Bug 1223046 for CVE-2024-26900",
"url": "https://bugzilla.suse.com/1223046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26900"
},
{
"cve": "CVE-2024-26903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security\n\nDuring our fuzz testing of the connection and disconnection process at the\nRFCOMM layer, we discovered this bug. By comparing the packets from a\nnormal connection and disconnection process with the testcase that\ntriggered a KASAN report. We analyzed the cause of this bug as follows:\n\n1. In the packets captured during a normal connection, the host sends a\n`Read Encryption Key Size` type of `HCI_CMD` packet\n(Command Opcode: 0x1408) to the controller to inquire the length of\nencryption key.After receiving this packet, the controller immediately\nreplies with a Command Completepacket (Event Code: 0x0e) to return the\nEncryption Key Size.\n\n2. In our fuzz test case, the timing of the controller\u0027s response to this\npacket was delayed to an unexpected point: after the RFCOMM and L2CAP\nlayers had disconnected but before the HCI layer had disconnected.\n\n3. After receiving the Encryption Key Size Response at the time described\nin point 2, the host still called the rfcomm_check_security function.\nHowever, by this time `struct l2cap_conn *conn = l2cap_pi(sk)-\u003echan-\u003econn;`\nhad already been released, and when the function executed\n`return hci_conn_security(conn-\u003ehcon, d-\u003esec_level, auth_type, d-\u003eout);`,\nspecifically when accessing `conn-\u003ehcon`, a null-ptr-deref error occurred.\n\nTo fix this bug, check if `sk-\u003esk_state` is BT_CLOSED before calling\nrfcomm_recv_frame in rfcomm_process_rx.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26903",
"url": "https://www.suse.com/security/cve/CVE-2024-26903"
},
{
"category": "external",
"summary": "SUSE Bug 1223187 for CVE-2024-26903",
"url": "https://bugzilla.suse.com/1223187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26903"
},
{
"cve": "CVE-2024-26922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: validate the parameters of bo mapping operations more clearly\n\nVerify the parameters of\namdgpu_vm_bo_(map/replace_map/clearing_mappings) in one common place.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26922",
"url": "https://www.suse.com/security/cve/CVE-2024-26922"
},
{
"category": "external",
"summary": "SUSE Bug 1223315 for CVE-2024-26922",
"url": "https://bugzilla.suse.com/1223315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26922"
},
{
"cve": "CVE-2024-26924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_pipapo: do not free live element\n\nPablo reports a crash with large batches of elements with a\nback-to-back add/remove pattern. Quoting Pablo:\n\n add_elem(\"00000000\") timeout 100 ms\n ...\n add_elem(\"0000000X\") timeout 100 ms\n del_elem(\"0000000X\") \u003c---------------- delete one that was just added\n ...\n add_elem(\"00005000\") timeout 100 ms\n\n 1) nft_pipapo_remove() removes element 0000000X\n Then, KASAN shows a splat.\n\nLooking at the remove function there is a chance that we will drop a\nrule that maps to a non-deactivated element.\n\nRemoval happens in two steps, first we do a lookup for key k and return the\nto-be-removed element and mark it as inactive in the next generation.\nThen, in a second step, the element gets removed from the set/map.\n\nThe _remove function does not work correctly if we have more than one\nelement that share the same key.\n\nThis can happen if we insert an element into a set when the set already\nholds an element with same key, but the element mapping to the existing\nkey has timed out or is not active in the next generation.\n\nIn such case its possible that removal will unmap the wrong element.\nIf this happens, we will leak the non-deactivated element, it becomes\nunreachable.\n\nThe element that got deactivated (and will be freed later) will\nremain reachable in the set data structure, this can result in\na crash when such an element is retrieved during lookup (stale\npointer).\n\nAdd a check that the fully matching key does in fact map to the element\nthat we have marked as inactive in the deactivation step.\nIf not, we need to continue searching.\n\nAdd a bug/warn trap at the end of the function as well, the remove\nfunction must not ever be called with an invisible/unreachable/non-existent\nelement.\n\nv2: avoid uneeded temporary variable (Stefano)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26924",
"url": "https://www.suse.com/security/cve/CVE-2024-26924"
},
{
"category": "external",
"summary": "SUSE Bug 1223387 for CVE-2024-26924",
"url": "https://bugzilla.suse.com/1223387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26924"
},
{
"cve": "CVE-2024-26932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd()\n\nWhen unregister pd capabilitie in tcpm, KASAN will capture below double\n-free issue. The root cause is the same capabilitiy will be kfreed twice,\nthe first time is kfreed by pd_capabilities_release() and the second time\nis explicitly kfreed by tcpm_port_unregister_pd().\n\n[ 3.988059] BUG: KASAN: double-free in tcpm_port_unregister_pd+0x1a4/0x3dc\n[ 3.995001] Free of addr ffff0008164d3000 by task kworker/u16:0/10\n[ 4.001206]\n[ 4.002712] CPU: 2 PID: 10 Comm: kworker/u16:0 Not tainted 6.8.0-rc5-next-20240220-05616-g52728c567a55 #53\n[ 4.012402] Hardware name: Freescale i.MX8QXP MEK (DT)\n[ 4.017569] Workqueue: events_unbound deferred_probe_work_func\n[ 4.023456] Call trace:\n[ 4.025920] dump_backtrace+0x94/0xec\n[ 4.029629] show_stack+0x18/0x24\n[ 4.032974] dump_stack_lvl+0x78/0x90\n[ 4.036675] print_report+0xfc/0x5c0\n[ 4.040289] kasan_report_invalid_free+0xa0/0xc0\n[ 4.044937] __kasan_slab_free+0x124/0x154\n[ 4.049072] kfree+0xb4/0x1e8\n[ 4.052069] tcpm_port_unregister_pd+0x1a4/0x3dc\n[ 4.056725] tcpm_register_port+0x1dd0/0x2558\n[ 4.061121] tcpci_register_port+0x420/0x71c\n[ 4.065430] tcpci_probe+0x118/0x2e0\n\nTo fix the issue, this will remove kree() from tcpm_port_unregister_pd().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26932",
"url": "https://www.suse.com/security/cve/CVE-2024-26932"
},
{
"category": "external",
"summary": "SUSE Bug 1223649 for CVE-2024-26932",
"url": "https://bugzilla.suse.com/1223649"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26932"
},
{
"cve": "CVE-2024-26934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26934"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Fix deadlock in usb_deauthorize_interface()\n\nAmong the attribute file callback routines in\ndrivers/usb/core/sysfs.c, the interface_authorized_store() function is\nthe only one which acquires a device lock on an ancestor device: It\ncalls usb_deauthorize_interface(), which locks the interface\u0027s parent\nUSB device.\n\nThe will lead to deadlock if another process already owns that lock\nand tries to remove the interface, whether through a configuration\nchange or because the device has been disconnected. As part of the\nremoval procedure, device_del() waits for all ongoing sysfs attribute\ncallbacks to complete. But usb_deauthorize_interface() can\u0027t complete\nuntil the device lock has been released, and the lock won\u0027t be\nreleased until the removal has finished.\n\nThe mechanism provided by sysfs to prevent this kind of deadlock is\nto use the sysfs_break_active_protection() function, which tells sysfs\nnot to wait for the attribute callback.\n\nReported-and-tested by: Yue Sun \u003csamsun1006219@gmail.com\u003e\nReported by: xingwei lee \u003cxrivendell7@gmail.com\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26934",
"url": "https://www.suse.com/security/cve/CVE-2024-26934"
},
{
"category": "external",
"summary": "SUSE Bug 1223671 for CVE-2024-26934",
"url": "https://bugzilla.suse.com/1223671"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26934"
},
{
"cve": "CVE-2024-26935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Fix unremoved procfs host directory regression\n\nCommit fc663711b944 (\"scsi: core: Remove the /proc/scsi/${proc_name}\ndirectory earlier\") fixed a bug related to modules loading/unloading, by\nadding a call to scsi_proc_hostdir_rm() on scsi_remove_host(). But that led\nto a potential duplicate call to the hostdir_rm() routine, since it\u0027s also\ncalled from scsi_host_dev_release(). That triggered a regression report,\nwhich was then fixed by commit be03df3d4bfe (\"scsi: core: Fix a procfs host\ndirectory removal regression\"). The fix just dropped the hostdir_rm() call\nfrom dev_release().\n\nBut it happens that this proc directory is created on scsi_host_alloc(),\nand that function \"pairs\" with scsi_host_dev_release(), while\nscsi_remove_host() pairs with scsi_add_host(). In other words, it seems the\nreason for removing the proc directory on dev_release() was meant to cover\ncases in which a SCSI host structure was allocated, but the call to\nscsi_add_host() didn\u0027t happen. And that pattern happens to exist in some\nerror paths, for example.\n\nSyzkaller causes that by using USB raw gadget device, error\u0027ing on\nusb-storage driver, at usb_stor_probe2(). By checking that path, we can see\nthat the BadDevice label leads to a scsi_host_put() after a SCSI host\nallocation, but there\u0027s no call to scsi_add_host() in such path. That leads\nto messages like this in dmesg (and a leak of the SCSI host proc\nstructure):\n\nusb-storage 4-1:87.51: USB Mass Storage device detected\nproc_dir_entry \u0027scsi/usb-storage\u0027 already registered\nWARNING: CPU: 1 PID: 3519 at fs/proc/generic.c:377 proc_register+0x347/0x4e0 fs/proc/generic.c:376\n\nThe proper fix seems to still call scsi_proc_hostdir_rm() on dev_release(),\nbut guard that with the state check for SHOST_CREATED; there is even a\ncomment in scsi_host_dev_release() detailing that: such conditional is\nmeant for cases where the SCSI host was allocated but there was no calls to\n{add,remove}_host(), like the usb-storage case.\n\nThis is what we propose here and with that, the error path of usb-storage\ndoes not trigger the warning anymore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26935",
"url": "https://www.suse.com/security/cve/CVE-2024-26935"
},
{
"category": "external",
"summary": "SUSE Bug 1223675 for CVE-2024-26935",
"url": "https://bugzilla.suse.com/1223675"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26935"
},
{
"cve": "CVE-2024-26937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26937"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/gt: Reset queue_priority_hint on parking\n\nOriginally, with strict in order execution, we could complete execution\nonly when the queue was empty. Preempt-to-busy allows replacement of an\nactive request that may complete before the preemption is processed by\nHW. If that happens, the request is retired from the queue, but the\nqueue_priority_hint remains set, preventing direct submission until\nafter the next CS interrupt is processed.\n\nThis preempt-to-busy race can be triggered by the heartbeat, which will\nalso act as the power-management barrier and upon completion allow us to\nidle the HW. We may process the completion of the heartbeat, and begin\nparking the engine before the CS event that restores the\nqueue_priority_hint, causing us to fail the assertion that it is MIN.\n\n\u003c3\u003e[ 166.210729] __engine_park:283 GEM_BUG_ON(engine-\u003esched_engine-\u003equeue_priority_hint != (-((int)(~0U \u003e\u003e 1)) - 1))\n\u003c0\u003e[ 166.210781] Dumping ftrace buffer:\n\u003c0\u003e[ 166.210795] ---------------------------------\n...\n\u003c0\u003e[ 167.302811] drm_fdin-1097 2..s1. 165741070us : trace_ports: 0000:00:02.0 rcs0: promote { ccid:20 1217:2 prio 0 }\n\u003c0\u003e[ 167.302861] drm_fdin-1097 2d.s2. 165741072us : execlists_submission_tasklet: 0000:00:02.0 rcs0: preempting last=1217:2, prio=0, hint=2147483646\n\u003c0\u003e[ 167.302928] drm_fdin-1097 2d.s2. 165741072us : __i915_request_unsubmit: 0000:00:02.0 rcs0: fence 1217:2, current 0\n\u003c0\u003e[ 167.302992] drm_fdin-1097 2d.s2. 165741073us : __i915_request_submit: 0000:00:02.0 rcs0: fence 3:4660, current 4659\n\u003c0\u003e[ 167.303044] drm_fdin-1097 2d.s1. 165741076us : execlists_submission_tasklet: 0000:00:02.0 rcs0: context:3 schedule-in, ccid:40\n\u003c0\u003e[ 167.303095] drm_fdin-1097 2d.s1. 165741077us : trace_ports: 0000:00:02.0 rcs0: submit { ccid:40 3:4660* prio 2147483646 }\n\u003c0\u003e[ 167.303159] kworker/-89 11..... 165741139us : i915_request_retire.part.0: 0000:00:02.0 rcs0: fence c90:2, current 2\n\u003c0\u003e[ 167.303208] kworker/-89 11..... 165741148us : __intel_context_do_unpin: 0000:00:02.0 rcs0: context:c90 unpin\n\u003c0\u003e[ 167.303272] kworker/-89 11..... 165741159us : i915_request_retire.part.0: 0000:00:02.0 rcs0: fence 1217:2, current 2\n\u003c0\u003e[ 167.303321] kworker/-89 11..... 165741166us : __intel_context_do_unpin: 0000:00:02.0 rcs0: context:1217 unpin\n\u003c0\u003e[ 167.303384] kworker/-89 11..... 165741170us : i915_request_retire.part.0: 0000:00:02.0 rcs0: fence 3:4660, current 4660\n\u003c0\u003e[ 167.303434] kworker/-89 11d..1. 165741172us : __intel_context_retire: 0000:00:02.0 rcs0: context:1216 retire runtime: { total:56028ns, avg:56028ns }\n\u003c0\u003e[ 167.303484] kworker/-89 11..... 165741198us : __engine_park: 0000:00:02.0 rcs0: parked\n\u003c0\u003e[ 167.303534] \u003cidle\u003e-0 5d.H3. 165741207us : execlists_irq_handler: 0000:00:02.0 rcs0: semaphore yield: 00000040\n\u003c0\u003e[ 167.303583] kworker/-89 11..... 165741397us : __intel_context_retire: 0000:00:02.0 rcs0: context:1217 retire runtime: { total:325575ns, avg:0ns }\n\u003c0\u003e[ 167.303756] kworker/-89 11..... 165741777us : __intel_context_retire: 0000:00:02.0 rcs0: context:c90 retire runtime: { total:0ns, avg:0ns }\n\u003c0\u003e[ 167.303806] kworker/-89 11..... 165742017us : __engine_park: __engine_park:283 GEM_BUG_ON(engine-\u003esched_engine-\u003equeue_priority_hint != (-((int)(~0U \u003e\u003e 1)) - 1))\n\u003c0\u003e[ 167.303811] ---------------------------------\n\u003c4\u003e[ 167.304722] ------------[ cut here ]------------\n\u003c2\u003e[ 167.304725] kernel BUG at drivers/gpu/drm/i915/gt/intel_engine_pm.c:283!\n\u003c4\u003e[ 167.304731] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n\u003c4\u003e[ 167.304734] CPU: 11 PID: 89 Comm: kworker/11:1 Tainted: G W 6.8.0-rc2-CI_DRM_14193-gc655e0fd2804+ #1\n\u003c4\u003e[ 167.304736] Hardware name: Intel Corporation Rocket Lake Client Platform/RocketLake S UDIMM 6L RVP, BIOS RKLSFWI1.R00.3173.A03.2204210138 04/21/2022\n\u003c4\u003e[ 167.304738] Workqueue: i915-unordered retire_work_handler [i915]\n\u003c4\u003e[ 16\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26937",
"url": "https://www.suse.com/security/cve/CVE-2024-26937"
},
{
"category": "external",
"summary": "SUSE Bug 1223677 for CVE-2024-26937",
"url": "https://bugzilla.suse.com/1223677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26937"
},
{
"cve": "CVE-2024-26938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()\n\nIf we have no VBT, or the VBT didn\u0027t declare the encoder\nin question, we won\u0027t have the \u0027devdata\u0027 for the encoder.\nInstead of oopsing just bail early.\n\nWe won\u0027t be able to tell whether the port is DP++ or not,\nbut so be it.\n\n(cherry picked from commit 26410896206342c8a80d2b027923e9ee7d33b733)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26938",
"url": "https://www.suse.com/security/cve/CVE-2024-26938"
},
{
"category": "external",
"summary": "SUSE Bug 1223678 for CVE-2024-26938",
"url": "https://bugzilla.suse.com/1223678"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26938"
},
{
"cve": "CVE-2024-26940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed\n\nThe driver creates /sys/kernel/debug/dri/0/mob_ttm even when the\ncorresponding ttm_resource_manager is not allocated.\nThis leads to a crash when trying to read from this file.\n\nAdd a check to create mob_ttm, system_mob_ttm, and gmr_ttm debug file\nonly when the corresponding ttm_resource_manager is allocated.\n\ncrash\u003e bt\nPID: 3133409 TASK: ffff8fe4834a5000 CPU: 3 COMMAND: \"grep\"\n #0 [ffffb954506b3b20] machine_kexec at ffffffffb2a6bec3\n #1 [ffffb954506b3b78] __crash_kexec at ffffffffb2bb598a\n #2 [ffffb954506b3c38] crash_kexec at ffffffffb2bb68c1\n #3 [ffffb954506b3c50] oops_end at ffffffffb2a2a9b1\n #4 [ffffb954506b3c70] no_context at ffffffffb2a7e913\n #5 [ffffb954506b3cc8] __bad_area_nosemaphore at ffffffffb2a7ec8c\n #6 [ffffb954506b3d10] do_page_fault at ffffffffb2a7f887\n #7 [ffffb954506b3d40] page_fault at ffffffffb360116e\n [exception RIP: ttm_resource_manager_debug+0x11]\n RIP: ffffffffc04afd11 RSP: ffffb954506b3df0 RFLAGS: 00010246\n RAX: ffff8fe41a6d1200 RBX: 0000000000000000 RCX: 0000000000000940\n RDX: 0000000000000000 RSI: ffffffffc04b4338 RDI: 0000000000000000\n RBP: ffffb954506b3e08 R8: ffff8fee3ffad000 R9: 0000000000000000\n R10: ffff8fe41a76a000 R11: 0000000000000001 R12: 00000000ffffffff\n R13: 0000000000000001 R14: ffff8fe5bb6f3900 R15: ffff8fe41a6d1200\n ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018\n #8 [ffffb954506b3e00] ttm_resource_manager_show at ffffffffc04afde7 [ttm]\n #9 [ffffb954506b3e30] seq_read at ffffffffb2d8f9f3\n RIP: 00007f4c4eda8985 RSP: 00007ffdbba9e9f8 RFLAGS: 00000246\n RAX: ffffffffffffffda RBX: 000000000037e000 RCX: 00007f4c4eda8985\n RDX: 000000000037e000 RSI: 00007f4c41573000 RDI: 0000000000000003\n RBP: 000000000037e000 R8: 0000000000000000 R9: 000000000037fe30\n R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c41573000\n R13: 0000000000000003 R14: 00007f4c41572010 R15: 0000000000000003\n ORIG_RAX: 0000000000000000 CS: 0033 SS: 002b",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26940",
"url": "https://www.suse.com/security/cve/CVE-2024-26940"
},
{
"category": "external",
"summary": "SUSE Bug 1223718 for CVE-2024-26940",
"url": "https://bugzilla.suse.com/1223718"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26940"
},
{
"cve": "CVE-2024-26943",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26943"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau/dmem: handle kcalloc() allocation failure\n\nThe kcalloc() in nouveau_dmem_evict_chunk() will return null if\nthe physical memory has run out. As a result, if we dereference\nsrc_pfns, dst_pfns or dma_addrs, the null pointer dereference bugs\nwill happen.\n\nMoreover, the GPU is going away. If the kcalloc() fails, we could not\nevict all pages mapping a chunk. So this patch adds a __GFP_NOFAIL\nflag in kcalloc().\n\nFinally, as there is no need to have physically contiguous memory,\nthis patch switches kcalloc() to kvcalloc() in order to avoid\nfailing allocations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26943",
"url": "https://www.suse.com/security/cve/CVE-2024-26943"
},
{
"category": "external",
"summary": "SUSE Bug 1230527 for CVE-2024-26943",
"url": "https://bugzilla.suse.com/1230527"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26943"
},
{
"cve": "CVE-2024-26949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26949"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu/pm: Fix NULL pointer dereference when get power limit\n\nBecause powerplay_table initialization is skipped under\nsriov case, We check and set default lower and upper OD\nvalue if powerplay_table is NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26949",
"url": "https://www.suse.com/security/cve/CVE-2024-26949"
},
{
"category": "external",
"summary": "SUSE Bug 1223665 for CVE-2024-26949",
"url": "https://bugzilla.suse.com/1223665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26949"
},
{
"cve": "CVE-2024-26950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26950"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: netlink: access device through ctx instead of peer\n\nThe previous commit fixed a bug that led to a NULL peer-\u003edevice being\ndereferenced. It\u0027s actually easier and faster performance-wise to\ninstead get the device from ctx-\u003ewg. This semantically makes more sense\ntoo, since ctx-\u003ewg-\u003epeer_allowedips.seq is compared with\nctx-\u003eallowedips_seq, basing them both in ctx. This also acts as a\ndefence in depth provision against freed peers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26950",
"url": "https://www.suse.com/security/cve/CVE-2024-26950"
},
{
"category": "external",
"summary": "SUSE Bug 1223661 for CVE-2024-26950",
"url": "https://bugzilla.suse.com/1223661"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26950"
},
{
"cve": "CVE-2024-26951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwireguard: netlink: check for dangling peer via is_dead instead of empty list\n\nIf all peers are removed via wg_peer_remove_all(), rather than setting\npeer_list to empty, the peer is added to a temporary list with a head on\nthe stack of wg_peer_remove_all(). If a netlink dump is resumed and the\ncursored peer is one that has been removed via wg_peer_remove_all(), it\nwill iterate from that peer and then attempt to dump freed peers.\n\nFix this by instead checking peer-\u003eis_dead, which was explictly created\nfor this purpose. Also move up the device_update_lock lockdep assertion,\nsince reading is_dead relies on that.\n\nIt can be reproduced by a small script like:\n\n echo \"Setting config...\"\n ip link add dev wg0 type wireguard\n wg setconf wg0 /big-config\n (\n while true; do\n echo \"Showing config...\"\n wg showconf wg0 \u003e /dev/null\n done\n ) \u0026\n sleep 4\n wg setconf wg0 \u003c(printf \"[Peer]\\nPublicKey=$(wg genkey)\\n\")\n\nResulting in:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x182a/0x1b20\n Read of size 8 at addr ffff88811956ec70 by task wg/59\n CPU: 2 PID: 59 Comm: wg Not tainted 6.8.0-rc2-debug+ #5\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x70\n print_address_description.constprop.0+0x2c/0x380\n print_report+0xab/0x250\n kasan_report+0xba/0xf0\n __lock_acquire+0x182a/0x1b20\n lock_acquire+0x191/0x4b0\n down_read+0x80/0x440\n get_peer+0x140/0xcb0\n wg_get_device_dump+0x471/0x1130",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26951",
"url": "https://www.suse.com/security/cve/CVE-2024-26951"
},
{
"category": "external",
"summary": "SUSE Bug 1223660 for CVE-2024-26951",
"url": "https://bugzilla.suse.com/1223660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26951"
},
{
"cve": "CVE-2024-26957",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26957"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/zcrypt: fix reference counting on zcrypt card objects\n\nTests with hot-plugging crytpo cards on KVM guests with debug\nkernel build revealed an use after free for the load field of\nthe struct zcrypt_card. The reason was an incorrect reference\nhandling of the zcrypt card object which could lead to a free\nof the zcrypt card object while it was still in use.\n\nThis is an example of the slab message:\n\n kernel: 0x00000000885a7512-0x00000000885a7513 @offset=1298. First byte 0x68 instead of 0x6b\n kernel: Allocated in zcrypt_card_alloc+0x36/0x70 [zcrypt] age=18046 cpu=3 pid=43\n kernel: kmalloc_trace+0x3f2/0x470\n kernel: zcrypt_card_alloc+0x36/0x70 [zcrypt]\n kernel: zcrypt_cex4_card_probe+0x26/0x380 [zcrypt_cex4]\n kernel: ap_device_probe+0x15c/0x290\n kernel: really_probe+0xd2/0x468\n kernel: driver_probe_device+0x40/0xf0\n kernel: __device_attach_driver+0xc0/0x140\n kernel: bus_for_each_drv+0x8c/0xd0\n kernel: __device_attach+0x114/0x198\n kernel: bus_probe_device+0xb4/0xc8\n kernel: device_add+0x4d2/0x6e0\n kernel: ap_scan_adapter+0x3d0/0x7c0\n kernel: ap_scan_bus+0x5a/0x3b0\n kernel: ap_scan_bus_wq_callback+0x40/0x60\n kernel: process_one_work+0x26e/0x620\n kernel: worker_thread+0x21c/0x440\n kernel: Freed in zcrypt_card_put+0x54/0x80 [zcrypt] age=9024 cpu=3 pid=43\n kernel: kfree+0x37e/0x418\n kernel: zcrypt_card_put+0x54/0x80 [zcrypt]\n kernel: ap_device_remove+0x4c/0xe0\n kernel: device_release_driver_internal+0x1c4/0x270\n kernel: bus_remove_device+0x100/0x188\n kernel: device_del+0x164/0x3c0\n kernel: device_unregister+0x30/0x90\n kernel: ap_scan_adapter+0xc8/0x7c0\n kernel: ap_scan_bus+0x5a/0x3b0\n kernel: ap_scan_bus_wq_callback+0x40/0x60\n kernel: process_one_work+0x26e/0x620\n kernel: worker_thread+0x21c/0x440\n kernel: kthread+0x150/0x168\n kernel: __ret_from_fork+0x3c/0x58\n kernel: ret_from_fork+0xa/0x30\n kernel: Slab 0x00000372022169c0 objects=20 used=18 fp=0x00000000885a7c88 flags=0x3ffff00000000a00(workingset|slab|node=0|zone=1|lastcpupid=0x1ffff)\n kernel: Object 0x00000000885a74b8 @offset=1208 fp=0x00000000885a7c88\n kernel: Redzone 00000000885a74b0: bb bb bb bb bb bb bb bb ........\n kernel: Object 00000000885a74b8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk\n kernel: Object 00000000885a74c8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk\n kernel: Object 00000000885a74d8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk\n kernel: Object 00000000885a74e8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk\n kernel: Object 00000000885a74f8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk\n kernel: Object 00000000885a7508: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 68 4b 6b 6b 6b a5 kkkkkkkkkkhKkkk.\n kernel: Redzone 00000000885a7518: bb bb bb bb bb bb bb bb ........\n kernel: Padding 00000000885a756c: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZZZZZ\n kernel: CPU: 0 PID: 387 Comm: systemd-udevd Not tainted 6.8.0-HF #2\n kernel: Hardware name: IBM 3931 A01 704 (KVM/Linux)\n kernel: Call Trace:\n kernel: [\u003c00000000ca5ab5b8\u003e] dump_stack_lvl+0x90/0x120\n kernel: [\u003c00000000c99d78bc\u003e] check_bytes_and_report+0x114/0x140\n kernel: [\u003c00000000c99d53cc\u003e] check_object+0x334/0x3f8\n kernel: [\u003c00000000c99d820c\u003e] alloc_debug_processing+0xc4/0x1f8\n kernel: [\u003c00000000c99d852e\u003e] get_partial_node.part.0+0x1ee/0x3e0\n kernel: [\u003c00000000c99d94ec\u003e] ___slab_alloc+0xaf4/0x13c8\n kernel: [\u003c00000000c99d9e38\u003e] __slab_alloc.constprop.0+0x78/0xb8\n kernel: [\u003c00000000c99dc8dc\u003e] __kmalloc+0x434/0x590\n kernel: [\u003c00000000c9b4c0ce\u003e] ext4_htree_store_dirent+0x4e/0x1c0\n kernel: [\u003c00000000c9b908a2\u003e] htree_dirblock_to_tree+0x17a/0x3f0\n kernel: \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26957",
"url": "https://www.suse.com/security/cve/CVE-2024-26957"
},
{
"category": "external",
"summary": "SUSE Bug 1223666 for CVE-2024-26957",
"url": "https://bugzilla.suse.com/1223666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26957"
},
{
"cve": "CVE-2024-26961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26961"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmac802154: fix llsec key resources release in mac802154_llsec_key_del\n\nmac802154_llsec_key_del() can free resources of a key directly without\nfollowing the RCU rules for waiting before the end of a grace period. This\nmay lead to use-after-free in case llsec_lookup_key() is traversing the\nlist of keys in parallel with a key deletion:\n\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 4 PID: 16000 at lib/refcount.c:25 refcount_warn_saturate+0x162/0x2a0\nModules linked in:\nCPU: 4 PID: 16000 Comm: wpan-ping Not tainted 6.7.0 #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014\nRIP: 0010:refcount_warn_saturate+0x162/0x2a0\nCall Trace:\n \u003cTASK\u003e\n llsec_lookup_key.isra.0+0x890/0x9e0\n mac802154_llsec_encrypt+0x30c/0x9c0\n ieee802154_subif_start_xmit+0x24/0x1e0\n dev_hard_start_xmit+0x13e/0x690\n sch_direct_xmit+0x2ae/0xbc0\n __dev_queue_xmit+0x11dd/0x3c20\n dgram_sendmsg+0x90b/0xd60\n __sys_sendto+0x466/0x4c0\n __x64_sys_sendto+0xe0/0x1c0\n do_syscall_64+0x45/0xf0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nAlso, ieee802154_llsec_key_entry structures are not freed by\nmac802154_llsec_key_del():\n\nunreferenced object 0xffff8880613b6980 (size 64):\n comm \"iwpan\", pid 2176, jiffies 4294761134 (age 60.475s)\n hex dump (first 32 bytes):\n 78 0d 8f 18 80 88 ff ff 22 01 00 00 00 00 ad de x.......\".......\n 00 00 00 00 00 00 00 00 03 00 cd ab 00 00 00 00 ................\n backtrace:\n [\u003cffffffff81dcfa62\u003e] __kmem_cache_alloc_node+0x1e2/0x2d0\n [\u003cffffffff81c43865\u003e] kmalloc_trace+0x25/0xc0\n [\u003cffffffff88968b09\u003e] mac802154_llsec_key_add+0xac9/0xcf0\n [\u003cffffffff8896e41a\u003e] ieee802154_add_llsec_key+0x5a/0x80\n [\u003cffffffff8892adc6\u003e] nl802154_add_llsec_key+0x426/0x5b0\n [\u003cffffffff86ff293e\u003e] genl_family_rcv_msg_doit+0x1fe/0x2f0\n [\u003cffffffff86ff46d1\u003e] genl_rcv_msg+0x531/0x7d0\n [\u003cffffffff86fee7a9\u003e] netlink_rcv_skb+0x169/0x440\n [\u003cffffffff86ff1d88\u003e] genl_rcv+0x28/0x40\n [\u003cffffffff86fec15c\u003e] netlink_unicast+0x53c/0x820\n [\u003cffffffff86fecd8b\u003e] netlink_sendmsg+0x93b/0xe60\n [\u003cffffffff86b91b35\u003e] ____sys_sendmsg+0xac5/0xca0\n [\u003cffffffff86b9c3dd\u003e] ___sys_sendmsg+0x11d/0x1c0\n [\u003cffffffff86b9c65a\u003e] __sys_sendmsg+0xfa/0x1d0\n [\u003cffffffff88eadbf5\u003e] do_syscall_64+0x45/0xf0\n [\u003cffffffff890000ea\u003e] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nHandle the proper resource release in the RCU callback function\nmac802154_llsec_key_del_rcu().\n\nNote that if llsec_lookup_key() finds a key, it gets a refcount via\nllsec_key_get() and locally copies key id from key_entry (which is a\nlist element). So it\u0027s safe to call llsec_key_put() and free the list\nentry after the RCU grace period elapses.\n\nFound by Linux Verification Center (linuxtesting.org).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26961",
"url": "https://www.suse.com/security/cve/CVE-2024-26961"
},
{
"category": "external",
"summary": "SUSE Bug 1223652 for CVE-2024-26961",
"url": "https://bugzilla.suse.com/1223652"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26961"
},
{
"cve": "CVE-2024-26962",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26962"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent with reshape\n\nFor raid456, if reshape is still in progress, then IO across reshape\nposition will wait for reshape to make progress. However, for dm-raid,\nin following cases reshape will never make progress hence IO will hang:\n\n1) the array is read-only;\n2) MD_RECOVERY_WAIT is set;\n3) MD_RECOVERY_FROZEN is set;\n\nAfter commit c467e97f079f (\"md/raid6: use valid sector values to determine\nif an I/O should wait on the reshape\") fix the problem that IO across\nreshape position doesn\u0027t wait for reshape, the dm-raid test\nshell/lvconvert-raid-reshape.sh start to hang:\n\n[root@fedora ~]# cat /proc/979/stack\n[\u003c0\u003e] wait_woken+0x7d/0x90\n[\u003c0\u003e] raid5_make_request+0x929/0x1d70 [raid456]\n[\u003c0\u003e] md_handle_request+0xc2/0x3b0 [md_mod]\n[\u003c0\u003e] raid_map+0x2c/0x50 [dm_raid]\n[\u003c0\u003e] __map_bio+0x251/0x380 [dm_mod]\n[\u003c0\u003e] dm_submit_bio+0x1f0/0x760 [dm_mod]\n[\u003c0\u003e] __submit_bio+0xc2/0x1c0\n[\u003c0\u003e] submit_bio_noacct_nocheck+0x17f/0x450\n[\u003c0\u003e] submit_bio_noacct+0x2bc/0x780\n[\u003c0\u003e] submit_bio+0x70/0xc0\n[\u003c0\u003e] mpage_readahead+0x169/0x1f0\n[\u003c0\u003e] blkdev_readahead+0x18/0x30\n[\u003c0\u003e] read_pages+0x7c/0x3b0\n[\u003c0\u003e] page_cache_ra_unbounded+0x1ab/0x280\n[\u003c0\u003e] force_page_cache_ra+0x9e/0x130\n[\u003c0\u003e] page_cache_sync_ra+0x3b/0x110\n[\u003c0\u003e] filemap_get_pages+0x143/0xa30\n[\u003c0\u003e] filemap_read+0xdc/0x4b0\n[\u003c0\u003e] blkdev_read_iter+0x75/0x200\n[\u003c0\u003e] vfs_read+0x272/0x460\n[\u003c0\u003e] ksys_read+0x7a/0x170\n[\u003c0\u003e] __x64_sys_read+0x1c/0x30\n[\u003c0\u003e] do_syscall_64+0xc6/0x230\n[\u003c0\u003e] entry_SYSCALL_64_after_hwframe+0x6c/0x74\n\nThis is because reshape can\u0027t make progress.\n\nFor md/raid, the problem doesn\u0027t exist because register new sync_thread\ndoesn\u0027t rely on the IO to be done any more:\n\n1) If array is read-only, it can switch to read-write by ioctl/sysfs;\n2) md/raid never set MD_RECOVERY_WAIT;\n3) If MD_RECOVERY_FROZEN is set, mddev_suspend() doesn\u0027t hold\n \u0027reconfig_mutex\u0027, hence it can be cleared and reshape can continue by\n sysfs api \u0027sync_action\u0027.\n\nHowever, I\u0027m not sure yet how to avoid the problem in dm-raid yet. This\npatch on the one hand make sure raid_message() can\u0027t change\nsync_thread() through raid_message() after presuspend(), on the other\nhand detect the above 3 cases before wait for IO do be done in\ndm_suspend(), and let dm-raid requeue those IO.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26962",
"url": "https://www.suse.com/security/cve/CVE-2024-26962"
},
{
"category": "external",
"summary": "SUSE Bug 1223654 for CVE-2024-26962",
"url": "https://bugzilla.suse.com/1223654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26962"
},
{
"cve": "CVE-2024-26963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26963"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3-am62: fix module unload/reload behavior\n\nAs runtime PM is enabled, the module can be runtime\nsuspended when .remove() is called.\n\nDo a pm_runtime_get_sync() to make sure module is active\nbefore doing any register operations.\n\nDoing a pm_runtime_put_sync() should disable the refclk\nso no need to disable it again.\n\nFixes the below warning at module removel.\n\n[ 39.705310] ------------[ cut here ]------------\n[ 39.710004] clk:162:3 already disabled\n[ 39.713941] WARNING: CPU: 0 PID: 921 at drivers/clk/clk.c:1090 clk_core_disable+0xb0/0xb8\n\nWe called of_platform_populate() in .probe() so call the\ncleanup function of_platform_depopulate() in .remove().\nGet rid of the now unnnecessary dwc3_ti_remove_core().\nWithout this, module re-load doesn\u0027t work properly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26963",
"url": "https://www.suse.com/security/cve/CVE-2024-26963"
},
{
"category": "external",
"summary": "SUSE Bug 1223651 for CVE-2024-26963",
"url": "https://bugzilla.suse.com/1223651"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26963"
},
{
"cve": "CVE-2024-26964",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26964"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci: Add error handling in xhci_map_urb_for_dma\n\nCurrently xhci_map_urb_for_dma() creates a temporary buffer and copies\nthe SG list to the new linear buffer. But if the kzalloc_node() fails,\nthen the following sg_pcopy_to_buffer() can lead to crash since it\ntries to memcpy to NULL pointer.\n\nSo return -ENOMEM if kzalloc returns null pointer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26964",
"url": "https://www.suse.com/security/cve/CVE-2024-26964"
},
{
"category": "external",
"summary": "SUSE Bug 1223650 for CVE-2024-26964",
"url": "https://bugzilla.suse.com/1223650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26964"
},
{
"cve": "CVE-2024-26973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26973"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfat: fix uninitialized field in nostale filehandles\n\nWhen fat_encode_fh_nostale() encodes file handle without a parent it\nstores only first 10 bytes of the file handle. However the length of the\nfile handle must be a multiple of 4 so the file handle is actually 12\nbytes long and the last two bytes remain uninitialized. This is not\ngreat at we potentially leak uninitialized information with the handle\nto userspace. Properly initialize the full handle length.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26973",
"url": "https://www.suse.com/security/cve/CVE-2024-26973"
},
{
"category": "external",
"summary": "SUSE Bug 1223641 for CVE-2024-26973",
"url": "https://bugzilla.suse.com/1223641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26973"
},
{
"cve": "CVE-2024-26983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26983"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbootconfig: use memblock_free_late to free xbc memory to buddy\n\nOn the time to free xbc memory in xbc_exit(), memblock may has handed\nover memory to buddy allocator. So it doesn\u0027t make sense to free memory\nback to memblock. memblock_free() called by xbc_exit() even causes UAF bugs\non architectures with CONFIG_ARCH_KEEP_MEMBLOCK disabled like x86.\nFollowing KASAN logs shows this case.\n\nThis patch fixes the xbc memory free problem by calling memblock_free()\nin early xbc init error rewind path and calling memblock_free_late() in\nxbc exit path to free memory to buddy allocator.\n\n[ 9.410890] ==================================================================\n[ 9.418962] BUG: KASAN: use-after-free in memblock_isolate_range+0x12d/0x260\n[ 9.426850] Read of size 8 at addr ffff88845dd30000 by task swapper/0/1\n\n[ 9.435901] CPU: 9 PID: 1 Comm: swapper/0 Tainted: G U 6.9.0-rc3-00208-g586b5dfb51b9 #5\n[ 9.446403] Hardware name: Intel Corporation RPLP LP5 (CPU:RaptorLake)/RPLP LP5 (ID:13), BIOS IRPPN02.01.01.00.00.19.015.D-00000000 Dec 28 2023\n[ 9.460789] Call Trace:\n[ 9.463518] \u003cTASK\u003e\n[ 9.465859] dump_stack_lvl+0x53/0x70\n[ 9.469949] print_report+0xce/0x610\n[ 9.473944] ? __virt_addr_valid+0xf5/0x1b0\n[ 9.478619] ? memblock_isolate_range+0x12d/0x260\n[ 9.483877] kasan_report+0xc6/0x100\n[ 9.487870] ? memblock_isolate_range+0x12d/0x260\n[ 9.493125] memblock_isolate_range+0x12d/0x260\n[ 9.498187] memblock_phys_free+0xb4/0x160\n[ 9.502762] ? __pfx_memblock_phys_free+0x10/0x10\n[ 9.508021] ? mutex_unlock+0x7e/0xd0\n[ 9.512111] ? __pfx_mutex_unlock+0x10/0x10\n[ 9.516786] ? kernel_init_freeable+0x2d4/0x430\n[ 9.521850] ? __pfx_kernel_init+0x10/0x10\n[ 9.526426] xbc_exit+0x17/0x70\n[ 9.529935] kernel_init+0x38/0x1e0\n[ 9.533829] ? _raw_spin_unlock_irq+0xd/0x30\n[ 9.538601] ret_from_fork+0x2c/0x50\n[ 9.542596] ? __pfx_kernel_init+0x10/0x10\n[ 9.547170] ret_from_fork_asm+0x1a/0x30\n[ 9.551552] \u003c/TASK\u003e\n\n[ 9.555649] The buggy address belongs to the physical page:\n[ 9.561875] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x45dd30\n[ 9.570821] flags: 0x200000000000000(node=0|zone=2)\n[ 9.576271] page_type: 0xffffffff()\n[ 9.580167] raw: 0200000000000000 ffffea0011774c48 ffffea0012ba1848 0000000000000000\n[ 9.588823] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000\n[ 9.597476] page dumped because: kasan: bad access detected\n\n[ 9.605362] Memory state around the buggy address:\n[ 9.610714] ffff88845dd2ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n[ 9.618786] ffff88845dd2ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n[ 9.626857] \u003effff88845dd30000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 9.634930] ^\n[ 9.638534] ffff88845dd30080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 9.646605] ffff88845dd30100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 9.654675] ==================================================================",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26983",
"url": "https://www.suse.com/security/cve/CVE-2024-26983"
},
{
"category": "external",
"summary": "SUSE Bug 1223637 for CVE-2024-26983",
"url": "https://bugzilla.suse.com/1223637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26983"
},
{
"cve": "CVE-2024-26984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26984"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau: fix instmem race condition around ptr stores\n\nRunning a lot of VK CTS in parallel against nouveau, once every\nfew hours you might see something like this crash.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000008\nPGD 8000000114e6e067 P4D 8000000114e6e067 PUD 109046067 PMD 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 7 PID: 53891 Comm: deqp-vk Not tainted 6.8.0-rc6+ #27\nHardware name: Gigabyte Technology Co., Ltd. Z390 I AORUS PRO WIFI/Z390 I AORUS PRO WIFI-CF, BIOS F8 11/05/2021\nRIP: 0010:gp100_vmm_pgt_mem+0xe3/0x180 [nouveau]\nCode: c7 48 01 c8 49 89 45 58 85 d2 0f 84 95 00 00 00 41 0f b7 46 12 49 8b 7e 08 89 da 42 8d 2c f8 48 8b 47 08 41 83 c7 01 48 89 ee \u003c48\u003e 8b 40 08 ff d0 0f 1f 00 49 8b 7e 08 48 89 d9 48 8d 75 04 48 c1\nRSP: 0000:ffffac20c5857838 EFLAGS: 00010202\nRAX: 0000000000000000 RBX: 00000000004d8001 RCX: 0000000000000001\nRDX: 00000000004d8001 RSI: 00000000000006d8 RDI: ffffa07afe332180\nRBP: 00000000000006d8 R08: ffffac20c5857ad0 R09: 0000000000ffff10\nR10: 0000000000000001 R11: ffffa07af27e2de0 R12: 000000000000001c\nR13: ffffac20c5857ad0 R14: ffffa07a96fe9040 R15: 000000000000001c\nFS: 00007fe395eed7c0(0000) GS:ffffa07e2c980000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000008 CR3: 000000011febe001 CR4: 00000000003706f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n\n...\n\n ? gp100_vmm_pgt_mem+0xe3/0x180 [nouveau]\n ? gp100_vmm_pgt_mem+0x37/0x180 [nouveau]\n nvkm_vmm_iter+0x351/0xa20 [nouveau]\n ? __pfx_nvkm_vmm_ref_ptes+0x10/0x10 [nouveau]\n ? __pfx_gp100_vmm_pgt_mem+0x10/0x10 [nouveau]\n ? __pfx_gp100_vmm_pgt_mem+0x10/0x10 [nouveau]\n ? __lock_acquire+0x3ed/0x2170\n ? __pfx_gp100_vmm_pgt_mem+0x10/0x10 [nouveau]\n nvkm_vmm_ptes_get_map+0xc2/0x100 [nouveau]\n ? __pfx_nvkm_vmm_ref_ptes+0x10/0x10 [nouveau]\n ? __pfx_gp100_vmm_pgt_mem+0x10/0x10 [nouveau]\n nvkm_vmm_map_locked+0x224/0x3a0 [nouveau]\n\nAdding any sort of useful debug usually makes it go away, so I hand\nwrote the function in a line, and debugged the asm.\n\nEvery so often pt-\u003ememory-\u003eptrs is NULL. This ptrs ptr is set in\nthe nv50_instobj_acquire called from nvkm_kmap.\n\nIf Thread A and Thread B both get to nv50_instobj_acquire around\nthe same time, and Thread A hits the refcount_set line, and in\nlockstep thread B succeeds at refcount_inc_not_zero, there is a\nchance the ptrs value won\u0027t have been stored since refcount_set\nis unordered. Force a memory barrier here, I picked smp_mb, since\nwe want it on all CPUs and it\u0027s write followed by a read.\n\nv2: use paired smp_rmb/smp_wmb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26984",
"url": "https://www.suse.com/security/cve/CVE-2024-26984"
},
{
"category": "external",
"summary": "SUSE Bug 1223633 for CVE-2024-26984",
"url": "https://bugzilla.suse.com/1223633"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26984"
},
{
"cve": "CVE-2024-26986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26986"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Fix memory leak in create_process failure\n\nFix memory leak due to a leaked mmget reference on an error handling\ncode path that is triggered when attempting to create KFD processes\nwhile a GPU reset is in progress.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26986",
"url": "https://www.suse.com/security/cve/CVE-2024-26986"
},
{
"category": "external",
"summary": "SUSE Bug 1223728 for CVE-2024-26986",
"url": "https://bugzilla.suse.com/1223728"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26986"
},
{
"cve": "CVE-2024-26988",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26988"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninit/main.c: Fix potential static_command_line memory overflow\n\nWe allocate memory of size \u0027xlen + strlen(boot_command_line) + 1\u0027 for\nstatic_command_line, but the strings copied into static_command_line are\nextra_command_line and command_line, rather than extra_command_line and\nboot_command_line.\n\nWhen strlen(command_line) \u003e strlen(boot_command_line), static_command_line\nwill overflow.\n\nThis patch just recovers strlen(command_line) which was miss-consolidated\nwith strlen(boot_command_line) in the commit f5c7310ac73e (\"init/main: add\nchecks for the return value of memblock_alloc*()\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26988",
"url": "https://www.suse.com/security/cve/CVE-2024-26988"
},
{
"category": "external",
"summary": "SUSE Bug 1223747 for CVE-2024-26988",
"url": "https://bugzilla.suse.com/1223747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26988"
},
{
"cve": "CVE-2024-26989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26989"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: hibernate: Fix level3 translation fault in swsusp_save()\n\nOn arm64 machines, swsusp_save() faults if it attempts to access\nMEMBLOCK_NOMAP memory ranges. This can be reproduced in QEMU using UEFI\nwhen booting with rodata=off debug_pagealloc=off and CONFIG_KFENCE=n:\n\n Unable to handle kernel paging request at virtual address ffffff8000000000\n Mem abort info:\n ESR = 0x0000000096000007\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x07: level 3 translation fault\n Data abort info:\n ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000\n CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n swapper pgtable: 4k pages, 39-bit VAs, pgdp=00000000eeb0b000\n [ffffff8000000000] pgd=180000217fff9803, p4d=180000217fff9803, pud=180000217fff9803, pmd=180000217fff8803, pte=0000000000000000\n Internal error: Oops: 0000000096000007 [#1] SMP\n Internal error: Oops: 0000000096000007 [#1] SMP\n Modules linked in: xt_multiport ipt_REJECT nf_reject_ipv4 xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_filter bpfilter rfkill at803x snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg dwmac_generic stmmac_platform snd_hda_codec stmmac joydev pcs_xpcs snd_hda_core phylink ppdev lp parport ramoops reed_solomon ip_tables x_tables nls_iso8859_1 vfat multipath linear amdgpu amdxcp drm_exec gpu_sched drm_buddy hid_generic usbhid hid radeon video drm_suballoc_helper drm_ttm_helper ttm i2c_algo_bit drm_display_helper cec drm_kms_helper drm\n CPU: 0 PID: 3663 Comm: systemd-sleep Not tainted 6.6.2+ #76\n Source Version: 4e22ed63a0a48e7a7cff9b98b7806d8d4add7dc0\n Hardware name: Greatwall GW-XXXXXX-XXX/GW-XXXXXX-XXX, BIOS KunLun BIOS V4.0 01/19/2021\n pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : swsusp_save+0x280/0x538\n lr : swsusp_save+0x280/0x538\n sp : ffffffa034a3fa40\n x29: ffffffa034a3fa40 x28: ffffff8000001000 x27: 0000000000000000\n x26: ffffff8001400000 x25: ffffffc08113e248 x24: 0000000000000000\n x23: 0000000000080000 x22: ffffffc08113e280 x21: 00000000000c69f2\n x20: ffffff8000000000 x19: ffffffc081ae2500 x18: 0000000000000000\n x17: 6666662074736420 x16: 3030303030303030 x15: 3038666666666666\n x14: 0000000000000b69 x13: ffffff9f89088530 x12: 00000000ffffffea\n x11: 00000000ffff7fff x10: 00000000ffff7fff x9 : ffffffc08193f0d0\n x8 : 00000000000bffe8 x7 : c0000000ffff7fff x6 : 0000000000000001\n x5 : ffffffa0fff09dc8 x4 : 0000000000000000 x3 : 0000000000000027\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : 000000000000004e\n Call trace:\n swsusp_save+0x280/0x538\n swsusp_arch_suspend+0x148/0x190\n hibernation_snapshot+0x240/0x39c\n hibernate+0xc4/0x378\n state_store+0xf0/0x10c\n kobj_attr_store+0x14/0x24\n\nThe reason is swsusp_save() -\u003e copy_data_pages() -\u003e page_is_saveable()\n-\u003e kernel_page_present() assuming that a page is always present when\ncan_set_direct_map() is false (all of rodata_full,\ndebug_pagealloc_enabled() and arm64_kfence_can_set_direct_map() false),\nirrespective of the MEMBLOCK_NOMAP ranges. Such MEMBLOCK_NOMAP regions\nshould not be saved during hibernation.\n\nThis problem was introduced by changes to the pfn_valid() logic in\ncommit a7d9f306ba70 (\"arm64: drop pfn_valid_within() and simplify\npfn_valid()\").\n\nSimilar to other architectures, drop the !can_set_direct_map() check in\nkernel_page_present() so that page_is_savable() skips such pages.\n\n[catalin.marinas@arm.com: rework commit message]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26989",
"url": "https://www.suse.com/security/cve/CVE-2024-26989"
},
{
"category": "external",
"summary": "SUSE Bug 1223748 for CVE-2024-26989",
"url": "https://bugzilla.suse.com/1223748"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26989"
},
{
"cve": "CVE-2024-26994",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26994"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspeakup: Avoid crash on very long word\n\nIn case a console is set up really large and contains a really long word\n(\u003e 256 characters), we have to stop before the length of the word buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26994",
"url": "https://www.suse.com/security/cve/CVE-2024-26994"
},
{
"category": "external",
"summary": "SUSE Bug 1223750 for CVE-2024-26994",
"url": "https://bugzilla.suse.com/1223750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26994"
},
{
"cve": "CVE-2024-26995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26995"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: Correct the PDO counting in pd_set\n\nOff-by-one errors happen because nr_snk_pdo and nr_src_pdo are\nincorrectly added one. The index of the loop is equal to the number of\nPDOs to be updated when leaving the loop and it doesn\u0027t need to be added\none.\n\nWhen doing the power negotiation, TCPM relies on the \"nr_snk_pdo\" as\nthe size of the local sink PDO array to match the Source capabilities\nof the partner port. If the off-by-one overflow occurs, a wrong RDO\nmight be sent and unexpected power transfer might happen such as over\nvoltage or over current (than expected).\n\n\"nr_src_pdo\" is used to set the Rp level when the port is in Source\nrole. It is also the array size of the local Source capabilities when\nfilling up the buffer which will be sent as the Source PDOs (such as\nin Power Negotiation). If the off-by-one overflow occurs, a wrong Rp\nlevel might be set and wrong Source PDOs will be sent to the partner\nport. This could potentially cause over current or port resets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26995",
"url": "https://www.suse.com/security/cve/CVE-2024-26995"
},
{
"category": "external",
"summary": "SUSE Bug 1223696 for CVE-2024-26995",
"url": "https://bugzilla.suse.com/1223696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26995"
},
{
"cve": "CVE-2024-26996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26996"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error\n\nWhen ncm function is working and then stop usb0 interface for link down,\neth_stop() is called. At this piont, accidentally if usb transport error\nshould happen in usb_ep_enable(), \u0027in_ep\u0027 and/or \u0027out_ep\u0027 may not be enabled.\n\nAfter that, ncm_disable() is called to disable for ncm unbind\nbut gether_disconnect() is never called since \u0027in_ep\u0027 is not enabled.\n\nAs the result, ncm object is released in ncm unbind\nbut \u0027dev-\u003eport_usb\u0027 associated to \u0027ncm-\u003eport\u0027 is not NULL.\n\nAnd when ncm bind again to recover netdev, ncm object is reallocated\nbut usb0 interface is already associated to previous released ncm object.\n\nTherefore, once usb0 interface is up and eth_start_xmit() is called,\nreleased ncm object is dereferrenced and it might cause use-after-free memory.\n\n[function unlink via configfs]\n usb0: eth_stop dev-\u003eport_usb=ffffff9b179c3200\n --\u003e error happens in usb_ep_enable().\n NCM: ncm_disable: ncm=ffffff9b179c3200\n --\u003e no gether_disconnect() since ncm-\u003eport.in_ep-\u003eenabled is false.\n NCM: ncm_unbind: ncm unbind ncm=ffffff9b179c3200\n NCM: ncm_free: ncm free ncm=ffffff9b179c3200 \u003c-- released ncm\n\n[function link via configfs]\n NCM: ncm_alloc: ncm alloc ncm=ffffff9ac4f8a000\n NCM: ncm_bind: ncm bind ncm=ffffff9ac4f8a000\n NCM: ncm_set_alt: ncm=ffffff9ac4f8a000 alt=0\n usb0: eth_open dev-\u003eport_usb=ffffff9b179c3200 \u003c-- previous released ncm\n usb0: eth_start dev-\u003eport_usb=ffffff9b179c3200 \u003c--\n eth_start_xmit()\n --\u003e dev-\u003ewrap()\n Unable to handle kernel paging request at virtual address dead00000000014f\n\nThis patch addresses the issue by checking if \u0027ncm-\u003enetdev\u0027 is not NULL at\nncm_disable() to call gether_disconnect() to deassociate \u0027dev-\u003eport_usb\u0027.\nIt\u0027s more reasonable to check \u0027ncm-\u003enetdev\u0027 to call gether_connect/disconnect\nrather than check \u0027ncm-\u003eport.in_ep-\u003eenabled\u0027 since it might not be enabled\nbut the gether connection might be established.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26996",
"url": "https://www.suse.com/security/cve/CVE-2024-26996"
},
{
"category": "external",
"summary": "SUSE Bug 1223752 for CVE-2024-26996",
"url": "https://bugzilla.suse.com/1223752"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26996"
},
{
"cve": "CVE-2024-26997",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26997"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: host: Fix dereference issue in DDMA completion flow.\n\nFixed variable dereference issue in DDMA completion flow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26997",
"url": "https://www.suse.com/security/cve/CVE-2024-26997"
},
{
"category": "external",
"summary": "SUSE Bug 1223741 for CVE-2024-26997",
"url": "https://bugzilla.suse.com/1223741"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26997"
},
{
"cve": "CVE-2024-26999",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26999"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial/pmac_zilog: Remove flawed mitigation for rx irq flood\n\nThe mitigation was intended to stop the irq completely. That may be\nbetter than a hard lock-up but it turns out that you get a crash anyway\nif you\u0027re using pmac_zilog as a serial console:\n\nttyPZ0: pmz: rx irq flood !\nBUG: spinlock recursion on CPU#0, swapper/0\n\nThat\u0027s because the pr_err() call in pmz_receive_chars() results in\npmz_console_write() attempting to lock a spinlock already locked in\npmz_interrupt(). With CONFIG_DEBUG_SPINLOCK=y, this produces a fatal\nBUG splat. The spinlock in question is the one in struct uart_port.\n\nEven when it\u0027s not fatal, the serial port rx function ceases to work.\nAlso, the iteration limit doesn\u0027t play nicely with QEMU, as can be\nseen in the bug report linked below.\n\nA web search for other reports of the error message \"pmz: rx irq flood\"\ndidn\u0027t produce anything. So I don\u0027t think this code is needed any more.\nRemove it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26999",
"url": "https://www.suse.com/security/cve/CVE-2024-26999"
},
{
"category": "external",
"summary": "SUSE Bug 1223754 for CVE-2024-26999",
"url": "https://bugzilla.suse.com/1223754"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-26999"
},
{
"cve": "CVE-2024-27000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27000"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: mxs-auart: add spinlock around changing cts state\n\nThe uart_handle_cts_change() function in serial_core expects the caller\nto hold uport-\u003elock. For example, I have seen the below kernel splat,\nwhen the Bluetooth driver is loaded on an i.MX28 board.\n\n [ 85.119255] ------------[ cut here ]------------\n [ 85.124413] WARNING: CPU: 0 PID: 27 at /drivers/tty/serial/serial_core.c:3453 uart_handle_cts_change+0xb4/0xec\n [ 85.134694] Modules linked in: hci_uart bluetooth ecdh_generic ecc wlcore_sdio configfs\n [ 85.143314] CPU: 0 PID: 27 Comm: kworker/u3:0 Not tainted 6.6.3-00021-gd62a2f068f92 #1\n [ 85.151396] Hardware name: Freescale MXS (Device Tree)\n [ 85.156679] Workqueue: hci0 hci_power_on [bluetooth]\n (...)\n [ 85.191765] uart_handle_cts_change from mxs_auart_irq_handle+0x380/0x3f4\n [ 85.198787] mxs_auart_irq_handle from __handle_irq_event_percpu+0x88/0x210\n (...)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27000",
"url": "https://www.suse.com/security/cve/CVE-2024-27000"
},
{
"category": "external",
"summary": "SUSE Bug 1223757 for CVE-2024-27000",
"url": "https://bugzilla.suse.com/1223757"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27000"
},
{
"cve": "CVE-2024-27001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27001"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: vmk80xx: fix incomplete endpoint checking\n\nWhile vmk80xx does have endpoint checking implemented, some things\ncan fall through the cracks. Depending on the hardware model,\nURBs can have either bulk or interrupt type, and current version\nof vmk80xx_find_usb_endpoints() function does not take that fully\ninto account. While this warning does not seem to be too harmful,\nat the very least it will crash systems with \u0027panic_on_warn\u0027 set on\nthem.\n\nFix the issue found by Syzkaller [1] by somewhat simplifying the\nendpoint checking process with usb_find_common_endpoints() and\nensuring that only expected endpoint types are present.\n\nThis patch has not been tested on real hardware.\n\n[1] Syzkaller report:\nusb 1-1: BOGUS urb xfer, pipe 1 != type 3\nWARNING: CPU: 0 PID: 781 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503\n...\nCall Trace:\n \u003cTASK\u003e\n usb_start_wait_urb+0x113/0x520 drivers/usb/core/message.c:59\n vmk80xx_reset_device drivers/comedi/drivers/vmk80xx.c:227 [inline]\n vmk80xx_auto_attach+0xa1c/0x1a40 drivers/comedi/drivers/vmk80xx.c:818\n comedi_auto_config+0x238/0x380 drivers/comedi/drivers.c:1067\n usb_probe_interface+0x5cd/0xb00 drivers/usb/core/driver.c:399\n...\n\nSimilar issue also found by Syzkaller:",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27001",
"url": "https://www.suse.com/security/cve/CVE-2024-27001"
},
{
"category": "external",
"summary": "SUSE Bug 1223698 for CVE-2024-27001",
"url": "https://bugzilla.suse.com/1223698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27001"
},
{
"cve": "CVE-2024-27002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27002"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: mediatek: Do a runtime PM get on controllers during probe\n\nmt8183-mfgcfg has a mutual dependency with genpd during the probing\nstage, which leads to a deadlock in the following call stack:\n\nCPU0: genpd_lock --\u003e clk_prepare_lock\ngenpd_power_off_work_fn()\n genpd_lock()\n generic_pm_domain::power_off()\n clk_unprepare()\n clk_prepare_lock()\n\nCPU1: clk_prepare_lock --\u003e genpd_lock\nclk_register()\n __clk_core_init()\n clk_prepare_lock()\n clk_pm_runtime_get()\n genpd_lock()\n\nDo a runtime PM get at the probe function to make sure clk_register()\nwon\u0027t acquire the genpd lock. Instead of only modifying mt8183-mfgcfg,\ndo this on all mediatek clock controller probings because we don\u0027t\nbelieve this would cause any regression.\n\nVerified on MT8183 and MT8192 Chromebooks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27002",
"url": "https://www.suse.com/security/cve/CVE-2024-27002"
},
{
"category": "external",
"summary": "SUSE Bug 1223759 for CVE-2024-27002",
"url": "https://bugzilla.suse.com/1223759"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27002"
},
{
"cve": "CVE-2024-27003",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27003"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: Get runtime PM before walking tree for clk_summary\n\nSimilar to the previous commit, we should make sure that all devices are\nruntime resumed before printing the clk_summary through debugfs. Failure\nto do so would result in a deadlock if the thread is resuming a device\nto print clk state and that device is also runtime resuming in another\nthread, e.g the screen is turning on and the display driver is starting\nup. We remove the calls to clk_pm_runtime_{get,put}() in this path\nbecause they\u0027re superfluous now that we know the devices are runtime\nresumed. This also squashes a bug where the return value of\nclk_pm_runtime_get() wasn\u0027t checked, leading to an RPM count underflow\non error paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27003",
"url": "https://www.suse.com/security/cve/CVE-2024-27003"
},
{
"category": "external",
"summary": "SUSE Bug 1223761 for CVE-2024-27003",
"url": "https://bugzilla.suse.com/1223761"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27003"
},
{
"cve": "CVE-2024-27004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27004"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: Get runtime PM before walking tree during disable_unused\n\nDoug reported [1] the following hung task:\n\n INFO: task swapper/0:1 blocked for more than 122 seconds.\n Not tainted 5.15.149-21875-gf795ebc40eb8 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:swapper/0 state:D stack: 0 pid: 1 ppid: 0 flags:0x00000008\n Call trace:\n __switch_to+0xf4/0x1f4\n __schedule+0x418/0xb80\n schedule+0x5c/0x10c\n rpm_resume+0xe0/0x52c\n rpm_resume+0x178/0x52c\n __pm_runtime_resume+0x58/0x98\n clk_pm_runtime_get+0x30/0xb0\n clk_disable_unused_subtree+0x58/0x208\n clk_disable_unused_subtree+0x38/0x208\n clk_disable_unused_subtree+0x38/0x208\n clk_disable_unused_subtree+0x38/0x208\n clk_disable_unused_subtree+0x38/0x208\n clk_disable_unused+0x4c/0xe4\n do_one_initcall+0xcc/0x2d8\n do_initcall_level+0xa4/0x148\n do_initcalls+0x5c/0x9c\n do_basic_setup+0x24/0x30\n kernel_init_freeable+0xec/0x164\n kernel_init+0x28/0x120\n ret_from_fork+0x10/0x20\n INFO: task kworker/u16:0:9 blocked for more than 122 seconds.\n Not tainted 5.15.149-21875-gf795ebc40eb8 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:kworker/u16:0 state:D stack: 0 pid: 9 ppid: 2 flags:0x00000008\n Workqueue: events_unbound deferred_probe_work_func\n Call trace:\n __switch_to+0xf4/0x1f4\n __schedule+0x418/0xb80\n schedule+0x5c/0x10c\n schedule_preempt_disabled+0x2c/0x48\n __mutex_lock+0x238/0x488\n __mutex_lock_slowpath+0x1c/0x28\n mutex_lock+0x50/0x74\n clk_prepare_lock+0x7c/0x9c\n clk_core_prepare_lock+0x20/0x44\n clk_prepare+0x24/0x30\n clk_bulk_prepare+0x40/0xb0\n mdss_runtime_resume+0x54/0x1c8\n pm_generic_runtime_resume+0x30/0x44\n __genpd_runtime_resume+0x68/0x7c\n genpd_runtime_resume+0x108/0x1f4\n __rpm_callback+0x84/0x144\n rpm_callback+0x30/0x88\n rpm_resume+0x1f4/0x52c\n rpm_resume+0x178/0x52c\n __pm_runtime_resume+0x58/0x98\n __device_attach+0xe0/0x170\n device_initial_probe+0x1c/0x28\n bus_probe_device+0x3c/0x9c\n device_add+0x644/0x814\n mipi_dsi_device_register_full+0xe4/0x170\n devm_mipi_dsi_device_register_full+0x28/0x70\n ti_sn_bridge_probe+0x1dc/0x2c0\n auxiliary_bus_probe+0x4c/0x94\n really_probe+0xcc/0x2c8\n __driver_probe_device+0xa8/0x130\n driver_probe_device+0x48/0x110\n __device_attach_driver+0xa4/0xcc\n bus_for_each_drv+0x8c/0xd8\n __device_attach+0xf8/0x170\n device_initial_probe+0x1c/0x28\n bus_probe_device+0x3c/0x9c\n deferred_probe_work_func+0x9c/0xd8\n process_one_work+0x148/0x518\n worker_thread+0x138/0x350\n kthread+0x138/0x1e0\n ret_from_fork+0x10/0x20\n\nThe first thread is walking the clk tree and calling\nclk_pm_runtime_get() to power on devices required to read the clk\nhardware via struct clk_ops::is_enabled(). This thread holds the clk\nprepare_lock, and is trying to runtime PM resume a device, when it finds\nthat the device is in the process of resuming so the thread schedule()s\naway waiting for the device to finish resuming before continuing. The\nsecond thread is runtime PM resuming the same device, but the runtime\nresume callback is calling clk_prepare(), trying to grab the\nprepare_lock waiting on the first thread.\n\nThis is a classic ABBA deadlock. To properly fix the deadlock, we must\nnever runtime PM resume or suspend a device with the clk prepare_lock\nheld. Actually doing that is near impossible today because the global\nprepare_lock would have to be dropped in the middle of the tree, the\ndevice runtime PM resumed/suspended, and then the prepare_lock grabbed\nagain to ensure consistency of the clk tree topology. If anything\nchanges with the clk tree in the meantime, we\u0027ve lost and will need to\nstart the operation all over again.\n\nLuckily, most of the time we\u0027re simply incrementing or decrementing the\nruntime PM count on an active device, so we don\u0027t have the chance to\nschedule away with the prepare_lock held. Let\u0027s fix this immediate\nproblem that can be\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27004",
"url": "https://www.suse.com/security/cve/CVE-2024-27004"
},
{
"category": "external",
"summary": "SUSE Bug 1223762 for CVE-2024-27004",
"url": "https://bugzilla.suse.com/1223762"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27004"
},
{
"cve": "CVE-2024-27008",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27008"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: nv04: Fix out of bounds access\n\nWhen Output Resource (dcb-\u003eor) value is assigned in\nfabricate_dcb_output(), there may be out of bounds access to\ndac_users array in case dcb-\u003eor is zero because ffs(dcb-\u003eor) is\nused as index there.\nThe \u0027or\u0027 argument of fabricate_dcb_output() must be interpreted as a\nnumber of bit to set, not value.\n\nUtilize macros from \u0027enum nouveau_or\u0027 in calls instead of hardcoding.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27008",
"url": "https://www.suse.com/security/cve/CVE-2024-27008"
},
{
"category": "external",
"summary": "SUSE Bug 1223802 for CVE-2024-27008",
"url": "https://bugzilla.suse.com/1223802"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27008"
},
{
"cve": "CVE-2024-27027",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27027"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpll: fix dpll_xa_ref_*_del() for multiple registrations\n\nCurrently, if there are multiple registrations of the same pin on the\nsame dpll device, following warnings are observed:\nWARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:143 dpll_xa_ref_pin_del.isra.0+0x21e/0x230\nWARNING: CPU: 5 PID: 2212 at drivers/dpll/dpll_core.c:223 __dpll_pin_unregister+0x2b3/0x2c0\n\nThe problem is, that in both dpll_xa_ref_dpll_del() and\ndpll_xa_ref_pin_del() registration is only removed from list in case the\nreference count drops to zero. That is wrong, the registration has to\nbe removed always.\n\nTo fix this, remove the registration from the list and free\nit unconditionally, instead of doing it only when the ref reference\ncounter reaches zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27027",
"url": "https://www.suse.com/security/cve/CVE-2024-27027"
},
{
"category": "external",
"summary": "SUSE Bug 1223787 for CVE-2024-27027",
"url": "https://bugzilla.suse.com/1223787"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27027"
},
{
"cve": "CVE-2024-27028",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27028"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: spi-mt65xx: Fix NULL pointer access in interrupt handler\n\nThe TX buffer in spi_transfer can be a NULL pointer, so the interrupt\nhandler may end up writing to the invalid memory and cause crashes.\n\nAdd a check to trans-\u003etx_buf before using it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27028",
"url": "https://www.suse.com/security/cve/CVE-2024-27028"
},
{
"category": "external",
"summary": "SUSE Bug 1223788 for CVE-2024-27028",
"url": "https://bugzilla.suse.com/1223788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27028"
},
{
"cve": "CVE-2024-27029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27029"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix mmhub client id out-of-bounds access\n\nProperly handle cid 0x140.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27029",
"url": "https://www.suse.com/security/cve/CVE-2024-27029"
},
{
"category": "external",
"summary": "SUSE Bug 1223789 for CVE-2024-27029",
"url": "https://bugzilla.suse.com/1223789"
},
{
"category": "external",
"summary": "SUSE Bug 1226184 for CVE-2024-27029",
"url": "https://bugzilla.suse.com/1226184"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-27029"
},
{
"cve": "CVE-2024-27030",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27030"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Use separate handlers for interrupts\n\nFor PF to AF interrupt vector and VF to AF vector same\ninterrupt handler is registered which is causing race condition.\nWhen two interrupts are raised to two CPUs at same time\nthen two cores serve same event corrupting the data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27030",
"url": "https://www.suse.com/security/cve/CVE-2024-27030"
},
{
"category": "external",
"summary": "SUSE Bug 1223790 for CVE-2024-27030",
"url": "https://bugzilla.suse.com/1223790"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27030"
},
{
"cve": "CVE-2024-27031",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27031"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt\n\nThe loop inside nfs_netfs_issue_read() currently does not disable\ninterrupts while iterating through pages in the xarray to submit\nfor NFS read. This is not safe though since after taking xa_lock,\nanother page in the mapping could be processed for writeback inside\nan interrupt, and deadlock can occur. The fix is simple and clean\nif we use xa_for_each_range(), which handles the iteration with RCU\nwhile reducing code complexity.\n\nThe problem is easily reproduced with the following test:\n mount -o vers=3,fsc 127.0.0.1:/export /mnt/nfs\n dd if=/dev/zero of=/mnt/nfs/file1.bin bs=4096 count=1\n echo 3 \u003e /proc/sys/vm/drop_caches\n dd if=/mnt/nfs/file1.bin of=/dev/null\n umount /mnt/nfs\n\nOn the console with a lockdep-enabled kernel a message similar to\nthe following will be seen:\n\n ================================\n WARNING: inconsistent lock state\n 6.7.0-lockdbg+ #10 Not tainted\n --------------------------------\n inconsistent {IN-SOFTIRQ-W} -\u003e {SOFTIRQ-ON-W} usage.\n test5/1708 [HC0[0]:SC0[0]:HE1:SE1] takes:\n ffff888127baa598 (\u0026xa-\u003exa_lock#4){+.?.}-{3:3}, at:\nnfs_netfs_issue_read+0x1b2/0x4b0 [nfs]\n {IN-SOFTIRQ-W} state was registered at:\n lock_acquire+0x144/0x380\n _raw_spin_lock_irqsave+0x4e/0xa0\n __folio_end_writeback+0x17e/0x5c0\n folio_end_writeback+0x93/0x1b0\n iomap_finish_ioend+0xeb/0x6a0\n blk_update_request+0x204/0x7f0\n blk_mq_end_request+0x30/0x1c0\n blk_complete_reqs+0x7e/0xa0\n __do_softirq+0x113/0x544\n __irq_exit_rcu+0xfe/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_call_function_single+0x6f/0x90\n asm_sysvec_call_function_single+0x1a/0x20\n pv_native_safe_halt+0xf/0x20\n default_idle+0x9/0x20\n default_idle_call+0x67/0xa0\n do_idle+0x2b5/0x300\n cpu_startup_entry+0x34/0x40\n start_secondary+0x19d/0x1c0\n secondary_startup_64_no_verify+0x18f/0x19b\n irq event stamp: 176891\n hardirqs last enabled at (176891): [\u003cffffffffa67a0be4\u003e]\n_raw_spin_unlock_irqrestore+0x44/0x60\n hardirqs last disabled at (176890): [\u003cffffffffa67a0899\u003e]\n_raw_spin_lock_irqsave+0x79/0xa0\n softirqs last enabled at (176646): [\u003cffffffffa515d91e\u003e]\n__irq_exit_rcu+0xfe/0x120\n softirqs last disabled at (176633): [\u003cffffffffa515d91e\u003e]\n__irq_exit_rcu+0xfe/0x120\n\n other info that might help us debug this:\n Possible unsafe locking scenario:\n\n CPU0\n ----\n lock(\u0026xa-\u003exa_lock#4);\n \u003cInterrupt\u003e\n lock(\u0026xa-\u003exa_lock#4);\n\n *** DEADLOCK ***\n\n 2 locks held by test5/1708:\n #0: ffff888127baa498 (\u0026sb-\u003es_type-\u003ei_mutex_key#22){++++}-{4:4}, at:\n nfs_start_io_read+0x28/0x90 [nfs]\n #1: ffff888127baa650 (mapping.invalidate_lock#3){.+.+}-{4:4}, at:\n page_cache_ra_unbounded+0xa4/0x280\n\n stack backtrace:\n CPU: 6 PID: 1708 Comm: test5 Kdump: loaded Not tainted 6.7.0-lockdbg+\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-1.fc39\n04/01/2014\n Call Trace:\n dump_stack_lvl+0x5b/0x90\n mark_lock+0xb3f/0xd20\n __lock_acquire+0x77b/0x3360\n _raw_spin_lock+0x34/0x80\n nfs_netfs_issue_read+0x1b2/0x4b0 [nfs]\n netfs_begin_read+0x77f/0x980 [netfs]\n nfs_netfs_readahead+0x45/0x60 [nfs]\n nfs_readahead+0x323/0x5a0 [nfs]\n read_pages+0xf3/0x5c0\n page_cache_ra_unbounded+0x1c8/0x280\n filemap_get_pages+0x38c/0xae0\n filemap_read+0x206/0x5e0\n nfs_file_read+0xb7/0x140 [nfs]\n vfs_read+0x2a9/0x460\n ksys_read+0xb7/0x140",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27031",
"url": "https://www.suse.com/security/cve/CVE-2024-27031"
},
{
"category": "external",
"summary": "SUSE Bug 1223805 for CVE-2024-27031",
"url": "https://bugzilla.suse.com/1223805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27031"
},
{
"cve": "CVE-2024-27046",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27046"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfp: flower: handle acti_netdevs allocation failure\n\nThe kmalloc_array() in nfp_fl_lag_do_work() will return null, if\nthe physical memory has run out. As a result, if we dereference\nthe acti_netdevs, the null pointer dereference bugs will happen.\n\nThis patch adds a check to judge whether allocation failure occurs.\nIf it happens, the delayed work will be rescheduled and try again.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27046",
"url": "https://www.suse.com/security/cve/CVE-2024-27046"
},
{
"category": "external",
"summary": "SUSE Bug 1223827 for CVE-2024-27046",
"url": "https://bugzilla.suse.com/1223827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27046"
},
{
"cve": "CVE-2024-27057",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27057"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend\n\nWhen the system is suspended while audio is active, the\nsof_ipc4_pcm_hw_free() is invoked to reset the pipelines since during\nsuspend the DSP is turned off, streams will be re-started after resume.\n\nIf the firmware crashes during while audio is running (or when we reset\nthe stream before suspend) then the sof_ipc4_set_multi_pipeline_state()\nwill fail with IPC error and the state change is interrupted.\nThis will cause misalignment between the kernel and firmware state on next\nDSP boot resulting errors returned by firmware for IPC messages, eventually\nfailing the audio resume.\nOn stream close the errors are ignored so the kernel state will be\ncorrected on the next DSP boot, so the second boot after the DSP panic.\n\nIf sof_ipc4_trigger_pipelines() is called from sof_ipc4_pcm_hw_free() then\nstate parameter is SOF_IPC4_PIPE_RESET and only in this case.\n\nTreat a forced pipeline reset similarly to how we treat a pcm_free by\nignoring error on state sending to allow the kernel\u0027s state to be\nconsistent with the state the firmware will have after the next boot.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27057",
"url": "https://www.suse.com/security/cve/CVE-2024-27057"
},
{
"category": "external",
"summary": "SUSE Bug 1223831 for CVE-2024-27057",
"url": "https://bugzilla.suse.com/1223831"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27057"
},
{
"cve": "CVE-2024-27062",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27062"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau: lock the client object tree.\n\nIt appears the client object tree has no locking unless I\u0027ve missed\nsomething else. Fix races around adding/removing client objects,\nmostly vram bar mappings.\n\n 4562.099306] general protection fault, probably for non-canonical address 0x6677ed422bceb80c: 0000 [#1] PREEMPT SMP PTI\n[ 4562.099314] CPU: 2 PID: 23171 Comm: deqp-vk Not tainted 6.8.0-rc6+ #27\n[ 4562.099324] Hardware name: Gigabyte Technology Co., Ltd. Z390 I AORUS PRO WIFI/Z390 I AORUS PRO WIFI-CF, BIOS F8 11/05/2021\n[ 4562.099330] RIP: 0010:nvkm_object_search+0x1d/0x70 [nouveau]\n[ 4562.099503] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 0f 1f 44 00 00 48 89 f8 48 85 f6 74 39 48 8b 87 a0 00 00 00 48 85 c0 74 12 \u003c48\u003e 8b 48 f8 48 39 ce 73 15 48 8b 40 10 48 85 c0 75 ee 48 c7 c0 fe\n[ 4562.099506] RSP: 0000:ffffa94cc420bbf8 EFLAGS: 00010206\n[ 4562.099512] RAX: 6677ed422bceb814 RBX: ffff98108791f400 RCX: ffff9810f26b8f58\n[ 4562.099517] RDX: 0000000000000000 RSI: ffff9810f26b9158 RDI: ffff98108791f400\n[ 4562.099519] RBP: ffff9810f26b9158 R08: 0000000000000000 R09: 0000000000000000\n[ 4562.099521] R10: ffffa94cc420bc48 R11: 0000000000000001 R12: ffff9810f02a7cc0\n[ 4562.099526] R13: 0000000000000000 R14: 00000000000000ff R15: 0000000000000007\n[ 4562.099528] FS: 00007f629c5017c0(0000) GS:ffff98142c700000(0000) knlGS:0000000000000000\n[ 4562.099534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4562.099536] CR2: 00007f629a882000 CR3: 000000017019e004 CR4: 00000000003706f0\n[ 4562.099541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 4562.099542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 4562.099544] Call Trace:\n[ 4562.099555] \u003cTASK\u003e\n[ 4562.099573] ? die_addr+0x36/0x90\n[ 4562.099583] ? exc_general_protection+0x246/0x4a0\n[ 4562.099593] ? asm_exc_general_protection+0x26/0x30\n[ 4562.099600] ? nvkm_object_search+0x1d/0x70 [nouveau]\n[ 4562.099730] nvkm_ioctl+0xa1/0x250 [nouveau]\n[ 4562.099861] nvif_object_map_handle+0xc8/0x180 [nouveau]\n[ 4562.099986] nouveau_ttm_io_mem_reserve+0x122/0x270 [nouveau]\n[ 4562.100156] ? dma_resv_test_signaled+0x26/0xb0\n[ 4562.100163] ttm_bo_vm_fault_reserved+0x97/0x3c0 [ttm]\n[ 4562.100182] ? __mutex_unlock_slowpath+0x2a/0x270\n[ 4562.100189] nouveau_ttm_fault+0x69/0xb0 [nouveau]\n[ 4562.100356] __do_fault+0x32/0x150\n[ 4562.100362] do_fault+0x7c/0x560\n[ 4562.100369] __handle_mm_fault+0x800/0xc10\n[ 4562.100382] handle_mm_fault+0x17c/0x3e0\n[ 4562.100388] do_user_addr_fault+0x208/0x860\n[ 4562.100395] exc_page_fault+0x7f/0x200\n[ 4562.100402] asm_exc_page_fault+0x26/0x30\n[ 4562.100412] RIP: 0033:0x9b9870\n[ 4562.100419] Code: 85 a8 f7 ff ff 8b 8d 80 f7 ff ff 89 08 e9 18 f2 ff ff 0f 1f 84 00 00 00 00 00 44 89 32 e9 90 fa ff ff 0f 1f 84 00 00 00 00 00 \u003c44\u003e 89 32 e9 f8 f1 ff ff 0f 1f 84 00 00 00 00 00 66 44 89 32 e9 e7\n[ 4562.100422] RSP: 002b:00007fff9ba2dc70 EFLAGS: 00010246\n[ 4562.100426] RAX: 0000000000000004 RBX: 000000000dd65e10 RCX: 000000fff0000000\n[ 4562.100428] RDX: 00007f629a882000 RSI: 00007f629a882000 RDI: 0000000000000066\n[ 4562.100432] RBP: 00007fff9ba2e570 R08: 0000000000000000 R09: 0000000123ddf000\n[ 4562.100434] R10: 0000000000000001 R11: 0000000000000246 R12: 000000007fffffff\n[ 4562.100436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000\n[ 4562.100446] \u003c/TASK\u003e\n[ 4562.100448] Modules linked in: nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables libcrc32c nfnetlink cmac bnep sunrpc iwlmvm intel_rapl_msr intel_rapl_common snd_sof_pci_intel_cnl x86_pkg_temp_thermal intel_powerclamp snd_sof_intel_hda_common mac80211 coretemp snd_soc_acpi_intel_match kvm_intel snd_soc_acpi snd_soc_hdac_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof_intel_hda_mlink \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27062",
"url": "https://www.suse.com/security/cve/CVE-2024-27062"
},
{
"category": "external",
"summary": "SUSE Bug 1223834 for CVE-2024-27062",
"url": "https://bugzilla.suse.com/1223834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27062"
},
{
"cve": "CVE-2024-27067",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27067"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/evtchn: avoid WARN() when unbinding an event channel\n\nWhen unbinding a user event channel, the related handler might be\ncalled a last time in case the kernel was built with\nCONFIG_DEBUG_SHIRQ. This might cause a WARN() in the handler.\n\nAvoid that by adding an \"unbinding\" flag to struct user_event which\nwill short circuit the handler.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27067",
"url": "https://www.suse.com/security/cve/CVE-2024-27067"
},
{
"category": "external",
"summary": "SUSE Bug 1223739 for CVE-2024-27067",
"url": "https://bugzilla.suse.com/1223739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27067"
},
{
"cve": "CVE-2024-27080",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27080"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix race when detecting delalloc ranges during fiemap\n\nFor fiemap we recently stopped locking the target extent range for the\nwhole duration of the fiemap call, in order to avoid a deadlock in a\nscenario where the fiemap buffer happens to be a memory mapped range of\nthe same file. This use case is very unlikely to be useful in practice but\nit may be triggered by fuzz testing (syzbot, etc).\n\nThis however introduced a race that makes us miss delalloc ranges for\nfile regions that are currently holes, so the caller of fiemap will not\nbe aware that there\u0027s data for some file regions. This can be quite\nserious for some use cases - for example in coreutils versions before 9.0,\nthe cp program used fiemap to detect holes and data in the source file,\ncopying only regions with data (extents or delalloc) from the source file\nto the destination file in order to preserve holes (see the documentation\nfor its --sparse command line option). This means that if cp was used\nwith a source file that had delalloc in a hole, the destination file could\nend up without that data, which is effectively a data loss issue, if it\nhappened to hit the race described below.\n\nThe race happens like this:\n\n1) Fiemap is called, without the FIEMAP_FLAG_SYNC flag, for a file that\n has delalloc in the file range [64M, 65M[, which is currently a hole;\n\n2) Fiemap locks the inode in shared mode, then starts iterating the\n inode\u0027s subvolume tree searching for file extent items, without having\n the whole fiemap target range locked in the inode\u0027s io tree - the\n change introduced recently by commit b0ad381fa769 (\"btrfs: fix\n deadlock with fiemap and extent locking\"). It only locks ranges in\n the io tree when it finds a hole or prealloc extent since that\n commit;\n\n3) Note that fiemap clones each leaf before using it, and this is to\n avoid deadlocks when locking a file range in the inode\u0027s io tree and\n the fiemap buffer is memory mapped to some file, because writing\n to the page with btrfs_page_mkwrite() will wait on any ordered extent\n for the page\u0027s range and the ordered extent needs to lock the range\n and may need to modify the same leaf, therefore leading to a deadlock\n on the leaf;\n\n4) While iterating the file extent items in the cloned leaf before\n finding the hole in the range [64M, 65M[, the delalloc in that range\n is flushed and its ordered extent completes - meaning the corresponding\n file extent item is in the inode\u0027s subvolume tree, but not present in\n the cloned leaf that fiemap is iterating over;\n\n5) When fiemap finds the hole in the [64M, 65M[ range by seeing the gap in\n the cloned leaf (or a file extent item with disk_bytenr == 0 in case\n the NO_HOLES feature is not enabled), it will lock that file range in\n the inode\u0027s io tree and then search for delalloc by checking for the\n EXTENT_DELALLOC bit in the io tree for that range and ordered extents\n (with btrfs_find_delalloc_in_range()). But it finds nothing since the\n delalloc in that range was already flushed and the ordered extent\n completed and is gone - as a result fiemap will not report that there\u0027s\n delalloc or an extent for the range [64M, 65M[, so user space will be\n mislead into thinking that there\u0027s a hole in that range.\n\nThis could actually be sporadically triggered with test case generic/094\nfrom fstests, which reports a missing extent/delalloc range like this:\n\n generic/094 2s ... - output mismatch (see /home/fdmanana/git/hub/xfstests/results//generic/094.out.bad)\n --- tests/generic/094.out\t2020-06-10 19:29:03.830519425 +0100\n +++ /home/fdmanana/git/hub/xfstests/results//generic/094.out.bad\t2024-02-28 11:00:00.381071525 +0000\n @@ -1,3 +1,9 @@\n QA output created by 094\n fiemap run with sync\n fiemap run without sync\n +ERROR: couldn\u0027t find extent at 7\n +map is \u0027HHDDHPPDPHPH\u0027\n +logical: [ 5.. 6] phys:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27080",
"url": "https://www.suse.com/security/cve/CVE-2024-27080"
},
{
"category": "external",
"summary": "SUSE Bug 1223782 for CVE-2024-27080",
"url": "https://bugzilla.suse.com/1223782"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27080"
},
{
"cve": "CVE-2024-27388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27388"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: fix some memleaks in gssx_dec_option_array\n\nThe creds and oa-\u003edata need to be freed in the error-handling paths after\ntheir allocation. So this patch add these deallocations in the\ncorresponding paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27388",
"url": "https://www.suse.com/security/cve/CVE-2024-27388"
},
{
"category": "external",
"summary": "SUSE Bug 1223744 for CVE-2024-27388",
"url": "https://bugzilla.suse.com/1223744"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27388"
},
{
"cve": "CVE-2024-27389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27389"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npstore: inode: Only d_invalidate() is needed\n\nUnloading a modular pstore backend with records in pstorefs would\ntrigger the dput() double-drop warning:\n\n WARNING: CPU: 0 PID: 2569 at fs/dcache.c:762 dput.part.0+0x3f3/0x410\n\nUsing the combo of d_drop()/dput() (as mentioned in\nDocumentation/filesystems/vfs.rst) isn\u0027t the right approach here, and\nleads to the reference counting problem seen above. Use d_invalidate()\nand update the code to not bother checking for error codes that can\nnever happen.\n\n---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27389",
"url": "https://www.suse.com/security/cve/CVE-2024-27389"
},
{
"category": "external",
"summary": "SUSE Bug 1223705 for CVE-2024-27389",
"url": "https://bugzilla.suse.com/1223705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27389"
},
{
"cve": "CVE-2024-27397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27397"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: use timestamp to check for set element timeout\n\nAdd a timestamp field at the beginning of the transaction, store it\nin the nftables per-netns area.\n\nUpdate set backend .insert, .deactivate and sync gc path to use the\ntimestamp, this avoids that an element expires while control plane\ntransaction is still unfinished.\n\n.lookup and .update, which are used from packet path, still use the\ncurrent time to check if the element has expired. And .get path and dump\nalso since this runs lockless under rcu read size lock. Then, there is\nasync gc which also needs to check the current time since it runs\nasynchronously from a workqueue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27397",
"url": "https://www.suse.com/security/cve/CVE-2024-27397"
},
{
"category": "external",
"summary": "SUSE Bug 1224095 for CVE-2024-27397",
"url": "https://bugzilla.suse.com/1224095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27397"
},
{
"cve": "CVE-2024-27398",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27398"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix use-after-free bugs caused by sco_sock_timeout\n\nWhen the sco connection is established and then, the sco socket\nis releasing, timeout_work will be scheduled to judge whether\nthe sco disconnection is timeout. The sock will be deallocated\nlater, but it is dereferenced again in sco_sock_timeout. As a\nresult, the use-after-free bugs will happen. The root cause is\nshown below:\n\n Cleanup Thread | Worker Thread\nsco_sock_release |\n sco_sock_close |\n __sco_sock_close |\n sco_sock_set_timer |\n schedule_delayed_work |\n sco_sock_kill | (wait a time)\n sock_put(sk) //FREE | sco_sock_timeout\n | sock_hold(sk) //USE\n\nThe KASAN report triggered by POC is shown below:\n\n[ 95.890016] ==================================================================\n[ 95.890496] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] Write of size 4 at addr ffff88800c388080 by task kworker/0:0/7\n...\n[ 95.890755] Workqueue: events sco_sock_timeout\n[ 95.890755] Call Trace:\n[ 95.890755] \u003cTASK\u003e\n[ 95.890755] dump_stack_lvl+0x45/0x110\n[ 95.890755] print_address_description+0x78/0x390\n[ 95.890755] print_report+0x11b/0x250\n[ 95.890755] ? __virt_addr_valid+0xbe/0xf0\n[ 95.890755] ? sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] kasan_report+0x139/0x170\n[ 95.890755] ? update_load_avg+0xe5/0x9f0\n[ 95.890755] ? sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] kasan_check_range+0x2c3/0x2e0\n[ 95.890755] sco_sock_timeout+0x5e/0x1c0\n[ 95.890755] process_one_work+0x561/0xc50\n[ 95.890755] worker_thread+0xab2/0x13c0\n[ 95.890755] ? pr_cont_work+0x490/0x490\n[ 95.890755] kthread+0x279/0x300\n[ 95.890755] ? pr_cont_work+0x490/0x490\n[ 95.890755] ? kthread_blkcg+0xa0/0xa0\n[ 95.890755] ret_from_fork+0x34/0x60\n[ 95.890755] ? kthread_blkcg+0xa0/0xa0\n[ 95.890755] ret_from_fork_asm+0x11/0x20\n[ 95.890755] \u003c/TASK\u003e\n[ 95.890755]\n[ 95.890755] Allocated by task 506:\n[ 95.890755] kasan_save_track+0x3f/0x70\n[ 95.890755] __kasan_kmalloc+0x86/0x90\n[ 95.890755] __kmalloc+0x17f/0x360\n[ 95.890755] sk_prot_alloc+0xe1/0x1a0\n[ 95.890755] sk_alloc+0x31/0x4e0\n[ 95.890755] bt_sock_alloc+0x2b/0x2a0\n[ 95.890755] sco_sock_create+0xad/0x320\n[ 95.890755] bt_sock_create+0x145/0x320\n[ 95.890755] __sock_create+0x2e1/0x650\n[ 95.890755] __sys_socket+0xd0/0x280\n[ 95.890755] __x64_sys_socket+0x75/0x80\n[ 95.890755] do_syscall_64+0xc4/0x1b0\n[ 95.890755] entry_SYSCALL_64_after_hwframe+0x67/0x6f\n[ 95.890755]\n[ 95.890755] Freed by task 506:\n[ 95.890755] kasan_save_track+0x3f/0x70\n[ 95.890755] kasan_save_free_info+0x40/0x50\n[ 95.890755] poison_slab_object+0x118/0x180\n[ 95.890755] __kasan_slab_free+0x12/0x30\n[ 95.890755] kfree+0xb2/0x240\n[ 95.890755] __sk_destruct+0x317/0x410\n[ 95.890755] sco_sock_release+0x232/0x280\n[ 95.890755] sock_close+0xb2/0x210\n[ 95.890755] __fput+0x37f/0x770\n[ 95.890755] task_work_run+0x1ae/0x210\n[ 95.890755] get_signal+0xe17/0xf70\n[ 95.890755] arch_do_signal_or_restart+0x3f/0x520\n[ 95.890755] syscall_exit_to_user_mode+0x55/0x120\n[ 95.890755] do_syscall_64+0xd1/0x1b0\n[ 95.890755] entry_SYSCALL_64_after_hwframe+0x67/0x6f\n[ 95.890755]\n[ 95.890755] The buggy address belongs to the object at ffff88800c388000\n[ 95.890755] which belongs to the cache kmalloc-1k of size 1024\n[ 95.890755] The buggy address is located 128 bytes inside of\n[ 95.890755] freed 1024-byte region [ffff88800c388000, ffff88800c388400)\n[ 95.890755]\n[ 95.890755] The buggy address belongs to the physical page:\n[ 95.890755] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88800c38a800 pfn:0xc388\n[ 95.890755] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0\n[ 95.890755] ano\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27398",
"url": "https://www.suse.com/security/cve/CVE-2024-27398"
},
{
"category": "external",
"summary": "SUSE Bug 1224174 for CVE-2024-27398",
"url": "https://bugzilla.suse.com/1224174"
},
{
"category": "external",
"summary": "SUSE Bug 1225013 for CVE-2024-27398",
"url": "https://bugzilla.suse.com/1225013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-27398"
},
{
"cve": "CVE-2024-27399",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27399"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout\n\nThere is a race condition between l2cap_chan_timeout() and\nl2cap_chan_del(). When we use l2cap_chan_del() to delete the\nchannel, the chan-\u003econn will be set to null. But the conn could\nbe dereferenced again in the mutex_lock() of l2cap_chan_timeout().\nAs a result the null pointer dereference bug will happen. The\nKASAN report triggered by POC is shown below:\n\n[ 472.074580] ==================================================================\n[ 472.075284] BUG: KASAN: null-ptr-deref in mutex_lock+0x68/0xc0\n[ 472.075308] Write of size 8 at addr 0000000000000158 by task kworker/0:0/7\n[ 472.075308]\n[ 472.075308] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 6.9.0-rc5-00356-g78c0094a146b #36\n[ 472.075308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu4\n[ 472.075308] Workqueue: events l2cap_chan_timeout\n[ 472.075308] Call Trace:\n[ 472.075308] \u003cTASK\u003e\n[ 472.075308] dump_stack_lvl+0x137/0x1a0\n[ 472.075308] print_report+0x101/0x250\n[ 472.075308] ? __virt_addr_valid+0x77/0x160\n[ 472.075308] ? mutex_lock+0x68/0xc0\n[ 472.075308] kasan_report+0x139/0x170\n[ 472.075308] ? mutex_lock+0x68/0xc0\n[ 472.075308] kasan_check_range+0x2c3/0x2e0\n[ 472.075308] mutex_lock+0x68/0xc0\n[ 472.075308] l2cap_chan_timeout+0x181/0x300\n[ 472.075308] process_one_work+0x5d2/0xe00\n[ 472.075308] worker_thread+0xe1d/0x1660\n[ 472.075308] ? pr_cont_work+0x5e0/0x5e0\n[ 472.075308] kthread+0x2b7/0x350\n[ 472.075308] ? pr_cont_work+0x5e0/0x5e0\n[ 472.075308] ? kthread_blkcg+0xd0/0xd0\n[ 472.075308] ret_from_fork+0x4d/0x80\n[ 472.075308] ? kthread_blkcg+0xd0/0xd0\n[ 472.075308] ret_from_fork_asm+0x11/0x20\n[ 472.075308] \u003c/TASK\u003e\n[ 472.075308] ==================================================================\n[ 472.094860] Disabling lock debugging due to kernel taint\n[ 472.096136] BUG: kernel NULL pointer dereference, address: 0000000000000158\n[ 472.096136] #PF: supervisor write access in kernel mode\n[ 472.096136] #PF: error_code(0x0002) - not-present page\n[ 472.096136] PGD 0 P4D 0\n[ 472.096136] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI\n[ 472.096136] CPU: 0 PID: 7 Comm: kworker/0:0 Tainted: G B 6.9.0-rc5-00356-g78c0094a146b #36\n[ 472.096136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu4\n[ 472.096136] Workqueue: events l2cap_chan_timeout\n[ 472.096136] RIP: 0010:mutex_lock+0x88/0xc0\n[ 472.096136] Code: be 08 00 00 00 e8 f8 23 1f fd 4c 89 f7 be 08 00 00 00 e8 eb 23 1f fd 42 80 3c 23 00 74 08 48 88\n[ 472.096136] RSP: 0018:ffff88800744fc78 EFLAGS: 00000246\n[ 472.096136] RAX: 0000000000000000 RBX: 1ffff11000e89f8f RCX: ffffffff8457c865\n[ 472.096136] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88800744fc78\n[ 472.096136] RBP: 0000000000000158 R08: ffff88800744fc7f R09: 1ffff11000e89f8f\n[ 472.096136] R10: dffffc0000000000 R11: ffffed1000e89f90 R12: dffffc0000000000\n[ 472.096136] R13: 0000000000000158 R14: ffff88800744fc78 R15: ffff888007405a00\n[ 472.096136] FS: 0000000000000000(0000) GS:ffff88806d200000(0000) knlGS:0000000000000000\n[ 472.096136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 472.096136] CR2: 0000000000000158 CR3: 000000000da32000 CR4: 00000000000006f0\n[ 472.096136] Call Trace:\n[ 472.096136] \u003cTASK\u003e\n[ 472.096136] ? __die_body+0x8d/0xe0\n[ 472.096136] ? page_fault_oops+0x6b8/0x9a0\n[ 472.096136] ? kernelmode_fixup_or_oops+0x20c/0x2a0\n[ 472.096136] ? do_user_addr_fault+0x1027/0x1340\n[ 472.096136] ? _printk+0x7a/0xa0\n[ 472.096136] ? mutex_lock+0x68/0xc0\n[ 472.096136] ? add_taint+0x42/0xd0\n[ 472.096136] ? exc_page_fault+0x6a/0x1b0\n[ 472.096136] ? asm_exc_page_fault+0x26/0x30\n[ 472.096136] ? mutex_lock+0x75/0xc0\n[ 472.096136] ? mutex_lock+0x88/0xc0\n[ 472.096136] ? mutex_lock+0x75/0xc0\n[ 472.096136] l2cap_chan_timeo\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27399",
"url": "https://www.suse.com/security/cve/CVE-2024-27399"
},
{
"category": "external",
"summary": "SUSE Bug 1224177 for CVE-2024-27399",
"url": "https://bugzilla.suse.com/1224177"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27399"
},
{
"cve": "CVE-2024-27400",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27400"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2\n\nThis reverts drm/amdgpu: fix ftrace event amdgpu_bo_move always move\non same heap. The basic problem here is that after the move the old\nlocation is simply not available any more.\n\nSome fixes were suggested, but essentially we should call the move\nnotification before actually moving things because only this way we have\nthe correct order for DMA-buf and VM move notifications as well.\n\nAlso rework the statistic handling so that we don\u0027t update the eviction\ncounter before the move.\n\nv2: add missing NULL check",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27400",
"url": "https://www.suse.com/security/cve/CVE-2024-27400"
},
{
"category": "external",
"summary": "SUSE Bug 1224180 for CVE-2024-27400",
"url": "https://bugzilla.suse.com/1224180"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27400"
},
{
"cve": "CVE-2024-27405",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27405"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs\n\nIt is observed sometimes when tethering is used over NCM with Windows 11\nas host, at some instances, the gadget_giveback has one byte appended at\nthe end of a proper NTB. When the NTB is parsed, unwrap call looks for\nany leftover bytes in SKB provided by u_ether and if there are any pending\nbytes, it treats them as a separate NTB and parses it. But in case the\nsecond NTB (as per unwrap call) is faulty/corrupt, all the datagrams that\nwere parsed properly in the first NTB and saved in rx_list are dropped.\n\nAdding a few custom traces showed the following:\n[002] d..1 7828.532866: dwc3_gadget_giveback: ep1out:\nreq 000000003868811a length 1025/16384 zsI ==\u003e 0\n[002] d..1 7828.532867: ncm_unwrap_ntb: K: ncm_unwrap_ntb toprocess: 1025\n[002] d..1 7828.532867: ncm_unwrap_ntb: K: ncm_unwrap_ntb nth: 1751999342\n[002] d..1 7828.532868: ncm_unwrap_ntb: K: ncm_unwrap_ntb seq: 0xce67\n[002] d..1 7828.532868: ncm_unwrap_ntb: K: ncm_unwrap_ntb blk_len: 0x400\n[002] d..1 7828.532868: ncm_unwrap_ntb: K: ncm_unwrap_ntb ndp_len: 0x10\n[002] d..1 7828.532869: ncm_unwrap_ntb: K: Parsed NTB with 1 frames\n\nIn this case, the giveback is of 1025 bytes and block length is 1024.\nThe rest 1 byte (which is 0x00) won\u0027t be parsed resulting in drop of\nall datagrams in rx_list.\n\nSame is case with packets of size 2048:\n[002] d..1 7828.557948: dwc3_gadget_giveback: ep1out:\nreq 0000000011dfd96e length 2049/16384 zsI ==\u003e 0\n[002] d..1 7828.557949: ncm_unwrap_ntb: K: ncm_unwrap_ntb nth: 1751999342\n[002] d..1 7828.557950: ncm_unwrap_ntb: K: ncm_unwrap_ntb blk_len: 0x800\n\nLecroy shows one byte coming in extra confirming that the byte is coming\nin from PC:\n\n Transfer 2959 - Bytes Transferred(1025) Timestamp((18.524 843 590)\n - Transaction 8391 - Data(1025 bytes) Timestamp(18.524 843 590)\n --- Packet 4063861\n Data(1024 bytes)\n Duration(2.117us) Idle(14.700ns) Timestamp(18.524 843 590)\n --- Packet 4063863\n Data(1 byte)\n Duration(66.160ns) Time(282.000ns) Timestamp(18.524 845 722)\n\nAccording to Windows driver, no ZLP is needed if wBlockLength is non-zero,\nbecause the non-zero wBlockLength has already told the function side the\nsize of transfer to be expected. However, there are in-market NCM devices\nthat rely on ZLP as long as the wBlockLength is multiple of wMaxPacketSize.\nTo deal with such devices, it pads an extra 0 at end so the transfer is no\nlonger multiple of wMaxPacketSize.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27405",
"url": "https://www.suse.com/security/cve/CVE-2024-27405"
},
{
"category": "external",
"summary": "SUSE Bug 1224423 for CVE-2024-27405",
"url": "https://bugzilla.suse.com/1224423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27405"
},
{
"cve": "CVE-2024-27410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27410"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: reject iftype change with mesh ID change\n\nIt\u0027s currently possible to change the mesh ID when the\ninterface isn\u0027t yet in mesh mode, at the same time as\nchanging it into mesh mode. This leads to an overwrite\nof data in the wdev-\u003eu union for the interface type it\ncurrently has, causing cfg80211_change_iface() to do\nwrong things when switching.\n\nWe could probably allow setting an interface to mesh\nwhile setting the mesh ID at the same time by doing a\ndifferent order of operations here, but realistically\nthere\u0027s no userspace that\u0027s going to do this, so just\ndisallow changes in iftype when setting mesh ID.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27410",
"url": "https://www.suse.com/security/cve/CVE-2024-27410"
},
{
"category": "external",
"summary": "SUSE Bug 1224432 for CVE-2024-27410",
"url": "https://bugzilla.suse.com/1224432"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27410"
},
{
"cve": "CVE-2024-27411",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27411"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: keep DMA buffers required for suspend/resume\n\nNouveau deallocates a few buffers post GPU init which are required for GPU suspend/resume to function correctly.\nThis is likely not as big an issue on systems where the NVGPU is the only GPU, but on multi-GPU set ups it leads to a regression where the kernel module errors and results in a system-wide rendering freeze.\n\nThis commit addresses that regression by moving the two buffers required for suspend and resume to be deallocated at driver unload instead of post init.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27411",
"url": "https://www.suse.com/security/cve/CVE-2024-27411"
},
{
"category": "external",
"summary": "SUSE Bug 1224433 for CVE-2024-27411",
"url": "https://bugzilla.suse.com/1224433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27411"
},
{
"cve": "CVE-2024-27412",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27412"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: bq27xxx-i2c: Do not free non existing IRQ\n\nThe bq27xxx i2c-client may not have an IRQ, in which case\nclient-\u003eirq will be 0. bq27xxx_battery_i2c_probe() already has\nan if (client-\u003eirq) check wrapping the request_threaded_irq().\n\nBut bq27xxx_battery_i2c_remove() unconditionally calls\nfree_irq(client-\u003eirq) leading to:\n\n[ 190.310742] ------------[ cut here ]------------\n[ 190.310843] Trying to free already-free IRQ 0\n[ 190.310861] WARNING: CPU: 2 PID: 1304 at kernel/irq/manage.c:1893 free_irq+0x1b8/0x310\n\nFollowed by a backtrace when unbinding the driver. Add\nan if (client-\u003eirq) to bq27xxx_battery_i2c_remove() mirroring\nprobe() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27412",
"url": "https://www.suse.com/security/cve/CVE-2024-27412"
},
{
"category": "external",
"summary": "SUSE Bug 1224437 for CVE-2024-27412",
"url": "https://bugzilla.suse.com/1224437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27412"
},
{
"cve": "CVE-2024-27413",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27413"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/capsule-loader: fix incorrect allocation size\n\ngcc-14 notices that the allocation with sizeof(void) on 32-bit architectures\nis not enough for a 64-bit phys_addr_t:\n\ndrivers/firmware/efi/capsule-loader.c: In function \u0027efi_capsule_open\u0027:\ndrivers/firmware/efi/capsule-loader.c:295:24: error: allocation of insufficient size \u00274\u0027 for type \u0027phys_addr_t\u0027 {aka \u0027long long unsigned int\u0027} with size \u00278\u0027 [-Werror=alloc-size]\n 295 | cap_info-\u003ephys = kzalloc(sizeof(void *), GFP_KERNEL);\n | ^\n\nUse the correct type instead here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27413",
"url": "https://www.suse.com/security/cve/CVE-2024-27413"
},
{
"category": "external",
"summary": "SUSE Bug 1224438 for CVE-2024-27413",
"url": "https://bugzilla.suse.com/1224438"
},
{
"category": "external",
"summary": "SUSE Bug 1225315 for CVE-2024-27413",
"url": "https://bugzilla.suse.com/1225315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-27413"
},
{
"cve": "CVE-2024-27416",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27416"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST\n\nIf we received HCI_EV_IO_CAPA_REQUEST while\nHCI_OP_READ_REMOTE_EXT_FEATURES is yet to be responded assume the remote\ndoes support SSP since otherwise this event shouldn\u0027t be generated.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27416",
"url": "https://www.suse.com/security/cve/CVE-2024-27416"
},
{
"category": "external",
"summary": "SUSE Bug 1224723 for CVE-2024-27416",
"url": "https://bugzilla.suse.com/1224723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27416"
},
{
"cve": "CVE-2024-27432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27432"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: mtk_eth_soc: fix PPE hanging issue\n\nA patch to resolve an issue was found in MediaTek\u0027s GPL-licensed SDK:\nIn the mtk_ppe_stop() function, the PPE scan mode is not disabled before\ndisabling the PPE. This can potentially lead to a hang during the process\nof disabling the PPE.\n\nWithout this patch, the PPE may experience a hang during the reboot test.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27432",
"url": "https://www.suse.com/security/cve/CVE-2024-27432"
},
{
"category": "external",
"summary": "SUSE Bug 1224716 for CVE-2024-27432",
"url": "https://bugzilla.suse.com/1224716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27432"
},
{
"cve": "CVE-2024-27434",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27434"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: don\u0027t set the MFP flag for the GTK\n\nThe firmware doesn\u0027t need the MFP flag for the GTK, it can even make the\nfirmware crash. in case the AP is configured with: group cipher TKIP and\nMFPC. We would send the GTK with cipher = TKIP and MFP which is of course\nnot possible.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27434",
"url": "https://www.suse.com/security/cve/CVE-2024-27434"
},
{
"category": "external",
"summary": "SUSE Bug 1224710 for CVE-2024-27434",
"url": "https://bugzilla.suse.com/1224710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27434"
},
{
"cve": "CVE-2024-27435",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27435"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: fix reconnection fail due to reserved tag allocation\n\nWe found a issue on production environment while using NVMe over RDMA,\nadmin_q reconnect failed forever while remote target and network is ok.\nAfter dig into it, we found it may caused by a ABBA deadlock due to tag\nallocation. In my case, the tag was hold by a keep alive request\nwaiting inside admin_q, as we quiesced admin_q while reset ctrl, so the\nrequest maked as idle and will not process before reset success. As\nfabric_q shares tagset with admin_q, while reconnect remote target, we\nneed a tag for connect command, but the only one reserved tag was held\nby keep alive command which waiting inside admin_q. As a result, we\nfailed to reconnect admin_q forever. In order to fix this issue, I\nthink we should keep two reserved tags for admin queue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27435",
"url": "https://www.suse.com/security/cve/CVE-2024-27435"
},
{
"category": "external",
"summary": "SUSE Bug 1224717 for CVE-2024-27435",
"url": "https://bugzilla.suse.com/1224717"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27435"
},
{
"cve": "CVE-2024-27436",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27436"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Stop parsing channels bits when all channels are found.\n\nIf a usb audio device sets more bits than the amount of channels\nit could write outside of the map array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27436",
"url": "https://www.suse.com/security/cve/CVE-2024-27436"
},
{
"category": "external",
"summary": "SUSE Bug 1224803 for CVE-2024-27436",
"url": "https://bugzilla.suse.com/1224803"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-27436"
},
{
"cve": "CVE-2024-35784",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35784"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix deadlock with fiemap and extent locking\n\nWhile working on the patchset to remove extent locking I got a lockdep\nsplat with fiemap and pagefaulting with my new extent lock replacement\nlock.\n\nThis deadlock exists with our normal code, we just don\u0027t have lockdep\nannotations with the extent locking so we\u0027ve never noticed it.\n\nSince we\u0027re copying the fiemap extent to user space on every iteration\nwe have the chance of pagefaulting. Because we hold the extent lock for\nthe entire range we could mkwrite into a range in the file that we have\nmmap\u0027ed. This would deadlock with the following stack trace\n\n[\u003c0\u003e] lock_extent+0x28d/0x2f0\n[\u003c0\u003e] btrfs_page_mkwrite+0x273/0x8a0\n[\u003c0\u003e] do_page_mkwrite+0x50/0xb0\n[\u003c0\u003e] do_fault+0xc1/0x7b0\n[\u003c0\u003e] __handle_mm_fault+0x2fa/0x460\n[\u003c0\u003e] handle_mm_fault+0xa4/0x330\n[\u003c0\u003e] do_user_addr_fault+0x1f4/0x800\n[\u003c0\u003e] exc_page_fault+0x7c/0x1e0\n[\u003c0\u003e] asm_exc_page_fault+0x26/0x30\n[\u003c0\u003e] rep_movs_alternative+0x33/0x70\n[\u003c0\u003e] _copy_to_user+0x49/0x70\n[\u003c0\u003e] fiemap_fill_next_extent+0xc8/0x120\n[\u003c0\u003e] emit_fiemap_extent+0x4d/0xa0\n[\u003c0\u003e] extent_fiemap+0x7f8/0xad0\n[\u003c0\u003e] btrfs_fiemap+0x49/0x80\n[\u003c0\u003e] __x64_sys_ioctl+0x3e1/0xb50\n[\u003c0\u003e] do_syscall_64+0x94/0x1a0\n[\u003c0\u003e] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n\nI wrote an fstest to reproduce this deadlock without my replacement lock\nand verified that the deadlock exists with our existing locking.\n\nTo fix this simply don\u0027t take the extent lock for the entire duration of\nthe fiemap. This is safe in general because we keep track of where we\nare when we\u0027re searching the tree, so if an ordered extent updates in\nthe middle of our fiemap call we\u0027ll still emit the correct extents\nbecause we know what offset we were on before.\n\nThe only place we maintain the lock is searching delalloc. Since the\ndelalloc stuff can change during writeback we want to lock the extent\nrange so we have a consistent view of delalloc at the time we\u0027re\nchecking to see if we need to set the delalloc flag.\n\nWith this patch applied we no longer deadlock with my testcase.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35784",
"url": "https://www.suse.com/security/cve/CVE-2024-35784"
},
{
"category": "external",
"summary": "SUSE Bug 1224804 for CVE-2024-35784",
"url": "https://bugzilla.suse.com/1224804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35784"
},
{
"cve": "CVE-2024-35786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35786"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: fix stale locked mutex in nouveau_gem_ioctl_pushbuf\n\nIf VM_BIND is enabled on the client the legacy submission ioctl can\u0027t be\nused, however if a client tries to do so regardless it will return an\nerror. In this case the clients mutex remained unlocked leading to a\ndeadlock inside nouveau_drm_postclose or any other nouveau ioctl call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35786",
"url": "https://www.suse.com/security/cve/CVE-2024-35786"
},
{
"category": "external",
"summary": "SUSE Bug 1224714 for CVE-2024-35786",
"url": "https://bugzilla.suse.com/1224714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35786"
},
{
"cve": "CVE-2024-35788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35788"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35788",
"url": "https://www.suse.com/security/cve/CVE-2024-35788"
},
{
"category": "external",
"summary": "SUSE Bug 1224709 for CVE-2024-35788",
"url": "https://bugzilla.suse.com/1224709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35788"
},
{
"cve": "CVE-2024-35789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35789"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes\n\nWhen moving a station out of a VLAN and deleting the VLAN afterwards, the\nfast_rx entry still holds a pointer to the VLAN\u0027s netdev, which can cause\nuse-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx\nafter the VLAN change.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35789",
"url": "https://www.suse.com/security/cve/CVE-2024-35789"
},
{
"category": "external",
"summary": "SUSE Bug 1224749 for CVE-2024-35789",
"url": "https://bugzilla.suse.com/1224749"
},
{
"category": "external",
"summary": "SUSE Bug 1227320 for CVE-2024-35789",
"url": "https://bugzilla.suse.com/1227320"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-35789"
},
{
"cve": "CVE-2024-35790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35790"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: altmodes/displayport: create sysfs nodes as driver\u0027s default device attribute group\n\nThe DisplayPort driver\u0027s sysfs nodes may be present to the userspace before\ntypec_altmode_set_drvdata() completes in dp_altmode_probe. This means that\na sysfs read can trigger a NULL pointer error by deferencing dp-\u003ehpd in\nhpd_show or dp-\u003elock in pin_assignment_show, as dev_get_drvdata() returns\nNULL in those cases.\n\nRemove manual sysfs node creation in favor of adding attribute group as\ndefault for devices bound to the driver. The ATTRIBUTE_GROUPS() macro is\nnot used here otherwise the path to the sysfs nodes is no longer compliant\nwith the ABI.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35790",
"url": "https://www.suse.com/security/cve/CVE-2024-35790"
},
{
"category": "external",
"summary": "SUSE Bug 1224712 for CVE-2024-35790",
"url": "https://bugzilla.suse.com/1224712"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35790"
},
{
"cve": "CVE-2024-35794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35794"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-raid: really frozen sync_thread during suspend\n\n1) commit f52f5c71f3d4 (\"md: fix stopping sync thread\") remove\n MD_RECOVERY_FROZEN from __md_stop_writes() and doesn\u0027t realize that\n dm-raid relies on __md_stop_writes() to frozen sync_thread\n indirectly. Fix this problem by adding MD_RECOVERY_FROZEN in\n md_stop_writes(), and since stop_sync_thread() is only used for\n dm-raid in this case, also move stop_sync_thread() to\n md_stop_writes().\n2) The flag MD_RECOVERY_FROZEN doesn\u0027t mean that sync thread is frozen,\n it only prevent new sync_thread to start, and it can\u0027t stop the\n running sync thread; In order to frozen sync_thread, after seting the\n flag, stop_sync_thread() should be used.\n3) The flag MD_RECOVERY_FROZEN doesn\u0027t mean that writes are stopped, use\n it as condition for md_stop_writes() in raid_postsuspend() doesn\u0027t\n look correct. Consider that reentrant stop_sync_thread() do nothing,\n always call md_stop_writes() in raid_postsuspend().\n4) raid_message can set/clear the flag MD_RECOVERY_FROZEN at anytime,\n and if MD_RECOVERY_FROZEN is cleared while the array is suspended,\n new sync_thread can start unexpected. Fix this by disallow\n raid_message() to change sync_thread status during suspend.\n\nNote that after commit f52f5c71f3d4 (\"md: fix stopping sync thread\"), the\ntest shell/lvconvert-raid-reshape.sh start to hang in stop_sync_thread(),\nand with previous fixes, the test won\u0027t hang there anymore, however, the\ntest will still fail and complain that ext4 is corrupted. And with this\npatch, the test won\u0027t hang due to stop_sync_thread() or fail due to ext4\nis corrupted anymore. However, there is still a deadlock related to\ndm-raid456 that will be fixed in following patches.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35794",
"url": "https://www.suse.com/security/cve/CVE-2024-35794"
},
{
"category": "external",
"summary": "SUSE Bug 1224706 for CVE-2024-35794",
"url": "https://bugzilla.suse.com/1224706"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35794"
},
{
"cve": "CVE-2024-35795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix deadlock while reading mqd from debugfs\n\nAn errant disk backup on my desktop got into debugfs and triggered the\nfollowing deadlock scenario in the amdgpu debugfs files. The machine\nalso hard-resets immediately after those lines are printed (although I\nwasn\u0027t able to reproduce that part when reading by hand):\n\n[ 1318.016074][ T1082] ======================================================\n[ 1318.016607][ T1082] WARNING: possible circular locking dependency detected\n[ 1318.017107][ T1082] 6.8.0-rc7-00015-ge0c8221b72c0 #17 Not tainted\n[ 1318.017598][ T1082] ------------------------------------------------------\n[ 1318.018096][ T1082] tar/1082 is trying to acquire lock:\n[ 1318.018585][ T1082] ffff98c44175d6a0 (\u0026mm-\u003emmap_lock){++++}-{3:3}, at: __might_fault+0x40/0x80\n[ 1318.019084][ T1082]\n[ 1318.019084][ T1082] but task is already holding lock:\n[ 1318.020052][ T1082] ffff98c4c13f55f8 (reservation_ww_class_mutex){+.+.}-{3:3}, at: amdgpu_debugfs_mqd_read+0x6a/0x250 [amdgpu]\n[ 1318.020607][ T1082]\n[ 1318.020607][ T1082] which lock already depends on the new lock.\n[ 1318.020607][ T1082]\n[ 1318.022081][ T1082]\n[ 1318.022081][ T1082] the existing dependency chain (in reverse order) is:\n[ 1318.023083][ T1082]\n[ 1318.023083][ T1082] -\u003e #2 (reservation_ww_class_mutex){+.+.}-{3:3}:\n[ 1318.024114][ T1082] __ww_mutex_lock.constprop.0+0xe0/0x12f0\n[ 1318.024639][ T1082] ww_mutex_lock+0x32/0x90\n[ 1318.025161][ T1082] dma_resv_lockdep+0x18a/0x330\n[ 1318.025683][ T1082] do_one_initcall+0x6a/0x350\n[ 1318.026210][ T1082] kernel_init_freeable+0x1a3/0x310\n[ 1318.026728][ T1082] kernel_init+0x15/0x1a0\n[ 1318.027242][ T1082] ret_from_fork+0x2c/0x40\n[ 1318.027759][ T1082] ret_from_fork_asm+0x11/0x20\n[ 1318.028281][ T1082]\n[ 1318.028281][ T1082] -\u003e #1 (reservation_ww_class_acquire){+.+.}-{0:0}:\n[ 1318.029297][ T1082] dma_resv_lockdep+0x16c/0x330\n[ 1318.029790][ T1082] do_one_initcall+0x6a/0x350\n[ 1318.030263][ T1082] kernel_init_freeable+0x1a3/0x310\n[ 1318.030722][ T1082] kernel_init+0x15/0x1a0\n[ 1318.031168][ T1082] ret_from_fork+0x2c/0x40\n[ 1318.031598][ T1082] ret_from_fork_asm+0x11/0x20\n[ 1318.032011][ T1082]\n[ 1318.032011][ T1082] -\u003e #0 (\u0026mm-\u003emmap_lock){++++}-{3:3}:\n[ 1318.032778][ T1082] __lock_acquire+0x14bf/0x2680\n[ 1318.033141][ T1082] lock_acquire+0xcd/0x2c0\n[ 1318.033487][ T1082] __might_fault+0x58/0x80\n[ 1318.033814][ T1082] amdgpu_debugfs_mqd_read+0x103/0x250 [amdgpu]\n[ 1318.034181][ T1082] full_proxy_read+0x55/0x80\n[ 1318.034487][ T1082] vfs_read+0xa7/0x360\n[ 1318.034788][ T1082] ksys_read+0x70/0xf0\n[ 1318.035085][ T1082] do_syscall_64+0x94/0x180\n[ 1318.035375][ T1082] entry_SYSCALL_64_after_hwframe+0x46/0x4e\n[ 1318.035664][ T1082]\n[ 1318.035664][ T1082] other info that might help us debug this:\n[ 1318.035664][ T1082]\n[ 1318.036487][ T1082] Chain exists of:\n[ 1318.036487][ T1082] \u0026mm-\u003emmap_lock --\u003e reservation_ww_class_acquire --\u003e reservation_ww_class_mutex\n[ 1318.036487][ T1082]\n[ 1318.037310][ T1082] Possible unsafe locking scenario:\n[ 1318.037310][ T1082]\n[ 1318.037838][ T1082] CPU0 CPU1\n[ 1318.038101][ T1082] ---- ----\n[ 1318.038350][ T1082] lock(reservation_ww_class_mutex);\n[ 1318.038590][ T1082] lock(reservation_ww_class_acquire);\n[ 1318.038839][ T1082] lock(reservation_ww_class_mutex);\n[ 1318.039083][ T1082] rlock(\u0026mm-\u003emmap_lock);\n[ 1318.039328][ T1082]\n[ 1318.039328][ T1082] *** DEADLOCK ***\n[ 1318.039328][ T1082]\n[ 1318.040029][ T1082] 1 lock held by tar/1082:\n[ 1318.040259][ T1082] #0: ffff98c4c13f55f8 (reservation_ww_class_mutex){+.+.}-{3:3}, at: amdgpu_debugfs_mqd_read+0x6a/0x250 [amdgpu]\n[ 1318.040560][ T1082]\n[ 1318.040560][ T1082] stack backtrace:\n[\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35795",
"url": "https://www.suse.com/security/cve/CVE-2024-35795"
},
{
"category": "external",
"summary": "SUSE Bug 1224634 for CVE-2024-35795",
"url": "https://bugzilla.suse.com/1224634"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35795"
},
{
"cve": "CVE-2024-35796",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35796"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ll_temac: platform_get_resource replaced by wrong function\n\nThe function platform_get_resource was replaced with\ndevm_platform_ioremap_resource_byname and is called using 0 as name.\n\nThis eventually ends up in platform_get_resource_byname in the call\nstack, where it causes a null pointer in strcmp.\n\n\tif (type == resource_type(r) \u0026\u0026 !strcmp(r-\u003ename, name))\n\nIt should have been replaced with devm_platform_ioremap_resource.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35796",
"url": "https://www.suse.com/security/cve/CVE-2024-35796"
},
{
"category": "external",
"summary": "SUSE Bug 1224615 for CVE-2024-35796",
"url": "https://bugzilla.suse.com/1224615"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35796"
},
{
"cve": "CVE-2024-35799",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35799"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Prevent crash when disable stream\n\n[Why]\nDisabling stream encoder invokes a function that no longer exists.\n\n[How]\nCheck if the function declaration is NULL in disable stream encoder.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35799",
"url": "https://www.suse.com/security/cve/CVE-2024-35799"
},
{
"category": "external",
"summary": "SUSE Bug 1224740 for CVE-2024-35799",
"url": "https://bugzilla.suse.com/1224740"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35799"
},
{
"cve": "CVE-2024-35800",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35800"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi: fix panic in kdump kernel\n\nCheck if get_next_variable() is actually valid pointer before\ncalling it. In kdump kernel this method is set to NULL that causes\npanic during the kexec-ed kernel boot.\n\nTested with QEMU and OVMF firmware.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35800",
"url": "https://www.suse.com/security/cve/CVE-2024-35800"
},
{
"category": "external",
"summary": "SUSE Bug 1224507 for CVE-2024-35800",
"url": "https://bugzilla.suse.com/1224507"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35800"
},
{
"cve": "CVE-2024-35801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Keep xfd_state in sync with MSR_IA32_XFD\n\nCommit 672365477ae8 (\"x86/fpu: Update XFD state where required\") and\ncommit 8bf26758ca96 (\"x86/fpu: Add XFD state to fpstate\") introduced a\nper CPU variable xfd_state to keep the MSR_IA32_XFD value cached, in\norder to avoid unnecessary writes to the MSR.\n\nOn CPU hotplug MSR_IA32_XFD is reset to the init_fpstate.xfd, which\nwipes out any stale state. But the per CPU cached xfd value is not\nreset, which brings them out of sync.\n\nAs a consequence a subsequent xfd_update_state() might fail to update\nthe MSR which in turn can result in XRSTOR raising a #NM in kernel\nspace, which crashes the kernel.\n\nTo fix this, introduce xfd_set_state() to write xfd_state together\nwith MSR_IA32_XFD, and use it in all places that set MSR_IA32_XFD.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35801",
"url": "https://www.suse.com/security/cve/CVE-2024-35801"
},
{
"category": "external",
"summary": "SUSE Bug 1224732 for CVE-2024-35801",
"url": "https://bugzilla.suse.com/1224732"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35801"
},
{
"cve": "CVE-2024-35806",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35806"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: fsl: qbman: Always disable interrupts when taking cgr_lock\n\nsmp_call_function_single disables IRQs when executing the callback. To\nprevent deadlocks, we must disable IRQs when taking cgr_lock elsewhere.\nThis is already done by qman_update_cgr and qman_delete_cgr; fix the\nother lockers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35806",
"url": "https://www.suse.com/security/cve/CVE-2024-35806"
},
{
"category": "external",
"summary": "SUSE Bug 1224699 for CVE-2024-35806",
"url": "https://bugzilla.suse.com/1224699"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35806"
},
{
"cve": "CVE-2024-35808",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35808"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/dm-raid: don\u0027t call md_reap_sync_thread() directly\n\nCurrently md_reap_sync_thread() is called from raid_message() directly\nwithout holding \u0027reconfig_mutex\u0027, this is definitely unsafe because\nmd_reap_sync_thread() can change many fields that is protected by\n\u0027reconfig_mutex\u0027.\n\nHowever, hold \u0027reconfig_mutex\u0027 here is still problematic because this\nwill cause deadlock, for example, commit 130443d60b1b (\"md: refactor\nidle/frozen_sync_thread() to fix deadlock\").\n\nFix this problem by using stop_sync_thread() to unregister sync_thread,\nlike md/raid did.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35808",
"url": "https://www.suse.com/security/cve/CVE-2024-35808"
},
{
"category": "external",
"summary": "SUSE Bug 1224623 for CVE-2024-35808",
"url": "https://bugzilla.suse.com/1224623"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35808"
},
{
"cve": "CVE-2024-35809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/PM: Drain runtime-idle callbacks before driver removal\n\nA race condition between the .runtime_idle() callback and the .remove()\ncallback in the rtsx_pcr PCI driver leads to a kernel crash due to an\nunhandled page fault [1].\n\nThe problem is that rtsx_pci_runtime_idle() is not expected to be running\nafter pm_runtime_get_sync() has been called, but the latter doesn\u0027t really\nguarantee that. It only guarantees that the suspend and resume callbacks\nwill not be running when it returns.\n\nHowever, if a .runtime_idle() callback is already running when\npm_runtime_get_sync() is called, the latter will notice that the runtime PM\nstatus of the device is RPM_ACTIVE and it will return right away without\nwaiting for the former to complete. In fact, it cannot wait for\n.runtime_idle() to complete because it may be called from that callback (it\narguably does not make much sense to do that, but it is not strictly\nprohibited).\n\nThus in general, whoever is providing a .runtime_idle() callback needs\nto protect it from running in parallel with whatever code runs after\npm_runtime_get_sync(). [Note that .runtime_idle() will not start after\npm_runtime_get_sync() has returned, but it may continue running then if it\nhas started earlier.]\n\nOne way to address that race condition is to call pm_runtime_barrier()\nafter pm_runtime_get_sync() (not before it, because a nonzero value of the\nruntime PM usage counter is necessary to prevent runtime PM callbacks from\nbeing invoked) to wait for the .runtime_idle() callback to complete should\nit be running at that point. A suitable place for doing that is in\npci_device_remove() which calls pm_runtime_get_sync() before removing the\ndriver, so it may as well call pm_runtime_barrier() subsequently, which\nwill prevent the race in question from occurring, not just in the rtsx_pcr\ndriver, but in any PCI drivers providing .runtime_idle() callbacks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35809",
"url": "https://www.suse.com/security/cve/CVE-2024-35809"
},
{
"category": "external",
"summary": "SUSE Bug 1224738 for CVE-2024-35809",
"url": "https://bugzilla.suse.com/1224738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35809"
},
{
"cve": "CVE-2024-35810",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35810"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Fix the lifetime of the bo cursor memory\n\nThe cleanup can be dispatched while the atomic update is still active,\nwhich means that the memory acquired in the atomic update needs to\nnot be invalidated by the cleanup. The buffer objects in vmw_plane_state\ninstead of using the builtin map_and_cache were trying to handle\nthe lifetime of the mapped memory themselves, leading to crashes.\n\nUse the map_and_cache instead of trying to manage the lifetime of the\nbuffer objects held by the vmw_plane_state.\n\nFixes kernel oops\u0027es in IGT\u0027s kms_cursor_legacy forked-bo.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35810",
"url": "https://www.suse.com/security/cve/CVE-2024-35810"
},
{
"category": "external",
"summary": "SUSE Bug 1224626 for CVE-2024-35810",
"url": "https://bugzilla.suse.com/1224626"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35810"
},
{
"cve": "CVE-2024-35811",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35811"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach\n\nThis is the candidate patch of CVE-2023-47233 :\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-47233\n\nIn brcm80211 driver,it starts with the following invoking chain\nto start init a timeout worker:\n\n-\u003ebrcmf_usb_probe\n -\u003ebrcmf_usb_probe_cb\n -\u003ebrcmf_attach\n -\u003ebrcmf_bus_started\n -\u003ebrcmf_cfg80211_attach\n -\u003ewl_init_priv\n -\u003ebrcmf_init_escan\n -\u003eINIT_WORK(\u0026cfg-\u003eescan_timeout_work,\n\t\t brcmf_cfg80211_escan_timeout_worker);\n\nIf we disconnect the USB by hotplug, it will call\nbrcmf_usb_disconnect to make cleanup. The invoking chain is :\n\nbrcmf_usb_disconnect\n -\u003ebrcmf_usb_disconnect_cb\n -\u003ebrcmf_detach\n -\u003ebrcmf_cfg80211_detach\n -\u003ekfree(cfg);\n\nWhile the timeout woker may still be running. This will cause\na use-after-free bug on cfg in brcmf_cfg80211_escan_timeout_worker.\n\nFix it by deleting the timer and canceling the worker in\nbrcmf_cfg80211_detach.\n\n[arend.vanspriel@broadcom.com: keep timer delete as is and cancel work just before free]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35811",
"url": "https://www.suse.com/security/cve/CVE-2024-35811"
},
{
"category": "external",
"summary": "SUSE Bug 1224592 for CVE-2024-35811",
"url": "https://bugzilla.suse.com/1224592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35811"
},
{
"cve": "CVE-2024-35812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35812"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35812",
"url": "https://www.suse.com/security/cve/CVE-2024-35812"
},
{
"category": "external",
"summary": "SUSE Bug 1224624 for CVE-2024-35812",
"url": "https://bugzilla.suse.com/1224624"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35812"
},
{
"cve": "CVE-2024-35813",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35813"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: core: Avoid negative index with array access\n\nCommit 4d0c8d0aef63 (\"mmc: core: Use mrq.sbc in close-ended ffu\") assigns\nprev_idata = idatas[i - 1], but doesn\u0027t check that the iterator i is\ngreater than zero. Let\u0027s fix this by adding a check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35813",
"url": "https://www.suse.com/security/cve/CVE-2024-35813"
},
{
"category": "external",
"summary": "SUSE Bug 1224618 for CVE-2024-35813",
"url": "https://bugzilla.suse.com/1224618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35813"
},
{
"cve": "CVE-2024-35815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35815"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion\n\nThe first kiocb_set_cancel_fn() argument may point at a struct kiocb\nthat is not embedded inside struct aio_kiocb. With the current code,\ndepending on the compiler, the req-\u003eki_ctx read happens either before\nthe IOCB_AIO_RW test or after that test. Move the req-\u003eki_ctx read such\nthat it is guaranteed that the IOCB_AIO_RW test happens first.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35815",
"url": "https://www.suse.com/security/cve/CVE-2024-35815"
},
{
"category": "external",
"summary": "SUSE Bug 1224685 for CVE-2024-35815",
"url": "https://bugzilla.suse.com/1224685"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35815"
},
{
"cve": "CVE-2024-35817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35817"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag\n\nOtherwise after the GTT bo is released, the GTT and gart space is freed\nbut amdgpu_ttm_backend_unbind will not clear the gart page table entry\nand leave valid mapping entry pointing to the stale system page. Then\nif GPU access the gart address mistakely, it will read undefined value\ninstead page fault, harder to debug and reproduce the real issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35817",
"url": "https://www.suse.com/security/cve/CVE-2024-35817"
},
{
"category": "external",
"summary": "SUSE Bug 1224736 for CVE-2024-35817",
"url": "https://bugzilla.suse.com/1224736"
},
{
"category": "external",
"summary": "SUSE Bug 1225313 for CVE-2024-35817",
"url": "https://bugzilla.suse.com/1225313"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-35817"
},
{
"cve": "CVE-2024-35819",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35819"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: fsl: qbman: Use raw spinlock for cgr_lock\n\nsmp_call_function always runs its callback in hard IRQ context, even on\nPREEMPT_RT, where spinlocks can sleep. So we need to use a raw spinlock\nfor cgr_lock to ensure we aren\u0027t waiting on a sleeping task.\n\nAlthough this bug has existed for a while, it was not apparent until\ncommit ef2a8d5478b9 (\"net: dpaa: Adjust queue depth on rate change\")\nwhich invokes smp_call_function_single via qman_update_cgr_safe every\ntime a link goes up or down.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35819",
"url": "https://www.suse.com/security/cve/CVE-2024-35819"
},
{
"category": "external",
"summary": "SUSE Bug 1224683 for CVE-2024-35819",
"url": "https://bugzilla.suse.com/1224683"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35819"
},
{
"cve": "CVE-2024-35821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35821"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Set page uptodate in the correct place\n\nPage cache reads are lockless, so setting the freshly allocated page\nuptodate before we\u0027ve overwritten it with the data it\u0027s supposed to have\nin it will allow a simultaneous reader to see old data. Move the call\nto SetPageUptodate into ubifs_write_end(), which is after we copied the\nnew data into the page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35821",
"url": "https://www.suse.com/security/cve/CVE-2024-35821"
},
{
"category": "external",
"summary": "SUSE Bug 1224629 for CVE-2024-35821",
"url": "https://bugzilla.suse.com/1224629"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35821"
},
{
"cve": "CVE-2024-35822",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35822"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: udc: remove warning when queue disabled ep\n\nIt is possible trigger below warning message from mass storage function,\n\nWARNING: CPU: 6 PID: 3839 at drivers/usb/gadget/udc/core.c:294 usb_ep_queue+0x7c/0x104\npc : usb_ep_queue+0x7c/0x104\nlr : fsg_main_thread+0x494/0x1b3c\n\nRoot cause is mass storage function try to queue request from main thread,\nbut other thread may already disable ep when function disable.\n\nAs there is no function failure in the driver, in order to avoid effort\nto fix warning, change WARN_ON_ONCE() in usb_ep_queue() to pr_debug().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35822",
"url": "https://www.suse.com/security/cve/CVE-2024-35822"
},
{
"category": "external",
"summary": "SUSE Bug 1224739 for CVE-2024-35822",
"url": "https://bugzilla.suse.com/1224739"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35822"
},
{
"cve": "CVE-2024-35823",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35823"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: fix unicode buffer corruption when deleting characters\n\nThis is the same issue that was fixed for the VGA text buffer in commit\n39cdb68c64d8 (\"vt: fix memory overlapping when deleting chars in the\nbuffer\"). The cure is also the same i.e. replace memcpy() with memmove()\ndue to the overlaping buffers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35823",
"url": "https://www.suse.com/security/cve/CVE-2024-35823"
},
{
"category": "external",
"summary": "SUSE Bug 1224692 for CVE-2024-35823",
"url": "https://bugzilla.suse.com/1224692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35823"
},
{
"cve": "CVE-2024-35824",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35824"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume\n\nWhen not configured for wakeup lis3lv02d_i2c_suspend() will call\nlis3lv02d_poweroff() even if the device has already been turned off\nby the runtime-suspend handler and if configured for wakeup and\nthe device is runtime-suspended at this point then it is not turned\nback on to serve as a wakeup source.\n\nBefore commit b1b9f7a49440 (\"misc: lis3lv02d_i2c: Add missing setting\nof the reg_ctrl callback\"), lis3lv02d_poweroff() failed to disable\nthe regulators which as a side effect made calling poweroff() twice ok.\n\nNow that poweroff() correctly disables the regulators, doing this twice\ntriggers a WARN() in the regulator core:\n\nunbalanced disables for regulator-dummy\nWARNING: CPU: 1 PID: 92 at drivers/regulator/core.c:2999 _regulator_disable\n...\n\nFix lis3lv02d_i2c_suspend() to not call poweroff() a second time if\nalready runtime-suspended and add a poweron() call when necessary to\nmake wakeup work.\n\nlis3lv02d_i2c_resume() has similar issues, with an added weirness that\nit always powers on the device if it is runtime suspended, after which\nthe first runtime-resume will call poweron() again, causing the enabled\ncount for the regulator to increase by 1 every suspend/resume. These\nunbalanced regulator_enable() calls cause the regulator to never\nbe turned off and trigger the following WARN() on driver unbind:\n\nWARNING: CPU: 1 PID: 1724 at drivers/regulator/core.c:2396 _regulator_put\n\nFix this by making lis3lv02d_i2c_resume() mirror the new suspend().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35824",
"url": "https://www.suse.com/security/cve/CVE-2024-35824"
},
{
"category": "external",
"summary": "SUSE Bug 1224609 for CVE-2024-35824",
"url": "https://bugzilla.suse.com/1224609"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35824"
},
{
"cve": "CVE-2024-35825",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35825"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: ncm: Fix handling of zero block length packets\n\nWhile connecting to a Linux host with CDC_NCM_NTB_DEF_SIZE_TX\nset to 65536, it has been observed that we receive short packets,\nwhich come at interval of 5-10 seconds sometimes and have block\nlength zero but still contain 1-2 valid datagrams present.\n\nAccording to the NCM spec:\n\n\"If wBlockLength = 0x0000, the block is terminated by a\nshort packet. In this case, the USB transfer must still\nbe shorter than dwNtbInMaxSize or dwNtbOutMaxSize. If\nexactly dwNtbInMaxSize or dwNtbOutMaxSize bytes are sent,\nand the size is a multiple of wMaxPacketSize for the\ngiven pipe, then no ZLP shall be sent.\n\nwBlockLength= 0x0000 must be used with extreme care, because\nof the possibility that the host and device may get out of\nsync, and because of test issues.\n\nwBlockLength = 0x0000 allows the sender to reduce latency by\nstarting to send a very large NTB, and then shortening it when\nthe sender discovers that there\u0027s not sufficient data to justify\nsending a large NTB\"\n\nHowever, there is a potential issue with the current implementation,\nas it checks for the occurrence of multiple NTBs in a single\ngiveback by verifying if the leftover bytes to be processed is zero\nor not. If the block length reads zero, we would process the same\nNTB infintely because the leftover bytes is never zero and it leads\nto a crash. Fix this by bailing out if block length reads zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35825",
"url": "https://www.suse.com/security/cve/CVE-2024-35825"
},
{
"category": "external",
"summary": "SUSE Bug 1224681 for CVE-2024-35825",
"url": "https://bugzilla.suse.com/1224681"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35825"
},
{
"cve": "CVE-2024-35828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()\n\nIn the for statement of lbs_allocate_cmd_buffer(), if the allocation of\ncmdarray[i].cmdbuf fails, both cmdarray and cmdarray[i].cmdbuf needs to\nbe freed. Otherwise, there will be memleaks in lbs_allocate_cmd_buffer().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35828",
"url": "https://www.suse.com/security/cve/CVE-2024-35828"
},
{
"category": "external",
"summary": "SUSE Bug 1224622 for CVE-2024-35828",
"url": "https://bugzilla.suse.com/1224622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35828"
},
{
"cve": "CVE-2024-35829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35829"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/lima: fix a memleak in lima_heap_alloc\n\nWhen lima_vm_map_bo fails, the resources need to be deallocated, or\nthere will be memleaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35829",
"url": "https://www.suse.com/security/cve/CVE-2024-35829"
},
{
"category": "external",
"summary": "SUSE Bug 1224707 for CVE-2024-35829",
"url": "https://bugzilla.suse.com/1224707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35829"
},
{
"cve": "CVE-2024-35830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35830"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: tc358743: register v4l2 async device only after successful setup\n\nEnsure the device has been setup correctly before registering the v4l2\nasync device, thus allowing userspace to access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35830",
"url": "https://www.suse.com/security/cve/CVE-2024-35830"
},
{
"category": "external",
"summary": "SUSE Bug 1224680 for CVE-2024-35830",
"url": "https://bugzilla.suse.com/1224680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35830"
},
{
"cve": "CVE-2024-35833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35833"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA\n\nThis dma_alloc_coherent() is undone neither in the remove function, nor in\nthe error handling path of fsl_qdma_probe().\n\nSwitch to the managed version to fix both issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35833",
"url": "https://www.suse.com/security/cve/CVE-2024-35833"
},
{
"category": "external",
"summary": "SUSE Bug 1224632 for CVE-2024-35833",
"url": "https://bugzilla.suse.com/1224632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35833"
},
{
"cve": "CVE-2024-35834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35834"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: recycle buffer in case Rx queue was full\n\nAdd missing xsk_buff_free() call when __xsk_rcv_zc() failed to produce\ndescriptor to XSK Rx queue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35834",
"url": "https://www.suse.com/security/cve/CVE-2024-35834"
},
{
"category": "external",
"summary": "SUSE Bug 1224620 for CVE-2024-35834",
"url": "https://bugzilla.suse.com/1224620"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35834"
},
{
"cve": "CVE-2024-35835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35835"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: fix a double-free in arfs_create_groups\n\nWhen `in` allocated by kvzalloc fails, arfs_create_groups will free\nft-\u003eg and return an error. However, arfs_create_table, the only caller of\narfs_create_groups, will hold this error and call to\nmlx5e_destroy_flow_table, in which the ft-\u003eg will be freed again.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35835",
"url": "https://www.suse.com/security/cve/CVE-2024-35835"
},
{
"category": "external",
"summary": "SUSE Bug 1224605 for CVE-2024-35835",
"url": "https://bugzilla.suse.com/1224605"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35835"
},
{
"cve": "CVE-2024-35836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35836"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpll: fix pin dump crash for rebound module\n\nWhen a kernel module is unbound but the pin resources were not entirely\nfreed (other kernel module instance of the same PCI device have had kept\nthe reference to that pin), and kernel module is again bound, the pin\nproperties would not be updated (the properties are only assigned when\nmemory for the pin is allocated), prop pointer still points to the\nkernel module memory of the kernel module which was deallocated on the\nunbind.\n\nIf the pin dump is invoked in this state, the result is a kernel crash.\nPrevent the crash by storing persistent pin properties in dpll subsystem,\ncopy the content from the kernel module when pin is allocated, instead of\nusing memory of the kernel module.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35836",
"url": "https://www.suse.com/security/cve/CVE-2024-35836"
},
{
"category": "external",
"summary": "SUSE Bug 1224633 for CVE-2024-35836",
"url": "https://bugzilla.suse.com/1224633"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35836"
},
{
"cve": "CVE-2024-35837",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35837"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mvpp2: clear BM pool before initialization\n\nRegister value persist after booting the kernel using\nkexec which results in kernel panic. Thus clear the\nBM pool registers before initialisation to fix the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35837",
"url": "https://www.suse.com/security/cve/CVE-2024-35837"
},
{
"category": "external",
"summary": "SUSE Bug 1224500 for CVE-2024-35837",
"url": "https://bugzilla.suse.com/1224500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35837"
},
{
"cve": "CVE-2024-35838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix potential sta-link leak\n\nWhen a station is allocated, links are added but not\nset to valid yet (e.g. during connection to an AP MLD),\nwe might remove the station without ever marking links\nvalid, and leak them. Fix that.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35838",
"url": "https://www.suse.com/security/cve/CVE-2024-35838"
},
{
"category": "external",
"summary": "SUSE Bug 1224613 for CVE-2024-35838",
"url": "https://bugzilla.suse.com/1224613"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35838"
},
{
"cve": "CVE-2024-35839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35839"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: replace physindev with physinif in nf_bridge_info\n\nAn skb can be added to a neigh-\u003earp_queue while waiting for an arp\nreply. Where original skb\u0027s skb-\u003edev can be different to neigh\u0027s\nneigh-\u003edev. For instance in case of bridging dnated skb from one veth to\nanother, the skb would be added to a neigh-\u003earp_queue of the bridge.\n\nAs skb-\u003edev can be reset back to nf_bridge-\u003ephysindev and used, and as\nthere is no explicit mechanism that prevents this physindev from been\nfreed under us (for instance neigh_flush_dev doesn\u0027t cleanup skbs from\ndifferent device\u0027s neigh queue) we can crash on e.g. this stack:\n\narp_process\n neigh_update\n skb = __skb_dequeue(\u0026neigh-\u003earp_queue)\n neigh_resolve_output(..., skb)\n ...\n br_nf_dev_xmit\n br_nf_pre_routing_finish_bridge_slow\n skb-\u003edev = nf_bridge-\u003ephysindev\n br_handle_frame_finish\n\nLet\u0027s use plain ifindex instead of net_device link. To peek into the\noriginal net_device we will use dev_get_by_index_rcu(). Thus either we\nget device and are safe to use it or we don\u0027t get it and drop skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35839",
"url": "https://www.suse.com/security/cve/CVE-2024-35839"
},
{
"category": "external",
"summary": "SUSE Bug 1224726 for CVE-2024-35839",
"url": "https://bugzilla.suse.com/1224726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35839"
},
{
"cve": "CVE-2024-35841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35841"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tls, fix WARNIING in __sk_msg_free\n\nA splice with MSG_SPLICE_PAGES will cause tls code to use the\ntls_sw_sendmsg_splice path in the TLS sendmsg code to move the user\nprovided pages from the msg into the msg_pl. This will loop over the\nmsg until msg_pl is full, checked by sk_msg_full(msg_pl). The user\ncan also set the MORE flag to hint stack to delay sending until receiving\nmore pages and ideally a full buffer.\n\nIf the user adds more pages to the msg than can fit in the msg_pl\nscatterlist (MAX_MSG_FRAGS) we should ignore the MORE flag and send\nthe buffer anyways.\n\nWhat actually happens though is we abort the msg to msg_pl scatterlist\nsetup and then because we forget to set \u0027full record\u0027 indicating we\ncan no longer consume data without a send we fallthrough to the \u0027continue\u0027\npath which will check if msg_data_left(msg) has more bytes to send and\nthen attempts to fit them in the already full msg_pl. Then next\niteration of sender doing send will encounter a full msg_pl and throw\nthe warning in the syzbot report.\n\nTo fix simply check if we have a full_record in splice code path and\nif not send the msg regardless of MORE flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35841",
"url": "https://www.suse.com/security/cve/CVE-2024-35841"
},
{
"category": "external",
"summary": "SUSE Bug 1224687 for CVE-2024-35841",
"url": "https://bugzilla.suse.com/1224687"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35841"
},
{
"cve": "CVE-2024-35842",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35842"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: sof-common: Add NULL check for normal_link string\n\nIt\u0027s not granted that all entries of struct sof_conn_stream declare\na `normal_link` (a non-SOF, direct link) string, and this is the case\nfor SoCs that support only SOF paths (hence do not support both direct\nand SOF usecases).\n\nFor example, in the case of MT8188 there is no normal_link string in\nany of the sof_conn_stream entries and there will be more drivers\ndoing that in the future.\n\nTo avoid possible NULL pointer KPs, add a NULL check for `normal_link`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35842",
"url": "https://www.suse.com/security/cve/CVE-2024-35842"
},
{
"category": "external",
"summary": "SUSE Bug 1224688 for CVE-2024-35842",
"url": "https://bugzilla.suse.com/1224688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35842"
},
{
"cve": "CVE-2024-35845",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35845"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: dbg-tlv: ensure NUL termination\n\nThe iwl_fw_ini_debug_info_tlv is used as a string, so we must\nensure the string is terminated correctly before using it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35845",
"url": "https://www.suse.com/security/cve/CVE-2024-35845"
},
{
"category": "external",
"summary": "SUSE Bug 1224731 for CVE-2024-35845",
"url": "https://bugzilla.suse.com/1224731"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35845"
},
{
"cve": "CVE-2024-35847",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35847"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Prevent double free on error\n\nThe error handling path in its_vpe_irq_domain_alloc() causes a double free\nwhen its_vpe_init() fails after successfully allocating at least one\ninterrupt. This happens because its_vpe_irq_domain_free() frees the\ninterrupts along with the area bitmap and the vprop_page and\nits_vpe_irq_domain_alloc() subsequently frees the area bitmap and the\nvprop_page again.\n\nFix this by unconditionally invoking its_vpe_irq_domain_free() which\nhandles all cases correctly and by removing the bitmap/vprop_page freeing\nfrom its_vpe_irq_domain_alloc().\n\n[ tglx: Massaged change log ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35847",
"url": "https://www.suse.com/security/cve/CVE-2024-35847"
},
{
"category": "external",
"summary": "SUSE Bug 1224697 for CVE-2024-35847",
"url": "https://bugzilla.suse.com/1224697"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35847"
},
{
"cve": "CVE-2024-35849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix information leak in btrfs_ioctl_logical_to_ino()\n\nSyzbot reported the following information leak for in\nbtrfs_ioctl_logical_to_ino():\n\n BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline]\n BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 lib/usercopy.c:40\n instrument_copy_to_user include/linux/instrumented.h:114 [inline]\n _copy_to_user+0xbc/0x110 lib/usercopy.c:40\n copy_to_user include/linux/uaccess.h:191 [inline]\n btrfs_ioctl_logical_to_ino+0x440/0x750 fs/btrfs/ioctl.c:3499\n btrfs_ioctl+0x714/0x1260\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:904 [inline]\n __se_sys_ioctl+0x261/0x450 fs/ioctl.c:890\n __x64_sys_ioctl+0x96/0xe0 fs/ioctl.c:890\n x64_sys_call+0x1883/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:17\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n Uninit was created at:\n __kmalloc_large_node+0x231/0x370 mm/slub.c:3921\n __do_kmalloc_node mm/slub.c:3954 [inline]\n __kmalloc_node+0xb07/0x1060 mm/slub.c:3973\n kmalloc_node include/linux/slab.h:648 [inline]\n kvmalloc_node+0xc0/0x2d0 mm/util.c:634\n kvmalloc include/linux/slab.h:766 [inline]\n init_data_container+0x49/0x1e0 fs/btrfs/backref.c:2779\n btrfs_ioctl_logical_to_ino+0x17c/0x750 fs/btrfs/ioctl.c:3480\n btrfs_ioctl+0x714/0x1260\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:904 [inline]\n __se_sys_ioctl+0x261/0x450 fs/ioctl.c:890\n __x64_sys_ioctl+0x96/0xe0 fs/ioctl.c:890\n x64_sys_call+0x1883/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:17\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n Bytes 40-65535 of 65536 are uninitialized\n Memory access of size 65536 starts at ffff888045a40000\n\nThis happens, because we\u0027re copying a \u0027struct btrfs_data_container\u0027 back\nto user-space. This btrfs_data_container is allocated in\n\u0027init_data_container()\u0027 via kvmalloc(), which does not zero-fill the\nmemory.\n\nFix this by using kvzalloc() which zeroes out the memory on allocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35849",
"url": "https://www.suse.com/security/cve/CVE-2024-35849"
},
{
"category": "external",
"summary": "SUSE Bug 1224733 for CVE-2024-35849",
"url": "https://bugzilla.suse.com/1224733"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35849"
},
{
"cve": "CVE-2024-35850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: qca: fix NULL-deref on non-serdev setup\n\nQualcomm ROME controllers can be registered from the Bluetooth line\ndiscipline and in this case the HCI UART serdev pointer is NULL.\n\nAdd the missing sanity check to prevent a NULL-pointer dereference when\nsetup() is called for a non-serdev controller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35850",
"url": "https://www.suse.com/security/cve/CVE-2024-35850"
},
{
"category": "external",
"summary": "SUSE Bug 1224600 for CVE-2024-35850",
"url": "https://bugzilla.suse.com/1224600"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35850"
},
{
"cve": "CVE-2024-35851",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35851"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: qca: fix NULL-deref on non-serdev suspend\n\nQualcomm ROME controllers can be registered from the Bluetooth line\ndiscipline and in this case the HCI UART serdev pointer is NULL.\n\nAdd the missing sanity check to prevent a NULL-pointer dereference when\nwakeup() is called for a non-serdev controller during suspend.\n\nJust return true for now to restore the original behaviour and address\nthe crash with pre-6.2 kernels, which do not have commit e9b3e5b8c657\n(\"Bluetooth: hci_qca: only assign wakeup with serial port support\") that\ncauses the crash to happen already at setup() time.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35851",
"url": "https://www.suse.com/security/cve/CVE-2024-35851"
},
{
"category": "external",
"summary": "SUSE Bug 1224509 for CVE-2024-35851",
"url": "https://bugzilla.suse.com/1224509"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35851"
},
{
"cve": "CVE-2024-35875",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35875"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/coco: Require seeding RNG with RDRAND on CoCo systems\n\nThere are few uses of CoCo that don\u0027t rely on working cryptography and\nhence a working RNG. Unfortunately, the CoCo threat model means that the\nVM host cannot be trusted and may actively work against guests to\nextract secrets or manipulate computation. Since a malicious host can\nmodify or observe nearly all inputs to guests, the only remaining source\nof entropy for CoCo guests is RDRAND.\n\nIf RDRAND is broken -- due to CPU hardware fault -- the RNG as a whole\nis meant to gracefully continue on gathering entropy from other sources,\nbut since there aren\u0027t other sources on CoCo, this is catastrophic.\nThis is mostly a concern at boot time when initially seeding the RNG, as\nafter that the consequences of a broken RDRAND are much more\ntheoretical.\n\nSo, try at boot to seed the RNG using 256 bits of RDRAND output. If this\nfails, panic(). This will also trigger if the system is booted without\nRDRAND, as RDRAND is essential for a safe CoCo boot.\n\nAdd this deliberately to be \"just a CoCo x86 driver feature\" and not\npart of the RNG itself. Many device drivers and platforms have some\ndesire to contribute something to the RNG, and add_device_randomness()\nis specifically meant for this purpose.\n\nAny driver can call it with seed data of any quality, or even garbage\nquality, and it can only possibly make the quality of the RNG better or\nhave no effect, but can never make it worse.\n\nRather than trying to build something into the core of the RNG, consider\nthe particular CoCo issue just a CoCo issue, and therefore separate it\nall out into driver (well, arch/platform) code.\n\n [ bp: Massage commit message. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35875",
"url": "https://www.suse.com/security/cve/CVE-2024-35875"
},
{
"category": "external",
"summary": "SUSE Bug 1224665 for CVE-2024-35875",
"url": "https://bugzilla.suse.com/1224665"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35875"
},
{
"cve": "CVE-2024-35878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35878"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nof: module: prevent NULL pointer dereference in vsnprintf()\n\nIn of_modalias(), we can get passed the str and len parameters which would\ncause a kernel oops in vsnprintf() since it only allows passing a NULL ptr\nwhen the length is also 0. Also, we need to filter out the negative values\nof the len parameter as these will result in a really huge buffer since\nsnprintf() takes size_t parameter while ours is ssize_t...\n\nFound by Linux Verification Center (linuxtesting.org) with the Svace static\nanalysis tool.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35878",
"url": "https://www.suse.com/security/cve/CVE-2024-35878"
},
{
"category": "external",
"summary": "SUSE Bug 1224671 for CVE-2024-35878",
"url": "https://bugzilla.suse.com/1224671"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35878"
},
{
"cve": "CVE-2024-35879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35879"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nof: dynamic: Synchronize of_changeset_destroy() with the devlink removals\n\nIn the following sequence:\n 1) of_platform_depopulate()\n 2) of_overlay_remove()\n\nDuring the step 1, devices are destroyed and devlinks are removed.\nDuring the step 2, OF nodes are destroyed but\n__of_changeset_entry_destroy() can raise warnings related to missing\nof_node_put():\n ERROR: memory leak, expected refcount 1 instead of 2 ...\n\nIndeed, during the devlink removals performed at step 1, the removal\nitself releasing the device (and the attached of_node) is done by a job\nqueued in a workqueue and so, it is done asynchronously with respect to\nfunction calls.\nWhen the warning is present, of_node_put() will be called but wrongly\ntoo late from the workqueue job.\n\nIn order to be sure that any ongoing devlink removals are done before\nthe of_node destruction, synchronize the of_changeset_destroy() with the\ndevlink removals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35879",
"url": "https://www.suse.com/security/cve/CVE-2024-35879"
},
{
"category": "external",
"summary": "SUSE Bug 1224524 for CVE-2024-35879",
"url": "https://bugzilla.suse.com/1224524"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35879"
},
{
"cve": "CVE-2024-35883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35883"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mchp-pci1xxx: Fix a possible null pointer dereference in pci1xxx_spi_probe\n\nIn function pci1xxxx_spi_probe, there is a potential null pointer that\nmay be caused by a failed memory allocation by the function devm_kzalloc.\nHence, a null pointer check needs to be added to prevent null pointer\ndereferencing later in the code.\n\nTo fix this issue, spi_bus-\u003espi_int[iter] should be checked. The memory\nallocated by devm_kzalloc will be automatically released, so just directly\nreturn -ENOMEM without worrying about memory leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35883",
"url": "https://www.suse.com/security/cve/CVE-2024-35883"
},
{
"category": "external",
"summary": "SUSE Bug 1224521 for CVE-2024-35883",
"url": "https://bugzilla.suse.com/1224521"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35883"
},
{
"cve": "CVE-2024-35885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35885"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxbf_gige: stop interface during shutdown\n\nThe mlxbf_gige driver intermittantly encounters a NULL pointer\nexception while the system is shutting down via \"reboot\" command.\nThe mlxbf_driver will experience an exception right after executing\nits shutdown() method. One example of this exception is:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000070\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\nuser pgtable: 4k pages, 48-bit VAs, pgdp=000000011d373000\n[0000000000000070] pgd=0000000000000000, p4d=0000000000000000\nInternal error: Oops: 96000004 [#1] SMP\nCPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G S OE 5.15.0-bf.6.gef6992a #1\nHardware name: https://www.mellanox.com BlueField SoC/BlueField SoC, BIOS 4.0.2.12669 Apr 21 2023\npstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : mlxbf_gige_handle_tx_complete+0xc8/0x170 [mlxbf_gige]\nlr : mlxbf_gige_poll+0x54/0x160 [mlxbf_gige]\nsp : ffff8000080d3c10\nx29: ffff8000080d3c10 x28: ffffcce72cbb7000 x27: ffff8000080d3d58\nx26: ffff0000814e7340 x25: ffff331cd1a05000 x24: ffffcce72c4ea008\nx23: ffff0000814e4b40 x22: ffff0000814e4d10 x21: ffff0000814e4128\nx20: 0000000000000000 x19: ffff0000814e4a80 x18: ffffffffffffffff\nx17: 000000000000001c x16: ffffcce72b4553f4 x15: ffff80008805b8a7\nx14: 0000000000000000 x13: 0000000000000030 x12: 0101010101010101\nx11: 7f7f7f7f7f7f7f7f x10: c2ac898b17576267 x9 : ffffcce720fa5404\nx8 : ffff000080812138 x7 : 0000000000002e9a x6 : 0000000000000080\nx5 : ffff00008de3b000 x4 : 0000000000000000 x3 : 0000000000000001\nx2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000\nCall trace:\n mlxbf_gige_handle_tx_complete+0xc8/0x170 [mlxbf_gige]\n mlxbf_gige_poll+0x54/0x160 [mlxbf_gige]\n __napi_poll+0x40/0x1c8\n net_rx_action+0x314/0x3a0\n __do_softirq+0x128/0x334\n run_ksoftirqd+0x54/0x6c\n smpboot_thread_fn+0x14c/0x190\n kthread+0x10c/0x110\n ret_from_fork+0x10/0x20\nCode: 8b070000 f9000ea0 f95056c0 f86178a1 (b9407002)\n---[ end trace 7cc3941aa0d8e6a4 ]---\nKernel panic - not syncing: Oops: Fatal exception in interrupt\nKernel Offset: 0x4ce722520000 from 0xffff800008000000\nPHYS_OFFSET: 0x80000000\nCPU features: 0x000005c1,a3330e5a\nMemory Limit: none\n---[ end Kernel panic - not syncing: Oops: Fatal exception in interrupt ]---\n\nDuring system shutdown, the mlxbf_gige driver\u0027s shutdown() is always executed.\nHowever, the driver\u0027s stop() method will only execute if networking interface\nconfiguration logic within the Linux distribution has been setup to do so.\n\nIf shutdown() executes but stop() does not execute, NAPI remains enabled\nand this can lead to an exception if NAPI is scheduled while the hardware\ninterface has only been partially deinitialized.\n\nThe networking interface managed by the mlxbf_gige driver must be properly\nstopped during system shutdown so that IFF_UP is cleared, the hardware\ninterface is put into a clean state, and NAPI is fully deinitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35885",
"url": "https://www.suse.com/security/cve/CVE-2024-35885"
},
{
"category": "external",
"summary": "SUSE Bug 1224519 for CVE-2024-35885",
"url": "https://bugzilla.suse.com/1224519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35885"
},
{
"cve": "CVE-2024-35887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nax25: fix use-after-free bugs caused by ax25_ds_del_timer\n\nWhen the ax25 device is detaching, the ax25_dev_device_down()\ncalls ax25_ds_del_timer() to cleanup the slave_timer. When\nthe timer handler is running, the ax25_ds_del_timer() that\ncalls del_timer() in it will return directly. As a result,\nthe use-after-free bugs could happen, one of the scenarios\nis shown below:\n\n (Thread 1) | (Thread 2)\n | ax25_ds_timeout()\nax25_dev_device_down() |\n ax25_ds_del_timer() |\n del_timer() |\n ax25_dev_put() //FREE |\n | ax25_dev-\u003e //USE\n\nIn order to mitigate bugs, when the device is detaching, use\ntimer_shutdown_sync() to stop the timer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35887",
"url": "https://www.suse.com/security/cve/CVE-2024-35887"
},
{
"category": "external",
"summary": "SUSE Bug 1224663 for CVE-2024-35887",
"url": "https://bugzilla.suse.com/1224663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35887"
},
{
"cve": "CVE-2024-35889",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35889"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix kernel panic on unknown packet types\n\nIn the very rare case where a packet type is unknown to the driver,\nidpf_rx_process_skb_fields would return early without calling\neth_type_trans to set the skb protocol / the network layer handler.\nThis is especially problematic if tcpdump is running when such a\npacket is received, i.e. it would cause a kernel panic.\n\nInstead, call eth_type_trans for every single packet, even when\nthe packet type is unknown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35889",
"url": "https://www.suse.com/security/cve/CVE-2024-35889"
},
{
"category": "external",
"summary": "SUSE Bug 1224517 for CVE-2024-35889",
"url": "https://bugzilla.suse.com/1224517"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35889"
},
{
"cve": "CVE-2024-35891",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35891"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: micrel: Fix potential null pointer dereference\n\nIn lan8814_get_sig_rx() and lan8814_get_sig_tx() ptp_parse_header() may\nreturn NULL as ptp_header due to abnormal packet type or corrupted packet.\nFix this bug by adding ptp_header check.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35891",
"url": "https://www.suse.com/security/cve/CVE-2024-35891"
},
{
"category": "external",
"summary": "SUSE Bug 1224513 for CVE-2024-35891",
"url": "https://bugzilla.suse.com/1224513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35891"
},
{
"cve": "CVE-2024-35901",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35901"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: mana: Fix Rx DMA datasize and skb_over_panic\n\nmana_get_rxbuf_cfg() aligns the RX buffer\u0027s DMA datasize to be\nmultiple of 64. So a packet slightly bigger than mtu+14, say 1536,\ncan be received and cause skb_over_panic.\n\nSample dmesg:\n[ 5325.237162] skbuff: skb_over_panic: text:ffffffffc043277a len:1536 put:1536 head:ff1100018b517000 data:ff1100018b517100 tail:0x700 end:0x6ea dev:\u003cNULL\u003e\n[ 5325.243689] ------------[ cut here ]------------\n[ 5325.245748] kernel BUG at net/core/skbuff.c:192!\n[ 5325.247838] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\n[ 5325.258374] RIP: 0010:skb_panic+0x4f/0x60\n[ 5325.302941] Call Trace:\n[ 5325.304389] \u003cIRQ\u003e\n[ 5325.315794] ? skb_panic+0x4f/0x60\n[ 5325.317457] ? asm_exc_invalid_op+0x1f/0x30\n[ 5325.319490] ? skb_panic+0x4f/0x60\n[ 5325.321161] skb_put+0x4e/0x50\n[ 5325.322670] mana_poll+0x6fa/0xb50 [mana]\n[ 5325.324578] __napi_poll+0x33/0x1e0\n[ 5325.326328] net_rx_action+0x12e/0x280\n\nAs discussed internally, this alignment is not necessary. To fix\nthis bug, remove it from the code. So oversized packets will be\nmarked as CQE_RX_TRUNCATED by NIC, and dropped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35901",
"url": "https://www.suse.com/security/cve/CVE-2024-35901"
},
{
"category": "external",
"summary": "SUSE Bug 1224495 for CVE-2024-35901",
"url": "https://bugzilla.suse.com/1224495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35901"
},
{
"cve": "CVE-2024-35904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: avoid dereference of garbage after mount failure\n\nIn case kern_mount() fails and returns an error pointer return in the\nerror branch instead of continuing and dereferencing the error pointer.\n\nWhile on it drop the never read static variable selinuxfs_mount.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35904",
"url": "https://www.suse.com/security/cve/CVE-2024-35904"
},
{
"category": "external",
"summary": "SUSE Bug 1224494 for CVE-2024-35904",
"url": "https://bugzilla.suse.com/1224494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35904"
},
{
"cve": "CVE-2024-35907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxbf_gige: call request_irq() after NAPI initialized\n\nThe mlxbf_gige driver encounters a NULL pointer exception in\nmlxbf_gige_open() when kdump is enabled. The sequence to reproduce\nthe exception is as follows:\na) enable kdump\nb) trigger kdump via \"echo c \u003e /proc/sysrq-trigger\"\nc) kdump kernel executes\nd) kdump kernel loads mlxbf_gige module\ne) the mlxbf_gige module runs its open() as the\n the \"oob_net0\" interface is brought up\nf) mlxbf_gige module will experience an exception\n during its open(), something like:\n\n Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000\n Mem abort info:\n ESR = 0x0000000086000004\n EC = 0x21: IABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\n user pgtable: 4k pages, 48-bit VAs, pgdp=00000000e29a4000\n [0000000000000000] pgd=0000000000000000, p4d=0000000000000000\n Internal error: Oops: 0000000086000004 [#1] SMP\n CPU: 0 PID: 812 Comm: NetworkManager Tainted: G OE 5.15.0-1035-bluefield #37-Ubuntu\n Hardware name: https://www.mellanox.com BlueField-3 SmartNIC Main Card/BlueField-3 SmartNIC Main Card, BIOS 4.6.0.13024 Jan 19 2024\n pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : 0x0\n lr : __napi_poll+0x40/0x230\n sp : ffff800008003e00\n x29: ffff800008003e00 x28: 0000000000000000 x27: 00000000ffffffff\n x26: ffff000066027238 x25: ffff00007cedec00 x24: ffff800008003ec8\n x23: 000000000000012c x22: ffff800008003eb7 x21: 0000000000000000\n x20: 0000000000000001 x19: ffff000066027238 x18: 0000000000000000\n x17: ffff578fcb450000 x16: ffffa870b083c7c0 x15: 0000aaab010441d0\n x14: 0000000000000001 x13: 00726f7272655f65 x12: 6769675f6662786c\n x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa870b0842398\n x8 : 0000000000000004 x7 : fe5a48b9069706ea x6 : 17fdb11fc84ae0d2\n x5 : d94a82549d594f35 x4 : 0000000000000000 x3 : 0000000000400100\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000066027238\n Call trace:\n 0x0\n net_rx_action+0x178/0x360\n __do_softirq+0x15c/0x428\n __irq_exit_rcu+0xac/0xec\n irq_exit+0x18/0x2c\n handle_domain_irq+0x6c/0xa0\n gic_handle_irq+0xec/0x1b0\n call_on_irq_stack+0x20/0x2c\n do_interrupt_handler+0x5c/0x70\n el1_interrupt+0x30/0x50\n el1h_64_irq_handler+0x18/0x2c\n el1h_64_irq+0x7c/0x80\n __setup_irq+0x4c0/0x950\n request_threaded_irq+0xf4/0x1bc\n mlxbf_gige_request_irqs+0x68/0x110 [mlxbf_gige]\n mlxbf_gige_open+0x5c/0x170 [mlxbf_gige]\n __dev_open+0x100/0x220\n __dev_change_flags+0x16c/0x1f0\n dev_change_flags+0x2c/0x70\n do_setlink+0x220/0xa40\n __rtnl_newlink+0x56c/0x8a0\n rtnl_newlink+0x58/0x84\n rtnetlink_rcv_msg+0x138/0x3c4\n netlink_rcv_skb+0x64/0x130\n rtnetlink_rcv+0x20/0x30\n netlink_unicast+0x2ec/0x360\n netlink_sendmsg+0x278/0x490\n __sock_sendmsg+0x5c/0x6c\n ____sys_sendmsg+0x290/0x2d4\n ___sys_sendmsg+0x84/0xd0\n __sys_sendmsg+0x70/0xd0\n __arm64_sys_sendmsg+0x2c/0x40\n invoke_syscall+0x78/0x100\n el0_svc_common.constprop.0+0x54/0x184\n do_el0_svc+0x30/0xac\n el0_svc+0x48/0x160\n el0t_64_sync_handler+0xa4/0x12c\n el0t_64_sync+0x1a4/0x1a8\n Code: bad PC value\n ---[ end trace 7d1c3f3bf9d81885 ]---\n Kernel panic - not syncing: Oops: Fatal exception in interrupt\n Kernel Offset: 0x2870a7a00000 from 0xffff800008000000\n PHYS_OFFSET: 0x80000000\n CPU features: 0x0,000005c1,a3332a5a\n Memory Limit: none\n ---[ end Kernel panic - not syncing: Oops: Fatal exception in interrupt ]---\n\nThe exception happens because there is a pending RX interrupt before the\ncall to request_irq(RX IRQ) executes. Then, the RX IRQ handler fires\nimmediately after this request_irq() completes. The\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35907",
"url": "https://www.suse.com/security/cve/CVE-2024-35907"
},
{
"category": "external",
"summary": "SUSE Bug 1224492 for CVE-2024-35907",
"url": "https://bugzilla.suse.com/1224492"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35907"
},
{
"cve": "CVE-2024-35909",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35909"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: Split 64bit accesses to fix alignment issues\n\nSome of the registers are aligned on a 32bit boundary, causing\nalignment faults on 64bit platforms.\n\n Unable to handle kernel paging request at virtual address ffffffc084a1d004\n Mem abort info:\n ESR = 0x0000000096000061\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x21: alignment fault\n Data abort info:\n ISV = 0, ISS = 0x00000061, ISS2 = 0x00000000\n CM = 0, WnR = 1, TnD = 0, TagAccess = 0\n GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n swapper pgtable: 4k pages, 39-bit VAs, pgdp=0000000046ad6000\n [ffffffc084a1d004] pgd=100000013ffff003, p4d=100000013ffff003, pud=100000013ffff003, pmd=0068000020a00711\n Internal error: Oops: 0000000096000061 [#1] SMP\n Modules linked in: mtk_t7xx(+) qcserial pppoe ppp_async option nft_fib_inet nf_flow_table_inet mt7921u(O) mt7921s(O) mt7921e(O) mt7921_common(O) iwlmvm(O) iwldvm(O) usb_wwan rndis_host qmi_wwan pppox ppp_generic nft_reject_ipv6 nft_reject_ipv4 nft_reject_inet nft_reject nft_redir nft_quota nft_numgen nft_nat nft_masq nft_log nft_limit nft_hash nft_flow_offload nft_fib_ipv6 nft_fib_ipv4 nft_fib nft_ct nft_chain_nat nf_tables nf_nat nf_flow_table nf_conntrack mt7996e(O) mt792x_usb(O) mt792x_lib(O) mt7915e(O) mt76_usb(O) mt76_sdio(O) mt76_connac_lib(O) mt76(O) mac80211(O) iwlwifi(O) huawei_cdc_ncm cfg80211(O) cdc_ncm cdc_ether wwan usbserial usbnet slhc sfp rtc_pcf8563 nfnetlink nf_reject_ipv6 nf_reject_ipv4 nf_log_syslog nf_defrag_ipv6 nf_defrag_ipv4 mt6577_auxadc mdio_i2c libcrc32c compat(O) cdc_wdm cdc_acm at24 crypto_safexcel pwm_fan i2c_gpio i2c_smbus industrialio i2c_algo_bit i2c_mux_reg i2c_mux_pca954x i2c_mux_pca9541 i2c_mux_gpio i2c_mux dummy oid_registry tun sha512_arm64 sha1_ce sha1_generic seqiv\n md5 geniv des_generic libdes cbc authencesn authenc leds_gpio xhci_plat_hcd xhci_pci xhci_mtk_hcd xhci_hcd nvme nvme_core gpio_button_hotplug(O) dm_mirror dm_region_hash dm_log dm_crypt dm_mod dax usbcore usb_common ptp aquantia pps_core mii tpm encrypted_keys trusted\n CPU: 3 PID: 5266 Comm: kworker/u9:1 Tainted: G O 6.6.22 #0\n Hardware name: Bananapi BPI-R4 (DT)\n Workqueue: md_hk_wq t7xx_fsm_uninit [mtk_t7xx]\n pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : t7xx_cldma_hw_set_start_addr+0x1c/0x3c [mtk_t7xx]\n lr : t7xx_cldma_start+0xac/0x13c [mtk_t7xx]\n sp : ffffffc085d63d30\n x29: ffffffc085d63d30 x28: 0000000000000000 x27: 0000000000000000\n x26: 0000000000000000 x25: ffffff80c804f2c0 x24: ffffff80ca196c05\n x23: 0000000000000000 x22: ffffff80c814b9b8 x21: ffffff80c814b128\n x20: 0000000000000001 x19: ffffff80c814b080 x18: 0000000000000014\n x17: 0000000055c9806b x16: 000000007c5296d0 x15: 000000000f6bca68\n x14: 00000000dbdbdce4 x13: 000000001aeaf72a x12: 0000000000000001\n x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000\n x8 : ffffff80ca1ef6b4 x7 : ffffff80c814b818 x6 : 0000000000000018\n x5 : 0000000000000870 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : 000000010a947000 x1 : ffffffc084a1d004 x0 : ffffffc084a1d004\n Call trace:\n t7xx_cldma_hw_set_start_addr+0x1c/0x3c [mtk_t7xx]\n t7xx_fsm_uninit+0x578/0x5ec [mtk_t7xx]\n process_one_work+0x154/0x2a0\n worker_thread+0x2ac/0x488\n kthread+0xe0/0xec\n ret_from_fork+0x10/0x20\n Code: f9400800 91001000 8b214001 d50332bf (f9000022)\n ---[ end trace 0000000000000000 ]---\n\nThe inclusion of io-64-nonatomic-lo-hi.h indicates that all 64bit\naccesses can be replaced by pairs of nonatomic 32bit access. Fix\nalignment by forcing all accesses to be 32bit on 64bit platforms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35909",
"url": "https://www.suse.com/security/cve/CVE-2024-35909"
},
{
"category": "external",
"summary": "SUSE Bug 1224491 for CVE-2024-35909",
"url": "https://bugzilla.suse.com/1224491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35909"
},
{
"cve": "CVE-2024-35911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix memory corruption bug with suspend and rebuild\n\nThe ice driver would previously panic after suspend. This is caused\nfrom the driver *only* calling the ice_vsi_free_q_vectors() function by\nitself, when it is suspending. Since commit b3e7b3a6ee92 (\"ice: prevent\nNULL pointer deref during reload\") the driver has zeroed out\nnum_q_vectors, and only restored it in ice_vsi_cfg_def().\n\nThis further causes the ice_rebuild() function to allocate a zero length\nbuffer, after which num_q_vectors is updated, and then the new value of\nnum_q_vectors is used to index into the zero length buffer, which\ncorrupts memory.\n\nThe fix entails making sure all the code referencing num_q_vectors only\ndoes so after it has been reset via ice_vsi_cfg_def().\n\nI didn\u0027t perform a full bisect, but I was able to test against 6.1.77\nkernel and that ice driver works fine for suspend/resume with no panic,\nso sometime since then, this problem was introduced.\n\nAlso clean up an un-needed init of a local variable in the function\nbeing modified.\n\nPANIC from 6.8.0-rc1:\n\n[1026674.915596] PM: suspend exit\n[1026675.664697] ice 0000:17:00.1: PTP reset successful\n[1026675.664707] ice 0000:17:00.1: 2755 msecs passed between update to cached PHC time\n[1026675.667660] ice 0000:b1:00.0: PTP reset successful\n[1026675.675944] ice 0000:b1:00.0: 2832 msecs passed between update to cached PHC time\n[1026677.137733] ixgbe 0000:31:00.0 ens787: NIC Link is Up 1 Gbps, Flow Control: None\n[1026677.190201] BUG: kernel NULL pointer dereference, address: 0000000000000010\n[1026677.192753] ice 0000:17:00.0: PTP reset successful\n[1026677.192764] ice 0000:17:00.0: 4548 msecs passed between update to cached PHC time\n[1026677.197928] #PF: supervisor read access in kernel mode\n[1026677.197933] #PF: error_code(0x0000) - not-present page\n[1026677.197937] PGD 1557a7067 P4D 0\n[1026677.212133] ice 0000:b1:00.1: PTP reset successful\n[1026677.212143] ice 0000:b1:00.1: 4344 msecs passed between update to cached PHC time\n[1026677.212575]\n[1026677.243142] Oops: 0000 [#1] PREEMPT SMP NOPTI\n[1026677.247918] CPU: 23 PID: 42790 Comm: kworker/23:0 Kdump: loaded Tainted: G W 6.8.0-rc1+ #1\n[1026677.257989] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022\n[1026677.269367] Workqueue: ice ice_service_task [ice]\n[1026677.274592] RIP: 0010:ice_vsi_rebuild_set_coalesce+0x130/0x1e0 [ice]\n[1026677.281421] Code: 0f 84 3a ff ff ff 41 0f b7 74 ec 02 66 89 b0 22 02 00 00 81 e6 ff 1f 00 00 e8 ec fd ff ff e9 35 ff ff ff 48 8b 43 30 49 63 ed \u003c41\u003e 0f b7 34 24 41 83 c5 01 48 8b 3c e8 66 89 b7 aa 02 00 00 81 e6\n[1026677.300877] RSP: 0018:ff3be62a6399bcc0 EFLAGS: 00010202\n[1026677.306556] RAX: ff28691e28980828 RBX: ff28691e41099828 RCX: 0000000000188000\n[1026677.314148] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ff28691e41099828\n[1026677.321730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000\n[1026677.329311] R10: 0000000000000007 R11: ffffffffffffffc0 R12: 0000000000000010\n[1026677.336896] R13: 0000000000000000 R14: 0000000000000000 R15: ff28691e0eaa81a0\n[1026677.344472] FS: 0000000000000000(0000) GS:ff28693cbffc0000(0000) knlGS:0000000000000000\n[1026677.353000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[1026677.359195] CR2: 0000000000000010 CR3: 0000000128df4001 CR4: 0000000000771ef0\n[1026677.366779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[1026677.374369] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[1026677.381952] PKRU: 55555554\n[1026677.385116] Call Trace:\n[1026677.388023] \u003cTASK\u003e\n[1026677.390589] ? __die+0x20/0x70\n[1026677.394105] ? page_fault_oops+0x82/0x160\n[1026677.398576] ? do_user_addr_fault+0x65/0x6a0\n[1026677.403307] ? exc_page_fault+0x6a/0x150\n[1026677.407694] ? asm_exc_page_fault+0x22/0x30\n[1026677.412349] ? ice_vsi_rebuild_set_coalesce+0x130/0x1e0 [ice]\n[1026677.4186\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35911",
"url": "https://www.suse.com/security/cve/CVE-2024-35911"
},
{
"category": "external",
"summary": "SUSE Bug 1224486 for CVE-2024-35911",
"url": "https://bugzilla.suse.com/1224486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35911"
},
{
"cve": "CVE-2024-35912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: rfi: fix potential response leaks\n\nIf the rx payload length check fails, or if kmemdup() fails,\nwe still need to free the command response. Fix that.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35912",
"url": "https://www.suse.com/security/cve/CVE-2024-35912"
},
{
"category": "external",
"summary": "SUSE Bug 1224487 for CVE-2024-35912",
"url": "https://bugzilla.suse.com/1224487"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35912"
},
{
"cve": "CVE-2024-35914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35914"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: Fix error cleanup path in nfsd_rename()\n\nCommit a8b0026847b8 (\"rename(): avoid a deadlock in the case of parents\nhaving no common ancestor\") added an error bail out path. However this\npath does not drop the remount protection that has been acquired. Fix\nthe cleanup path to properly drop the remount protection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35914",
"url": "https://www.suse.com/security/cve/CVE-2024-35914"
},
{
"category": "external",
"summary": "SUSE Bug 1224482 for CVE-2024-35914",
"url": "https://bugzilla.suse.com/1224482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35914"
},
{
"cve": "CVE-2024-35915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet\n\nsyzbot reported the following uninit-value access issue [1][2]:\n\nnci_rx_work() parses and processes received packet. When the payload\nlength is zero, each message type handler reads uninitialized payload\nand KMSAN detects this issue. The receipt of a packet with a zero-size\npayload is considered unexpected, and therefore, such packets should be\nsilently discarded.\n\nThis patch resolved this issue by checking payload size before calling\neach message type handler codes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35915",
"url": "https://www.suse.com/security/cve/CVE-2024-35915"
},
{
"category": "external",
"summary": "SUSE Bug 1224479 for CVE-2024-35915",
"url": "https://bugzilla.suse.com/1224479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35915"
},
{
"cve": "CVE-2024-35916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-buf: Fix NULL pointer dereference in sanitycheck()\n\nIf due to a memory allocation failure mock_chain() returns NULL, it is\npassed to dma_fence_enable_sw_signaling() resulting in NULL pointer\ndereference there.\n\nCall dma_fence_enable_sw_signaling() only if mock_chain() succeeds.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35916",
"url": "https://www.suse.com/security/cve/CVE-2024-35916"
},
{
"category": "external",
"summary": "SUSE Bug 1224480 for CVE-2024-35916",
"url": "https://bugzilla.suse.com/1224480"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35916"
},
{
"cve": "CVE-2024-35922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbmon: prevent division by zero in fb_videomode_from_videomode()\n\nThe expression htotal * vtotal can have a zero value on\noverflow. It is necessary to prevent division by zero like in\nfb_var_to_videomode().\n\nFound by Linux Verification Center (linuxtesting.org) with Svace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35922",
"url": "https://www.suse.com/security/cve/CVE-2024-35922"
},
{
"category": "external",
"summary": "SUSE Bug 1224660 for CVE-2024-35922",
"url": "https://bugzilla.suse.com/1224660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35922"
},
{
"cve": "CVE-2024-35924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: ucsi: Limit read size on v1.2\n\nBetween UCSI 1.2 and UCSI 2.0, the size of the MESSAGE_IN region was\nincreased from 16 to 256. In order to avoid overflowing reads for older\nsystems, add a mechanism to use the read UCSI version to truncate read\nsizes on UCSI v1.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35924",
"url": "https://www.suse.com/security/cve/CVE-2024-35924"
},
{
"category": "external",
"summary": "SUSE Bug 1224657 for CVE-2024-35924",
"url": "https://bugzilla.suse.com/1224657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35924"
},
{
"cve": "CVE-2024-35927",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35927"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: Check output polling initialized before disabling\n\nIn drm_kms_helper_poll_disable() check if output polling\nsupport is initialized before disabling polling. If not flag\nthis as a warning.\nAdditionally in drm_mode_config_helper_suspend() and\ndrm_mode_config_helper_resume() calls, that re the callers of these\nfunctions, avoid invoking them if polling is not initialized.\nFor drivers like hyperv-drm, that do not initialize connector\npolling, if suspend is called without this check, it leads to\nsuspend failure with following stack\n[ 770.719392] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done.\n[ 770.720592] printk: Suspending console(s) (use no_console_suspend to debug)\n[ 770.948823] ------------[ cut here ]------------\n[ 770.948824] WARNING: CPU: 1 PID: 17197 at kernel/workqueue.c:3162 __flush_work.isra.0+0x212/0x230\n[ 770.948831] Modules linked in: rfkill nft_counter xt_conntrack xt_owner udf nft_compat crc_itu_t nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink vfat fat mlx5_ib ib_uverbs ib_core mlx5_core intel_rapl_msr intel_rapl_common kvm_amd ccp mlxfw kvm psample hyperv_drm tls drm_shmem_helper drm_kms_helper irqbypass pcspkr syscopyarea sysfillrect sysimgblt hv_balloon hv_utils joydev drm fuse xfs libcrc32c pci_hyperv pci_hyperv_intf sr_mod sd_mod cdrom t10_pi sg hv_storvsc scsi_transport_fc hv_netvsc serio_raw hyperv_keyboard hid_hyperv crct10dif_pclmul crc32_pclmul crc32c_intel hv_vmbus ghash_clmulni_intel dm_mirror dm_region_hash dm_log dm_mod\n[ 770.948863] CPU: 1 PID: 17197 Comm: systemd-sleep Not tainted 5.14.0-362.2.1.el9_3.x86_64 #1\n[ 770.948865] Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 05/09/2022\n[ 770.948866] RIP: 0010:__flush_work.isra.0+0x212/0x230\n[ 770.948869] Code: 8b 4d 00 4c 8b 45 08 89 ca 48 c1 e9 04 83 e2 08 83 e1 0f 83 ca 02 89 c8 48 0f ba 6d 00 03 e9 25 ff ff ff 0f 0b e9 4e ff ff ff \u003c0f\u003e 0b 45 31 ed e9 44 ff ff ff e8 8f 89 b2 00 66 66 2e 0f 1f 84 00\n[ 770.948870] RSP: 0018:ffffaf4ac213fb10 EFLAGS: 00010246\n[ 770.948871] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8c992857\n[ 770.948872] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff9aad82b00330\n[ 770.948873] RBP: ffff9aad82b00330 R08: 0000000000000000 R09: ffff9aad87ee3d10\n[ 770.948874] R10: 0000000000000200 R11: 0000000000000000 R12: ffff9aad82b00330\n[ 770.948874] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001\n[ 770.948875] FS: 00007ff1b2f6bb40(0000) GS:ffff9aaf37d00000(0000) knlGS:0000000000000000\n[ 770.948878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 770.948878] CR2: 0000555f345cb666 CR3: 00000001462dc005 CR4: 0000000000370ee0\n[ 770.948879] Call Trace:\n[ 770.948880] \u003cTASK\u003e\n[ 770.948881] ? show_trace_log_lvl+0x1c4/0x2df\n[ 770.948884] ? show_trace_log_lvl+0x1c4/0x2df\n[ 770.948886] ? __cancel_work_timer+0x103/0x190\n[ 770.948887] ? __flush_work.isra.0+0x212/0x230\n[ 770.948889] ? __warn+0x81/0x110\n[ 770.948891] ? __flush_work.isra.0+0x212/0x230\n[ 770.948892] ? report_bug+0x10a/0x140\n[ 770.948895] ? handle_bug+0x3c/0x70\n[ 770.948898] ? exc_invalid_op+0x14/0x70\n[ 770.948899] ? asm_exc_invalid_op+0x16/0x20\n[ 770.948903] ? __flush_work.isra.0+0x212/0x230\n[ 770.948905] __cancel_work_timer+0x103/0x190\n[ 770.948907] ? _raw_spin_unlock_irqrestore+0xa/0x30\n[ 770.948910] drm_kms_helper_poll_disable+0x1e/0x40 [drm_kms_helper]\n[ 770.948923] drm_mode_config_helper_suspend+0x1c/0x80 [drm_kms_helper]\n[ 770.948933] ? __pfx_vmbus_suspend+0x10/0x10 [hv_vmbus]\n[ 770.948942] hyperv_vmbus_suspend+0x17/0x40 [hyperv_drm]\n[ 770.948944] ? __pfx_vmbus_suspend+0x10/0x10 [hv_vmbus]\n[ 770.948951] dpm_run_callback+0x4c/0x140\n[ 770.948954] __device_suspend_noir\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35927",
"url": "https://www.suse.com/security/cve/CVE-2024-35927"
},
{
"category": "external",
"summary": "SUSE Bug 1224654 for CVE-2024-35927",
"url": "https://bugzilla.suse.com/1224654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35927"
},
{
"cve": "CVE-2024-35928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35928"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35928",
"url": "https://www.suse.com/security/cve/CVE-2024-35928"
},
{
"category": "external",
"summary": "SUSE Bug 1224653 for CVE-2024-35928",
"url": "https://bugzilla.suse.com/1224653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35928"
},
{
"cve": "CVE-2024-35930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35930"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()\n\nThe call to lpfc_sli4_resume_rpi() in lpfc_rcv_padisc() may return an\nunsuccessful status. In such cases, the elsiocb is not issued, the\ncompletion is not called, and thus the elsiocb resource is leaked.\n\nCheck return value after calling lpfc_sli4_resume_rpi() and conditionally\nrelease the elsiocb resource.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35930",
"url": "https://www.suse.com/security/cve/CVE-2024-35930"
},
{
"category": "external",
"summary": "SUSE Bug 1224651 for CVE-2024-35930",
"url": "https://bugzilla.suse.com/1224651"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35930"
},
{
"cve": "CVE-2024-35932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: don\u0027t check if plane-\u003estate-\u003efb == state-\u003efb\n\nCurrently, when using non-blocking commits, we can see the following\nkernel warning:\n\n[ 110.908514] ------------[ cut here ]------------\n[ 110.908529] refcount_t: underflow; use-after-free.\n[ 110.908620] WARNING: CPU: 0 PID: 1866 at lib/refcount.c:87 refcount_dec_not_one+0xb8/0xc0\n[ 110.908664] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device cmac algif_hash aes_arm64 aes_generic algif_skcipher af_alg bnep hid_logitech_hidpp vc4 brcmfmac hci_uart btbcm brcmutil bluetooth snd_soc_hdmi_codec cfg80211 cec drm_display_helper drm_dma_helper drm_kms_helper snd_soc_core snd_compress snd_pcm_dmaengine fb_sys_fops sysimgblt syscopyarea sysfillrect raspberrypi_hwmon ecdh_generic ecc rfkill libaes i2c_bcm2835 binfmt_misc joydev snd_bcm2835(C) bcm2835_codec(C) bcm2835_isp(C) v4l2_mem2mem videobuf2_dma_contig snd_pcm bcm2835_v4l2(C) raspberrypi_gpiomem bcm2835_mmal_vchiq(C) videobuf2_v4l2 snd_timer videobuf2_vmalloc videobuf2_memops videobuf2_common snd videodev vc_sm_cma(C) mc hid_logitech_dj uio_pdrv_genirq uio i2c_dev drm fuse dm_mod drm_panel_orientation_quirks backlight ip_tables x_tables ipv6\n[ 110.909086] CPU: 0 PID: 1866 Comm: kodi.bin Tainted: G C 6.1.66-v8+ #32\n[ 110.909104] Hardware name: Raspberry Pi 3 Model B Rev 1.2 (DT)\n[ 110.909114] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 110.909132] pc : refcount_dec_not_one+0xb8/0xc0\n[ 110.909152] lr : refcount_dec_not_one+0xb4/0xc0\n[ 110.909170] sp : ffffffc00913b9c0\n[ 110.909177] x29: ffffffc00913b9c0 x28: 000000556969bbb0 x27: 000000556990df60\n[ 110.909205] x26: 0000000000000002 x25: 0000000000000004 x24: ffffff8004448480\n[ 110.909230] x23: ffffff800570b500 x22: ffffff802e03a7bc x21: ffffffecfca68c78\n[ 110.909257] x20: ffffff8002b42000 x19: ffffff802e03a600 x18: 0000000000000000\n[ 110.909283] x17: 0000000000000011 x16: ffffffffffffffff x15: 0000000000000004\n[ 110.909308] x14: 0000000000000fff x13: ffffffed577e47e0 x12: 0000000000000003\n[ 110.909333] x11: 0000000000000000 x10: 0000000000000027 x9 : c912d0d083728c00\n[ 110.909359] x8 : c912d0d083728c00 x7 : 65646e75203a745f x6 : 746e756f63666572\n[ 110.909384] x5 : ffffffed579f62ee x4 : ffffffed579eb01e x3 : 0000000000000000\n[ 110.909409] x2 : 0000000000000000 x1 : ffffffc00913b750 x0 : 0000000000000001\n[ 110.909434] Call trace:\n[ 110.909441] refcount_dec_not_one+0xb8/0xc0\n[ 110.909461] vc4_bo_dec_usecnt+0x4c/0x1b0 [vc4]\n[ 110.909903] vc4_cleanup_fb+0x44/0x50 [vc4]\n[ 110.910315] drm_atomic_helper_cleanup_planes+0x88/0xa4 [drm_kms_helper]\n[ 110.910669] vc4_atomic_commit_tail+0x390/0x9dc [vc4]\n[ 110.911079] commit_tail+0xb0/0x164 [drm_kms_helper]\n[ 110.911397] drm_atomic_helper_commit+0x1d0/0x1f0 [drm_kms_helper]\n[ 110.911716] drm_atomic_commit+0xb0/0xdc [drm]\n[ 110.912569] drm_mode_atomic_ioctl+0x348/0x4b8 [drm]\n[ 110.913330] drm_ioctl_kernel+0xec/0x15c [drm]\n[ 110.914091] drm_ioctl+0x24c/0x3b0 [drm]\n[ 110.914850] __arm64_sys_ioctl+0x9c/0xd4\n[ 110.914873] invoke_syscall+0x4c/0x114\n[ 110.914897] el0_svc_common+0xd0/0x118\n[ 110.914917] do_el0_svc+0x38/0xd0\n[ 110.914936] el0_svc+0x30/0x8c\n[ 110.914958] el0t_64_sync_handler+0x84/0xf0\n[ 110.914979] el0t_64_sync+0x18c/0x190\n[ 110.914996] ---[ end trace 0000000000000000 ]---\n\nThis happens because, although `prepare_fb` and `cleanup_fb` are\nperfectly balanced, we cannot guarantee consistency in the check\nplane-\u003estate-\u003efb == state-\u003efb. This means that sometimes we can increase\nthe refcount in `prepare_fb` and don\u0027t decrease it in `cleanup_fb`. The\nopposite can also be true.\n\nIn fact, the struct drm_plane .state shouldn\u0027t be accessed directly\nbut instead, the `drm_atomic_get_new_plane_state()` helper function should\nbe used. So, we could stick to this check, but using\n`drm_atomic_get_new_plane_state()`. But actually, this check is not re\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35932",
"url": "https://www.suse.com/security/cve/CVE-2024-35932"
},
{
"category": "external",
"summary": "SUSE Bug 1224650 for CVE-2024-35932",
"url": "https://bugzilla.suse.com/1224650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35932"
},
{
"cve": "CVE-2024-35933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: Fix null ptr deref in btintel_read_version\n\nIf hci_cmd_sync_complete() is triggered and skb is NULL, then\nhdev-\u003ereq_skb is NULL, which will cause this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35933",
"url": "https://www.suse.com/security/cve/CVE-2024-35933"
},
{
"category": "external",
"summary": "SUSE Bug 1224640 for CVE-2024-35933",
"url": "https://bugzilla.suse.com/1224640"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35933"
},
{
"cve": "CVE-2024-35936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()\n\nThe unhandled case in btrfs_relocate_sys_chunks() loop is a corruption,\nas it could be caused only by two impossible conditions:\n\n- at first the search key is set up to look for a chunk tree item, with\n offset -1, this is an inexact search and the key-\u003eoffset will contain\n the correct offset upon a successful search, a valid chunk tree item\n cannot have an offset -1\n\n- after first successful search, the found_key corresponds to a chunk\n item, the offset is decremented by 1 before the next loop, it\u0027s\n impossible to find a chunk item there due to alignment and size\n constraints",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35936",
"url": "https://www.suse.com/security/cve/CVE-2024-35936"
},
{
"category": "external",
"summary": "SUSE Bug 1224644 for CVE-2024-35936",
"url": "https://bugzilla.suse.com/1224644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35936"
},
{
"cve": "CVE-2024-35937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35937"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: check A-MSDU format more carefully\n\nIf it looks like there\u0027s another subframe in the A-MSDU\nbut the header isn\u0027t fully there, we can end up reading\ndata out of bounds, only to discard later. Make this a\nbit more careful and check if the subframe header can\neven be present.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35937",
"url": "https://www.suse.com/security/cve/CVE-2024-35937"
},
{
"category": "external",
"summary": "SUSE Bug 1224526 for CVE-2024-35937",
"url": "https://bugzilla.suse.com/1224526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35937"
},
{
"cve": "CVE-2024-35938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath11k: decrease MHI channel buffer length to 8KB\n\nCurrently buf_len field of ath11k_mhi_config_qca6390 is assigned\nwith 0, making MHI use a default size, 64KB, to allocate channel\nbuffers. This is likely to fail in some scenarios where system\nmemory is highly fragmented and memory compaction or reclaim is\nnot allowed.\n\nThere is a fail report which is caused by it:\nkworker/u32:45: page allocation failure: order:4, mode:0x40c00(GFP_NOIO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0\nCPU: 0 PID: 19318 Comm: kworker/u32:45 Not tainted 6.8.0-rc3-1.gae4495f-default #1 openSUSE Tumbleweed (unreleased) 493b6d5b382c603654d7a81fc3c144d59a1dfceb\nWorkqueue: events_unbound async_run_entry_fn\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x60\n warn_alloc+0x13a/0x1b0\n ? srso_alias_return_thunk+0x5/0xfbef5\n ? __alloc_pages_direct_compact+0xab/0x210\n __alloc_pages_slowpath.constprop.0+0xd3e/0xda0\n __alloc_pages+0x32d/0x350\n ? mhi_prepare_channel+0x127/0x2d0 [mhi 40df44e07c05479f7a6e7b90fba9f0e0031a7814]\n __kmalloc_large_node+0x72/0x110\n __kmalloc+0x37c/0x480\n ? mhi_map_single_no_bb+0x77/0xf0 [mhi 40df44e07c05479f7a6e7b90fba9f0e0031a7814]\n ? mhi_prepare_channel+0x127/0x2d0 [mhi 40df44e07c05479f7a6e7b90fba9f0e0031a7814]\n mhi_prepare_channel+0x127/0x2d0 [mhi 40df44e07c05479f7a6e7b90fba9f0e0031a7814]\n __mhi_prepare_for_transfer+0x44/0x80 [mhi 40df44e07c05479f7a6e7b90fba9f0e0031a7814]\n ? __pfx_____mhi_prepare_for_transfer+0x10/0x10 [mhi 40df44e07c05479f7a6e7b90fba9f0e0031a7814]\n device_for_each_child+0x5c/0xa0\n ? __pfx_pci_pm_resume+0x10/0x10\n ath11k_core_resume+0x65/0x100 [ath11k a5094e22d7223135c40d93c8f5321cf09fd85e4e]\n ? srso_alias_return_thunk+0x5/0xfbef5\n ath11k_pci_pm_resume+0x32/0x60 [ath11k_pci 830b7bfc3ea80ebef32e563cafe2cb55e9cc73ec]\n ? srso_alias_return_thunk+0x5/0xfbef5\n dpm_run_callback+0x8c/0x1e0\n device_resume+0x104/0x340\n ? __pfx_dpm_watchdog_handler+0x10/0x10\n async_resume+0x1d/0x30\n async_run_entry_fn+0x32/0x120\n process_one_work+0x168/0x330\n worker_thread+0x2f5/0x410\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xe8/0x120\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x34/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n\nActually those buffers are used only by QMI target -\u003e host communication.\nAnd for WCN6855 and QCA6390, the largest packet size for that is less\nthan 6KB. So change buf_len field to 8KB, which results in order 1\nallocation if page size is 4KB. In this way, we can at least save some\nmemory, and as well as decrease the possibility of allocation failure\nin those scenarios.\n\nTested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35938",
"url": "https://www.suse.com/security/cve/CVE-2024-35938"
},
{
"category": "external",
"summary": "SUSE Bug 1224643 for CVE-2024-35938",
"url": "https://bugzilla.suse.com/1224643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35938"
},
{
"cve": "CVE-2024-35940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npstore/zone: Add a null pointer check to the psz_kmsg_read\n\nkasprintf() returns a pointer to dynamically allocated memory\nwhich can be NULL upon failure. Ensure the allocation was successful\nby checking the pointer validity.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35940",
"url": "https://www.suse.com/security/cve/CVE-2024-35940"
},
{
"category": "external",
"summary": "SUSE Bug 1224537 for CVE-2024-35940",
"url": "https://bugzilla.suse.com/1224537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35940"
},
{
"cve": "CVE-2024-35945",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35945"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: phy_device: Prevent nullptr exceptions on ISR\n\nIf phydev-\u003eirq is set unconditionally, check\nfor valid interrupt handler or fall back to polling mode to prevent\nnullptr exceptions in interrupt service routine.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35945",
"url": "https://www.suse.com/security/cve/CVE-2024-35945"
},
{
"category": "external",
"summary": "SUSE Bug 1224639 for CVE-2024-35945",
"url": "https://bugzilla.suse.com/1224639"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35945"
},
{
"cve": "CVE-2024-35946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: fix null pointer access when abort scan\n\nDuring cancel scan we might use vif that weren\u0027t scanning.\nFix this by using the actual scanning vif.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35946",
"url": "https://www.suse.com/security/cve/CVE-2024-35946"
},
{
"category": "external",
"summary": "SUSE Bug 1224646 for CVE-2024-35946",
"url": "https://bugzilla.suse.com/1224646"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35946"
},
{
"cve": "CVE-2024-35947",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35947"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndyndbg: fix old BUG_ON in \u003econtrol parser\n\nFix a BUG_ON from 2009. Even if it looks \"unreachable\" (I didn\u0027t\nreally look), lets make sure by removing it, doing pr_err and return\n-EINVAL instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35947",
"url": "https://www.suse.com/security/cve/CVE-2024-35947"
},
{
"category": "external",
"summary": "SUSE Bug 1224647 for CVE-2024-35947",
"url": "https://bugzilla.suse.com/1224647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35947"
},
{
"cve": "CVE-2024-35950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35950"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/client: Fully protect modes[] with dev-\u003emode_config.mutex\n\nThe modes[] array contains pointers to modes on the connectors\u0027\nmode lists, which are protected by dev-\u003emode_config.mutex.\nThus we need to extend modes[] the same protection or by the\ntime we use it the elements may already be pointing to\nfreed/reused memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35950",
"url": "https://www.suse.com/security/cve/CVE-2024-35950"
},
{
"category": "external",
"summary": "SUSE Bug 1224703 for CVE-2024-35950",
"url": "https://bugzilla.suse.com/1224703"
},
{
"category": "external",
"summary": "SUSE Bug 1225310 for CVE-2024-35950",
"url": "https://bugzilla.suse.com/1225310"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-35950"
},
{
"cve": "CVE-2024-35951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()\n\nSubject: [PATCH] drm/panfrost: Fix the error path in\n panfrost_mmu_map_fault_addr()\n\nIf some the pages or sgt allocation failed, we shouldn\u0027t release the\npages ref we got earlier, otherwise we will end up with unbalanced\nget/put_pages() calls. We should instead leave everything in place\nand let the BO release function deal with extra cleanup when the object\nis destroyed, or let the fault handler try again next time it\u0027s called.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35951",
"url": "https://www.suse.com/security/cve/CVE-2024-35951"
},
{
"category": "external",
"summary": "SUSE Bug 1224701 for CVE-2024-35951",
"url": "https://bugzilla.suse.com/1224701"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35951"
},
{
"cve": "CVE-2024-35952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35952"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/ast: Fix soft lockup\n\nThere is a while-loop in ast_dp_set_on_off() that could lead to\ninfinite-loop. This is because the register, VGACRI-Dx, checked in\nthis API is a scratch register actually controlled by a MCU, named\nDPMCU, in BMC.\n\nThese scratch registers are protected by scu-lock. If suc-lock is not\noff, DPMCU can not update these registers and then host will have soft\nlockup due to never updated status.\n\nDPMCU is used to control DP and relative registers to handshake with\nhost\u0027s VGA driver. Even the most time-consuming task, DP\u0027s link\ntraining, is less than 100ms. 200ms should be enough.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35952",
"url": "https://www.suse.com/security/cve/CVE-2024-35952"
},
{
"category": "external",
"summary": "SUSE Bug 1224705 for CVE-2024-35952",
"url": "https://bugzilla.suse.com/1224705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35952"
},
{
"cve": "CVE-2024-35953",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35953"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/ivpu: Fix deadlock in context_xa\n\nivpu_device-\u003econtext_xa is locked both in kernel thread and IRQ context.\nIt requires XA_FLAGS_LOCK_IRQ flag to be passed during initialization\notherwise the lock could be acquired from a thread and interrupted by\nan IRQ that locks it for the second time causing the deadlock.\n\nThis deadlock was reported by lockdep and observed in internal tests.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35953",
"url": "https://www.suse.com/security/cve/CVE-2024-35953"
},
{
"category": "external",
"summary": "SUSE Bug 1224704 for CVE-2024-35953",
"url": "https://bugzilla.suse.com/1224704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35953"
},
{
"cve": "CVE-2024-35954",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35954"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Avoid sg device teardown race\n\nsg_remove_sfp_usercontext() must not use sg_device_destroy() after calling\nscsi_device_put().\n\nsg_device_destroy() is accessing the parent scsi_device request_queue which\nwill already be set to NULL when the preceding call to scsi_device_put()\nremoved the last reference to the parent scsi_device.\n\nThe resulting NULL pointer exception will then crash the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35954",
"url": "https://www.suse.com/security/cve/CVE-2024-35954"
},
{
"category": "external",
"summary": "SUSE Bug 1224675 for CVE-2024-35954",
"url": "https://bugzilla.suse.com/1224675"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35954"
},
{
"cve": "CVE-2024-35955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35955"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkprobes: Fix possible use-after-free issue on kprobe registration\n\nWhen unloading a module, its state is changing MODULE_STATE_LIVE -\u003e\n MODULE_STATE_GOING -\u003e MODULE_STATE_UNFORMED. Each change will take\na time. `is_module_text_address()` and `__module_text_address()`\nworks with MODULE_STATE_LIVE and MODULE_STATE_GOING.\nIf we use `is_module_text_address()` and `__module_text_address()`\nseparately, there is a chance that the first one is succeeded but the\nnext one is failed because module-\u003estate becomes MODULE_STATE_UNFORMED\nbetween those operations.\n\nIn `check_kprobe_address_safe()`, if the second `__module_text_address()`\nis failed, that is ignored because it expected a kernel_text address.\nBut it may have failed simply because module-\u003estate has been changed\nto MODULE_STATE_UNFORMED. In this case, arm_kprobe() will try to modify\nnon-exist module text address (use-after-free).\n\nTo fix this problem, we should not use separated `is_module_text_address()`\nand `__module_text_address()`, but use only `__module_text_address()`\nonce and do `try_module_get(module)` which is only available with\nMODULE_STATE_LIVE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35955",
"url": "https://www.suse.com/security/cve/CVE-2024-35955"
},
{
"category": "external",
"summary": "SUSE Bug 1224676 for CVE-2024-35955",
"url": "https://bugzilla.suse.com/1224676"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35955"
},
{
"cve": "CVE-2024-35958",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35958"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ena: Fix incorrect descriptor free behavior\n\nENA has two types of TX queues:\n- queues which only process TX packets arriving from the network stack\n- queues which only process TX packets forwarded to it by XDP_REDIRECT\n or XDP_TX instructions\n\nThe ena_free_tx_bufs() cycles through all descriptors in a TX queue\nand unmaps + frees every descriptor that hasn\u0027t been acknowledged yet\nby the device (uncompleted TX transactions).\nThe function assumes that the processed TX queue is necessarily from\nthe first category listed above and ends up using napi_consume_skb()\nfor descriptors belonging to an XDP specific queue.\n\nThis patch solves a bug in which, in case of a VF reset, the\ndescriptors aren\u0027t freed correctly, leading to crashes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35958",
"url": "https://www.suse.com/security/cve/CVE-2024-35958"
},
{
"category": "external",
"summary": "SUSE Bug 1224677 for CVE-2024-35958",
"url": "https://bugzilla.suse.com/1224677"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35958"
},
{
"cve": "CVE-2024-35959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35959"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix mlx5e_priv_init() cleanup flow\n\nWhen mlx5e_priv_init() fails, the cleanup flow calls mlx5e_selq_cleanup which\ncalls mlx5e_selq_apply() that assures that the `priv-\u003estate_lock` is held using\nlockdep_is_held().\n\nAcquire the state_lock in mlx5e_selq_cleanup().\n\nKernel log:\n=============================\nWARNING: suspicious RCU usage\n6.8.0-rc3_net_next_841a9b5 #1 Not tainted\n-----------------------------\ndrivers/net/ethernet/mellanox/mlx5/core/en/selq.c:124 suspicious rcu_dereference_protected() usage!\n\nother info that might help us debug this:\n\nrcu_scheduler_active = 2, debug_locks = 1\n2 locks held by systemd-modules/293:\n #0: ffffffffa05067b0 (devices_rwsem){++++}-{3:3}, at: ib_register_client+0x109/0x1b0 [ib_core]\n #1: ffff8881096c65c0 (\u0026device-\u003eclient_data_rwsem){++++}-{3:3}, at: add_client_context+0x104/0x1c0 [ib_core]\n\nstack backtrace:\nCPU: 4 PID: 293 Comm: systemd-modules Not tainted 6.8.0-rc3_net_next_841a9b5 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x8a/0xa0\n lockdep_rcu_suspicious+0x154/0x1a0\n mlx5e_selq_apply+0x94/0xa0 [mlx5_core]\n mlx5e_selq_cleanup+0x3a/0x60 [mlx5_core]\n mlx5e_priv_init+0x2be/0x2f0 [mlx5_core]\n mlx5_rdma_setup_rn+0x7c/0x1a0 [mlx5_core]\n rdma_init_netdev+0x4e/0x80 [ib_core]\n ? mlx5_rdma_netdev_free+0x70/0x70 [mlx5_core]\n ipoib_intf_init+0x64/0x550 [ib_ipoib]\n ipoib_intf_alloc+0x4e/0xc0 [ib_ipoib]\n ipoib_add_one+0xb0/0x360 [ib_ipoib]\n add_client_context+0x112/0x1c0 [ib_core]\n ib_register_client+0x166/0x1b0 [ib_core]\n ? 0xffffffffa0573000\n ipoib_init_module+0xeb/0x1a0 [ib_ipoib]\n do_one_initcall+0x61/0x250\n do_init_module+0x8a/0x270\n init_module_from_file+0x8b/0xd0\n idempotent_init_module+0x17d/0x230\n __x64_sys_finit_module+0x61/0xb0\n do_syscall_64+0x71/0x140\n entry_SYSCALL_64_after_hwframe+0x46/0x4e\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35959",
"url": "https://www.suse.com/security/cve/CVE-2024-35959"
},
{
"category": "external",
"summary": "SUSE Bug 1224666 for CVE-2024-35959",
"url": "https://bugzilla.suse.com/1224666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35959"
},
{
"cve": "CVE-2024-35960",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35960"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Properly link new fs rules into the tree\n\nPreviously, add_rule_fg would only add newly created rules from the\nhandle into the tree when they had a refcount of 1. On the other hand,\ncreate_flow_handle tries hard to find and reference already existing\nidentical rules instead of creating new ones.\n\nThese two behaviors can result in a situation where create_flow_handle\n1) creates a new rule and references it, then\n2) in a subsequent step during the same handle creation references it\n again,\nresulting in a rule with a refcount of 2 that is not linked into the\ntree, will have a NULL parent and root and will result in a crash when\nthe flow group is deleted because del_sw_hw_rule, invoked on rule\ndeletion, assumes node-\u003eparent is != NULL.\n\nThis happened in the wild, due to another bug related to incorrect\nhandling of duplicate pkt_reformat ids, which lead to the code in\ncreate_flow_handle incorrectly referencing a just-added rule in the same\nflow handle, resulting in the problem described above. Full details are\nat [1].\n\nThis patch changes add_rule_fg to add new rules without parents into\nthe tree, properly initializing them and avoiding the crash. This makes\nit more consistent with how rules are added to an FTE in\ncreate_flow_handle.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35960",
"url": "https://www.suse.com/security/cve/CVE-2024-35960"
},
{
"category": "external",
"summary": "SUSE Bug 1224588 for CVE-2024-35960",
"url": "https://bugzilla.suse.com/1224588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35960"
},
{
"cve": "CVE-2024-35961",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35961"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Register devlink first under devlink lock\n\nIn case device is having a non fatal FW error during probe, the\ndriver will report the error to user via devlink. This will trigger\na WARN_ON, since mlx5 is calling devlink_register() last.\nIn order to avoid the WARN_ON[1], change mlx5 to invoke devl_register()\nfirst under devlink lock.\n\n[1]\nWARNING: CPU: 5 PID: 227 at net/devlink/health.c:483 devlink_recover_notify.constprop.0+0xb8/0xc0\nCPU: 5 PID: 227 Comm: kworker/u16:3 Not tainted 6.4.0-rc5_for_upstream_min_debug_2023_06_12_12_38 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nWorkqueue: mlx5_health0000:08:00.0 mlx5_fw_reporter_err_work [mlx5_core]\nRIP: 0010:devlink_recover_notify.constprop.0+0xb8/0xc0\nCall Trace:\n \u003cTASK\u003e\n ? __warn+0x79/0x120\n ? devlink_recover_notify.constprop.0+0xb8/0xc0\n ? report_bug+0x17c/0x190\n ? handle_bug+0x3c/0x60\n ? exc_invalid_op+0x14/0x70\n ? asm_exc_invalid_op+0x16/0x20\n ? devlink_recover_notify.constprop.0+0xb8/0xc0\n devlink_health_report+0x4a/0x1c0\n mlx5_fw_reporter_err_work+0xa4/0xd0 [mlx5_core]\n process_one_work+0x1bb/0x3c0\n ? process_one_work+0x3c0/0x3c0\n worker_thread+0x4d/0x3c0\n ? process_one_work+0x3c0/0x3c0\n kthread+0xc6/0xf0\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x1f/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35961",
"url": "https://www.suse.com/security/cve/CVE-2024-35961"
},
{
"category": "external",
"summary": "SUSE Bug 1224585 for CVE-2024-35961",
"url": "https://bugzilla.suse.com/1224585"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35961"
},
{
"cve": "CVE-2024-35963",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35963"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: Fix not validating setsockopt user input\n\nCheck user input length before copying data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35963",
"url": "https://www.suse.com/security/cve/CVE-2024-35963"
},
{
"category": "external",
"summary": "SUSE Bug 1224582 for CVE-2024-35963",
"url": "https://bugzilla.suse.com/1224582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35963"
},
{
"cve": "CVE-2024-35965",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35965"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix not validating setsockopt user input\n\nCheck user input length before copying data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35965",
"url": "https://www.suse.com/security/cve/CVE-2024-35965"
},
{
"category": "external",
"summary": "SUSE Bug 1224579 for CVE-2024-35965",
"url": "https://bugzilla.suse.com/1224579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35965"
},
{
"cve": "CVE-2024-35966",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35966"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Fix not validating setsockopt user input\n\nsyzbot reported rfcomm_sock_setsockopt_old() is copying data without\nchecking user input length.\n\nBUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset\ninclude/linux/sockptr.h:49 [inline]\nBUG: KASAN: slab-out-of-bounds in copy_from_sockptr\ninclude/linux/sockptr.h:55 [inline]\nBUG: KASAN: slab-out-of-bounds in rfcomm_sock_setsockopt_old\nnet/bluetooth/rfcomm/sock.c:632 [inline]\nBUG: KASAN: slab-out-of-bounds in rfcomm_sock_setsockopt+0x893/0xa70\nnet/bluetooth/rfcomm/sock.c:673\nRead of size 4 at addr ffff8880209a8bc3 by task syz-executor632/5064",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35966",
"url": "https://www.suse.com/security/cve/CVE-2024-35966"
},
{
"category": "external",
"summary": "SUSE Bug 1224576 for CVE-2024-35966",
"url": "https://bugzilla.suse.com/1224576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35966"
},
{
"cve": "CVE-2024-35967",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35967"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: SCO: Fix not validating setsockopt user input\n\nsyzbot reported sco_sock_setsockopt() is copying data without\nchecking user input length.\n\nBUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset\ninclude/linux/sockptr.h:49 [inline]\nBUG: KASAN: slab-out-of-bounds in copy_from_sockptr\ninclude/linux/sockptr.h:55 [inline]\nBUG: KASAN: slab-out-of-bounds in sco_sock_setsockopt+0xc0b/0xf90\nnet/bluetooth/sco.c:893\nRead of size 4 at addr ffff88805f7b15a3 by task syz-executor.5/12578",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35967",
"url": "https://www.suse.com/security/cve/CVE-2024-35967"
},
{
"category": "external",
"summary": "SUSE Bug 1224587 for CVE-2024-35967",
"url": "https://bugzilla.suse.com/1224587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35967"
},
{
"cve": "CVE-2024-35971",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35971"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ks8851: Handle softirqs at the end of IRQ thread to fix hang\n\nThe ks8851_irq() thread may call ks8851_rx_pkts() in case there are\nany packets in the MAC FIFO, which calls netif_rx(). This netif_rx()\nimplementation is guarded by local_bh_disable() and local_bh_enable().\nThe local_bh_enable() may call do_softirq() to run softirqs in case\nany are pending. One of the softirqs is net_rx_action, which ultimately\nreaches the driver .start_xmit callback. If that happens, the system\nhangs. The entire call chain is below:\n\nks8851_start_xmit_par from netdev_start_xmit\nnetdev_start_xmit from dev_hard_start_xmit\ndev_hard_start_xmit from sch_direct_xmit\nsch_direct_xmit from __dev_queue_xmit\n__dev_queue_xmit from __neigh_update\n__neigh_update from neigh_update\nneigh_update from arp_process.constprop.0\narp_process.constprop.0 from __netif_receive_skb_one_core\n__netif_receive_skb_one_core from process_backlog\nprocess_backlog from __napi_poll.constprop.0\n__napi_poll.constprop.0 from net_rx_action\nnet_rx_action from __do_softirq\n__do_softirq from call_with_stack\ncall_with_stack from do_softirq\ndo_softirq from __local_bh_enable_ip\n__local_bh_enable_ip from netif_rx\nnetif_rx from ks8851_irq\nks8851_irq from irq_thread_fn\nirq_thread_fn from irq_thread\nirq_thread from kthread\nkthread from ret_from_fork\n\nThe hang happens because ks8851_irq() first locks a spinlock in\nks8851_par.c ks8851_lock_par() spin_lock_irqsave(\u0026ksp-\u003elock, ...)\nand with that spinlock locked, calls netif_rx(). Once the execution\nreaches ks8851_start_xmit_par(), it calls ks8851_lock_par() again\nwhich attempts to claim the already locked spinlock again, and the\nhang happens.\n\nMove the do_softirq() call outside of the spinlock protected section\nof ks8851_irq() by disabling BHs around the entire spinlock protected\nsection of ks8851_irq() handler. Place local_bh_enable() outside of\nthe spinlock protected section, so that it can trigger do_softirq()\nwithout the ks8851_par.c ks8851_lock_par() spinlock being held, and\nsafely call ks8851_start_xmit_par() without attempting to lock the\nalready locked spinlock.\n\nSince ks8851_irq() is protected by local_bh_disable()/local_bh_enable()\nnow, replace netif_rx() with __netif_rx() which is not duplicating the\nlocal_bh_disable()/local_bh_enable() calls.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35971",
"url": "https://www.suse.com/security/cve/CVE-2024-35971"
},
{
"category": "external",
"summary": "SUSE Bug 1224578 for CVE-2024-35971",
"url": "https://bugzilla.suse.com/1224578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35971"
},
{
"cve": "CVE-2024-35972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35972"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()\n\nIf ulp = kzalloc() fails, the allocated edev will leak because it is\nnot properly assigned and the cleanup path will not be able to free it.\nFix it by assigning it properly immediately after allocation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35972",
"url": "https://www.suse.com/security/cve/CVE-2024-35972"
},
{
"category": "external",
"summary": "SUSE Bug 1224577 for CVE-2024-35972",
"url": "https://bugzilla.suse.com/1224577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35972"
},
{
"cve": "CVE-2024-35973",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35973"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: fix header validation in geneve[6]_xmit_skb\n\nsyzbot is able to trigger an uninit-value in geneve_xmit() [1]\n\nProblem : While most ip tunnel helpers (like ip_tunnel_get_dsfield())\nuses skb_protocol(skb, true), pskb_inet_may_pull() is only using\nskb-\u003eprotocol.\n\nIf anything else than ETH_P_IPV6 or ETH_P_IP is found in skb-\u003eprotocol,\npskb_inet_may_pull() does nothing at all.\n\nIf a vlan tag was provided by the caller (af_packet in the syzbot case),\nthe network header might not point to the correct location, and skb\nlinear part could be smaller than expected.\n\nAdd skb_vlan_inet_prepare() to perform a complete mac validation.\n\nUse this in geneve for the moment, I suspect we need to adopt this\nmore broadly.\n\nv4 - Jakub reported v3 broke l2_tos_ttl_inherit.sh selftest\n - Only call __vlan_get_protocol() for vlan types.\n\nv2,v3 - Addressed Sabrina comments on v1 and v2\n\n[1]\n\nBUG: KMSAN: uninit-value in geneve_xmit_skb drivers/net/geneve.c:910 [inline]\n BUG: KMSAN: uninit-value in geneve_xmit+0x302d/0x5420 drivers/net/geneve.c:1030\n geneve_xmit_skb drivers/net/geneve.c:910 [inline]\n geneve_xmit+0x302d/0x5420 drivers/net/geneve.c:1030\n __netdev_start_xmit include/linux/netdevice.h:4903 [inline]\n netdev_start_xmit include/linux/netdevice.h:4917 [inline]\n xmit_one net/core/dev.c:3531 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3547\n __dev_queue_xmit+0x348d/0x52c0 net/core/dev.c:4335\n dev_queue_xmit include/linux/netdevice.h:3091 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3081 [inline]\n packet_sendmsg+0x8bb0/0x9ef0 net/packet/af_packet.c:3113\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:745\n __sys_sendto+0x685/0x830 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2199\n do_syscall_64+0xd5/0x1f0\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:3804 [inline]\n slab_alloc_node mm/slub.c:3845 [inline]\n kmem_cache_alloc_node+0x613/0xc50 mm/slub.c:3888\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:577\n __alloc_skb+0x35b/0x7a0 net/core/skbuff.c:668\n alloc_skb include/linux/skbuff.h:1318 [inline]\n alloc_skb_with_frags+0xc8/0xbf0 net/core/skbuff.c:6504\n sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2795\n packet_alloc_skb net/packet/af_packet.c:2930 [inline]\n packet_snd net/packet/af_packet.c:3024 [inline]\n packet_sendmsg+0x722d/0x9ef0 net/packet/af_packet.c:3113\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:745\n __sys_sendto+0x685/0x830 net/socket.c:2191\n __do_sys_sendto net/socket.c:2203 [inline]\n __se_sys_sendto net/socket.c:2199 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2199\n do_syscall_64+0xd5/0x1f0\n entry_SYSCALL_64_after_hwframe+0x6d/0x75\n\nCPU: 0 PID: 5033 Comm: syz-executor346 Not tainted 6.9.0-rc1-syzkaller-00005-g928a87efa423 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35973",
"url": "https://www.suse.com/security/cve/CVE-2024-35973"
},
{
"category": "external",
"summary": "SUSE Bug 1224586 for CVE-2024-35973",
"url": "https://bugzilla.suse.com/1224586"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35973"
},
{
"cve": "CVE-2024-35974",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35974"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix q-\u003eblkg_list corruption during disk rebind\n\nMultiple gendisk instances can allocated/added for single request queue\nin case of disk rebind. blkg may still stay in q-\u003eblkg_list when calling\nblkcg_init_disk() for rebind, then q-\u003eblkg_list becomes corrupted.\n\nFix the list corruption issue by:\n\n- add blkg_init_queue() to initialize q-\u003eblkg_list \u0026 q-\u003eblkcg_mutex only\n- move calling blkg_init_queue() into blk_alloc_queue()\n\nThe list corruption should be started since commit f1c006f1c685 (\"blk-cgroup:\nsynchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()\")\nwhich delays removing blkg from q-\u003eblkg_list into blkg_free_workfn().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35974",
"url": "https://www.suse.com/security/cve/CVE-2024-35974"
},
{
"category": "external",
"summary": "SUSE Bug 1224573 for CVE-2024-35974",
"url": "https://bugzilla.suse.com/1224573"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35974"
},
{
"cve": "CVE-2024-35975",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35975"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix transmit scheduler resource leak\n\nInorder to support shaping and scheduling, Upon class creation\nNetdev driver allocates trasmit schedulers.\n\nThe previous patch which added support for Round robin scheduling has\na bug due to which driver is not freeing transmit schedulers post\nclass deletion.\n\nThis patch fixes the same.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35975",
"url": "https://www.suse.com/security/cve/CVE-2024-35975"
},
{
"category": "external",
"summary": "SUSE Bug 1224569 for CVE-2024-35975",
"url": "https://bugzilla.suse.com/1224569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35975"
},
{
"cve": "CVE-2024-35977",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35977"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/chrome: cros_ec_uart: properly fix race condition\n\nThe cros_ec_uart_probe() function calls devm_serdev_device_open() before\nit calls serdev_device_set_client_ops(). This can trigger a NULL pointer\ndereference:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000000\n ...\n Call Trace:\n \u003cTASK\u003e\n ...\n ? ttyport_receive_buf\n\nA simplified version of crashing code is as follows:\n\n static inline size_t serdev_controller_receive_buf(struct serdev_controller *ctrl,\n const u8 *data,\n size_t count)\n {\n struct serdev_device *serdev = ctrl-\u003eserdev;\n\n if (!serdev || !serdev-\u003eops-\u003ereceive_buf) // CRASH!\n return 0;\n\n return serdev-\u003eops-\u003ereceive_buf(serdev, data, count);\n }\n\nIt assumes that if SERPORT_ACTIVE is set and serdev exists, serdev-\u003eops\nwill also exist. This conflicts with the existing cros_ec_uart_probe()\nlogic, as it first calls devm_serdev_device_open() (which sets\nSERPORT_ACTIVE), and only later sets serdev-\u003eops via\nserdev_device_set_client_ops().\n\nCommit 01f95d42b8f4 (\"platform/chrome: cros_ec_uart: fix race\ncondition\") attempted to fix a similar race condition, but while doing\nso, made the window of error for this race condition to happen much\nwider.\n\nAttempt to fix the race condition again, making sure we fully setup\nbefore calling devm_serdev_device_open().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35977",
"url": "https://www.suse.com/security/cve/CVE-2024-35977"
},
{
"category": "external",
"summary": "SUSE Bug 1224568 for CVE-2024-35977",
"url": "https://bugzilla.suse.com/1224568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35977"
},
{
"cve": "CVE-2024-35978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35978"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix memory leak in hci_req_sync_complete()\n\nIn \u0027hci_req_sync_complete()\u0027, always free the previous sync\nrequest state before assigning reference to a new one.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35978",
"url": "https://www.suse.com/security/cve/CVE-2024-35978"
},
{
"category": "external",
"summary": "SUSE Bug 1224571 for CVE-2024-35978",
"url": "https://bugzilla.suse.com/1224571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35978"
},
{
"cve": "CVE-2024-35982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35982"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbatman-adv: Avoid infinite loop trying to resize local TT\n\nIf the MTU of one of an attached interface becomes too small to transmit\nthe local translation table then it must be resized to fit inside all\nfragments (when enabled) or a single packet.\n\nBut if the MTU becomes too low to transmit even the header + the VLAN\nspecific part then the resizing of the local TT will never succeed. This\ncan for example happen when the usable space is 110 bytes and 11 VLANs are\non top of batman-adv. In this case, at least 116 byte would be needed.\nThere will just be an endless spam of\n\n batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (110)\n\nin the log but the function will never finish. Problem here is that the\ntimeout will be halved all the time and will then stagnate at 0 and\ntherefore never be able to reduce the table even more.\n\nThere are other scenarios possible with a similar result. The number of\nBATADV_TT_CLIENT_NOPURGE entries in the local TT can for example be too\nhigh to fit inside a packet. Such a scenario can therefore happen also with\nonly a single VLAN + 7 non-purgable addresses - requiring at least 120\nbytes.\n\nWhile this should be handled proactively when:\n\n* interface with too low MTU is added\n* VLAN is added\n* non-purgeable local mac is added\n* MTU of an attached interface is reduced\n* fragmentation setting gets disabled (which most likely requires dropping\n attached interfaces)\n\nnot all of these scenarios can be prevented because batman-adv is only\nconsuming events without the the possibility to prevent these actions\n(non-purgable MAC address added, MTU of an attached interface is reduced).\nIt is therefore necessary to also make sure that the code is able to handle\nalso the situations when there were already incompatible system\nconfiguration are present.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35982",
"url": "https://www.suse.com/security/cve/CVE-2024-35982"
},
{
"category": "external",
"summary": "SUSE Bug 1224566 for CVE-2024-35982",
"url": "https://bugzilla.suse.com/1224566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35982"
},
{
"cve": "CVE-2024-35984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35984"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: smbus: fix NULL function pointer dereference\n\nBaruch reported an OOPS when using the designware controller as target\nonly. Target-only modes break the assumption of one transfer function\nalways being available. Fix this by always checking the pointer in\n__i2c_transfer.\n\n[wsa: dropped the simplification in core-smbus to avoid theoretical regressions]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35984",
"url": "https://www.suse.com/security/cve/CVE-2024-35984"
},
{
"category": "external",
"summary": "SUSE Bug 1224567 for CVE-2024-35984",
"url": "https://bugzilla.suse.com/1224567"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35984"
},
{
"cve": "CVE-2024-35986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35986"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered\n\nThe power_supply frame-work is not really designed for there to be\nlong living in kernel references to power_supply devices.\n\nSpecifically unregistering a power_supply while some other code has\na reference to it triggers a WARN in power_supply_unregister():\n\n\tWARN_ON(atomic_dec_return(\u0026psy-\u003euse_cnt));\n\nFolllowed by the power_supply still getting removed and the\nbacking data freed anyway, leaving the tusb1210 charger-detect code\nwith a dangling reference, resulting in a crash the next time\ntusb1210_get_online() is called.\n\nFix this by only holding the reference in tusb1210_get_online()\nfreeing it at the end of the function. Note this still leaves\na theoretical race window, but it avoids the issue when manually\nrmmod-ing the charger chip driver during development.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35986",
"url": "https://www.suse.com/security/cve/CVE-2024-35986"
},
{
"category": "external",
"summary": "SUSE Bug 1224562 for CVE-2024-35986",
"url": "https://bugzilla.suse.com/1224562"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35986"
},
{
"cve": "CVE-2024-35989",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35989"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix oops during rmmod on single-CPU platforms\n\nDuring the removal of the idxd driver, registered offline callback is\ninvoked as part of the clean up process. However, on systems with only\none CPU online, no valid target is available to migrate the\nperf context, resulting in a kernel oops:\n\n BUG: unable to handle page fault for address: 000000000002a2b8\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD 1470e1067 P4D 0\n Oops: 0002 [#1] PREEMPT SMP NOPTI\n CPU: 0 PID: 20 Comm: cpuhp/0 Not tainted 6.8.0-rc6-dsa+ #57\n Hardware name: Intel Corporation AvenueCity/AvenueCity, BIOS BHSDCRB1.86B.2492.D03.2307181620 07/18/2023\n RIP: 0010:mutex_lock+0x2e/0x50\n ...\n Call Trace:\n \u003cTASK\u003e\n __die+0x24/0x70\n page_fault_oops+0x82/0x160\n do_user_addr_fault+0x65/0x6b0\n __pfx___rdmsr_safe_on_cpu+0x10/0x10\n exc_page_fault+0x7d/0x170\n asm_exc_page_fault+0x26/0x30\n mutex_lock+0x2e/0x50\n mutex_lock+0x1e/0x50\n perf_pmu_migrate_context+0x87/0x1f0\n perf_event_cpu_offline+0x76/0x90 [idxd]\n cpuhp_invoke_callback+0xa2/0x4f0\n __pfx_perf_event_cpu_offline+0x10/0x10 [idxd]\n cpuhp_thread_fun+0x98/0x150\n smpboot_thread_fn+0x27/0x260\n smpboot_thread_fn+0x1af/0x260\n __pfx_smpboot_thread_fn+0x10/0x10\n kthread+0x103/0x140\n __pfx_kthread+0x10/0x10\n ret_from_fork+0x31/0x50\n __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003cTASK\u003e\n\nFix the issue by preventing the migration of the perf context to an\ninvalid target.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35989",
"url": "https://www.suse.com/security/cve/CVE-2024-35989"
},
{
"category": "external",
"summary": "SUSE Bug 1224558 for CVE-2024-35989",
"url": "https://bugzilla.suse.com/1224558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35989"
},
{
"cve": "CVE-2024-35990",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35990"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma: xilinx_dpdma: Fix locking\n\nThere are several places where either chan-\u003elock or chan-\u003evchan.lock was\nnot held. Add appropriate locking. This fixes lockdep warnings like\n\n[ 31.077578] ------------[ cut here ]------------\n[ 31.077831] WARNING: CPU: 2 PID: 40 at drivers/dma/xilinx/xilinx_dpdma.c:834 xilinx_dpdma_chan_queue_transfer+0x274/0x5e0\n[ 31.077953] Modules linked in:\n[ 31.078019] CPU: 2 PID: 40 Comm: kworker/u12:1 Not tainted 6.6.20+ #98\n[ 31.078102] Hardware name: xlnx,zynqmp (DT)\n[ 31.078169] Workqueue: events_unbound deferred_probe_work_func\n[ 31.078272] pstate: 600000c5 (nZCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 31.078377] pc : xilinx_dpdma_chan_queue_transfer+0x274/0x5e0\n[ 31.078473] lr : xilinx_dpdma_chan_queue_transfer+0x270/0x5e0\n[ 31.078550] sp : ffffffc083bb2e10\n[ 31.078590] x29: ffffffc083bb2e10 x28: 0000000000000000 x27: ffffff880165a168\n[ 31.078754] x26: ffffff880164e920 x25: ffffff880164eab8 x24: ffffff880164d480\n[ 31.078920] x23: ffffff880165a148 x22: ffffff880164e988 x21: 0000000000000000\n[ 31.079132] x20: ffffffc082aa3000 x19: ffffff880164e880 x18: 0000000000000000\n[ 31.079295] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n[ 31.079453] x14: 0000000000000000 x13: ffffff8802263dc0 x12: 0000000000000001\n[ 31.079613] x11: 0001ffc083bb2e34 x10: 0001ff880164e98f x9 : 0001ffc082aa3def\n[ 31.079824] x8 : 0001ffc082aa3dec x7 : 0000000000000000 x6 : 0000000000000516\n[ 31.079982] x5 : ffffffc7f8d43000 x4 : ffffff88003c9c40 x3 : ffffffffffffffff\n[ 31.080147] x2 : ffffffc7f8d43000 x1 : 00000000000000c0 x0 : 0000000000000000\n[ 31.080307] Call trace:\n[ 31.080340] xilinx_dpdma_chan_queue_transfer+0x274/0x5e0\n[ 31.080518] xilinx_dpdma_issue_pending+0x11c/0x120\n[ 31.080595] zynqmp_disp_layer_update+0x180/0x3ac\n[ 31.080712] zynqmp_dpsub_plane_atomic_update+0x11c/0x21c\n[ 31.080825] drm_atomic_helper_commit_planes+0x20c/0x684\n[ 31.080951] drm_atomic_helper_commit_tail+0x5c/0xb0\n[ 31.081139] commit_tail+0x234/0x294\n[ 31.081246] drm_atomic_helper_commit+0x1f8/0x210\n[ 31.081363] drm_atomic_commit+0x100/0x140\n[ 31.081477] drm_client_modeset_commit_atomic+0x318/0x384\n[ 31.081634] drm_client_modeset_commit_locked+0x8c/0x24c\n[ 31.081725] drm_client_modeset_commit+0x34/0x5c\n[ 31.081812] __drm_fb_helper_restore_fbdev_mode_unlocked+0x104/0x168\n[ 31.081899] drm_fb_helper_set_par+0x50/0x70\n[ 31.081971] fbcon_init+0x538/0xc48\n[ 31.082047] visual_init+0x16c/0x23c\n[ 31.082207] do_bind_con_driver.isra.0+0x2d0/0x634\n[ 31.082320] do_take_over_console+0x24c/0x33c\n[ 31.082429] do_fbcon_takeover+0xbc/0x1b0\n[ 31.082503] fbcon_fb_registered+0x2d0/0x34c\n[ 31.082663] register_framebuffer+0x27c/0x38c\n[ 31.082767] __drm_fb_helper_initial_config_and_unlock+0x5c0/0x91c\n[ 31.082939] drm_fb_helper_initial_config+0x50/0x74\n[ 31.083012] drm_fbdev_dma_client_hotplug+0xb8/0x108\n[ 31.083115] drm_client_register+0xa0/0xf4\n[ 31.083195] drm_fbdev_dma_setup+0xb0/0x1cc\n[ 31.083293] zynqmp_dpsub_drm_init+0x45c/0x4e0\n[ 31.083431] zynqmp_dpsub_probe+0x444/0x5e0\n[ 31.083616] platform_probe+0x8c/0x13c\n[ 31.083713] really_probe+0x258/0x59c\n[ 31.083793] __driver_probe_device+0xc4/0x224\n[ 31.083878] driver_probe_device+0x70/0x1c0\n[ 31.083961] __device_attach_driver+0x108/0x1e0\n[ 31.084052] bus_for_each_drv+0x9c/0x100\n[ 31.084125] __device_attach+0x100/0x298\n[ 31.084207] device_initial_probe+0x14/0x20\n[ 31.084292] bus_probe_device+0xd8/0xdc\n[ 31.084368] deferred_probe_work_func+0x11c/0x180\n[ 31.084451] process_one_work+0x3ac/0x988\n[ 31.084643] worker_thread+0x398/0x694\n[ 31.084752] kthread+0x1bc/0x1c0\n[ 31.084848] ret_from_fork+0x10/0x20\n[ 31.084932] irq event stamp: 64549\n[ 31.084970] hardirqs last enabled at (64548): [\u003cffffffc081adf35c\u003e] _raw_spin_unlock_irqrestore+0x80/0x90\n[ 31.085157]\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35990",
"url": "https://www.suse.com/security/cve/CVE-2024-35990"
},
{
"category": "external",
"summary": "SUSE Bug 1224559 for CVE-2024-35990",
"url": "https://bugzilla.suse.com/1224559"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35990"
},
{
"cve": "CVE-2024-35992",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35992"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: marvell: a3700-comphy: Fix out of bounds read\n\nThere is an out of bounds read access of \u0027gbe_phy_init_fix[fix_idx].addr\u0027\nevery iteration after \u0027fix_idx\u0027 reaches \u0027ARRAY_SIZE(gbe_phy_init_fix)\u0027.\n\nMake sure \u0027gbe_phy_init[addr]\u0027 is used when all elements of\n\u0027gbe_phy_init_fix\u0027 array are handled.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35992",
"url": "https://www.suse.com/security/cve/CVE-2024-35992"
},
{
"category": "external",
"summary": "SUSE Bug 1224555 for CVE-2024-35992",
"url": "https://bugzilla.suse.com/1224555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35992"
},
{
"cve": "CVE-2024-35995",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35995"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: CPPC: Use access_width over bit_width for system memory accesses\n\nTo align with ACPI 6.3+, since bit_width can be any 8-bit value, it\ncannot be depended on to be always on a clean 8b boundary. This was\nuncovered on the Cobalt 100 platform.\n\nSError Interrupt on CPU26, code 0xbe000011 -- SError\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\n pstate: 62400009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)\n pc : cppc_get_perf_caps+0xec/0x410\n lr : cppc_get_perf_caps+0xe8/0x410\n sp : ffff8000155ab730\n x29: ffff8000155ab730 x28: ffff0080139d0038 x27: ffff0080139d0078\n x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff\n x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000\n x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff\n x17: 0000000000000000 x16: ffffdc7e111bad04 x15: ffff00802b251008\n x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006\n x11: ffffdc7e128f4420 x10: 0000000000000000 x9 : ffffdc7e111badec\n x8 : ffff00802b251980 x7 : 0000000000000000 x6 : ffff0080139d0028\n x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff\n x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000\n Kernel panic - not syncing: Asynchronous SError Interrupt\n CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted\n5.15.2.1-13 #1\n Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION\n Call trace:\n dump_backtrace+0x0/0x1e0\n show_stack+0x24/0x30\n dump_stack_lvl+0x8c/0xb8\n dump_stack+0x18/0x34\n panic+0x16c/0x384\n add_taint+0x0/0xc0\n arm64_serror_panic+0x7c/0x90\n arm64_is_fatal_ras_serror+0x34/0xa4\n do_serror+0x50/0x6c\n el1h_64_error_handler+0x40/0x74\n el1h_64_error+0x7c/0x80\n cppc_get_perf_caps+0xec/0x410\n cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq]\n cpufreq_online+0x2dc/0xa30\n cpufreq_add_dev+0xc0/0xd4\n subsys_interface_register+0x134/0x14c\n cpufreq_register_driver+0x1b0/0x354\n cppc_cpufreq_init+0x1a8/0x1000 [cppc_cpufreq]\n do_one_initcall+0x50/0x250\n do_init_module+0x60/0x27c\n load_module+0x2300/0x2570\n __do_sys_finit_module+0xa8/0x114\n __arm64_sys_finit_module+0x2c/0x3c\n invoke_syscall+0x78/0x100\n el0_svc_common.constprop.0+0x180/0x1a0\n do_el0_svc+0x84/0xa0\n el0_svc+0x2c/0xc0\n el0t_64_sync_handler+0xa4/0x12c\n el0t_64_sync+0x1a4/0x1a8\n\nInstead, use access_width to determine the size and use the offset and\nwidth to shift and mask the bits to read/write out. Make sure to add a\ncheck for system memory since pcc redefines the access_width to\nsubspace id.\n\nIf access_width is not set, then fall back to using bit_width.\n\n[ rjw: Subject and changelog edits, comment adjustments ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35995",
"url": "https://www.suse.com/security/cve/CVE-2024-35995"
},
{
"category": "external",
"summary": "SUSE Bug 1224557 for CVE-2024-35995",
"url": "https://bugzilla.suse.com/1224557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35995"
},
{
"cve": "CVE-2024-35997",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35997"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up\n\nThe flag I2C_HID_READ_PENDING is used to serialize I2C operations.\nHowever, this is not necessary, because I2C core already has its own\nlocking for that.\n\nMore importantly, this flag can cause a lock-up: if the flag is set in\ni2c_hid_xfer() and an interrupt happens, the interrupt handler\n(i2c_hid_irq) will check this flag and return immediately without doing\nanything, then the interrupt handler will be invoked again in an\ninfinite loop.\n\nSince interrupt handler is an RT task, it takes over the CPU and the\nflag-clearing task never gets scheduled, thus we have a lock-up.\n\nDelete this unnecessary flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35997",
"url": "https://www.suse.com/security/cve/CVE-2024-35997"
},
{
"category": "external",
"summary": "SUSE Bug 1224552 for CVE-2024-35997",
"url": "https://bugzilla.suse.com/1224552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-35997"
},
{
"cve": "CVE-2024-36002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36002"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpll: fix dpll_pin_on_pin_register() for multiple parent pins\n\nIn scenario where pin is registered with multiple parent pins via\ndpll_pin_on_pin_register(..), all belonging to the same dpll device.\nA second call to dpll_pin_on_pin_unregister(..) would cause a call trace,\nas it tries to use already released registration resources (due to fix\nintroduced in b446631f355e). In this scenario pin was registered twice,\nso resources are not yet expected to be release until each registered\npin/pin pair is unregistered.\n\nCurrently, the following crash/call trace is produced when ice driver is\nremoved on the system with installed E810T NIC which includes dpll device:\n\nWARNING: CPU: 51 PID: 9155 at drivers/dpll/dpll_core.c:809 dpll_pin_ops+0x20/0x30\nRIP: 0010:dpll_pin_ops+0x20/0x30\nCall Trace:\n ? __warn+0x7f/0x130\n ? dpll_pin_ops+0x20/0x30\n dpll_msg_add_pin_freq+0x37/0x1d0\n dpll_cmd_pin_get_one+0x1c0/0x400\n ? __nlmsg_put+0x63/0x80\n dpll_pin_event_send+0x93/0x140\n dpll_pin_on_pin_unregister+0x3f/0x100\n ice_dpll_deinit_pins+0xa1/0x230 [ice]\n ice_remove+0xf1/0x210 [ice]\n\nFix by adding a parent pointer as a cookie when creating a registration,\nalso when searching for it. For the regular pins pass NULL, this allows to\ncreate separated registration for each parent the pin is registered with.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36002",
"url": "https://www.suse.com/security/cve/CVE-2024-36002"
},
{
"category": "external",
"summary": "SUSE Bug 1224546 for CVE-2024-36002",
"url": "https://bugzilla.suse.com/1224546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36002"
},
{
"cve": "CVE-2024-36009",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36009"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nax25: Fix netdev refcount issue\n\nThe dev_tracker is added to ax25_cb in ax25_bind(). When the\nax25 device is detaching, the dev_tracker of ax25_cb should be\ndeallocated in ax25_kill_by_device() instead of the dev_tracker\nof ax25_dev. The log reported by ref_tracker is shown below:\n\n[ 80.884935] ref_tracker: reference already released.\n[ 80.885150] ref_tracker: allocated in:\n[ 80.885349] ax25_dev_device_up+0x105/0x540\n[ 80.885730] ax25_device_event+0xa4/0x420\n[ 80.885730] notifier_call_chain+0xc9/0x1e0\n[ 80.885730] __dev_notify_flags+0x138/0x280\n[ 80.885730] dev_change_flags+0xd7/0x180\n[ 80.885730] dev_ifsioc+0x6a9/0xa30\n[ 80.885730] dev_ioctl+0x4d8/0xd90\n[ 80.885730] sock_do_ioctl+0x1c2/0x2d0\n[ 80.885730] sock_ioctl+0x38b/0x4f0\n[ 80.885730] __se_sys_ioctl+0xad/0xf0\n[ 80.885730] do_syscall_64+0xc4/0x1b0\n[ 80.885730] entry_SYSCALL_64_after_hwframe+0x67/0x6f\n[ 80.885730] ref_tracker: freed in:\n[ 80.885730] ax25_device_event+0x272/0x420\n[ 80.885730] notifier_call_chain+0xc9/0x1e0\n[ 80.885730] dev_close_many+0x272/0x370\n[ 80.885730] unregister_netdevice_many_notify+0x3b5/0x1180\n[ 80.885730] unregister_netdev+0xcf/0x120\n[ 80.885730] sixpack_close+0x11f/0x1b0\n[ 80.885730] tty_ldisc_kill+0xcb/0x190\n[ 80.885730] tty_ldisc_hangup+0x338/0x3d0\n[ 80.885730] __tty_hangup+0x504/0x740\n[ 80.885730] tty_release+0x46e/0xd80\n[ 80.885730] __fput+0x37f/0x770\n[ 80.885730] __x64_sys_close+0x7b/0xb0\n[ 80.885730] do_syscall_64+0xc4/0x1b0\n[ 80.885730] entry_SYSCALL_64_after_hwframe+0x67/0x6f\n[ 80.893739] ------------[ cut here ]------------\n[ 80.894030] WARNING: CPU: 2 PID: 140 at lib/ref_tracker.c:255 ref_tracker_free+0x47b/0x6b0\n[ 80.894297] Modules linked in:\n[ 80.894929] CPU: 2 PID: 140 Comm: ax25_conn_rel_6 Not tainted 6.9.0-rc4-g8cd26fd90c1a #11\n[ 80.895190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qem4\n[ 80.895514] RIP: 0010:ref_tracker_free+0x47b/0x6b0\n[ 80.895808] Code: 83 c5 18 4c 89 eb 48 c1 eb 03 8a 04 13 84 c0 0f 85 df 01 00 00 41 83 7d 00 00 75 4b 4c 89 ff 9\n[ 80.896171] RSP: 0018:ffff888009edf8c0 EFLAGS: 00000286\n[ 80.896339] RAX: 1ffff1100141ac00 RBX: 1ffff1100149463b RCX: dffffc0000000000\n[ 80.896502] RDX: 0000000000000001 RSI: 0000000000000246 RDI: ffff88800a0d6518\n[ 80.896925] RBP: ffff888009edf9b0 R08: ffff88806d3288d3 R09: 1ffff1100da6511a\n[ 80.897212] R10: dffffc0000000000 R11: ffffed100da6511b R12: ffff88800a4a31d4\n[ 80.897859] R13: ffff88800a4a31d8 R14: dffffc0000000000 R15: ffff88800a0d6518\n[ 80.898279] FS: 00007fd88b7fe700(0000) GS:ffff88806d300000(0000) knlGS:0000000000000000\n[ 80.899436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 80.900181] CR2: 00007fd88c001d48 CR3: 000000000993e000 CR4: 00000000000006f0\n...\n[ 80.935774] ref_tracker: sp%d@000000000bb9df3d has 1/1 users at\n[ 80.935774] ax25_bind+0x424/0x4e0\n[ 80.935774] __sys_bind+0x1d9/0x270\n[ 80.935774] __x64_sys_bind+0x75/0x80\n[ 80.935774] do_syscall_64+0xc4/0x1b0\n[ 80.935774] entry_SYSCALL_64_after_hwframe+0x67/0x6f\n\nChange ax25_dev-\u003edev_tracker to the dev_tracker of ax25_cb\nin order to mitigate the bug.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36009",
"url": "https://www.suse.com/security/cve/CVE-2024-36009"
},
{
"category": "external",
"summary": "SUSE Bug 1224542 for CVE-2024-36009",
"url": "https://bugzilla.suse.com/1224542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36009"
},
{
"cve": "CVE-2024-36011",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36011"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Fix potential null-ptr-deref\n\nFix potential null-ptr-deref in hci_le_big_sync_established_evt().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36011",
"url": "https://www.suse.com/security/cve/CVE-2024-36011"
},
{
"category": "external",
"summary": "SUSE Bug 1225579 for CVE-2024-36011",
"url": "https://bugzilla.suse.com/1225579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36011"
},
{
"cve": "CVE-2024-36012",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36012"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: msft: fix slab-use-after-free in msft_do_close()\n\nTying the msft-\u003edata lifetime to hdev by freeing it in\nhci_release_dev() to fix the following case:\n\n[use]\nmsft_do_close()\n msft = hdev-\u003emsft_data;\n if (!msft) ...(1) \u003c- passed.\n return;\n mutex_lock(\u0026msft-\u003efilter_lock); ...(4) \u003c- used after freed.\n\n[free]\nmsft_unregister()\n msft = hdev-\u003emsft_data;\n hdev-\u003emsft_data = NULL; ...(2)\n kfree(msft); ...(3) \u003c- msft is freed.\n\n==================================================================\nBUG: KASAN: slab-use-after-free in __mutex_lock_common\nkernel/locking/mutex.c:587 [inline]\nBUG: KASAN: slab-use-after-free in __mutex_lock+0x8f/0xc30\nkernel/locking/mutex.c:752\nRead of size 8 at addr ffff888106cbbca8 by task kworker/u5:2/309",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36012",
"url": "https://www.suse.com/security/cve/CVE-2024-36012"
},
{
"category": "external",
"summary": "SUSE Bug 1225502 for CVE-2024-36012",
"url": "https://bugzilla.suse.com/1225502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36012"
},
{
"cve": "CVE-2024-36014",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36014"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/arm/malidp: fix a possible null pointer dereference\n\nIn malidp_mw_connector_reset, new memory is allocated with kzalloc, but\nno check is performed. In order to prevent null pointer dereferencing,\nensure that mw_state is checked before calling\n__drm_atomic_helper_connector_reset.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36014",
"url": "https://www.suse.com/security/cve/CVE-2024-36014"
},
{
"category": "external",
"summary": "SUSE Bug 1225593 for CVE-2024-36014",
"url": "https://bugzilla.suse.com/1225593"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36014"
},
{
"cve": "CVE-2024-36018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36018"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnouveau/uvmm: fix addr/range calcs for remap operations\n\ndEQP-VK.sparse_resources.image_rebind.2d_array.r64i.128_128_8\nwas causing a remap operation like the below.\n\nop_remap: prev: 0000003fffed0000 00000000000f0000 00000000a5abd18a 0000000000000000\nop_remap: next:\nop_remap: unmap: 0000003fffed0000 0000000000100000 0\nop_map: map: 0000003ffffc0000 0000000000010000 000000005b1ba33c 00000000000e0000\n\nThis was resulting in an unmap operation from 0x3fffed0000+0xf0000, 0x100000\nwhich was corrupting the pagetables and oopsing the kernel.\n\nFixes the prev + unmap range calcs to use start/end and map back to addr/range.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36018",
"url": "https://www.suse.com/security/cve/CVE-2024-36018"
},
{
"category": "external",
"summary": "SUSE Bug 1225694 for CVE-2024-36018",
"url": "https://bugzilla.suse.com/1225694"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36018"
},
{
"cve": "CVE-2024-36019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36019"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nregmap: maple: Fix cache corruption in regcache_maple_drop()\n\nWhen keeping the upper end of a cache block entry, the entry[] array\nmust be indexed by the offset from the base register of the block,\ni.e. max - mas.index.\n\nThe code was indexing entry[] by only the register address, leading\nto an out-of-bounds access that copied some part of the kernel\nmemory over the cache contents.\n\nThis bug was not detected by the regmap KUnit test because it only\ntests with a block of registers starting at 0, so mas.index == 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36019",
"url": "https://www.suse.com/security/cve/CVE-2024-36019"
},
{
"category": "external",
"summary": "SUSE Bug 1225695 for CVE-2024-36019",
"url": "https://bugzilla.suse.com/1225695"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36019"
},
{
"cve": "CVE-2024-36020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix vf may be used uninitialized in this function warning\n\nTo fix the regression introduced by commit 52424f974bc5, which causes\nservers hang in very hard to reproduce conditions with resets races.\nUsing two sources for the information is the root cause.\nIn this function before the fix bumping v didn\u0027t mean bumping vf\npointer. But the code used this variables interchangeably, so stale vf\ncould point to different/not intended vf.\n\nRemove redundant \"v\" variable and iterate via single VF pointer across\nwhole function instead to guarantee VF pointer validity.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36020",
"url": "https://www.suse.com/security/cve/CVE-2024-36020"
},
{
"category": "external",
"summary": "SUSE Bug 1225698 for CVE-2024-36020",
"url": "https://bugzilla.suse.com/1225698"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36020"
},
{
"cve": "CVE-2024-36021",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36021"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when devlink reload during pf initialization\n\nThe devlink reload process will access the hardware resources,\nbut the register operation is done before the hardware is initialized.\nSo, processing the devlink reload during initialization may lead to kernel\ncrash. This patch fixes this by taking devl_lock during initialization.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36021",
"url": "https://www.suse.com/security/cve/CVE-2024-36021"
},
{
"category": "external",
"summary": "SUSE Bug 1225699 for CVE-2024-36021",
"url": "https://bugzilla.suse.com/1225699"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36021"
},
{
"cve": "CVE-2024-36025",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36025"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix off by one in qla_edif_app_getstats()\n\nThe app_reply-\u003eelem[] array is allocated earlier in this function and it\nhas app_req.num_ports elements. Thus this \u003e comparison needs to be \u003e= to\nprevent memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36025",
"url": "https://www.suse.com/security/cve/CVE-2024-36025"
},
{
"category": "external",
"summary": "SUSE Bug 1225704 for CVE-2024-36025",
"url": "https://bugzilla.suse.com/1225704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36025"
},
{
"cve": "CVE-2024-36026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36026"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11\n\nWhile doing multiple S4 stress tests, GC/RLC/PMFW get into\nan invalid state resulting into hard hangs.\n\nAdding a GFX reset as workaround just before sending the\nMP1_UNLOAD message avoids this failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36026",
"url": "https://www.suse.com/security/cve/CVE-2024-36026"
},
{
"category": "external",
"summary": "SUSE Bug 1225705 for CVE-2024-36026",
"url": "https://bugzilla.suse.com/1225705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36026"
},
{
"cve": "CVE-2024-36029",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36029"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-msm: pervent access to suspended controller\n\nGeneric sdhci code registers LED device and uses host-\u003eruntime_suspended\nflag to protect access to it. The sdhci-msm driver doesn\u0027t set this flag,\nwhich causes a crash when LED is accessed while controller is runtime\nsuspended. Fix this by setting the flag correctly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36029",
"url": "https://www.suse.com/security/cve/CVE-2024-36029"
},
{
"category": "external",
"summary": "SUSE Bug 1225708 for CVE-2024-36029",
"url": "https://bugzilla.suse.com/1225708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36029"
},
{
"cve": "CVE-2024-36032",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36032"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: qca: fix info leak when fetching fw build id\n\nAdd the missing sanity checks and move the 255-byte build-id buffer off\nthe stack to avoid leaking stack data through debugfs in case the\nbuild-info reply is malformed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36032",
"url": "https://www.suse.com/security/cve/CVE-2024-36032"
},
{
"category": "external",
"summary": "SUSE Bug 1225720 for CVE-2024-36032",
"url": "https://bugzilla.suse.com/1225720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-36032"
},
{
"cve": "CVE-2024-36476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36476"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible\n\nMove the declaration of the \u0027ib_sge list\u0027 variable outside the\n\u0027always_invalidate\u0027 block to ensure it remains accessible for use\nthroughout the function.\n\nPreviously, \u0027ib_sge list\u0027 was declared within the \u0027always_invalidate\u0027\nblock, limiting its accessibility, then caused a\n\u0027BUG: kernel NULL pointer dereference\u0027[1].\n ? __die_body.cold+0x19/0x27\n ? page_fault_oops+0x15a/0x2d0\n ? search_module_extables+0x19/0x60\n ? search_bpf_extables+0x5f/0x80\n ? exc_page_fault+0x7e/0x180\n ? asm_exc_page_fault+0x26/0x30\n ? memcpy_orig+0xd5/0x140\n rxe_mr_copy+0x1c3/0x200 [rdma_rxe]\n ? rxe_pool_get_index+0x4b/0x80 [rdma_rxe]\n copy_data+0xa5/0x230 [rdma_rxe]\n rxe_requester+0xd9b/0xf70 [rdma_rxe]\n ? finish_task_switch.isra.0+0x99/0x2e0\n rxe_sender+0x13/0x40 [rdma_rxe]\n do_task+0x68/0x1e0 [rdma_rxe]\n process_one_work+0x177/0x330\n worker_thread+0x252/0x390\n ? __pfx_worker_thread+0x10/0x10\n\nThis change ensures the variable is available for subsequent operations\nthat require it.\n\n[1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-bc69-a9b03ecfcda7@fujitsu.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36476",
"url": "https://www.suse.com/security/cve/CVE-2024-36476"
},
{
"category": "external",
"summary": "SUSE Bug 1235902 for CVE-2024-36476",
"url": "https://bugzilla.suse.com/1235902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36476"
},
{
"cve": "CVE-2024-36880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36880"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: qca: add missing firmware sanity checks\n\nAdd the missing sanity checks when parsing the firmware files before\ndownloading them to avoid accessing and corrupting memory beyond the\nvmalloced buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36880",
"url": "https://www.suse.com/security/cve/CVE-2024-36880"
},
{
"category": "external",
"summary": "SUSE Bug 1225722 for CVE-2024-36880",
"url": "https://bugzilla.suse.com/1225722"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36880"
},
{
"cve": "CVE-2024-36885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36885"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36885",
"url": "https://www.suse.com/security/cve/CVE-2024-36885"
},
{
"category": "external",
"summary": "SUSE Bug 1225728 for CVE-2024-36885",
"url": "https://bugzilla.suse.com/1225728"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36885"
},
{
"cve": "CVE-2024-36891",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36891"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmaple_tree: fix mas_empty_area_rev() null pointer dereference\n\nCurrently the code calls mas_start() followed by mas_data_end() if the\nmaple state is MA_START, but mas_start() may return with the maple state\nnode == NULL. This will lead to a null pointer dereference when checking\ninformation in the NULL node, which is done in mas_data_end().\n\nAvoid setting the offset if there is no node by waiting until after the\nmaple state is checked for an empty or single entry state.\n\nA user could trigger the events to cause a kernel oops by unmapping all\nvmas to produce an empty maple tree, then mapping a vma that would cause\nthe scenario described above.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36891",
"url": "https://www.suse.com/security/cve/CVE-2024-36891"
},
{
"category": "external",
"summary": "SUSE Bug 1225710 for CVE-2024-36891",
"url": "https://bugzilla.suse.com/1225710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36891"
},
{
"cve": "CVE-2024-36893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: Check for port partner validity before consuming it\n\ntypec_register_partner() does not guarantee partner registration\nto always succeed. In the event of failure, port-\u003epartner is set\nto the error value or NULL. Given that port-\u003epartner validity is\nnot checked, this results in the following crash:\n\nUnable to handle kernel NULL pointer dereference at virtual address xx\n pc : run_state_machine+0x1bc8/0x1c08\n lr : run_state_machine+0x1b90/0x1c08\n..\n Call trace:\n run_state_machine+0x1bc8/0x1c08\n tcpm_state_machine_work+0x94/0xe4\n kthread_worker_fn+0x118/0x328\n kthread+0x1d0/0x23c\n ret_from_fork+0x10/0x20\n\nTo prevent the crash, check for port-\u003epartner validity before\nderefencing it in all the call sites.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36893",
"url": "https://www.suse.com/security/cve/CVE-2024-36893"
},
{
"category": "external",
"summary": "SUSE Bug 1225748 for CVE-2024-36893",
"url": "https://bugzilla.suse.com/1225748"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36893"
},
{
"cve": "CVE-2024-36894",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36894"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete\n\nFFS based applications can utilize the aio_cancel() callback to dequeue\npending USB requests submitted to the UDC. There is a scenario where the\nFFS application issues an AIO cancel call, while the UDC is handling a\nsoft disconnect. For a DWC3 based implementation, the callstack looks\nlike the following:\n\n DWC3 Gadget FFS Application\ndwc3_gadget_soft_disconnect() ...\n --\u003e dwc3_stop_active_transfers()\n --\u003e dwc3_gadget_giveback(-ESHUTDOWN)\n --\u003e ffs_epfile_async_io_complete() ffs_aio_cancel()\n --\u003e usb_ep_free_request() --\u003e usb_ep_dequeue()\n\nThere is currently no locking implemented between the AIO completion\nhandler and AIO cancel, so the issue occurs if the completion routine is\nrunning in parallel to an AIO cancel call coming from the FFS application.\nAs the completion call frees the USB request (io_data-\u003ereq) the FFS\napplication is also referencing it for the usb_ep_dequeue() call. This can\nlead to accessing a stale/hanging pointer.\n\ncommit b566d38857fc (\"usb: gadget: f_fs: use io_data-\u003estatus consistently\")\nrelocated the usb_ep_free_request() into ffs_epfile_async_io_complete().\nHowever, in order to properly implement locking to mitigate this issue, the\nspinlock can\u0027t be added to ffs_epfile_async_io_complete(), as\nusb_ep_dequeue() (if successfully dequeuing a USB request) will call the\nfunction driver\u0027s completion handler in the same context. Hence, leading\ninto a deadlock.\n\nFix this issue by moving the usb_ep_free_request() back to\nffs_user_copy_worker(), and ensuring that it explicitly sets io_data-\u003ereq\nto NULL after freeing it within the ffs-\u003eeps_lock. This resolves the race\ncondition above, as the ffs_aio_cancel() routine will not continue\nattempting to dequeue a request that has already been freed, or the\nffs_user_copy_work() not freeing the USB request until the AIO cancel is\ndone referencing it.\n\nThis fix depends on\n commit b566d38857fc (\"usb: gadget: f_fs: use io_data-\u003estatus\n consistently\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36894",
"url": "https://www.suse.com/security/cve/CVE-2024-36894"
},
{
"category": "external",
"summary": "SUSE Bug 1225749 for CVE-2024-36894",
"url": "https://bugzilla.suse.com/1225749"
},
{
"category": "external",
"summary": "SUSE Bug 1226139 for CVE-2024-36894",
"url": "https://bugzilla.suse.com/1226139"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-36894"
},
{
"cve": "CVE-2024-36895",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36895"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: uvc: use correct buffer size when parsing configfs lists\n\nThis commit fixes uvc gadget support on 32-bit platforms.\n\nCommit 0df28607c5cb (\"usb: gadget: uvc: Generalise helper functions for\nreuse\") introduced a helper function __uvcg_iter_item_entries() to aid\nwith parsing lists of items on configfs attributes stores. This function\nis a generalization of another very similar function, which used a\nstack-allocated temporary buffer of fixed size for each item in the list\nand used the sizeof() operator to check for potential buffer overruns.\nThe new function was changed to allocate the now variably sized temp\nbuffer on heap, but wasn\u0027t properly updated to also check for max buffer\nsize using the computed size instead of sizeof() operator.\n\nAs a result, the maximum item size was 7 (plus null terminator) on\n64-bit platforms, and 3 on 32-bit ones. While 7 is accidentally just\nbarely enough, 3 is definitely too small for some of UVC configfs\nattributes. For example, dwFrameInteval, specified in 100ns units,\nusually has 6-digit item values, e.g. 166666 for 60fps.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36895",
"url": "https://www.suse.com/security/cve/CVE-2024-36895"
},
{
"category": "external",
"summary": "SUSE Bug 1225750 for CVE-2024-36895",
"url": "https://bugzilla.suse.com/1225750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-36895"
},
{
"cve": "CVE-2024-36896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Fix access violation during port device removal\n\nTesting with KASAN and syzkaller revealed a bug in port.c:disable_store():\nusb_hub_to_struct_hub() can return NULL if the hub that the port belongs to\nis concurrently removed, but the function does not check for this\npossibility before dereferencing the returned value.\n\nIt turns out that the first dereference is unnecessary, since hub-\u003eintfdev\nis the parent of the port device, so it can be changed easily. Adding a\ncheck for hub == NULL prevents further problems.\n\nThe same bug exists in the disable_show() routine, and it can be fixed the\nsame way.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36896",
"url": "https://www.suse.com/security/cve/CVE-2024-36896"
},
{
"category": "external",
"summary": "SUSE Bug 1225734 for CVE-2024-36896",
"url": "https://bugzilla.suse.com/1225734"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36896"
},
{
"cve": "CVE-2024-36897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Atom Integrated System Info v2_2 for DCN35\n\nNew request from KMD/VBIOS in order to support new UMA carveout\nmodel. This fixes a null dereference from accessing\nCtx-\u003edc_bios-\u003eintegrated_info while it was NULL.\n\nDAL parses through the BIOS and extracts the necessary\nintegrated_info but was missing a case for the new BIOS\nversion 2.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36897",
"url": "https://www.suse.com/security/cve/CVE-2024-36897"
},
{
"category": "external",
"summary": "SUSE Bug 1225735 for CVE-2024-36897",
"url": "https://bugzilla.suse.com/1225735"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36897"
},
{
"cve": "CVE-2024-36898",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36898"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpiolib: cdev: fix uninitialised kfifo\n\nIf a line is requested with debounce, and that results in debouncing\nin software, and the line is subsequently reconfigured to enable edge\ndetection then the allocation of the kfifo to contain edge events is\noverlooked. This results in events being written to and read from an\nuninitialised kfifo. Read events are returned to userspace.\n\nInitialise the kfifo in the case where the software debounce is\nalready active.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36898",
"url": "https://www.suse.com/security/cve/CVE-2024-36898"
},
{
"category": "external",
"summary": "SUSE Bug 1225736 for CVE-2024-36898",
"url": "https://bugzilla.suse.com/1225736"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36898"
},
{
"cve": "CVE-2024-36906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nARM: 9381/1: kasan: clear stale stack poison\n\nWe found below OOB crash:\n\n[ 33.452494] ==================================================================\n[ 33.453513] BUG: KASAN: stack-out-of-bounds in refresh_cpu_vm_stats.constprop.0+0xcc/0x2ec\n[ 33.454660] Write of size 164 at addr c1d03d30 by task swapper/0/0\n[ 33.455515]\n[ 33.455767] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G O 6.1.25-mainline #1\n[ 33.456880] Hardware name: Generic DT based system\n[ 33.457555] unwind_backtrace from show_stack+0x18/0x1c\n[ 33.458326] show_stack from dump_stack_lvl+0x40/0x4c\n[ 33.459072] dump_stack_lvl from print_report+0x158/0x4a4\n[ 33.459863] print_report from kasan_report+0x9c/0x148\n[ 33.460616] kasan_report from kasan_check_range+0x94/0x1a0\n[ 33.461424] kasan_check_range from memset+0x20/0x3c\n[ 33.462157] memset from refresh_cpu_vm_stats.constprop.0+0xcc/0x2ec\n[ 33.463064] refresh_cpu_vm_stats.constprop.0 from tick_nohz_idle_stop_tick+0x180/0x53c\n[ 33.464181] tick_nohz_idle_stop_tick from do_idle+0x264/0x354\n[ 33.465029] do_idle from cpu_startup_entry+0x20/0x24\n[ 33.465769] cpu_startup_entry from rest_init+0xf0/0xf4\n[ 33.466528] rest_init from arch_post_acpi_subsys_init+0x0/0x18\n[ 33.467397]\n[ 33.467644] The buggy address belongs to stack of task swapper/0/0\n[ 33.468493] and is located at offset 112 in frame:\n[ 33.469172] refresh_cpu_vm_stats.constprop.0+0x0/0x2ec\n[ 33.469917]\n[ 33.470165] This frame has 2 objects:\n[ 33.470696] [32, 76) \u0027global_zone_diff\u0027\n[ 33.470729] [112, 276) \u0027global_node_diff\u0027\n[ 33.471294]\n[ 33.472095] The buggy address belongs to the physical page:\n[ 33.472862] page:3cd72da8 refcount:1 mapcount:0 mapping:00000000 index:0x0 pfn:0x41d03\n[ 33.473944] flags: 0x1000(reserved|zone=0)\n[ 33.474565] raw: 00001000 ed741470 ed741470 00000000 00000000 00000000 ffffffff 00000001\n[ 33.475656] raw: 00000000\n[ 33.476050] page dumped because: kasan: bad access detected\n[ 33.476816]\n[ 33.477061] Memory state around the buggy address:\n[ 33.477732] c1d03c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n[ 33.478630] c1d03c80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00\n[ 33.479526] \u003ec1d03d00: 00 04 f2 f2 f2 f2 00 00 00 00 00 00 f1 f1 f1 f1\n[ 33.480415] ^\n[ 33.481195] c1d03d80: 00 00 00 00 00 00 00 00 00 00 04 f3 f3 f3 f3 f3\n[ 33.482088] c1d03e00: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00\n[ 33.482978] ==================================================================\n\nWe find the root cause of this OOB is that arm does not clear stale stack\npoison in the case of cpuidle.\n\nThis patch refer to arch/arm64/kernel/sleep.S to resolve this issue.\n\nFrom cited commit [1] that explain the problem\n\nFunctions which the compiler has instrumented for KASAN place poison on\nthe stack shadow upon entry and remove this poison prior to returning.\n\nIn the case of cpuidle, CPUs exit the kernel a number of levels deep in\nC code. Any instrumented functions on this critical path will leave\nportions of the stack shadow poisoned.\n\nIf CPUs lose context and return to the kernel via a cold path, we\nrestore a prior context saved in __cpu_suspend_enter are forgotten, and\nwe never remove the poison they placed in the stack shadow area by\nfunctions calls between this and the actual exit of the kernel.\n\nThus, (depending on stackframe layout) subsequent calls to instrumented\nfunctions may hit this stale poison, resulting in (spurious) KASAN\nsplats to the console.\n\nTo avoid this, clear any stale poison from the idle thread for a CPU\nprior to bringing a CPU online.\n\nFrom cited commit [2]\n\nExtend to check for CONFIG_KASAN_STACK\n\n[1] commit 0d97e6d8024c (\"arm64: kasan: clear stale stack poison\")\n[2] commit d56a9ef84bd0 (\"kasan, arm64: unpoison stack only with CONFIG_KASAN_STACK\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36906",
"url": "https://www.suse.com/security/cve/CVE-2024-36906"
},
{
"category": "external",
"summary": "SUSE Bug 1225715 for CVE-2024-36906",
"url": "https://bugzilla.suse.com/1225715"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36906"
},
{
"cve": "CVE-2024-36908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-iocost: do not WARN if iocg was already offlined\n\nIn iocg_pay_debt(), warn is triggered if \u0027active_list\u0027 is empty, which\nis intended to confirm iocg is active when it has debt. However, warn\ncan be triggered during a blkcg or disk removal, if iocg_waitq_timer_fn()\nis run at that time:\n\n WARNING: CPU: 0 PID: 2344971 at block/blk-iocost.c:1402 iocg_pay_debt+0x14c/0x190\n Call trace:\n iocg_pay_debt+0x14c/0x190\n iocg_kick_waitq+0x438/0x4c0\n iocg_waitq_timer_fn+0xd8/0x130\n __run_hrtimer+0x144/0x45c\n __hrtimer_run_queues+0x16c/0x244\n hrtimer_interrupt+0x2cc/0x7b0\n\nThe warn in this situation is meaningless. Since this iocg is being\nremoved, the state of the \u0027active_list\u0027 is irrelevant, and \u0027waitq_timer\u0027\nis canceled after removing \u0027active_list\u0027 in ioc_pd_free(), which ensures\niocg is freed after iocg_waitq_timer_fn() returns.\n\nTherefore, add the check if iocg was already offlined to avoid warn\nwhen removing a blkcg or disk.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36908",
"url": "https://www.suse.com/security/cve/CVE-2024-36908"
},
{
"category": "external",
"summary": "SUSE Bug 1225743 for CVE-2024-36908",
"url": "https://bugzilla.suse.com/1225743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36908"
},
{
"cve": "CVE-2024-36921",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36921"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: guard against invalid STA ID on removal\n\nGuard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would\nresult in out-of-bounds array accesses. This prevents issues should the\ndriver get into a bad state during error handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36921",
"url": "https://www.suse.com/security/cve/CVE-2024-36921"
},
{
"category": "external",
"summary": "SUSE Bug 1225769 for CVE-2024-36921",
"url": "https://bugzilla.suse.com/1225769"
},
{
"category": "external",
"summary": "SUSE Bug 1225850 for CVE-2024-36921",
"url": "https://bugzilla.suse.com/1225850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-36921"
},
{
"cve": "CVE-2024-36922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: read txq-\u003eread_ptr under lock\n\nIf we read txq-\u003eread_ptr without lock, we can read the same\nvalue twice, then obtain the lock, and reclaim from there\nto two different places, but crucially reclaim the same\nentry twice, resulting in the WARN_ONCE() a little later.\nFix that by reading txq-\u003eread_ptr under lock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36922",
"url": "https://www.suse.com/security/cve/CVE-2024-36922"
},
{
"category": "external",
"summary": "SUSE Bug 1225805 for CVE-2024-36922",
"url": "https://bugzilla.suse.com/1225805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36922"
},
{
"cve": "CVE-2024-36928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36928"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/qeth: Fix kernel panic after setting hsuid\n\nSymptom:\nWhen the hsuid attribute is set for the first time on an IQD Layer3\ndevice while the corresponding network interface is already UP,\nthe kernel will try to execute a napi function pointer that is NULL.\n\nExample:\n---------------------------------------------------------------------------\n[ 2057.572696] illegal operation: 0001 ilc:1 [#1] SMP\n[ 2057.572702] Modules linked in: af_iucv qeth_l3 zfcp scsi_transport_fc sunrpc nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6\nnft_reject nft_ct nf_tables_set nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables libcrc32c nfnetlink ghash_s390 prng xts aes_s390 des_s390 de\ns_generic sha3_512_s390 sha3_256_s390 sha512_s390 vfio_ccw vfio_mdev mdev vfio_iommu_type1 eadm_sch vfio ext4 mbcache jbd2 qeth_l2 bridge stp llc dasd_eckd_mod qeth dasd_mod\n qdio ccwgroup pkey zcrypt\n[ 2057.572739] CPU: 6 PID: 60182 Comm: stress_client Kdump: loaded Not tainted 4.18.0-541.el8.s390x #1\n[ 2057.572742] Hardware name: IBM 3931 A01 704 (LPAR)\n[ 2057.572744] Krnl PSW : 0704f00180000000 0000000000000002 (0x2)\n[ 2057.572748] R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:3 PM:0 RI:0 EA:3\n[ 2057.572751] Krnl GPRS: 0000000000000004 0000000000000000 00000000a3b008d8 0000000000000000\n[ 2057.572754] 00000000a3b008d8 cb923a29c779abc5 0000000000000000 00000000814cfd80\n[ 2057.572756] 000000000000012c 0000000000000000 00000000a3b008d8 00000000a3b008d8\n[ 2057.572758] 00000000bab6d500 00000000814cfd80 0000000091317e46 00000000814cfc68\n[ 2057.572762] Krnl Code:#0000000000000000: 0000 illegal\n \u003e0000000000000002: 0000 illegal\n 0000000000000004: 0000 illegal\n 0000000000000006: 0000 illegal\n 0000000000000008: 0000 illegal\n 000000000000000a: 0000 illegal\n 000000000000000c: 0000 illegal\n 000000000000000e: 0000 illegal\n[ 2057.572800] Call Trace:\n[ 2057.572801] ([\u003c00000000ec639700\u003e] 0xec639700)\n[ 2057.572803] [\u003c00000000913183e2\u003e] net_rx_action+0x2ba/0x398\n[ 2057.572809] [\u003c0000000091515f76\u003e] __do_softirq+0x11e/0x3a0\n[ 2057.572813] [\u003c0000000090ce160c\u003e] do_softirq_own_stack+0x3c/0x58\n[ 2057.572817] ([\u003c0000000090d2cbd6\u003e] do_softirq.part.1+0x56/0x60)\n[ 2057.572822] [\u003c0000000090d2cc60\u003e] __local_bh_enable_ip+0x80/0x98\n[ 2057.572825] [\u003c0000000091314706\u003e] __dev_queue_xmit+0x2be/0xd70\n[ 2057.572827] [\u003c000003ff803dd6d6\u003e] afiucv_hs_send+0x24e/0x300 [af_iucv]\n[ 2057.572830] [\u003c000003ff803dd88a\u003e] iucv_send_ctrl+0x102/0x138 [af_iucv]\n[ 2057.572833] [\u003c000003ff803de72a\u003e] iucv_sock_connect+0x37a/0x468 [af_iucv]\n[ 2057.572835] [\u003c00000000912e7e90\u003e] __sys_connect+0xa0/0xd8\n[ 2057.572839] [\u003c00000000912e9580\u003e] sys_socketcall+0x228/0x348\n[ 2057.572841] [\u003c0000000091514e1a\u003e] system_call+0x2a6/0x2c8\n[ 2057.572843] Last Breaking-Event-Address:\n[ 2057.572844] [\u003c0000000091317e44\u003e] __napi_poll+0x4c/0x1d8\n[ 2057.572846]\n[ 2057.572847] Kernel panic - not syncing: Fatal exception in interrupt\n-------------------------------------------------------------------------------------------\n\nAnalysis:\nThere is one napi structure per out_q: card-\u003eqdio.out_qs[i].napi\nThe napi.poll functions are set during qeth_open().\n\nSince\ncommit 1cfef80d4c2b (\"s390/qeth: Don\u0027t call dev_close/dev_open (DOWN/UP)\")\nqeth_set_offline()/qeth_set_online() no longer call dev_close()/\ndev_open(). So if qeth_free_qdio_queues() cleared\ncard-\u003eqdio.out_qs[i].napi.poll while the network interface was UP and the\ncard was offline, they are not set again.\n\nReproduction:\nchzdev -e $devno layer2=0\nip link set dev $network_interface up\necho 0 \u003e /sys/bus/ccw\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36928",
"url": "https://www.suse.com/security/cve/CVE-2024-36928"
},
{
"category": "external",
"summary": "SUSE Bug 1225775 for CVE-2024-36928",
"url": "https://bugzilla.suse.com/1225775"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36928"
},
{
"cve": "CVE-2024-36930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36930"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: fix null pointer dereference within spi_sync\n\nIf spi_sync() is called with the non-empty queue and the same spi_message\nis then reused, the complete callback for the message remains set while\nthe context is cleared, leading to a null pointer dereference when the\ncallback is invoked from spi_finalize_current_message().\n\nWith function inlining disabled, the call stack might look like this:\n\n _raw_spin_lock_irqsave from complete_with_flags+0x18/0x58\n complete_with_flags from spi_complete+0x8/0xc\n spi_complete from spi_finalize_current_message+0xec/0x184\n spi_finalize_current_message from spi_transfer_one_message+0x2a8/0x474\n spi_transfer_one_message from __spi_pump_transfer_message+0x104/0x230\n __spi_pump_transfer_message from __spi_transfer_message_noqueue+0x30/0xc4\n __spi_transfer_message_noqueue from __spi_sync+0x204/0x248\n __spi_sync from spi_sync+0x24/0x3c\n spi_sync from mcp251xfd_regmap_crc_read+0x124/0x28c [mcp251xfd]\n mcp251xfd_regmap_crc_read [mcp251xfd] from _regmap_raw_read+0xf8/0x154\n _regmap_raw_read from _regmap_bus_read+0x44/0x70\n _regmap_bus_read from _regmap_read+0x60/0xd8\n _regmap_read from regmap_read+0x3c/0x5c\n regmap_read from mcp251xfd_alloc_can_err_skb+0x1c/0x54 [mcp251xfd]\n mcp251xfd_alloc_can_err_skb [mcp251xfd] from mcp251xfd_irq+0x194/0xe70 [mcp251xfd]\n mcp251xfd_irq [mcp251xfd] from irq_thread_fn+0x1c/0x78\n irq_thread_fn from irq_thread+0x118/0x1f4\n irq_thread from kthread+0xd8/0xf4\n kthread from ret_from_fork+0x14/0x28\n\nFix this by also setting message-\u003ecomplete to NULL when the transfer is\ncomplete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36930",
"url": "https://www.suse.com/security/cve/CVE-2024-36930"
},
{
"category": "external",
"summary": "SUSE Bug 1225830 for CVE-2024-36930",
"url": "https://bugzilla.suse.com/1225830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36930"
},
{
"cve": "CVE-2024-36931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cio: Ensure the copied buf is NUL terminated\n\nCurrently, we allocate a lbuf-sized kernel buffer and copy lbuf from\nuserspace to that buffer. Later, we use scanf on this buffer but we don\u0027t\nensure that the string is terminated inside the buffer, this can lead to\nOOB read when using scanf. Fix this issue by using memdup_user_nul instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36931",
"url": "https://www.suse.com/security/cve/CVE-2024-36931"
},
{
"category": "external",
"summary": "SUSE Bug 1225747 for CVE-2024-36931",
"url": "https://bugzilla.suse.com/1225747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36931"
},
{
"cve": "CVE-2024-36940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: core: delete incorrect free in pinctrl_enable()\n\nThe \"pctldev\" struct is allocated in devm_pinctrl_register_and_init().\nIt\u0027s a devm_ managed pointer that is freed by devm_pinctrl_dev_release(),\nso freeing it in pinctrl_enable() will lead to a double free.\n\nThe devm_pinctrl_dev_release() function frees the pindescs and destroys\nthe mutex as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36940",
"url": "https://www.suse.com/security/cve/CVE-2024-36940"
},
{
"category": "external",
"summary": "SUSE Bug 1225840 for CVE-2024-36940",
"url": "https://bugzilla.suse.com/1225840"
},
{
"category": "external",
"summary": "SUSE Bug 1225841 for CVE-2024-36940",
"url": "https://bugzilla.suse.com/1225841"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-36940"
},
{
"cve": "CVE-2024-36941",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36941"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: don\u0027t free NULL coalescing rule\n\nIf the parsing fails, we can dereference a NULL pointer here.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36941",
"url": "https://www.suse.com/security/cve/CVE-2024-36941"
},
{
"category": "external",
"summary": "SUSE Bug 1225835 for CVE-2024-36941",
"url": "https://bugzilla.suse.com/1225835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36941"
},
{
"cve": "CVE-2024-36942",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36942"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36942",
"url": "https://www.suse.com/security/cve/CVE-2024-36942"
},
{
"category": "external",
"summary": "SUSE Bug 1225843 for CVE-2024-36942",
"url": "https://bugzilla.suse.com/1225843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36942"
},
{
"cve": "CVE-2024-36944",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36944"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nReapply \"drm/qxl: simplify qxl_fence_wait\"\n\nThis reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea.\n\nStephen Rostedt reports:\n \"I went to run my tests on my VMs and the tests hung on boot up.\n Unfortunately, the most I ever got out was:\n\n [ 93.607888] Testing event system initcall: OK\n [ 93.667730] Running tests on all trace events:\n [ 93.669757] Testing all events: OK\n [ 95.631064] ------------[ cut here ]------------\n Timed out after 60 seconds\"\n\nand further debugging points to a possible circular locking dependency\nbetween the console_owner locking and the worker pool locking.\n\nReverting the commit allows Steve\u0027s VM to boot to completion again.\n\n[ This may obviously result in the \"[TTM] Buffer eviction failed\"\n messages again, which was the reason for that original revert. But at\n this point this seems preferable to a non-booting system... ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36944",
"url": "https://www.suse.com/security/cve/CVE-2024-36944"
},
{
"category": "external",
"summary": "SUSE Bug 1225847 for CVE-2024-36944",
"url": "https://bugzilla.suse.com/1225847"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36944"
},
{
"cve": "CVE-2024-36949",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36949"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\namd/amdkfd: sync all devices to wait all processes being evicted\n\nIf there are more than one device doing reset in parallel, the first\ndevice will call kfd_suspend_all_processes() to evict all processes\non all devices, this call takes time to finish. other device will\nstart reset and recover without waiting. if the process has not been\nevicted before doing recover, it will be restored, then caused page\nfault.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36949",
"url": "https://www.suse.com/security/cve/CVE-2024-36949"
},
{
"category": "external",
"summary": "SUSE Bug 1225894 for CVE-2024-36949",
"url": "https://bugzilla.suse.com/1225894"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36949"
},
{
"cve": "CVE-2024-36950",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36950"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirewire: ohci: mask bus reset interrupts between ISR and bottom half\n\nIn the FireWire OHCI interrupt handler, if a bus reset interrupt has\noccurred, mask bus reset interrupts until bus_reset_work has serviced and\ncleared the interrupt.\n\nNormally, we always leave bus reset interrupts masked. We infer the bus\nreset from the self-ID interrupt that happens shortly thereafter. A\nscenario where we unmask bus reset interrupts was introduced in 2008 in\na007bb857e0b26f5d8b73c2ff90782d9c0972620: If\nOHCI_PARAM_DEBUG_BUSRESETS (8) is set in the debug parameter bitmask, we\nwill unmask bus reset interrupts so we can log them.\n\nirq_handler logs the bus reset interrupt. However, we can\u0027t clear the bus\nreset event flag in irq_handler, because we won\u0027t service the event until\nlater. irq_handler exits with the event flag still set. If the\ncorresponding interrupt is still unmasked, the first bus reset will\nusually freeze the system due to irq_handler being called again each\ntime it exits. This freeze can be reproduced by loading firewire_ohci\nwith \"modprobe firewire_ohci debug=-1\" (to enable all debugging output).\nApparently there are also some cases where bus_reset_work will get called\nsoon enough to clear the event, and operation will continue normally.\n\nThis freeze was first reported a few months after a007bb85 was committed,\nbut until now it was never fixed. The debug level could safely be set\nto -1 through sysfs after the module was loaded, but this would be\nineffectual in logging bus reset interrupts since they were only\nunmasked during initialization.\n\nirq_handler will now leave the event flag set but mask bus reset\ninterrupts, so irq_handler won\u0027t be called again and there will be no\nfreeze. If OHCI_PARAM_DEBUG_BUSRESETS is enabled, bus_reset_work will\nunmask the interrupt after servicing the event, so future interrupts\nwill be caught as desired.\n\nAs a side effect to this change, OHCI_PARAM_DEBUG_BUSRESETS can now be\nenabled through sysfs in addition to during initial module loading.\nHowever, when enabled through sysfs, logging of bus reset interrupts will\nbe effective only starting with the second bus reset, after\nbus_reset_work has executed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36950",
"url": "https://www.suse.com/security/cve/CVE-2024-36950"
},
{
"category": "external",
"summary": "SUSE Bug 1225895 for CVE-2024-36950",
"url": "https://bugzilla.suse.com/1225895"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36950"
},
{
"cve": "CVE-2024-36951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: range check cp bad op exception interrupts\n\nDue to a CP interrupt bug, bad packet garbage exception codes are raised.\nDo a range check so that the debugger and runtime do not receive garbage\ncodes.\nUpdate the user api to guard exception code type checking as well.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36951",
"url": "https://www.suse.com/security/cve/CVE-2024-36951"
},
{
"category": "external",
"summary": "SUSE Bug 1225896 for CVE-2024-36951",
"url": "https://bugzilla.suse.com/1225896"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36951"
},
{
"cve": "CVE-2024-36955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36955"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()\n\nThe documentation for device_get_named_child_node() mentions this\nimportant point:\n\n\"\nThe caller is responsible for calling fwnode_handle_put() on the\nreturned fwnode pointer.\n\"\n\nAdd fwnode_handle_put() to avoid a leaked reference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36955",
"url": "https://www.suse.com/security/cve/CVE-2024-36955"
},
{
"category": "external",
"summary": "SUSE Bug 1225810 for CVE-2024-36955",
"url": "https://bugzilla.suse.com/1225810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-36955"
},
{
"cve": "CVE-2024-36959",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36959"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()\n\nIf we fail to allocate propname buffer, we need to drop the reference\ncount we just took. Because the pinctrl_dt_free_maps() includes the\ndroping operation, here we call it directly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36959",
"url": "https://www.suse.com/security/cve/CVE-2024-36959"
},
{
"category": "external",
"summary": "SUSE Bug 1225839 for CVE-2024-36959",
"url": "https://bugzilla.suse.com/1225839"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-36959"
},
{
"cve": "CVE-2024-39282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39282"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: Fix FSM command timeout issue\n\nWhen driver processes the internal state change command, it use an\nasynchronous thread to process the command operation. If the main\nthread detects that the task has timed out, the asynchronous thread\nwill panic when executing the completion notification because the\nmain thread completion object has been released.\n\nBUG: unable to handle page fault for address: fffffffffffffff8\nPGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nRIP: 0010:complete_all+0x3e/0xa0\n[...]\nCall Trace:\n \u003cTASK\u003e\n ? __die_body+0x68/0xb0\n ? page_fault_oops+0x379/0x3e0\n ? exc_page_fault+0x69/0xa0\n ? asm_exc_page_fault+0x22/0x30\n ? complete_all+0x3e/0xa0\n fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_autoremove_wake_function+0x10/0x10\n kthread+0xd8/0x110\n ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x38/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n[...]\nCR2: fffffffffffffff8\n---[ end trace 0000000000000000 ]---\n\nUse the reference counter to ensure safe release as Sergey suggests:\nhttps://lore.kernel.org/all/da90f64c-260a-4329-87bf-1f9ff20a5951@gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39282",
"url": "https://www.suse.com/security/cve/CVE-2024-39282"
},
{
"category": "external",
"summary": "SUSE Bug 1235903 for CVE-2024-39282",
"url": "https://bugzilla.suse.com/1235903"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-39282"
},
{
"cve": "CVE-2024-39480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39480"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkdb: Fix buffer overflow during tab-complete\n\nCurrently, when the user attempts symbol completion with the Tab key, kdb\nwill use strncpy() to insert the completed symbol into the command buffer.\nUnfortunately it passes the size of the source buffer rather than the\ndestination to strncpy() with predictably horrible results. Most obviously\nif the command buffer is already full but cp, the cursor position, is in\nthe middle of the buffer, then we will write past the end of the supplied\nbuffer.\n\nFix this by replacing the dubious strncpy() calls with memmove()/memcpy()\ncalls plus explicit boundary checks to make sure we have enough space\nbefore we start moving characters around.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39480",
"url": "https://www.suse.com/security/cve/CVE-2024-39480"
},
{
"category": "external",
"summary": "SUSE Bug 1227445 for CVE-2024-39480",
"url": "https://bugzilla.suse.com/1227445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-39480"
},
{
"cve": "CVE-2024-41042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41042"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: prefer nft_chain_validate\n\nnft_chain_validate already performs loop detection because a cycle will\nresult in a call stack overflow (ctx-\u003elevel \u003e= NFT_JUMP_STACK_SIZE).\n\nIt also follows maps via -\u003evalidate callback in nft_lookup, so there\nappears no reason to iterate the maps again.\n\nnf_tables_check_loops() and all its helper functions can be removed.\nThis improves ruleset load time significantly, from 23s down to 12s.\n\nThis also fixes a crash bug. Old loop detection code can result in\nunbounded recursion:\n\nBUG: TASK stack guard page was hit at ....\nOops: stack guard page: 0000 [#1] PREEMPT SMP KASAN\nCPU: 4 PID: 1539 Comm: nft Not tainted 6.10.0-rc5+ #1\n[..]\n\nwith a suitable ruleset during validation of register stores.\n\nI can\u0027t see any actual reason to attempt to check for this from\nnft_validate_register_store(), at this point the transaction is still in\nprogress, so we don\u0027t have a full picture of the rule graph.\n\nFor nf-next it might make sense to either remove it or make this depend\non table-\u003evalidate_state in case we could catch an error earlier\n(for improved error reporting to userspace).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41042",
"url": "https://www.suse.com/security/cve/CVE-2024-41042"
},
{
"category": "external",
"summary": "SUSE Bug 1228526 for CVE-2024-41042",
"url": "https://bugzilla.suse.com/1228526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-41042"
},
{
"cve": "CVE-2024-43913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: apple: fix device reference counting\n\nDrivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl.\nSplit the allocation side out to make the error handling boundary easier\nto navigate. The apple driver had been doing this wrong, leaking the\ncontroller device memory on a tagset failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43913",
"url": "https://www.suse.com/security/cve/CVE-2024-43913"
},
{
"category": "external",
"summary": "SUSE Bug 1229833 for CVE-2024-43913",
"url": "https://bugzilla.suse.com/1229833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-43913"
},
{
"cve": "CVE-2024-44934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44934"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: wait for previous gc cycles when removing port\n\nsyzbot hit a use-after-free[1] which is caused because the bridge doesn\u0027t\nmake sure that all previous garbage has been collected when removing a\nport. What happens is:\n CPU 1 CPU 2\n start gc cycle remove port\n acquire gc lock first\n wait for lock\n call br_multicasg_gc() directly\n acquire lock now but free port\n the port can be freed\n while grp timers still\n running\n\nMake sure all previous gc cycles have finished by using flush_work before\nfreeing the port.\n\n[1]\n BUG: KASAN: slab-use-after-free in br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n Read of size 8 at addr ffff888071d6d000 by task syz.5.1232/9699\n\n CPU: 1 PID: 9699 Comm: syz.5.1232 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024\n Call Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0xc3/0x620 mm/kasan/report.c:488\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n call_timer_fn+0x1a3/0x610 kernel/time/timer.c:1792\n expire_timers kernel/time/timer.c:1843 [inline]\n __run_timers+0x74b/0xaf0 kernel/time/timer.c:2417\n __run_timer_base kernel/time/timer.c:2428 [inline]\n __run_timer_base kernel/time/timer.c:2421 [inline]\n run_timer_base+0x111/0x190 kernel/time/timer.c:2437",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44934",
"url": "https://www.suse.com/security/cve/CVE-2024-44934"
},
{
"category": "external",
"summary": "SUSE Bug 1229809 for CVE-2024-44934",
"url": "https://bugzilla.suse.com/1229809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-44934"
},
{
"cve": "CVE-2024-44996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44996"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: fix recursive -\u003erecvmsg calls\n\nAfter a vsock socket has been added to a BPF sockmap, its prot-\u003erecvmsg\nhas been replaced with vsock_bpf_recvmsg(). Thus the following\nrecursiion could happen:\n\nvsock_bpf_recvmsg()\n -\u003e __vsock_recvmsg()\n -\u003e vsock_connectible_recvmsg()\n -\u003e prot-\u003erecvmsg()\n -\u003e vsock_bpf_recvmsg() again\n\nWe need to fix it by calling the original -\u003erecvmsg() without any BPF\nsockmap logic in __vsock_recvmsg().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44996",
"url": "https://www.suse.com/security/cve/CVE-2024-44996"
},
{
"category": "external",
"summary": "SUSE Bug 1230205 for CVE-2024-44996",
"url": "https://bugzilla.suse.com/1230205"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-44996"
},
{
"cve": "CVE-2024-45828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Mask ring interrupts before ring stop request\n\nBus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when\nthe ring is being stopped. Depending on timing between ring stop request\ncompletion, interrupt handler removal and code execution this may lead\nto a NULL pointer dereference in hci_dma_irq_handler() if it gets to run\nafter the io_data pointer is set to NULL in hci_dma_cleanup().\n\nPrevent this my masking the ring interrupts before ring stop request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45828",
"url": "https://www.suse.com/security/cve/CVE-2024-45828"
},
{
"category": "external",
"summary": "SUSE Bug 1235705 for CVE-2024-45828",
"url": "https://bugzilla.suse.com/1235705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-45828"
},
{
"cve": "CVE-2024-46896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: don\u0027t access invalid sched\n\nSince 2320c9e6a768 (\"drm/sched: memset() \u0027job\u0027 in drm_sched_job_init()\")\naccessing job-\u003ebase.sched can produce unexpected results as the initialisation\nof (*job)-\u003ebase.sched done in amdgpu_job_alloc is overwritten by the\nmemset.\n\nThis commit fixes an issue when a CS would fail validation and would\nbe rejected after job-\u003enum_ibs is incremented. In this case,\namdgpu_ib_free(ring-\u003eadev, ...) will be called, which would crash the\nmachine because the ring value is bogus.\n\nTo fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this\nbecause the device is actually not used in this function.\n\nThe next commit will remove the ring argument completely.\n\n(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46896",
"url": "https://www.suse.com/security/cve/CVE-2024-46896"
},
{
"category": "external",
"summary": "SUSE Bug 1235707 for CVE-2024-46896",
"url": "https://bugzilla.suse.com/1235707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-46896"
},
{
"cve": "CVE-2024-47141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinmux: Use sequential access to access desc-\u003epinmux data\n\nWhen two client of the same gpio call pinctrl_select_state() for the\nsame functionality, we are seeing NULL pointer issue while accessing\ndesc-\u003emux_owner.\n\nLet\u0027s say two processes A, B executing in pin_request() for the same pin\nand process A updates the desc-\u003emux_usecount but not yet updated the\ndesc-\u003emux_owner while process B see the desc-\u003emux_usecount which got\nupdated by A path and further executes strcmp and while accessing\ndesc-\u003emux_owner it crashes with NULL pointer.\n\nSerialize the access to mux related setting with a mutex lock.\n\n\tcpu0 (process A)\t\t\tcpu1(process B)\n\npinctrl_select_state() {\t\t pinctrl_select_state() {\n pin_request() {\t\t\t\tpin_request() {\n ...\n\t\t\t\t\t\t ....\n } else {\n desc-\u003emux_usecount++;\n \t\t\t\t\t\tdesc-\u003emux_usecount \u0026\u0026 strcmp(desc-\u003emux_owner, owner)) {\n\n if (desc-\u003emux_usecount \u003e 1)\n return 0;\n desc-\u003emux_owner = owner;\n\n }\t\t\t\t\t\t}",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47141",
"url": "https://www.suse.com/security/cve/CVE-2024-47141"
},
{
"category": "external",
"summary": "SUSE Bug 1235708 for CVE-2024-47141",
"url": "https://bugzilla.suse.com/1235708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-47141"
},
{
"cve": "CVE-2024-47143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-debug: fix a possible deadlock on radix_lock\n\nradix_lock() shouldn\u0027t be held while holding dma_hash_entry[idx].lock\notherwise, there\u0027s a possible deadlock scenario when\ndma debug API is called holding rq_lock():\n\nCPU0 CPU1 CPU2\ndma_free_attrs()\ncheck_unmap() add_dma_entry() __schedule() //out\n (A) rq_lock()\nget_hash_bucket()\n(A) dma_entry_hash\n check_sync()\n (A) radix_lock() (W) dma_entry_hash\ndma_entry_free()\n(W) radix_lock()\n // CPU2\u0027s one\n (W) rq_lock()\n\nCPU1 situation can happen when it extending radix tree and\nit tries to wake up kswapd via wake_all_kswapd().\n\nCPU2 situation can happen while perf_event_task_sched_out()\n(i.e. dma sync operation is called while deleting perf_event using\n etm and etr tmc which are Arm Coresight hwtracing driver backends).\n\nTo remove this possible situation, call dma_entry_free() after\nput_hash_bucket() in check_unmap().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47143",
"url": "https://www.suse.com/security/cve/CVE-2024-47143"
},
{
"category": "external",
"summary": "SUSE Bug 1235710 for CVE-2024-47143",
"url": "https://bugzilla.suse.com/1235710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-47143"
},
{
"cve": "CVE-2024-47678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: change the order of rate limits\n\nICMP messages are ratelimited :\n\nAfter the blamed commits, the two rate limiters are applied in this order:\n\n1) host wide ratelimit (icmp_global_allow())\n\n2) Per destination ratelimit (inetpeer based)\n\nIn order to avoid side-channels attacks, we need to apply\nthe per destination check first.\n\nThis patch makes the following change :\n\n1) icmp_global_allow() checks if the host wide limit is reached.\n But credits are not yet consumed. This is deferred to 3)\n\n2) The per destination limit is checked/updated.\n This might add a new node in inetpeer tree.\n\n3) icmp_global_consume() consumes tokens if prior operations succeeded.\n\nThis means that host wide ratelimit is still effective\nin keeping inetpeer tree small even under DDOS.\n\nAs a bonus, I removed icmp_global.lock as the fast path\ncan use a lock-free operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47678",
"url": "https://www.suse.com/security/cve/CVE-2024-47678"
},
{
"category": "external",
"summary": "SUSE Bug 1231854 for CVE-2024-47678",
"url": "https://bugzilla.suse.com/1231854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-47678"
},
{
"cve": "CVE-2024-47809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix possible lkb_resource null dereference\n\nThis patch fixes a possible null pointer dereference when this function is\ncalled from request_lock() as lkb-\u003elkb_resource is not assigned yet,\nonly after validate_lock_args() by calling attach_lkb(). Another issue\nis that a resource name could be a non printable bytearray and we cannot\nassume to be ASCII coded.\n\nThe log functionality is probably never being hit when DLM is used in\nnormal way and no debug logging is enabled. The null pointer dereference\ncan only occur on a new created lkb that does not have the resource\nassigned yet, it probably never hits the null pointer dereference but we\nshould be sure that other changes might not change this behaviour and we\nactually can hit the mentioned null pointer dereference.\n\nIn this patch we just drop the printout of the resource name, the lkb id\nis enough to make a possible connection to a resource name if this\nexists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47809",
"url": "https://www.suse.com/security/cve/CVE-2024-47809"
},
{
"category": "external",
"summary": "SUSE Bug 1235714 for CVE-2024-47809",
"url": "https://bugzilla.suse.com/1235714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-47809"
},
{
"cve": "CVE-2024-48873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48873"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: check return value of ieee80211_probereq_get() for RNR\n\nThe return value of ieee80211_probereq_get() might be NULL, so check it\nbefore using to avoid NULL pointer access.\n\nAddresses-Coverity-ID: 1529805 (\"Dereference null return value\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48873",
"url": "https://www.suse.com/security/cve/CVE-2024-48873"
},
{
"category": "external",
"summary": "SUSE Bug 1235716 for CVE-2024-48873",
"url": "https://bugzilla.suse.com/1235716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-48873"
},
{
"cve": "CVE-2024-48881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721 if (!IS_ERR_OR_NULL(c-\u003eroot))\n1722 list_add(\u0026c-\u003eroot-\u003elist, \u0026c-\u003ebtree_cache);\n\n\u003eFrom the above code in cache_set_flush(), if previous registration code\nfails before allocating c-\u003eroot, it is possible c-\u003eroot is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc-\u003eroot is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48881",
"url": "https://www.suse.com/security/cve/CVE-2024-48881"
},
{
"category": "external",
"summary": "SUSE Bug 1235727 for CVE-2024-48881",
"url": "https://bugzilla.suse.com/1235727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-rdma: unquiesce admin_q before destroy it\n\nKernel will hang on destroy admin_q while we create ctrl failed, such\nas following calltrace:\n\nPID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: \"nvme\"\n #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15\n #1 [ff61d23de260fc08] schedule at ffffffff8323c014\n #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1\n #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a\n #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006\n #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce\n #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced\n #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b\n #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362\n #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25\n RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202\n RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574\n RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004\n RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90\n R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004\n R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500\n ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b\n\nThis due to we have quiesced admi_q before cancel requests, but forgot\nto unquiesce before destroy it, as a result we fail to drain the\npending requests, and hang on blk_mq_freeze_queue_wait() forever. Here\ntry to reuse nvme_rdma_teardown_admin_queue() to fix this issue and\nsimplify the code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49569",
"url": "https://www.suse.com/security/cve/CVE-2024-49569"
},
{
"category": "external",
"summary": "SUSE Bug 1235730 for CVE-2024-49569",
"url": "https://bugzilla.suse.com/1235730"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-49569"
},
{
"cve": "CVE-2024-49854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix uaf for accessing waker_bfqq after splitting\n\nAfter commit 42c306ed7233 (\"block, bfq: don\u0027t break merge chain in\nbfq_split_bfqq()\"), if the current procress is the last holder of bfqq,\nthe bfqq can be freed after bfq_split_bfqq(). Hence recored the bfqq and\nthen access bfqq-\u003ewaker_bfqq may trigger UAF. What\u0027s more, the waker_bfqq\nmay in the merge chain of bfqq, hence just recored waker_bfqq is still\nnot safe.\n\nFix the problem by adding a helper bfq_waker_bfqq() to check if\nbfqq-\u003ewaker_bfqq is in the merge chain, and current procress is the only\nholder.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49854",
"url": "https://www.suse.com/security/cve/CVE-2024-49854"
},
{
"category": "external",
"summary": "SUSE Bug 1232193 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "external",
"summary": "SUSE Bug 1236571 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1236571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-49854"
},
{
"cve": "CVE-2024-49884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix slab-use-after-free in ext4_split_extent_at()\n\nWe hit the following use-after-free:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_split_extent_at+0xba8/0xcc0\nRead of size 2 at addr ffff88810548ed08 by task kworker/u20:0/40\nCPU: 0 PID: 40 Comm: kworker/u20:0 Not tainted 6.9.0-dirty #724\nCall Trace:\n \u003cTASK\u003e\n kasan_report+0x93/0xc0\n ext4_split_extent_at+0xba8/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nAllocated by task 40:\n __kmalloc_noprof+0x1ac/0x480\n ext4_find_extent+0xf3b/0x1e70\n ext4_ext_map_blocks+0x188/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nFreed by task 40:\n kfree+0xf1/0x2b0\n ext4_find_extent+0xa71/0x1e70\n ext4_ext_insert_extent+0xa22/0x3260\n ext4_split_extent_at+0x3ef/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n==================================================================\n\nThe flow of issue triggering is as follows:\n\next4_split_extent_at\n path = *ppath\n ext4_ext_insert_extent(ppath)\n ext4_ext_create_new_leaf(ppath)\n ext4_find_extent(orig_path)\n path = *orig_path\n read_extent_tree_block\n // return -ENOMEM or -EIO\n ext4_free_ext_path(path)\n kfree(path)\n *orig_path = NULL\n a. If err is -ENOMEM:\n ext4_ext_dirty(path + path-\u003ep_depth)\n // path use-after-free !!!\n b. If err is -EIO and we have EXT_DEBUG defined:\n ext4_ext_show_leaf(path)\n eh = path[depth].p_hdr\n // path also use-after-free !!!\n\nSo when trying to zeroout or fix the extent length, call ext4_find_extent()\nto update the path.\n\nIn addition we use *ppath directly as an ext4_ext_show_leaf() input to\navoid possible use-after-free when EXT_DEBUG is defined, and to avoid\nunnecessary path updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49884",
"url": "https://www.suse.com/security/cve/CVE-2024-49884"
},
{
"category": "external",
"summary": "SUSE Bug 1225742 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1225742"
},
{
"category": "external",
"summary": "SUSE Bug 1232198 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1232198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-49884"
},
{
"cve": "CVE-2024-49915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn32_init_hw` function. The issue could occur when `dc-\u003eclk_mgr` is\nnull.\n\nThe fix adds a check to ensure `dc-\u003eclk_mgr` is not null before\naccessing its functions. This prevents a potential null pointer\ndereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn32/dcn32_hwseq.c:961 dcn32_init_hw() error: we previously assumed \u0027dc-\u003eclk_mgr\u0027 could be null (see line 782)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49915",
"url": "https://www.suse.com/security/cve/CVE-2024-49915"
},
{
"category": "external",
"summary": "SUSE Bug 1231963 for CVE-2024-49915",
"url": "https://bugzilla.suse.com/1231963"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-49915"
},
{
"cve": "CVE-2024-49948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: add more sanity checks to qdisc_pkt_len_init()\n\nOne path takes care of SKB_GSO_DODGY, assuming\nskb-\u003elen is bigger than hdr_len.\n\nvirtio_net_hdr_to_skb() does not fully dissect TCP headers,\nit only make sure it is at least 20 bytes.\n\nIt is possible for an user to provide a malicious \u0027GSO\u0027 packet,\ntotal length of 80 bytes.\n\n- 20 bytes of IPv4 header\n- 60 bytes TCP header\n- a small gso_size like 8\n\nvirtio_net_hdr_to_skb() would declare this packet as a normal\nGSO packet, because it would see 40 bytes of payload,\nbigger than gso_size.\n\nWe need to make detect this case to not underflow\nqdisc_skb_cb(skb)-\u003epkt_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49948",
"url": "https://www.suse.com/security/cve/CVE-2024-49948"
},
{
"category": "external",
"summary": "SUSE Bug 1232161 for CVE-2024-49948",
"url": "https://bugzilla.suse.com/1232161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-49951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible crash on mgmt_index_removed\n\nIf mgmt_index_removed is called while there are commands queued on\ncmd_sync it could lead to crashes like the bellow trace:\n\n0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc\n0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth]\n0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth]\n0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth]\n\nSo while handling mgmt_index_removed this attempts to dequeue\ncommands passed as user_data to cmd_sync.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49951",
"url": "https://www.suse.com/security/cve/CVE-2024-49951"
},
{
"category": "external",
"summary": "SUSE Bug 1232158 for CVE-2024-49951",
"url": "https://bugzilla.suse.com/1232158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-49951"
},
{
"cve": "CVE-2024-49978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49978"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngso: fix udp gso fraglist segmentation after pull from frag_list\n\nDetect gso fraglist skbs with corrupted geometry (see below) and\npass these to skb_segment instead of skb_segment_list, as the first\ncan segment them correctly.\n\nValid SKB_GSO_FRAGLIST skbs\n- consist of two or more segments\n- the head_skb holds the protocol headers plus first gso_size\n- one or more frag_list skbs hold exactly one segment\n- all but the last must be gso_size\n\nOptional datapath hooks such as NAT and BPF (bpf_skb_pull_data) can\nmodify these skbs, breaking these invariants.\n\nIn extreme cases they pull all data into skb linear. For UDP, this\ncauses a NULL ptr deref in __udpv4_gso_segment_list_csum at\nudp_hdr(seg-\u003enext)-\u003edest.\n\nDetect invalid geometry due to pull, by checking head_skb size.\nDon\u0027t just drop, as this may blackhole a destination. Convert to be\nable to pass to regular skb_segment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49978",
"url": "https://www.suse.com/security/cve/CVE-2024-49978"
},
{
"category": "external",
"summary": "SUSE Bug 1232101 for CVE-2024-49978",
"url": "https://bugzilla.suse.com/1232101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-49978"
},
{
"cve": "CVE-2024-49998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: improve shutdown sequence\n\nAlexander Sverdlin presents 2 problems during shutdown with the\nlan9303 driver. One is specific to lan9303 and the other just happens\nto reproduce there.\n\nThe first problem is that lan9303 is unique among DSA drivers in that it\ncalls dev_get_drvdata() at \"arbitrary runtime\" (not probe, not shutdown,\nnot remove):\n\nphy_state_machine()\n-\u003e ...\n -\u003e dsa_user_phy_read()\n -\u003e ds-\u003eops-\u003ephy_read()\n -\u003e lan9303_phy_read()\n -\u003e chip-\u003eops-\u003ephy_read()\n -\u003e lan9303_mdio_phy_read()\n -\u003e dev_get_drvdata()\n\nBut we never stop the phy_state_machine(), so it may continue to run\nafter dsa_switch_shutdown(). Our common pattern in all DSA drivers is\nto set drvdata to NULL to suppress the remove() method that may come\nafterwards. But in this case it will result in an NPD.\n\nThe second problem is that the way in which we set\ndp-\u003econduit-\u003edsa_ptr = NULL; is concurrent with receive packet\nprocessing. dsa_switch_rcv() checks once whether dev-\u003edsa_ptr is NULL,\nbut afterwards, rather than continuing to use that non-NULL value,\ndev-\u003edsa_ptr is dereferenced again and again without NULL checks:\ndsa_conduit_find_user() and many other places. In between dereferences,\nthere is no locking to ensure that what was valid once continues to be\nvalid.\n\nBoth problems have the common aspect that closing the conduit interface\nsolves them.\n\nIn the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN\nevent in dsa_user_netdevice_event() which closes user ports as well.\ndsa_port_disable_rt() calls phylink_stop(), which synchronously stops\nthe phylink state machine, and ds-\u003eops-\u003ephy_read() will thus no longer\ncall into the driver after this point.\n\nIn the second case, dev_close(conduit) should do this, as per\nDocumentation/networking/driver.rst:\n\n| Quiescence\n| ----------\n|\n| After the ndo_stop routine has been called, the hardware must\n| not receive or transmit any data. All in flight packets must\n| be aborted. If necessary, poll or wait for completion of\n| any reset commands.\n\nSo it should be sufficient to ensure that later, when we zeroize\nconduit-\u003edsa_ptr, there will be no concurrent dsa_switch_rcv() call\non this conduit.\n\nThe addition of the netif_device_detach() function is to ensure that\nioctls, rtnetlinks and ethtool requests on the user ports no longer\npropagate down to the driver - we\u0027re no longer prepared to handle them.\n\nThe race condition actually did not exist when commit 0650bf52b31f\n(\"net: dsa: be compatible with masters which unregister on shutdown\")\nfirst introduced dsa_switch_shutdown(). It was created later, when we\nstopped unregistering the user interfaces from a bad spot, and we just\nreplaced that sequence with a racy zeroization of conduit-\u003edsa_ptr\n(one which doesn\u0027t ensure that the interfaces aren\u0027t up).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49998",
"url": "https://www.suse.com/security/cve/CVE-2024-49998"
},
{
"category": "external",
"summary": "SUSE Bug 1232087 for CVE-2024-49998",
"url": "https://bugzilla.suse.com/1232087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-49998"
},
{
"cve": "CVE-2024-50016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50016"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50016",
"url": "https://www.suse.com/security/cve/CVE-2024-50016"
},
{
"category": "external",
"summary": "SUSE Bug 1232420 for CVE-2024-50016",
"url": "https://bugzilla.suse.com/1232420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50016"
},
{
"cve": "CVE-2024-50018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50018"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50018",
"url": "https://www.suse.com/security/cve/CVE-2024-50018"
},
{
"category": "external",
"summary": "SUSE Bug 1232419 for CVE-2024-50018",
"url": "https://bugzilla.suse.com/1232419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50018"
},
{
"cve": "CVE-2024-50039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50039"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: accept TCA_STAB only for root qdisc\n\nMost qdiscs maintain their backlog using qdisc_pkt_len(skb)\non the assumption it is invariant between the enqueue()\nand dequeue() handlers.\n\nUnfortunately syzbot can crash a host rather easily using\na TBF + SFQ combination, with an STAB on SFQ [1]\n\nWe can\u0027t support TCA_STAB on arbitrary level, this would\nrequire to maintain per-qdisc storage.\n\n[1]\n[ 88.796496] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[ 88.798611] #PF: supervisor read access in kernel mode\n[ 88.799014] #PF: error_code(0x0000) - not-present page\n[ 88.799506] PGD 0 P4D 0\n[ 88.799829] Oops: Oops: 0000 [#1] SMP NOPTI\n[ 88.800569] CPU: 14 UID: 0 PID: 2053 Comm: b371744477 Not tainted 6.12.0-rc1-virtme #1117\n[ 88.801107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 88.801779] RIP: 0010:sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.802544] Code: 0f b7 50 12 48 8d 04 d5 00 00 00 00 48 89 d6 48 29 d0 48 8b 91 c0 01 00 00 48 c1 e0 03 48 01 c2 66 83 7a 1a 00 7e c0 48 8b 3a \u003c4c\u003e 8b 07 4c 89 02 49 89 50 08 48 c7 47 08 00 00 00 00 48 c7 07 00\nAll code\n========\n 0:\t0f b7 50 12 \tmovzwl 0x12(%rax),%edx\n 4:\t48 8d 04 d5 00 00 00 \tlea 0x0(,%rdx,8),%rax\n b:\t00\n c:\t48 89 d6 \tmov %rdx,%rsi\n f:\t48 29 d0 \tsub %rdx,%rax\n 12:\t48 8b 91 c0 01 00 00 \tmov 0x1c0(%rcx),%rdx\n 19:\t48 c1 e0 03 \tshl $0x3,%rax\n 1d:\t48 01 c2 \tadd %rax,%rdx\n 20:\t66 83 7a 1a 00 \tcmpw $0x0,0x1a(%rdx)\n 25:\t7e c0 \tjle 0xffffffffffffffe7\n 27:\t48 8b 3a \tmov (%rdx),%rdi\n 2a:*\t4c 8b 07 \tmov (%rdi),%r8\t\t\u003c-- trapping instruction\n 2d:\t4c 89 02 \tmov %r8,(%rdx)\n 30:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n 34:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 3b:\t00\n 3c:\t48 \trex.W\n 3d:\tc7 \t.byte 0xc7\n 3e:\t07 \t(bad)\n\t...\n\nCode starting with the faulting instruction\n===========================================\n 0:\t4c 8b 07 \tmov (%rdi),%r8\n 3:\t4c 89 02 \tmov %r8,(%rdx)\n 6:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n a:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 11:\t00\n 12:\t48 \trex.W\n 13:\tc7 \t.byte 0xc7\n 14:\t07 \t(bad)\n\t...\n[ 88.803721] RSP: 0018:ffff9a1f892b7d58 EFLAGS: 00000206\n[ 88.804032] RAX: 0000000000000000 RBX: ffff9a1f8420c800 RCX: ffff9a1f8420c800\n[ 88.804560] RDX: ffff9a1f81bc1440 RSI: 0000000000000000 RDI: 0000000000000000\n[ 88.805056] RBP: ffffffffc04bb0e0 R08: 0000000000000001 R09: 00000000ff7f9a1f\n[ 88.805473] R10: 000000000001001b R11: 0000000000009a1f R12: 0000000000000140\n[ 88.806194] R13: 0000000000000001 R14: ffff9a1f886df400 R15: ffff9a1f886df4ac\n[ 88.806734] FS: 00007f445601a740(0000) GS:ffff9a2e7fd80000(0000) knlGS:0000000000000000\n[ 88.807225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 88.807672] CR2: 0000000000000000 CR3: 000000050cc46000 CR4: 00000000000006f0\n[ 88.808165] Call Trace:\n[ 88.808459] \u003cTASK\u003e\n[ 88.808710] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434)\n[ 88.809261] ? page_fault_oops (arch/x86/mm/fault.c:715)\n[ 88.809561] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539)\n[ 88.809806] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623)\n[ 88.810074] ? sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.810411] sfq_reset (net/sched/sch_sfq.c:525) sch_sfq\n[ 88.810671] qdisc_reset (./include/linux/skbuff.h:2135 ./include/linux/skbuff.h:2441 ./include/linux/skbuff.h:3304 ./include/linux/skbuff.h:3310 net/sched/sch_g\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50039",
"url": "https://www.suse.com/security/cve/CVE-2024-50039"
},
{
"category": "external",
"summary": "SUSE Bug 1231909 for CVE-2024-50039",
"url": "https://bugzilla.suse.com/1231909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50039"
},
{
"cve": "CVE-2024-50047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50047"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix UAF in async decryption\n\nDoing an async decryption (large read) crashes with a\nslab-use-after-free way down in the crypto API.\n\nReproducer:\n # mount.cifs -o ...,seal,esize=1 //srv/share /mnt\n # dd if=/mnt/largefile of=/dev/null\n ...\n [ 194.196391] ==================================================================\n [ 194.196844] BUG: KASAN: slab-use-after-free in gf128mul_4k_lle+0xc1/0x110\n [ 194.197269] Read of size 8 at addr ffff888112bd0448 by task kworker/u77:2/899\n [ 194.197707]\n [ 194.197818] CPU: 12 UID: 0 PID: 899 Comm: kworker/u77:2 Not tainted 6.11.0-lku-00028-gfca3ca14a17a-dirty #43\n [ 194.198400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014\n [ 194.199046] Workqueue: smb3decryptd smb2_decrypt_offload [cifs]\n [ 194.200032] Call Trace:\n [ 194.200191] \u003cTASK\u003e\n [ 194.200327] dump_stack_lvl+0x4e/0x70\n [ 194.200558] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.200809] print_report+0x174/0x505\n [ 194.201040] ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n [ 194.201352] ? srso_return_thunk+0x5/0x5f\n [ 194.201604] ? __virt_addr_valid+0xdf/0x1c0\n [ 194.201868] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202128] kasan_report+0xc8/0x150\n [ 194.202361] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202616] gf128mul_4k_lle+0xc1/0x110\n [ 194.202863] ghash_update+0x184/0x210\n [ 194.203103] shash_ahash_update+0x184/0x2a0\n [ 194.203377] ? __pfx_shash_ahash_update+0x10/0x10\n [ 194.203651] ? srso_return_thunk+0x5/0x5f\n [ 194.203877] ? crypto_gcm_init_common+0x1ba/0x340\n [ 194.204142] gcm_hash_assoc_remain_continue+0x10a/0x140\n [ 194.204434] crypt_message+0xec1/0x10a0 [cifs]\n [ 194.206489] ? __pfx_crypt_message+0x10/0x10 [cifs]\n [ 194.208507] ? srso_return_thunk+0x5/0x5f\n [ 194.209205] ? srso_return_thunk+0x5/0x5f\n [ 194.209925] ? srso_return_thunk+0x5/0x5f\n [ 194.210443] ? srso_return_thunk+0x5/0x5f\n [ 194.211037] decrypt_raw_data+0x15f/0x250 [cifs]\n [ 194.212906] ? __pfx_decrypt_raw_data+0x10/0x10 [cifs]\n [ 194.214670] ? srso_return_thunk+0x5/0x5f\n [ 194.215193] smb2_decrypt_offload+0x12a/0x6c0 [cifs]\n\nThis is because TFM is being used in parallel.\n\nFix this by allocating a new AEAD TFM for async decryption, but keep\nthe existing one for synchronous READ cases (similar to what is done\nin smb3_calc_signature()).\n\nAlso remove the calls to aead_request_set_callback() and\ncrypto_wait_req() since it\u0027s always going to be a synchronous operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50047",
"url": "https://www.suse.com/security/cve/CVE-2024-50047"
},
{
"category": "external",
"summary": "SUSE Bug 1232418 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "external",
"summary": "SUSE Bug 1232576 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232576"
},
{
"category": "external",
"summary": "SUSE Bug 1232638 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-50047"
},
{
"cve": "CVE-2024-50051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: Add cancel_work_sync before module remove\n\nIf we remove the module which will call mpc52xx_spi_remove\nit will free \u0027ms\u0027 through spi_unregister_controller.\nwhile the work ms-\u003ework will be used. The sequence of operations\nthat may lead to a UAF bug.\n\nFix it by ensuring that the work is canceled before proceeding with\nthe cleanup in mpc52xx_spi_remove.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50051",
"url": "https://www.suse.com/security/cve/CVE-2024-50051"
},
{
"category": "external",
"summary": "SUSE Bug 1235739 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "external",
"summary": "SUSE Bug 1239156 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1239156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-50051"
},
{
"cve": "CVE-2024-50106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix race between laundromat and free_stateid\n\nThere is a race between laundromat handling of revoked delegations\nand a client sending free_stateid operation. Laundromat thread\nfinds that delegation has expired and needs to be revoked so it\nmarks the delegation stid revoked and it puts it on a reaper list\nbut then it unlock the state lock and the actual delegation revocation\nhappens without the lock. Once the stid is marked revoked a racing\nfree_stateid processing thread does the following (1) it calls\nlist_del_init() which removes it from the reaper list and (2) frees\nthe delegation stid structure. The laundromat thread ends up not\ncalling the revoke_delegation() function for this particular delegation\nbut that means it will no release the lock lease that exists on\nthe file.\n\nNow, a new open for this file comes in and ends up finding that\nlease list isn\u0027t empty and calls nfsd_breaker_owns_lease() which ends\nup trying to derefence a freed delegation stateid. Leading to the\nfollowint use-after-free KASAN warning:\n\nkernel: ==================================================================\nkernel: BUG: KASAN: slab-use-after-free in nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: Read of size 8 at addr ffff0000e73cd0c8 by task nfsd/6205\nkernel:\nkernel: CPU: 2 UID: 0 PID: 6205 Comm: nfsd Kdump: loaded Not tainted 6.11.0-rc7+ #9\nkernel: Hardware name: Apple Inc. Apple Virtualization Generic Platform, BIOS 2069.0.0.0.0 08/03/2024\nkernel: Call trace:\nkernel: dump_backtrace+0x98/0x120\nkernel: show_stack+0x1c/0x30\nkernel: dump_stack_lvl+0x80/0xe8\nkernel: print_address_description.constprop.0+0x84/0x390\nkernel: print_report+0xa4/0x268\nkernel: kasan_report+0xb4/0xf8\nkernel: __asan_report_load8_noabort+0x1c/0x28\nkernel: nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: nfsd_file_do_acquire+0xb3c/0x11d0 [nfsd]\nkernel: nfsd_file_acquire_opened+0x84/0x110 [nfsd]\nkernel: nfs4_get_vfs_file+0x634/0x958 [nfsd]\nkernel: nfsd4_process_open2+0xa40/0x1a40 [nfsd]\nkernel: nfsd4_open+0xa08/0xe80 [nfsd]\nkernel: nfsd4_proc_compound+0xb8c/0x2130 [nfsd]\nkernel: nfsd_dispatch+0x22c/0x718 [nfsd]\nkernel: svc_process_common+0x8e8/0x1960 [sunrpc]\nkernel: svc_process+0x3d4/0x7e0 [sunrpc]\nkernel: svc_handle_xprt+0x828/0xe10 [sunrpc]\nkernel: svc_recv+0x2cc/0x6a8 [sunrpc]\nkernel: nfsd+0x270/0x400 [nfsd]\nkernel: kthread+0x288/0x310\nkernel: ret_from_fork+0x10/0x20\n\nThis patch proposes a fixed that\u0027s based on adding 2 new additional\nstid\u0027s sc_status values that help coordinate between the laundromat\nand other operations (nfsd4_free_stateid() and nfsd4_delegreturn()).\n\nFirst to make sure, that once the stid is marked revoked, it is not\nremoved by the nfsd4_free_stateid(), the laundromat take a reference\non the stateid. Then, coordinating whether the stid has been put\non the cl_revoked list or we are processing FREE_STATEID and need to\nmake sure to remove it from the list, each check that state and act\naccordingly. If laundromat has added to the cl_revoke list before\nthe arrival of FREE_STATEID, then nfsd4_free_stateid() knows to remove\nit from the list. If nfsd4_free_stateid() finds that operations arrived\nbefore laundromat has placed it on cl_revoke list, it marks the state\nfreed and then laundromat will no longer add it to the list.\n\nAlso, for nfsd4_delegreturn() when looking for the specified stid,\nwe need to access stid that are marked removed or freeable, it means\nthe laundromat has started processing it but hasn\u0027t finished and this\ndelegreturn needs to return nfserr_deleg_revoked and not\nnfserr_bad_stateid. The latter will not trigger a FREE_STATEID and the\nlack of it will leave this stid on the cl_revoked list indefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50106",
"url": "https://www.suse.com/security/cve/CVE-2024-50106"
},
{
"category": "external",
"summary": "SUSE Bug 1232882 for CVE-2024-50106",
"url": "https://bugzilla.suse.com/1232882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50106"
},
{
"cve": "CVE-2024-50143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: fix uninit-value use in udf_get_fileshortad\n\nCheck for overflow when computing alen in udf_current_aext to mitigate\nlater uninit-value use in udf_get_fileshortad KMSAN bug[1].\nAfter applying the patch reproducer did not trigger any issue[2].\n\n[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df\n[2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50143",
"url": "https://www.suse.com/security/cve/CVE-2024-50143"
},
{
"category": "external",
"summary": "SUSE Bug 1233038 for CVE-2024-50143",
"url": "https://bugzilla.suse.com/1233038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50143"
},
{
"cve": "CVE-2024-50151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOBs when building SMB2_IOCTL request\n\nWhen using encryption, either enforced by the server or when using\n\u0027seal\u0027 mount option, the client will squash all compound request buffers\ndown for encryption into a single iov in smb2_set_next_command().\n\nSMB2_ioctl_init() allocates a small buffer (448 bytes) to hold the\nSMB2_IOCTL request in the first iov, and if the user passes an input\nbuffer that is greater than 328 bytes, smb2_set_next_command() will\nend up writing off the end of @rqst-\u003eiov[0].iov_base as shown below:\n\n mount.cifs //srv/share /mnt -o ...,seal\n ln -s $(perl -e \"print(\u0027a\u0027)for 1..1024\") /mnt/link\n\n BUG: KASAN: slab-out-of-bounds in\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n Write of size 4116 at addr ffff8881148fcab8 by task ln/859\n\n CPU: 1 UID: 0 PID: 859 Comm: ln Not tainted 6.12.0-rc3 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n 1.16.3-2.fc40 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n print_report+0x156/0x4d9\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n ? __virt_addr_valid+0x145/0x310\n ? __phys_addr+0x46/0x90\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_report+0xda/0x110\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_check_range+0x10f/0x1f0\n __asan_memcpy+0x3c/0x60\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n smb2_compound_op+0x238c/0x3840 [cifs]\n ? kasan_save_track+0x14/0x30\n ? kasan_save_free_info+0x3b/0x70\n ? vfs_symlink+0x1a1/0x2c0\n ? do_symlinkat+0x108/0x1c0\n ? __pfx_smb2_compound_op+0x10/0x10 [cifs]\n ? kmem_cache_free+0x118/0x3e0\n ? cifs_get_writable_path+0xeb/0x1a0 [cifs]\n smb2_get_reparse_inode+0x423/0x540 [cifs]\n ? __pfx_smb2_get_reparse_inode+0x10/0x10 [cifs]\n ? rcu_is_watching+0x20/0x50\n ? __kmalloc_noprof+0x37c/0x480\n ? smb2_create_reparse_symlink+0x257/0x490 [cifs]\n ? smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n ? __pfx_smb2_create_reparse_symlink+0x10/0x10 [cifs]\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? __build_path_from_dentry_optional_prefix+0x19d/0x2e0 [cifs]\n cifs_symlink+0x24f/0x960 [cifs]\n ? __pfx_make_vfsuid+0x10/0x10\n ? __pfx_cifs_symlink+0x10/0x10 [cifs]\n ? make_vfsgid+0x6b/0xc0\n ? generic_permission+0x96/0x2d0\n vfs_symlink+0x1a1/0x2c0\n do_symlinkat+0x108/0x1c0\n ? __pfx_do_symlinkat+0x10/0x10\n ? strncpy_from_user+0xaa/0x160\n __x64_sys_symlinkat+0xb9/0xf0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7f08d75c13bb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50151",
"url": "https://www.suse.com/security/cve/CVE-2024-50151"
},
{
"category": "external",
"summary": "SUSE Bug 1233055 for CVE-2024-50151",
"url": "https://bugzilla.suse.com/1233055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50151"
},
{
"cve": "CVE-2024-50154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp/dccp: Don\u0027t use timer_pending() in reqsk_queue_unlink().\n\nMartin KaFai Lau reported use-after-free [0] in reqsk_timer_handler().\n\n \"\"\"\n We are seeing a use-after-free from a bpf prog attached to\n trace_tcp_retransmit_synack. The program passes the req-\u003esk to the\n bpf_sk_storage_get_tracing kernel helper which does check for null\n before using it.\n \"\"\"\n\nThe commit 83fccfc3940c (\"inet: fix potential deadlock in\nreqsk_queue_unlink()\") added timer_pending() in reqsk_queue_unlink() not\nto call del_timer_sync() from reqsk_timer_handler(), but it introduced a\nsmall race window.\n\nBefore the timer is called, expire_timers() calls detach_timer(timer, true)\nto clear timer-\u003eentry.pprev and marks it as not pending.\n\nIf reqsk_queue_unlink() checks timer_pending() just after expire_timers()\ncalls detach_timer(), TCP will miss del_timer_sync(); the reqsk timer will\ncontinue running and send multiple SYN+ACKs until it expires.\n\nThe reported UAF could happen if req-\u003esk is close()d earlier than the timer\nexpiration, which is 63s by default.\n\nThe scenario would be\n\n 1. inet_csk_complete_hashdance() calls inet_csk_reqsk_queue_drop(),\n but del_timer_sync() is missed\n\n 2. reqsk timer is executed and scheduled again\n\n 3. req-\u003esk is accept()ed and reqsk_put() decrements rsk_refcnt, but\n reqsk timer still has another one, and inet_csk_accept() does not\n clear req-\u003esk for non-TFO sockets\n\n 4. sk is close()d\n\n 5. reqsk timer is executed again, and BPF touches req-\u003esk\n\nLet\u0027s not use timer_pending() by passing the caller context to\n__inet_csk_reqsk_queue_drop().\n\nNote that reqsk timer is pinned, so the issue does not happen in most\nuse cases. [1]\n\n[0]\nBUG: KFENCE: use-after-free read in bpf_sk_storage_get_tracing+0x2e/0x1b0\n\nUse-after-free read at 0x00000000a891fb3a (in kfence-#1):\nbpf_sk_storage_get_tracing+0x2e/0x1b0\nbpf_prog_5ea3e95db6da0438_tcp_retransmit_synack+0x1d20/0x1dda\nbpf_trace_run2+0x4c/0xc0\ntcp_rtx_synack+0xf9/0x100\nreqsk_timer_handler+0xda/0x3d0\nrun_timer_softirq+0x292/0x8a0\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\nintel_idle_irq+0x5a/0xa0\ncpuidle_enter_state+0x94/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nkfence-#1: 0x00000000a72cc7b6-0x00000000d97616d9, size=2376, cache=TCPv6\n\nallocated by task 0 on cpu 9 at 260507.901592s:\nsk_prot_alloc+0x35/0x140\nsk_clone_lock+0x1f/0x3f0\ninet_csk_clone_lock+0x15/0x160\ntcp_create_openreq_child+0x1f/0x410\ntcp_v6_syn_recv_sock+0x1da/0x700\ntcp_check_req+0x1fb/0x510\ntcp_v6_rcv+0x98b/0x1420\nipv6_list_rcv+0x2258/0x26e0\nnapi_complete_done+0x5b1/0x2990\nmlx5e_napi_poll+0x2ae/0x8d0\nnet_rx_action+0x13e/0x590\nirq_exit_rcu+0xf5/0x320\ncommon_interrupt+0x80/0x90\nasm_common_interrupt+0x22/0x40\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nfreed by task 0 on cpu 9 at 260507.927527s:\nrcu_core_si+0x4ff/0xf10\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50154",
"url": "https://www.suse.com/security/cve/CVE-2024-50154"
},
{
"category": "external",
"summary": "SUSE Bug 1233070 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "external",
"summary": "SUSE Bug 1233072 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233072"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-50154"
},
{
"cve": "CVE-2024-50199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50199"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/swapfile: skip HugeTLB pages for unuse_vma\n\nI got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The\nproblem can be reproduced by the following steps:\n\n 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.\n 2. Swapout the above anonymous memory.\n 3. run swapoff and we will get a bad pud error in kernel message:\n\n mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)\n\nWe can tell that pud_clear_bad is called by pud_none_or_clear_bad in\nunuse_pud_range() by ftrace. And therefore the HugeTLB pages will never\nbe freed because we lost it from page table. We can skip HugeTLB pages\nfor unuse_vma to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50199",
"url": "https://www.suse.com/security/cve/CVE-2024-50199"
},
{
"category": "external",
"summary": "SUSE Bug 1233112 for CVE-2024-50199",
"url": "https://bugzilla.suse.com/1233112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50199"
},
{
"cve": "CVE-2024-50202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: propagate directory read errors from nilfs_find_entry()\n\nSyzbot reported that a task hang occurs in vcs_open() during a fuzzing\ntest for nilfs2.\n\nThe root cause of this problem is that in nilfs_find_entry(), which\nsearches for directory entries, ignores errors when loading a directory\npage/folio via nilfs_get_folio() fails.\n\nIf the filesystem images is corrupted, and the i_size of the directory\ninode is large, and the directory page/folio is successfully read but\nfails the sanity check, for example when it is zero-filled,\nnilfs_check_folio() may continue to spit out error messages in bursts.\n\nFix this issue by propagating the error to the callers when loading a\npage/folio fails in nilfs_find_entry().\n\nThe current interface of nilfs_find_entry() and its callers is outdated\nand cannot propagate error codes such as -EIO and -ENOMEM returned via\nnilfs_find_entry(), so fix it together.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50202",
"url": "https://www.suse.com/security/cve/CVE-2024-50202"
},
{
"category": "external",
"summary": "SUSE Bug 1233324 for CVE-2024-50202",
"url": "https://bugzilla.suse.com/1233324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50202"
},
{
"cve": "CVE-2024-50203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Fix address emission with tag-based KASAN enabled\n\nWhen BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image\nstruct on the stack is passed during the size calculation pass and\nan address on the heap is passed during code generation. This may\ncause a heap buffer overflow if the heap address is tagged because\nemit_a64_mov_i64() will emit longer code than it did during the size\ncalculation pass. The same problem could occur without tag-based\nKASAN if one of the 16-bit words of the stack address happened to\nbe all-ones during the size calculation pass. Fix the problem by\nassuming the worst case (4 instructions) when calculating the size\nof the bpf_tramp_image address emission.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50203",
"url": "https://www.suse.com/security/cve/CVE-2024-50203"
},
{
"category": "external",
"summary": "SUSE Bug 1233328 for CVE-2024-50203",
"url": "https://bugzilla.suse.com/1233328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50203"
},
{
"cve": "CVE-2024-50211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50211"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: refactor inode_bmap() to handle error\n\nRefactor inode_bmap() to handle error since udf_next_aext() can return\nerror now. On situations like ftruncate, udf_extend_file() can now\ndetect errors and bail out early without resorting to checking for\nparticular offsets and assuming internal behavior of these functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50211",
"url": "https://www.suse.com/security/cve/CVE-2024-50211"
},
{
"category": "external",
"summary": "SUSE Bug 1233096 for CVE-2024-50211",
"url": "https://bugzilla.suse.com/1233096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50211"
},
{
"cve": "CVE-2024-50228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50228"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50228",
"url": "https://www.suse.com/security/cve/CVE-2024-50228"
},
{
"category": "external",
"summary": "SUSE Bug 1233204 for CVE-2024-50228",
"url": "https://bugzilla.suse.com/1233204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50228"
},
{
"cve": "CVE-2024-50256",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50256"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()\n\nI got a syzbot report without a repro [1] crashing in nf_send_reset6()\n\nI think the issue is that dev-\u003ehard_header_len is zero, and we attempt\nlater to push an Ethernet header.\n\nUse LL_MAX_HEADER, as other functions in net/ipv6/netfilter/nf_reject_ipv6.c.\n\n[1]\n\nskbuff: skb_under_panic: text:ffffffff89b1d008 len:74 put:14 head:ffff88803123aa00 data:ffff88803123a9f2 tail:0x3c end:0x140 dev:syz_tun\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 7373 Comm: syz.1.568 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 60 a6 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 ba 30 38 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc900045269b0 EFLAGS: 00010282\nRAX: 0000000000000088 RBX: dffffc0000000000 RCX: cd66dacdc5d8e800\nRDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000\nRBP: ffff88802d39a3d0 R08: ffffffff8174afec R09: 1ffff920008a4ccc\nR10: dffffc0000000000 R11: fffff520008a4ccd R12: 0000000000000140\nR13: ffff88803123aa00 R14: ffff88803123a9f2 R15: 000000000000003c\nFS: 00007fdbee5ff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000005d322000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n eth_header+0x38/0x1f0 net/ethernet/eth.c:83\n dev_hard_header include/linux/netdevice.h:3208 [inline]\n nf_send_reset6+0xce6/0x1270 net/ipv6/netfilter/nf_reject_ipv6.c:358\n nft_reject_inet_eval+0x3b9/0x690 net/netfilter/nft_reject_inet.c:48\n expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]\n nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288\n nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626\n nf_hook include/linux/netfilter.h:269 [inline]\n NF_HOOK include/linux/netfilter.h:312 [inline]\n br_nf_pre_routing_ipv6+0x63e/0x770 net/bridge/br_netfilter_ipv6.c:184\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]\n br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424\n __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5562\n __netif_receive_skb_one_core net/core/dev.c:5666 [inline]\n __netif_receive_skb+0x12f/0x650 net/core/dev.c:5781\n netif_receive_skb_internal net/core/dev.c:5867 [inline]\n netif_receive_skb+0x1e8/0x890 net/core/dev.c:5926\n tun_rx_batched+0x1b7/0x8f0 drivers/net/tun.c:1550\n tun_get_user+0x3056/0x47e0 drivers/net/tun.c:2007\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2053\n new_sync_write fs/read_write.c:590 [inline]\n vfs_write+0xa6d/0xc90 fs/read_write.c:683\n ksys_write+0x183/0x2b0 fs/read_write.c:736\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fdbeeb7d1ff\nCode: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48\nRSP: 002b:00007fdbee5ff000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 00007fdbeed36058 RCX: 00007fdbeeb7d1ff\nRDX: 000000000000008e RSI: 0000000020000040 RDI: 00000000000000c8\nRBP: 00007fdbeebf12be R08: 0000000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50256",
"url": "https://www.suse.com/security/cve/CVE-2024-50256"
},
{
"category": "external",
"summary": "SUSE Bug 1233200 for CVE-2024-50256",
"url": "https://bugzilla.suse.com/1233200"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50256"
},
{
"cve": "CVE-2024-50262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50262"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix out-of-bounds write in trie_get_next_key()\n\ntrie_get_next_key() allocates a node stack with size trie-\u003emax_prefixlen,\nwhile it writes (trie-\u003emax_prefixlen + 1) nodes to the stack when it has\nfull paths from the root to leaves. For example, consider a trie with\nmax_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ...\n0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with\n.prefixlen = 8 make 9 nodes be written on the node stack with size 8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50262",
"url": "https://www.suse.com/security/cve/CVE-2024-50262"
},
{
"category": "external",
"summary": "SUSE Bug 1233239 for CVE-2024-50262",
"url": "https://bugzilla.suse.com/1233239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50262"
},
{
"cve": "CVE-2024-50272",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50272"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfilemap: Fix bounds checking in filemap_read()\n\nIf the caller supplies an iocb-\u003eki_pos value that is close to the\nfilesystem upper limit, and an iterator with a count that causes us to\noverflow that limit, then filemap_read() enters an infinite loop.\n\nThis behaviour was discovered when testing xfstests generic/525 with the\n\"localio\" optimisation for loopback NFS mounts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50272",
"url": "https://www.suse.com/security/cve/CVE-2024-50272"
},
{
"category": "external",
"summary": "SUSE Bug 1233461 for CVE-2024-50272",
"url": "https://bugzilla.suse.com/1233461"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50272"
},
{
"cve": "CVE-2024-50278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50278"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix potential out-of-bounds access on the first resume\n\nOut-of-bounds access occurs if the fast device is expanded unexpectedly\nbefore the first-time resume of the cache table. This happens because\nexpanding the fast device requires reloading the cache table for\ncache_create to allocate new in-core data structures that fit the new\nsize, and the check in cache_preresume is not performed during the\nfirst resume, leading to the issue.\n\nReproduce steps:\n\n1. prepare component devices:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\n\n2. load a cache table of 512 cache blocks, and deliberately expand the\n fast device before resuming the cache, making the in-core data\n structures inadequate.\n\ndmsetup create cache --notable\ndmsetup reload cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\ndmsetup reload cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup resume cdata\ndmsetup resume cache\n\n3. suspend the cache to write out the in-core dirty bitset and hint\n array, leading to out-of-bounds access to the dirty bitset at offset\n 0x40:\n\ndmsetup suspend cache\n\nKASAN reports:\n\n BUG: KASAN: vmalloc-out-of-bounds in is_dirty_callback+0x2b/0x80\n Read of size 8 at addr ffffc90000085040 by task dmsetup/90\n\n (...snip...)\n The buggy address belongs to the virtual mapping at\n [ffffc90000085000, ffffc90000087000) created by:\n cache_ctr+0x176a/0x35f0\n\n (...snip...)\n Memory state around the buggy address:\n ffffc90000084f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000084f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n \u003effffc90000085000: 00 00 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8\n ^\n ffffc90000085080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000085100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n\nFix by checking the size change on the first resume.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50278",
"url": "https://www.suse.com/security/cve/CVE-2024-50278"
},
{
"category": "external",
"summary": "SUSE Bug 1233467 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "external",
"summary": "SUSE Bug 1233709 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50278"
},
{
"cve": "CVE-2024-50280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50280"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix flushing uninitialized delayed_work on cache_ctr error\n\nAn unexpected WARN_ON from flush_work() may occur when cache creation\nfails, caused by destroying the uninitialized delayed_work waker in the\nerror path of cache_create(). For example, the warning appears on the\nsuperblock checksum error.\n\nReproduce steps:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\nWARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890\n\nFix by pulling out the cancel_delayed_work_sync() from the constructor\u0027s\nerror path. This patch doesn\u0027t affect the use-after-free fix for\nconcurrent dm_resume and dm_destroy (commit 6a459d8edbdb (\"dm cache: Fix\nUAF in destroy()\")) as cache_dtr is not changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50280",
"url": "https://www.suse.com/security/cve/CVE-2024-50280"
},
{
"category": "external",
"summary": "SUSE Bug 1233469 for CVE-2024-50280",
"url": "https://bugzilla.suse.com/1233469"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50280"
},
{
"cve": "CVE-2024-50299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50299"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: properly validate chunk size in sctp_sf_ootb()\n\nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add\nsize validation when walking chunks\") is also required in sctp_sf_ootb()\nto address a crash reported by syzbot:\n\n BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166\n sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407\n sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88\n sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243\n sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159\n ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50299",
"url": "https://www.suse.com/security/cve/CVE-2024-50299"
},
{
"category": "external",
"summary": "SUSE Bug 1233488 for CVE-2024-50299",
"url": "https://bugzilla.suse.com/1233488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-52332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52332",
"url": "https://www.suse.com/security/cve/CVE-2024-52332"
},
{
"category": "external",
"summary": "SUSE Bug 1235700 for CVE-2024-52332",
"url": "https://bugzilla.suse.com/1235700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53050"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/hdcp: Add encoder check in hdcp2_get_capability\n\nAdd encoder check in intel_hdcp2_get_capability to avoid\nnull pointer error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53050",
"url": "https://www.suse.com/security/cve/CVE-2024-53050"
},
{
"category": "external",
"summary": "SUSE Bug 1233546 for CVE-2024-53050",
"url": "https://bugzilla.suse.com/1233546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53050"
},
{
"cve": "CVE-2024-53064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53064"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix idpf_vc_core_init error path\n\nIn an event where the platform running the device control plane\nis rebooted, reset is detected on the driver. It releases\nall the resources and waits for the reset to complete. Once the\nreset is done, it tries to build the resources back. At this\ntime if the device control plane is not yet started, then\nthe driver timeouts on the virtchnl message and retries to\nestablish the mailbox again.\n\nIn the retry flow, mailbox is deinitialized but the mailbox\nworkqueue is still alive and polling for the mailbox message.\nThis results in accessing the released control queue leading to\nnull-ptr-deref. Fix it by unrolling the work queue cancellation\nand mailbox deinitialization in the reverse order which they got\ninitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53064",
"url": "https://www.suse.com/security/cve/CVE-2024-53064"
},
{
"category": "external",
"summary": "SUSE Bug 1233558 for CVE-2024-53064",
"url": "https://bugzilla.suse.com/1233558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53064"
},
{
"cve": "CVE-2024-53090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53090"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix lock recursion\n\nafs_wake_up_async_call() can incur lock recursion. The problem is that it\nis called from AF_RXRPC whilst holding the -\u003enotify_lock, but it tries to\ntake a ref on the afs_call struct in order to pass it to a work queue - but\nif the afs_call is already queued, we then have an extraneous ref that must\nbe put... calling afs_put_call() may call back down into AF_RXRPC through\nrxrpc_kernel_shutdown_call(), however, which might try taking the\n-\u003enotify_lock again.\n\nThis case isn\u0027t very common, however, so defer it to a workqueue. The oops\nlooks something like:\n\n BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646\n lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0\n CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351\n Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x70\n do_raw_spin_lock+0x3c/0x90\n rxrpc_kernel_shutdown_call+0x83/0xb0\n afs_put_call+0xd7/0x180\n rxrpc_notify_socket+0xa0/0x190\n rxrpc_input_split_jumbo+0x198/0x1d0\n rxrpc_input_data+0x14b/0x1e0\n ? rxrpc_input_call_packet+0xc2/0x1f0\n rxrpc_input_call_event+0xad/0x6b0\n rxrpc_input_packet_on_conn+0x1e1/0x210\n rxrpc_input_packet+0x3f2/0x4d0\n rxrpc_io_thread+0x243/0x410\n ? __pfx_rxrpc_io_thread+0x10/0x10\n kthread+0xcf/0xe0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x24/0x40\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53090",
"url": "https://www.suse.com/security/cve/CVE-2024-53090"
},
{
"category": "external",
"summary": "SUSE Bug 1233637 for CVE-2024-53090",
"url": "https://bugzilla.suse.com/1233637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53090"
},
{
"cve": "CVE-2024-53091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53091"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx\n\nAs the introduction of the support for vsock and unix sockets in sockmap,\ntls_sw_has_ctx_tx/rx cannot presume the socket passed in must be IS_ICSK.\nvsock and af_unix sockets have vsock_sock and unix_sock instead of\ninet_connection_sock. For these sockets, tls_get_ctx may return an invalid\npointer and cause page fault in function tls_sw_ctx_rx.\n\nBUG: unable to handle page fault for address: 0000000000040030\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:sk_psock_strp_data_ready+0x23/0x60\nCall Trace:\n ? __die+0x81/0xc3\n ? no_context+0x194/0x350\n ? do_page_fault+0x30/0x110\n ? async_page_fault+0x3e/0x50\n ? sk_psock_strp_data_ready+0x23/0x60\n virtio_transport_recv_pkt+0x750/0x800\n ? update_load_avg+0x7e/0x620\n vsock_loopback_work+0xd0/0x100\n process_one_work+0x1a7/0x360\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x112/0x130\n ? __kthread_cancel_work+0x40/0x40\n ret_from_fork+0x1f/0x40\n\nv2:\n - Add IS_ICSK check\nv3:\n - Update the commits in Fixes",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53091",
"url": "https://www.suse.com/security/cve/CVE-2024-53091"
},
{
"category": "external",
"summary": "SUSE Bug 1233638 for CVE-2024-53091",
"url": "https://bugzilla.suse.com/1233638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53091"
},
{
"cve": "CVE-2024-53095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53095"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix use-after-free of network namespace.\n\nRecently, we got a customer report that CIFS triggers oops while\nreconnecting to a server. [0]\n\nThe workload runs on Kubernetes, and some pods mount CIFS servers\nin non-root network namespaces. The problem rarely happened, but\nit was always while the pod was dying.\n\nThe root cause is wrong reference counting for network namespace.\n\nCIFS uses kernel sockets, which do not hold refcnt of the netns that\nthe socket belongs to. That means CIFS must ensure the socket is\nalways freed before its netns; otherwise, use-after-free happens.\n\nThe repro steps are roughly:\n\n 1. mount CIFS in a non-root netns\n 2. drop packets from the netns\n 3. destroy the netns\n 4. unmount CIFS\n\nWe can reproduce the issue quickly with the script [1] below and see\nthe splat [2] if CONFIG_NET_NS_REFCNT_TRACKER is enabled.\n\nWhen the socket is TCP, it is hard to guarantee the netns lifetime\nwithout holding refcnt due to async timers.\n\nLet\u0027s hold netns refcnt for each socket as done for SMC in commit\n9744d2bf1976 (\"smc: Fix use-after-free in tcp_write_timer_handler().\").\n\nNote that we need to move put_net() from cifs_put_tcp_session() to\nclean_demultiplex_info(); otherwise, __sock_create() still could touch a\nfreed netns while cifsd tries to reconnect from cifs_demultiplex_thread().\n\nAlso, maybe_get_net() cannot be put just before __sock_create() because\nthe code is not under RCU and there is a small chance that the same\naddress happened to be reallocated to another netns.\n\n[0]:\nCIFS: VFS: \\\\XXXXXXXXXXX has not responded in 15 seconds. Reconnecting...\nCIFS: Serverclose failed 4 times, giving up\nUnable to handle kernel paging request at virtual address 14de99e461f84a07\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\n[14de99e461f84a07] address between user and kernel address ranges\nInternal error: Oops: 0000000096000004 [#1] SMP\nModules linked in: cls_bpf sch_ingress nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver tcp_diag inet_diag veth xt_state xt_connmark nf_conntrack_netlink xt_nat xt_statistic xt_MASQUERADE xt_mark xt_addrtype ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nf_tables nfnetlink overlay nls_ascii nls_cp437 sunrpc vfat fat aes_ce_blk aes_ce_cipher ghash_ce sm4_ce_cipher sm4 sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 sha1_ce ena button sch_fq_codel loop fuse configfs dmi_sysfs sha2_ce sha256_arm64 dm_mirror dm_region_hash dm_log dm_mod dax efivarfs\nCPU: 5 PID: 2690970 Comm: cifsd Not tainted 6.1.103-109.184.amzn2023.aarch64 #1\nHardware name: Amazon EC2 r7g.4xlarge/, BIOS 1.0 11/1/2018\npstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : fib_rules_lookup+0x44/0x238\nlr : __fib_lookup+0x64/0xbc\nsp : ffff8000265db790\nx29: ffff8000265db790 x28: 0000000000000000 x27: 000000000000bd01\nx26: 0000000000000000 x25: ffff000b4baf8000 x24: ffff00047b5e4580\nx23: ffff8000265db7e0 x22: 0000000000000000 x21: ffff00047b5e4500\nx20: ffff0010e3f694f8 x19: 14de99e461f849f7 x18: 0000000000000000\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000000 x13: 0000000000000000 x12: 3f92800abd010002\nx11: 0000000000000001 x10: ffff0010e3f69420 x9 : ffff800008a6f294\nx8 : 0000000000000000 x7 : 0000000000000006 x6 : 0000000000000000\nx5 : 0000000000000001 x4 : ffff001924354280 x3 : ffff8000265db7e0\nx2 : 0000000000000000 x1 : ffff0010e3f694f8 x0 : ffff00047b5e4500\nCall trace:\n fib_rules_lookup+0x44/0x238\n __fib_lookup+0x64/0xbc\n ip_route_output_key_hash_rcu+0x2c4/0x398\n ip_route_output_key_hash+0x60/0x8c\n tcp_v4_connect+0x290/0x488\n __inet_stream_connect+0x108/0x3d0\n inet_stream_connect+0x50/0x78\n kernel_connect+0x6c/0xac\n generic_ip_conne\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53095",
"url": "https://www.suse.com/security/cve/CVE-2024-53095"
},
{
"category": "external",
"summary": "SUSE Bug 1233642 for CVE-2024-53095",
"url": "https://bugzilla.suse.com/1233642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53095"
},
{
"cve": "CVE-2024-53099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53099"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check validity of link-\u003etype in bpf_link_show_fdinfo()\n\nIf a newly-added link type doesn\u0027t invoke BPF_LINK_TYPE(), accessing\nbpf_link_type_strs[link-\u003etype] may result in an out-of-bounds access.\n\nTo spot such missed invocations early in the future, checking the\nvalidity of link-\u003etype in bpf_link_show_fdinfo() and emitting a warning\nwhen such invocations are missed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53099",
"url": "https://www.suse.com/security/cve/CVE-2024-53099"
},
{
"category": "external",
"summary": "SUSE Bug 1233772 for CVE-2024-53099",
"url": "https://bugzilla.suse.com/1233772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53099"
},
{
"cve": "CVE-2024-53103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53103"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer\n\nWhen hvs is released, there is a possibility that vsk-\u003etrans may not\nbe initialized to NULL, which could lead to a dangling pointer.\nThis issue is resolved by initializing vsk-\u003etrans to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53103",
"url": "https://www.suse.com/security/cve/CVE-2024-53103"
},
{
"category": "external",
"summary": "SUSE Bug 1234024 for CVE-2024-53103",
"url": "https://bugzilla.suse.com/1234024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53103"
},
{
"cve": "CVE-2024-53105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53105"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: page_alloc: move mlocked flag clearance into free_pages_prepare()\n\nSyzbot reported a bad page state problem caused by a page being freed\nusing free_page() still having a mlocked flag at free_pages_prepare()\nstage:\n\n BUG: Bad page state in process syz.5.504 pfn:61f45\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61f45\n flags: 0xfff00000080204(referenced|workingset|mlocked|node=0|zone=1|lastcpupid=0x7ff)\n raw: 00fff00000080204 0000000000000000 dead000000000122 0000000000000000\n raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\n page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set\n page_owner tracks the page as allocated\n page last allocated via order 0, migratetype Unmovable, gfp_mask 0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), pid 8443, tgid 8442 (syz.5.504), ts 201884660643, free_ts 201499827394\n set_page_owner include/linux/page_owner.h:32 [inline]\n post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1537\n prep_new_page mm/page_alloc.c:1545 [inline]\n get_page_from_freelist+0x303f/0x3190 mm/page_alloc.c:3457\n __alloc_pages_noprof+0x292/0x710 mm/page_alloc.c:4733\n alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265\n kvm_coalesced_mmio_init+0x1f/0xf0 virt/kvm/coalesced_mmio.c:99\n kvm_create_vm virt/kvm/kvm_main.c:1235 [inline]\n kvm_dev_ioctl_create_vm virt/kvm/kvm_main.c:5488 [inline]\n kvm_dev_ioctl+0x12dc/0x2240 virt/kvm/kvm_main.c:5530\n __do_compat_sys_ioctl fs/ioctl.c:1007 [inline]\n __se_compat_sys_ioctl+0x510/0xc90 fs/ioctl.c:950\n do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]\n __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386\n do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411\n entry_SYSENTER_compat_after_hwframe+0x84/0x8e\n page last free pid 8399 tgid 8399 stack trace:\n reset_page_owner include/linux/page_owner.h:25 [inline]\n free_pages_prepare mm/page_alloc.c:1108 [inline]\n free_unref_folios+0xf12/0x18d0 mm/page_alloc.c:2686\n folios_put_refs+0x76c/0x860 mm/swap.c:1007\n free_pages_and_swap_cache+0x5c8/0x690 mm/swap_state.c:335\n __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline]\n tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]\n tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]\n tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373\n tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465\n exit_mmap+0x496/0xc40 mm/mmap.c:1926\n __mmput+0x115/0x390 kernel/fork.c:1348\n exit_mm+0x220/0x310 kernel/exit.c:571\n do_exit+0x9b2/0x28e0 kernel/exit.c:926\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [inline]\n __se_sys_exit_group kernel/exit.c:1097 [inline]\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1097\n x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n Modules linked in:\n CPU: 0 UID: 0 PID: 8442 Comm: syz.5.504 Not tainted 6.12.0-rc6-syzkaller #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n bad_page+0x176/0x1d0 mm/page_alloc.c:501\n free_page_is_bad mm/page_alloc.c:918 [inline]\n free_pages_prepare mm/page_alloc.c:1100 [inline]\n free_unref_page+0xed0/0xf20 mm/page_alloc.c:2638\n kvm_destroy_vm virt/kvm/kvm_main.c:1327 [inline]\n kvm_put_kvm+0xc75/0x1350 virt/kvm/kvm_main.c:1386\n kvm_vcpu_release+0x54/0x60 virt/kvm/kvm_main.c:4143\n __fput+0x23f/0x880 fs/file_table.c:431\n task_work_run+0x24f/0x310 kernel/task_work.c:239\n exit_task_work include/linux/task_work.h:43 [inline]\n do_exit+0xa2f/0x28e0 kernel/exit.c:939\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53105",
"url": "https://www.suse.com/security/cve/CVE-2024-53105"
},
{
"category": "external",
"summary": "SUSE Bug 1234069 for CVE-2024-53105",
"url": "https://bugzilla.suse.com/1234069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53105"
},
{
"cve": "CVE-2024-53111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53111"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mremap: fix address wraparound in move_page_tables()\n\nOn 32-bit platforms, it is possible for the expression `len + old_addr \u003c\nold_end` to be false-positive if `len + old_addr` wraps around. \n`old_addr` is the cursor in the old range up to which page table entries\nhave been moved; so if the operation succeeded, `old_addr` is the *end* of\nthe old region, and adding `len` to it can wrap.\n\nThe overflow causes mremap() to mistakenly believe that PTEs have been\ncopied; the consequence is that mremap() bails out, but doesn\u0027t move the\nPTEs back before the new VMA is unmapped, causing anonymous pages in the\nregion to be lost. So basically if userspace tries to mremap() a\nprivate-anon region and hits this bug, mremap() will return an error and\nthe private-anon region\u0027s contents appear to have been zeroed.\n\nThe idea of this check is that `old_end - len` is the original start\naddress, and writing the check that way also makes it easier to read; so\nfix the check by rearranging the comparison accordingly.\n\n(An alternate fix would be to refactor this function by introducing an\n\"orig_old_start\" variable or such.)\n\n\nTested in a VM with a 32-bit X86 kernel; without the patch:\n\n```\nuser@horn:~/big_mremap$ cat test.c\n#define _GNU_SOURCE\n#include \u003cstdlib.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003cerr.h\u003e\n#include \u003csys/mman.h\u003e\n\n#define ADDR1 ((void*)0x60000000)\n#define ADDR2 ((void*)0x10000000)\n#define SIZE 0x50000000uL\n\nint main(void) {\n unsigned char *p1 = mmap(ADDR1, SIZE, PROT_READ|PROT_WRITE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p1 == MAP_FAILED)\n err(1, \"mmap 1\");\n unsigned char *p2 = mmap(ADDR2, SIZE, PROT_NONE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p2 == MAP_FAILED)\n err(1, \"mmap 2\");\n *p1 = 0x41;\n printf(\"first char is 0x%02hhx\\n\", *p1);\n unsigned char *p3 = mremap(p1, SIZE, SIZE,\n MREMAP_MAYMOVE|MREMAP_FIXED, p2);\n if (p3 == MAP_FAILED) {\n printf(\"mremap() failed; first char is 0x%02hhx\\n\", *p1);\n } else {\n printf(\"mremap() succeeded; first char is 0x%02hhx\\n\", *p3);\n }\n}\nuser@horn:~/big_mremap$ gcc -static -o test test.c\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() failed; first char is 0x00\n```\n\nWith the patch:\n\n```\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() succeeded; first char is 0x41\n```",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53111",
"url": "https://www.suse.com/security/cve/CVE-2024-53111"
},
{
"category": "external",
"summary": "SUSE Bug 1234086 for CVE-2024-53111",
"url": "https://bugzilla.suse.com/1234086"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53111"
},
{
"cve": "CVE-2024-53113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53113"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix NULL pointer dereference in alloc_pages_bulk_noprof\n\nWe triggered a NULL pointer dereference for ac.preferred_zoneref-\u003ezone in\nalloc_pages_bulk_noprof() when the task is migrated between cpusets.\n\nWhen cpuset is enabled, in prepare_alloc_pages(), ac-\u003enodemask may be\n\u0026current-\u003emems_allowed. when first_zones_zonelist() is called to find\npreferred_zoneref, the ac-\u003enodemask may be modified concurrently if the\ntask is migrated between different cpusets. Assuming we have 2 NUMA Node,\nwhen traversing Node1 in ac-\u003ezonelist, the nodemask is 2, and when\ntraversing Node2 in ac-\u003ezonelist, the nodemask is 1. As a result, the\nac-\u003epreferred_zoneref points to NULL zone.\n\nIn alloc_pages_bulk_noprof(), for_each_zone_zonelist_nodemask() finds a\nallowable zone and calls zonelist_node_idx(ac.preferred_zoneref), leading\nto NULL pointer dereference.\n\n__alloc_pages_noprof() fixes this issue by checking NULL pointer in commit\nea57485af8f4 (\"mm, page_alloc: fix check for NULL preferred_zone\") and\ncommit df76cee6bbeb (\"mm, page_alloc: remove redundant checks from alloc\nfastpath\").\n\nTo fix it, check NULL pointer for preferred_zoneref-\u003ezone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53113",
"url": "https://www.suse.com/security/cve/CVE-2024-53113"
},
{
"category": "external",
"summary": "SUSE Bug 1234077 for CVE-2024-53113",
"url": "https://bugzilla.suse.com/1234077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53113"
},
{
"cve": "CVE-2024-53117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Improve MSG_ZEROCOPY error handling\n\nAdd a missing kfree_skb() to prevent memory leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53117",
"url": "https://www.suse.com/security/cve/CVE-2024-53117"
},
{
"category": "external",
"summary": "SUSE Bug 1234079 for CVE-2024-53117",
"url": "https://bugzilla.suse.com/1234079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53117"
},
{
"cve": "CVE-2024-53118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53118"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Fix sk_error_queue memory leak\n\nKernel queues MSG_ZEROCOPY completion notifications on the error queue.\nWhere they remain, until explicitly recv()ed. To prevent memory leaks,\nclean up the queue when the socket is destroyed.\n\nunreferenced object 0xffff8881028beb00 (size 224):\n comm \"vsock_test\", pid 1218, jiffies 4294694897\n hex dump (first 32 bytes):\n 90 b0 21 17 81 88 ff ff 90 b0 21 17 81 88 ff ff ..!.......!.....\n 00 00 00 00 00 00 00 00 00 b0 21 17 81 88 ff ff ..........!.....\n backtrace (crc 6c7031ca):\n [\u003cffffffff81418ef7\u003e] kmem_cache_alloc_node_noprof+0x2f7/0x370\n [\u003cffffffff81d35882\u003e] __alloc_skb+0x132/0x180\n [\u003cffffffff81d2d32b\u003e] sock_omalloc+0x4b/0x80\n [\u003cffffffff81d3a8ae\u003e] msg_zerocopy_realloc+0x9e/0x240\n [\u003cffffffff81fe5cb2\u003e] virtio_transport_send_pkt_info+0x412/0x4c0\n [\u003cffffffff81fe6183\u003e] virtio_transport_stream_enqueue+0x43/0x50\n [\u003cffffffff81fe0813\u003e] vsock_connectible_sendmsg+0x373/0x450\n [\u003cffffffff81d233d5\u003e] ____sys_sendmsg+0x365/0x3a0\n [\u003cffffffff81d246f4\u003e] ___sys_sendmsg+0x84/0xd0\n [\u003cffffffff81d26f47\u003e] __sys_sendmsg+0x47/0x80\n [\u003cffffffff820d3df3\u003e] do_syscall_64+0x93/0x180\n [\u003cffffffff8220012b\u003e] entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53118",
"url": "https://www.suse.com/security/cve/CVE-2024-53118"
},
{
"category": "external",
"summary": "SUSE Bug 1234071 for CVE-2024-53118",
"url": "https://bugzilla.suse.com/1234071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53118"
},
{
"cve": "CVE-2024-53119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53119"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Fix accept_queue memory leak\n\nAs the final stages of socket destruction may be delayed, it is possible\nthat virtio_transport_recv_listen() will be called after the accept_queue\nhas been flushed, but before the SOCK_DONE flag has been set. As a result,\nsockets enqueued after the flush would remain unremoved, leading to a\nmemory leak.\n\nvsock_release\n __vsock_release\n lock\n virtio_transport_release\n virtio_transport_close\n schedule_delayed_work(close_work)\n sk_shutdown = SHUTDOWN_MASK\n(!) flush accept_queue\n release\n virtio_transport_recv_pkt\n vsock_find_bound_socket\n lock\n if flag(SOCK_DONE) return\n virtio_transport_recv_listen\n child = vsock_create_connected\n (!) vsock_enqueue_accept(child)\n release\nclose_work\n lock\n virtio_transport_do_close\n set_flag(SOCK_DONE)\n virtio_transport_remove_sock\n vsock_remove_sock\n vsock_remove_bound\n release\n\nIntroduce a sk_shutdown check to disallow vsock_enqueue_accept() during\nsocket destruction.\n\nunreferenced object 0xffff888109e3f800 (size 2040):\n comm \"kworker/5:2\", pid 371, jiffies 4294940105\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 28 00 0b 40 00 00 00 00 00 00 00 00 00 00 00 00 (..@............\n backtrace (crc 9e5f4e84):\n [\u003cffffffff81418ff1\u003e] kmem_cache_alloc_noprof+0x2c1/0x360\n [\u003cffffffff81d27aa0\u003e] sk_prot_alloc+0x30/0x120\n [\u003cffffffff81d2b54c\u003e] sk_alloc+0x2c/0x4b0\n [\u003cffffffff81fe049a\u003e] __vsock_create.constprop.0+0x2a/0x310\n [\u003cffffffff81fe6d6c\u003e] virtio_transport_recv_pkt+0x4dc/0x9a0\n [\u003cffffffff81fe745d\u003e] vsock_loopback_work+0xfd/0x140\n [\u003cffffffff810fc6ac\u003e] process_one_work+0x20c/0x570\n [\u003cffffffff810fce3f\u003e] worker_thread+0x1bf/0x3a0\n [\u003cffffffff811070dd\u003e] kthread+0xdd/0x110\n [\u003cffffffff81044fdd\u003e] ret_from_fork+0x2d/0x50\n [\u003cffffffff8100785a\u003e] ret_from_fork_asm+0x1a/0x30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53119",
"url": "https://www.suse.com/security/cve/CVE-2024-53119"
},
{
"category": "external",
"summary": "SUSE Bug 1234073 for CVE-2024-53119",
"url": "https://bugzilla.suse.com/1234073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53119"
},
{
"cve": "CVE-2024-53120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53120"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: CT: Fix null-ptr-deref in add rule err flow\n\nIn error flow of mlx5_tc_ct_entry_add_rule(), in case ct_rule_add()\ncallback returns error, zone_rule-\u003eattr is used uninitiated. Fix it to\nuse attr which has the needed pointer value.\n\nKernel log:\n BUG: kernel NULL pointer dereference, address: 0000000000000110\n RIP: 0010:mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n\u2026\n Call Trace:\n \u003cTASK\u003e\n ? __die+0x20/0x70\n ? page_fault_oops+0x150/0x3e0\n ? exc_page_fault+0x74/0x140\n ? asm_exc_page_fault+0x22/0x30\n ? mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n ? mlx5_tc_ct_entry_add_rule+0x1d5/0x2f0 [mlx5_core]\n mlx5_tc_ct_block_flow_offload+0xc6a/0xf90 [mlx5_core]\n ? nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n flow_offload_work_handler+0x142/0x320 [nf_flow_table]\n ? finish_task_switch.isra.0+0x15b/0x2b0\n process_one_work+0x16c/0x320\n worker_thread+0x28c/0x3a0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xb8/0xf0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2d/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53120",
"url": "https://www.suse.com/security/cve/CVE-2024-53120"
},
{
"category": "external",
"summary": "SUSE Bug 1234075 for CVE-2024-53120",
"url": "https://bugzilla.suse.com/1234075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53120"
},
{
"cve": "CVE-2024-53122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53122"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: cope racing subflow creation in mptcp_rcv_space_adjust\n\nAdditional active subflows - i.e. created by the in kernel path\nmanager - are included into the subflow list before starting the\n3whs.\n\nA racing recvmsg() spooling data received on an already established\nsubflow would unconditionally call tcp_cleanup_rbuf() on all the\ncurrent subflows, potentially hitting a divide by zero error on\nthe newly created ones.\n\nExplicitly check that the subflow is in a suitable state before\ninvoking tcp_cleanup_rbuf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53122",
"url": "https://www.suse.com/security/cve/CVE-2024-53122"
},
{
"category": "external",
"summary": "SUSE Bug 1234076 for CVE-2024-53122",
"url": "https://bugzilla.suse.com/1234076"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53122"
},
{
"cve": "CVE-2024-53125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53125"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: sync_linked_regs() must preserve subreg_def\n\nRange propagation must not affect subreg_def marks, otherwise the\nfollowing example is rewritten by verifier incorrectly when\nBPF_F_TEST_RND_HI32 flag is set:\n\n 0: call bpf_ktime_get_ns call bpf_ktime_get_ns\n 1: r0 \u0026= 0x7fffffff after verifier r0 \u0026= 0x7fffffff\n 2: w1 = w0 rewrites w1 = w0\n 3: if w0 \u003c 10 goto +0 --------------\u003e r11 = 0x2f5674a6 (r)\n 4: r1 \u003e\u003e= 32 r11 \u003c\u003c= 32 (r)\n 5: r0 = r1 r1 |= r11 (r)\n 6: exit; if w0 \u003c 0xa goto pc+0\n r1 \u003e\u003e= 32\n r0 = r1\n exit\n\n(or zero extension of w1 at (2) is missing for architectures that\n require zero extension for upper register half).\n\nThe following happens w/o this patch:\n- r0 is marked as not a subreg at (0);\n- w1 is marked as subreg at (2);\n- w1 subreg_def is overridden at (3) by copy_register_state();\n- w1 is read at (5) but mark_insn_zext() does not mark (2)\n for zero extension, because w1 subreg_def is not set;\n- because of BPF_F_TEST_RND_HI32 flag verifier inserts random\n value for hi32 bits of (2) (marked (r));\n- this random value is read at (5).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53125",
"url": "https://www.suse.com/security/cve/CVE-2024-53125"
},
{
"category": "external",
"summary": "SUSE Bug 1234156 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "external",
"summary": "SUSE Bug 1245804 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1245804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53125"
},
{
"cve": "CVE-2024-53126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53126"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: solidrun: Fix UB bug with devres\n\nIn psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to\npcim_iomap_regions() is placed on the stack. Neither\npcim_iomap_regions() nor the functions it calls copy that string.\n\nShould the string later ever be used, this, consequently, causes\nundefined behavior since the stack frame will by then have disappeared.\n\nFix the bug by allocating the strings on the heap through\ndevm_kasprintf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53126",
"url": "https://www.suse.com/security/cve/CVE-2024-53126"
},
{
"category": "external",
"summary": "SUSE Bug 1234158 for CVE-2024-53126",
"url": "https://bugzilla.suse.com/1234158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53126"
},
{
"cve": "CVE-2024-53127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53127"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"\n\nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages\nbigger than 4K\") increased the max_req_size, even for 4K pages, causing\nvarious issues:\n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566\n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100\n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110\n\nAt this stage no fix have been found, so it\u0027s probably better to just\nrevert the change.\n\nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53127",
"url": "https://www.suse.com/security/cve/CVE-2024-53127"
},
{
"category": "external",
"summary": "SUSE Bug 1234153 for CVE-2024-53127",
"url": "https://bugzilla.suse.com/1234153"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53127"
},
{
"cve": "CVE-2024-53129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53129"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/rockchip: vop: Fix a dereferenced before check warning\n\nThe \u0027state\u0027 can\u0027t be NULL, we should check crtc_state.\n\nFix warning:\ndrivers/gpu/drm/rockchip/rockchip_drm_vop.c:1096\nvop_plane_atomic_async_check() warn: variable dereferenced before check\n\u0027state\u0027 (see line 1077)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53129",
"url": "https://www.suse.com/security/cve/CVE-2024-53129"
},
{
"category": "external",
"summary": "SUSE Bug 1234155 for CVE-2024-53129",
"url": "https://bugzilla.suse.com/1234155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53129"
},
{
"cve": "CVE-2024-53130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53130"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint\n\nWhen using the \"block:block_dirty_buffer\" tracepoint, mark_buffer_dirty()\nmay cause a NULL pointer dereference, or a general protection fault when\nKASAN is enabled.\n\nThis happens because, since the tracepoint was added in\nmark_buffer_dirty(), it references the dev_t member bh-\u003eb_bdev-\u003ebd_dev\nregardless of whether the buffer head has a pointer to a block_device\nstructure.\n\nIn the current implementation, nilfs_grab_buffer(), which grabs a buffer\nto read (or create) a block of metadata, including b-tree node blocks,\ndoes not set the block device, but instead does so only if the buffer is\nnot in the \"uptodate\" state for each of its caller block reading\nfunctions. However, if the uptodate flag is set on a folio/page, and the\nbuffer heads are detached from it by try_to_free_buffers(), and new buffer\nheads are then attached by create_empty_buffers(), the uptodate flag may\nbe restored to each buffer without the block device being set to\nbh-\u003eb_bdev, and mark_buffer_dirty() may be called later in that state,\nresulting in the bug mentioned above.\n\nFix this issue by making nilfs_grab_buffer() always set the block device\nof the super block structure to the buffer head, regardless of the state\nof the buffer\u0027s uptodate flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53130",
"url": "https://www.suse.com/security/cve/CVE-2024-53130"
},
{
"category": "external",
"summary": "SUSE Bug 1234219 for CVE-2024-53130",
"url": "https://bugzilla.suse.com/1234219"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53130"
},
{
"cve": "CVE-2024-53131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_touch_buffer tracepoint\n\nPatch series \"nilfs2: fix null-ptr-deref bugs on block tracepoints\".\n\nThis series fixes null pointer dereference bugs that occur when using\nnilfs2 and two block-related tracepoints.\n\n\nThis patch (of 2):\n\nIt has been reported that when using \"block:block_touch_buffer\"\ntracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a\nNULL pointer dereference, or a general protection fault when KASAN is\nenabled.\n\nThis happens because since the tracepoint was added in touch_buffer(), it\nreferences the dev_t member bh-\u003eb_bdev-\u003ebd_dev regardless of whether the\nbuffer head has a pointer to a block_device structure. In the current\nimplementation, the block_device structure is set after the function\nreturns to the caller.\n\nHere, touch_buffer() is used to mark the folio/page that owns the buffer\nhead as accessed, but the common search helper for folio/page used by the\ncaller function was optimized to mark the folio/page as accessed when it\nwas reimplemented a long time ago, eliminating the need to call\ntouch_buffer() here in the first place.\n\nSo this solves the issue by eliminating the touch_buffer() call itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53131",
"url": "https://www.suse.com/security/cve/CVE-2024-53131"
},
{
"category": "external",
"summary": "SUSE Bug 1234220 for CVE-2024-53131",
"url": "https://bugzilla.suse.com/1234220"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53131"
},
{
"cve": "CVE-2024-53133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53133"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Handle dml allocation failure to avoid crash\n\n[Why]\nIn the case where a dml allocation fails for any reason, the\ncurrent state\u0027s dml contexts would no longer be valid. Then\nsubsequent calls dc_state_copy_internal would shallow copy\ninvalid memory and if the new state was released, a double\nfree would occur.\n\n[How]\nReset dml pointers in new_state to NULL and avoid invalid\npointer\n\n(cherry picked from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53133",
"url": "https://www.suse.com/security/cve/CVE-2024-53133"
},
{
"category": "external",
"summary": "SUSE Bug 1234221 for CVE-2024-53133",
"url": "https://bugzilla.suse.com/1234221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53133"
},
{
"cve": "CVE-2024-53134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53134"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx93-blk-ctrl: correct remove path\n\nThe check condition should be \u0027i \u003c bc-\u003eonecell_data.num_domains\u0027, not\n\u0027bc-\u003eonecell_data.num_domains\u0027 which will make the look never finish\nand cause kernel panic.\n\nAlso disable runtime to address\n\"imx93-blk-ctrl 4ac10000.system-controller: Unbalanced pm_runtime_enable!\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53134",
"url": "https://www.suse.com/security/cve/CVE-2024-53134"
},
{
"category": "external",
"summary": "SUSE Bug 1234159 for CVE-2024-53134",
"url": "https://bugzilla.suse.com/1234159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53134"
},
{
"cve": "CVE-2024-53136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: revert \"mm: shmem: fix data-race in shmem_getattr()\"\n\nRevert d949d1d14fa2 (\"mm: shmem: fix data-race in shmem_getattr()\") as\nsuggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over\nNFS.\n\nAs Hugh commented, \"added just to silence a syzbot sanitizer splat: added\nwhere there has never been any practical problem\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53136",
"url": "https://www.suse.com/security/cve/CVE-2024-53136"
},
{
"category": "external",
"summary": "SUSE Bug 1234161 for CVE-2024-53136",
"url": "https://bugzilla.suse.com/1234161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53136"
},
{
"cve": "CVE-2024-53141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: add missing range check in bitmap_ip_uadt\n\nWhen tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,\nthe values of ip and ip_to are slightly swapped. Therefore, the range check\nfor ip should be done later, but this part is missing and it seems that the\nvulnerability occurs.\n\nSo we should add missing range checks and remove unnecessary range checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53141",
"url": "https://www.suse.com/security/cve/CVE-2024-53141"
},
{
"category": "external",
"summary": "SUSE Bug 1234381 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "external",
"summary": "SUSE Bug 1245778 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1245778"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53141"
},
{
"cve": "CVE-2024-53142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53142"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninitramfs: avoid filename buffer overrun\n\nThe initramfs filename field is defined in\nDocumentation/driver-api/early-userspace/buffer-format.rst as:\n\n 37 cpio_file := ALGN(4) + cpio_header + filename + \"\\0\" + ALGN(4) + data\n...\n 55 ============= ================== =========================\n 56 Field name Field size Meaning\n 57 ============= ================== =========================\n...\n 70 c_namesize 8 bytes Length of filename, including final \\0\n\nWhen extracting an initramfs cpio archive, the kernel\u0027s do_name() path\nhandler assumes a zero-terminated path at @collected, passing it\ndirectly to filp_open() / init_mkdir() / init_mknod().\n\nIf a specially crafted cpio entry carries a non-zero-terminated filename\nand is followed by uninitialized memory, then a file may be created with\ntrailing characters that represent the uninitialized memory. The ability\nto create an initramfs entry would imply already having full control of\nthe system, so the buffer overrun shouldn\u0027t be considered a security\nvulnerability.\n\nAppend the output of the following bash script to an existing initramfs\nand observe any created /initramfs_test_fname_overrunAA* path. E.g.\n ./reproducer.sh | gzip \u003e\u003e /myinitramfs\n\nIt\u0027s easiest to observe non-zero uninitialized memory when the output is\ngzipped, as it\u0027ll overflow the heap allocated @out_buf in __gunzip(),\nrather than the initrd_start+initrd_size block.\n\n---- reproducer.sh ----\nnilchar=\"A\"\t# change to \"\\0\" to properly zero terminate / pad\nmagic=\"070701\"\nino=1\nmode=$(( 0100777 ))\nuid=0\ngid=0\nnlink=1\nmtime=1\nfilesize=0\ndevmajor=0\ndevminor=1\nrdevmajor=0\nrdevminor=0\ncsum=0\nfname=\"initramfs_test_fname_overrun\"\nnamelen=$(( ${#fname} + 1 ))\t# plus one to account for terminator\n\nprintf \"%s%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%s\" \\\n\t$magic $ino $mode $uid $gid $nlink $mtime $filesize \\\n\t$devmajor $devminor $rdevmajor $rdevminor $namelen $csum $fname\n\ntermpadlen=$(( 1 + ((4 - ((110 + $namelen) \u0026 3)) % 4) ))\nprintf \"%.s${nilchar}\" $(seq 1 $termpadlen)\n---- reproducer.sh ----\n\nSymlink filename fields handled in do_symlink() won\u0027t overrun past the\ndata segment, due to the explicit zero-termination of the symlink\ntarget.\n\nFix filename buffer overrun by aborting the initramfs FSM if any cpio\nentry doesn\u0027t carry a zero-terminator at the expected (name_len - 1)\noffset.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53142",
"url": "https://www.suse.com/security/cve/CVE-2024-53142"
},
{
"category": "external",
"summary": "SUSE Bug 1232436 for CVE-2024-53142",
"url": "https://bugzilla.suse.com/1232436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53142"
},
{
"cve": "CVE-2024-53144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53144"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\n\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\n\nCVE: CVE-2024-8805",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53144",
"url": "https://www.suse.com/security/cve/CVE-2024-53144"
},
{
"category": "external",
"summary": "SUSE Bug 1234690 for CVE-2024-53144",
"url": "https://bugzilla.suse.com/1234690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53144"
},
{
"cve": "CVE-2024-53146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53146"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent a potential integer overflow\n\nIf the tag length is \u003e= U32_MAX - 3 then the \"length + 4\" addition\ncan result in an integer overflow. Address this by splitting the\ndecoding into several steps so that decode_cb_compound4res() does\nnot have to perform arithmetic on the unsafe length value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53146",
"url": "https://www.suse.com/security/cve/CVE-2024-53146"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234854 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53146"
},
{
"cve": "CVE-2024-53148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53148"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Flush partial mappings in error case\n\nIf some remap_pfn_range() calls succeeded before one failed, we still have\nbuffer pages mapped into the userspace page tables when we drop the buffer\nreference with comedi_buf_map_put(bm). The userspace mappings are only\ncleaned up later in the mmap error path.\n\nFix it by explicitly flushing all mappings in our VMA on the error path.\n\nSee commit 79a61cc3fc04 (\"mm: avoid leaving partial pfn mappings around in\nerror case\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53148",
"url": "https://www.suse.com/security/cve/CVE-2024-53148"
},
{
"category": "external",
"summary": "SUSE Bug 1234832 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "external",
"summary": "SUSE Bug 1234833 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53148"
},
{
"cve": "CVE-2024-53150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix out of bounds reads when finding clock sources\n\nThe current USB-audio driver code doesn\u0027t check bLength of each\ndescriptor at traversing for clock descriptors. That is, when a\ndevice provides a bogus descriptor with a shorter bLength, the driver\nmight hit out-of-bounds reads.\n\nFor addressing it, this patch adds sanity checks to the validator\nfunctions for the clock descriptor traversal. When the descriptor\nlength is shorter than expected, it\u0027s skipped in the loop.\n\nFor the clock source and clock multiplier descriptors, we can just\ncheck bLength against the sizeof() of each descriptor type.\nOTOH, the clock selector descriptor of UAC2 and UAC3 has an array\nof bNrInPins elements and two more fields at its tail, hence those\nhave to be checked in addition to the sizeof() check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53150",
"url": "https://www.suse.com/security/cve/CVE-2024-53150"
},
{
"category": "external",
"summary": "SUSE Bug 1234834 for CVE-2024-53150",
"url": "https://bugzilla.suse.com/1234834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53150"
},
{
"cve": "CVE-2024-53151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Address an integer overflow\n\nDan Carpenter reports:\n\u003e Commit 78147ca8b4a9 (\"svcrdma: Add a \"parsed chunk list\" data\n\u003e structure\") from Jun 22, 2020 (linux-next), leads to the following\n\u003e Smatch static checker warning:\n\u003e\n\u003e\tnet/sunrpc/xprtrdma/svc_rdma_recvfrom.c:498 xdr_check_write_chunk()\n\u003e\twarn: potential user controlled sizeof overflow \u0027segcount * 4 * 4\u0027\n\u003e\n\u003e net/sunrpc/xprtrdma/svc_rdma_recvfrom.c\n\u003e 488 static bool xdr_check_write_chunk(struct svc_rdma_recv_ctxt *rctxt)\n\u003e 489 {\n\u003e 490 u32 segcount;\n\u003e 491 __be32 *p;\n\u003e 492\n\u003e 493 if (xdr_stream_decode_u32(\u0026rctxt-\u003erc_stream, \u0026segcount))\n\u003e ^^^^^^^^\n\u003e\n\u003e 494 return false;\n\u003e 495\n\u003e 496 /* A bogus segcount causes this buffer overflow check to fail. */\n\u003e 497 p = xdr_inline_decode(\u0026rctxt-\u003erc_stream,\n\u003e --\u003e 498 segcount * rpcrdma_segment_maxsz * sizeof(*p));\n\u003e\n\u003e\n\u003e segcount is an untrusted u32. On 32bit systems anything \u003e= SIZE_MAX / 16 will\n\u003e have an integer overflow and some those values will be accepted by\n\u003e xdr_inline_decode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53151",
"url": "https://www.suse.com/security/cve/CVE-2024-53151"
},
{
"category": "external",
"summary": "SUSE Bug 1234829 for CVE-2024-53151",
"url": "https://bugzilla.suse.com/1234829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53151"
},
{
"cve": "CVE-2024-53154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: clk-apple-nco: Add NULL check in applnco_probe\n\nAdd NULL check in applnco_probe, to handle kernel NULL pointer\ndereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53154",
"url": "https://www.suse.com/security/cve/CVE-2024-53154"
},
{
"category": "external",
"summary": "SUSE Bug 1234826 for CVE-2024-53154",
"url": "https://bugzilla.suse.com/1234826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53154"
},
{
"cve": "CVE-2024-53155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53155"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix uninitialized value in ocfs2_file_read_iter()\n\nSyzbot has reported the following KMSAN splat:\n\nBUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80\n ocfs2_file_read_iter+0x9a4/0xf80\n __io_read+0x8d4/0x20f0\n io_read+0x3e/0xf0\n io_issue_sqe+0x42b/0x22c0\n io_wq_submit_work+0xaf9/0xdc0\n io_worker_handle_work+0xd13/0x2110\n io_wq_worker+0x447/0x1410\n ret_from_fork+0x6f/0x90\n ret_from_fork_asm+0x1a/0x30\n\nUninit was created at:\n __alloc_pages_noprof+0x9a7/0xe00\n alloc_pages_mpol_noprof+0x299/0x990\n alloc_pages_noprof+0x1bf/0x1e0\n allocate_slab+0x33a/0x1250\n ___slab_alloc+0x12ef/0x35e0\n kmem_cache_alloc_bulk_noprof+0x486/0x1330\n __io_alloc_req_refill+0x84/0x560\n io_submit_sqes+0x172f/0x2f30\n __se_sys_io_uring_enter+0x406/0x41c0\n __x64_sys_io_uring_enter+0x11f/0x1a0\n x64_sys_call+0x2b54/0x3ba0\n do_syscall_64+0xcd/0x1e0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nSince an instance of \u0027struct kiocb\u0027 may be passed from the block layer\nwith \u0027private\u0027 field uninitialized, introduce \u0027ocfs2_iocb_init_rw_locked()\u0027\nand use it from where \u0027ocfs2_dio_end_io()\u0027 might take care, i.e. in\n\u0027ocfs2_file_read_iter()\u0027 and \u0027ocfs2_file_write_iter()\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53155",
"url": "https://www.suse.com/security/cve/CVE-2024-53155"
},
{
"category": "external",
"summary": "SUSE Bug 1234855 for CVE-2024-53155",
"url": "https://bugzilla.suse.com/1234855"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53155"
},
{
"cve": "CVE-2024-53156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53156"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()\n\nI found the following bug in my fuzzer:\n\n UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51\n index 255 is out of range for type \u0027htc_endpoint [22]\u0027\n CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-dirty #14\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n Workqueue: events request_firmware_work_func\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x180/0x1b0\n __ubsan_handle_out_of_bounds+0xd4/0x130\n htc_issue_send.constprop.0+0x20c/0x230\n ? _raw_spin_unlock_irqrestore+0x3c/0x70\n ath9k_wmi_cmd+0x41d/0x610\n ? mark_held_locks+0x9f/0xe0\n ...\n\nSince this bug has been confirmed to be caused by insufficient verification\nof conn_rsp_epid, I think it would be appropriate to add a range check for\nconn_rsp_epid to htc_connect_service() to prevent the bug from occurring.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53156",
"url": "https://www.suse.com/security/cve/CVE-2024-53156"
},
{
"category": "external",
"summary": "SUSE Bug 1234846 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "external",
"summary": "SUSE Bug 1234847 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234847"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53156"
},
{
"cve": "CVE-2024-53157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53157"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scpi: Check the DVFS OPP count returned by the firmware\n\nFix a kernel crash with the below call trace when the SCPI firmware\nreturns OPP count of zero.\n\ndvfs_info.opp_count may be zero on some platforms during the reboot\ntest, and the kernel will crash after dereferencing the pointer to\nkcalloc(info-\u003ecount, sizeof(*opp), GFP_KERNEL).\n\n | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028\n | Mem abort info:\n | ESR = 0x96000004\n | Exception class = DABT (current EL), IL = 32 bits\n | SET = 0, FnV = 0\n | EA = 0, S1PTW = 0\n | Data abort info:\n | ISV = 0, ISS = 0x00000004\n | CM = 0, WnR = 0\n | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c\n | [0000000000000028] pgd=0000000000000000\n | Internal error: Oops: 96000004 [#1] SMP\n | scpi-hwmon: probe of PHYT000D:00 failed with error -110\n | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c)\n | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1\n | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS\n | pstate: 60000005 (nZCv daif -PAN -UAO)\n | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | lr : clk_register+0x438/0x720\n | Call trace:\n | scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | devm_clk_hw_register+0x50/0xa0\n | scpi_clk_ops_init.isra.2+0xa0/0x138 [clk_scpi]\n | scpi_clocks_probe+0x528/0x70c [clk_scpi]\n | platform_drv_probe+0x58/0xa8\n | really_probe+0x260/0x3d0\n | driver_probe_device+0x12c/0x148\n | device_driver_attach+0x74/0x98\n | __driver_attach+0xb4/0xe8\n | bus_for_each_dev+0x88/0xe0\n | driver_attach+0x30/0x40\n | bus_add_driver+0x178/0x2b0\n | driver_register+0x64/0x118\n | __platform_driver_register+0x54/0x60\n | scpi_clocks_driver_init+0x24/0x1000 [clk_scpi]\n | do_one_initcall+0x54/0x220\n | do_init_module+0x54/0x1c8\n | load_module+0x14a4/0x1668\n | __se_sys_finit_module+0xf8/0x110\n | __arm64_sys_finit_module+0x24/0x30\n | el0_svc_common+0x78/0x170\n | el0_svc_handler+0x38/0x78\n | el0_svc+0x8/0x340\n | Code: 937d7c00 a94153f3 a8c27bfd f9400421 (b8606820)\n | ---[ end trace 06feb22469d89fa8 ]---\n | Kernel panic - not syncing: Fatal exception\n | SMP: stopping secondary CPUs\n | Kernel Offset: disabled\n | CPU features: 0x10,a0002008\n | Memory Limit: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53157",
"url": "https://www.suse.com/security/cve/CVE-2024-53157"
},
{
"category": "external",
"summary": "SUSE Bug 1234827 for CVE-2024-53157",
"url": "https://bugzilla.suse.com/1234827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53157"
},
{
"cve": "CVE-2024-53158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()\n\nThis loop is supposed to break if the frequency returned from\nclk_round_rate() is the same as on the previous iteration. However,\nthat check doesn\u0027t make sense on the first iteration through the loop.\nIt leads to reading before the start of these-\u003eclk_perf_tbl[] array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53158",
"url": "https://www.suse.com/security/cve/CVE-2024-53158"
},
{
"category": "external",
"summary": "SUSE Bug 1234811 for CVE-2024-53158",
"url": "https://bugzilla.suse.com/1234811"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53158"
},
{
"cve": "CVE-2024-53159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53159"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53159",
"url": "https://www.suse.com/security/cve/CVE-2024-53159"
},
{
"category": "external",
"summary": "SUSE Bug 1234848 for CVE-2024-53159",
"url": "https://bugzilla.suse.com/1234848"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53159"
},
{
"cve": "CVE-2024-53160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53160"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu\n\nKCSAN reports a data race when access the krcp-\u003emonitor_work.timer.expires\nvariable in the schedule_delayed_monitor_work() function:\n\n\u003csnip\u003e\nBUG: KCSAN: data-race in __mod_timer / kvfree_call_rcu\n\nread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1:\n schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline]\n kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839\n trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441\n bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203\n generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849\n bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143\n __sys_bpf+0x2e5/0x7a0\n __do_sys_bpf kernel/bpf/syscall.c:5741 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5739 [inline]\n __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739\n x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0:\n __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173\n add_timer_global+0x51/0x70 kernel/time/timer.c:1330\n __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523\n queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552\n queue_delayed_work include/linux/workqueue.h:677 [inline]\n schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline]\n kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310\n worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391\n kthread+0x1d1/0x210 kernel/kthread.c:389\n ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events_unbound kfree_rcu_monitor\n\u003csnip\u003e\n\nkfree_rcu_monitor() rearms the work if a \"krcp\" has to be still\noffloaded and this is done without holding krcp-\u003elock, whereas\nthe kvfree_call_rcu() holds it.\n\nFix it by acquiring the \"krcp-\u003elock\" for kfree_rcu_monitor() so\nboth functions do not race anymore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53160",
"url": "https://www.suse.com/security/cve/CVE-2024-53160"
},
{
"category": "external",
"summary": "SUSE Bug 1234810 for CVE-2024-53160",
"url": "https://bugzilla.suse.com/1234810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53160"
},
{
"cve": "CVE-2024-53161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53161"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/bluefield: Fix potential integer overflow\n\nThe 64-bit argument for the \"get DIMM info\" SMC call consists of mem_ctrl_idx\nleft-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as\n32-bits wide the left-shift operation truncates the upper 16 bits of\ninformation during the calculation of the SMC argument.\n\nThe mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any\npotential integer overflow, i.e. loss of data from upper 16 bits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53161",
"url": "https://www.suse.com/security/cve/CVE-2024-53161"
},
{
"category": "external",
"summary": "SUSE Bug 1234856 for CVE-2024-53161",
"url": "https://bugzilla.suse.com/1234856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53161"
},
{
"cve": "CVE-2024-53162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53162"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat/qat_4xxx - fix off by one in uof_get_name()\n\nThe fw_objs[] array has \"num_objs\" elements so the \u003e needs to be \u003e= to\nprevent an out of bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53162",
"url": "https://www.suse.com/security/cve/CVE-2024-53162"
},
{
"category": "external",
"summary": "SUSE Bug 1234843 for CVE-2024-53162",
"url": "https://bugzilla.suse.com/1234843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53162"
},
{
"cve": "CVE-2024-53164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53164"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ordering of qlen adjustment\n\nChanges to sch-\u003eq.qlen around qdisc_tree_reduce_backlog() need to happen\n_before_ a call to said function because otherwise it may fail to notify\nparent qdiscs when the child is about to become empty.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53164",
"url": "https://www.suse.com/security/cve/CVE-2024-53164"
},
{
"category": "external",
"summary": "SUSE Bug 1234863 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "external",
"summary": "SUSE Bug 1246019 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1246019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53164"
},
{
"cve": "CVE-2024-53166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53166"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix bfqq uaf in bfq_limit_depth()\n\nSet new allocated bfqq to bic or remove freed bfqq from bic are both\nprotected by bfqd-\u003elock, however bfq_limit_depth() is deferencing bfqq\nfrom bic without the lock, this can lead to UAF if the io_context is\nshared by multiple tasks.\n\nFor example, test bfq with io_uring can trigger following UAF in v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in bfqq_group+0x15/0x50\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x80\n print_address_description.constprop.0+0x66/0x300\n print_report+0x3e/0x70\n kasan_report+0xb4/0xf0\n bfqq_group+0x15/0x50\n bfqq_request_over_limit+0x130/0x9a0\n bfq_limit_depth+0x1b5/0x480\n __blk_mq_alloc_requests+0x2b5/0xa00\n blk_mq_get_new_requests+0x11d/0x1d0\n blk_mq_submit_bio+0x286/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __block_write_full_folio+0x3d0/0x640\n writepage_cb+0x3b/0xc0\n write_cache_pages+0x254/0x6c0\n write_cache_pages+0x254/0x6c0\n do_writepages+0x192/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n\nAllocated by task 808602:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n __kasan_slab_alloc+0x83/0x90\n kmem_cache_alloc_node+0x1b1/0x6d0\n bfq_get_queue+0x138/0xfa0\n bfq_get_bfqq_handle_split+0xe3/0x2c0\n bfq_init_rq+0x196/0xbb0\n bfq_insert_request.isra.0+0xb5/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_insert_request+0x15d/0x440\n blk_mq_submit_bio+0x8a4/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __blkdev_direct_IO_async+0x2dd/0x330\n blkdev_write_iter+0x39a/0x450\n io_write+0x22a/0x840\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFreed by task 808589:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x27/0x40\n __kasan_slab_free+0x126/0x1b0\n kmem_cache_free+0x10c/0x750\n bfq_put_queue+0x2dd/0x770\n __bfq_insert_request.isra.0+0x155/0x7a0\n bfq_insert_request.isra.0+0x122/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_dispatch_plug_list+0x528/0x7e0\n blk_mq_flush_plug_list.part.0+0xe5/0x590\n __blk_flush_plug+0x3b/0x90\n blk_finish_plug+0x40/0x60\n do_writepages+0x19d/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFix the problem by protecting bic_to_bfqq() with bfqd-\u003elock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53166",
"url": "https://www.suse.com/security/cve/CVE-2024-53166"
},
{
"category": "external",
"summary": "SUSE Bug 1234884 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "external",
"summary": "SUSE Bug 1234885 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53166"
},
{
"cve": "CVE-2024-53168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 \u003cfa\u003e c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \u003c/TASK\u003e\n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp\u0027s timer handler function causes problems.\n\nTo fix this problem, let\u0027s hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53168",
"url": "https://www.suse.com/security/cve/CVE-2024-53168"
},
{
"category": "external",
"summary": "SUSE Bug 1234887 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "external",
"summary": "SUSE Bug 1243650 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1243650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53168"
},
{
"cve": "CVE-2024-53169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53169"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-fabrics: fix kernel crash while shutting down controller\n\nThe nvme keep-alive operation, which executes at a periodic interval,\ncould potentially sneak in while shutting down a fabric controller.\nThis may lead to a race between the fabric controller admin queue\ndestroy code path (invoked while shutting down controller) and hw/hctx\nqueue dispatcher called from the nvme keep-alive async request queuing\noperation. This race could lead to the kernel crash shown below:\n\nCall Trace:\n autoremove_wake_function+0x0/0xbc (unreliable)\n __blk_mq_sched_dispatch_requests+0x114/0x24c\n blk_mq_sched_dispatch_requests+0x44/0x84\n blk_mq_run_hw_queue+0x140/0x220\n nvme_keep_alive_work+0xc8/0x19c [nvme_core]\n process_one_work+0x200/0x4e0\n worker_thread+0x340/0x504\n kthread+0x138/0x140\n start_kernel_thread+0x14/0x18\n\nWhile shutting down fabric controller, if nvme keep-alive request sneaks\nin then it would be flushed off. The nvme_keep_alive_end_io function is\nthen invoked to handle the end of the keep-alive operation which\ndecrements the admin-\u003eq_usage_counter and assuming this is the last/only\nrequest in the admin queue then the admin-\u003eq_usage_counter becomes zero.\nIf that happens then blk-mq destroy queue operation (blk_mq_destroy_\nqueue()) which could be potentially running simultaneously on another\ncpu (as this is the controller shutdown code path) would forward\nprogress and deletes the admin queue. So, now from this point onward\nwe are not supposed to access the admin queue resources. However the\nissue here\u0027s that the nvme keep-alive thread running hw/hctx queue\ndispatch operation hasn\u0027t yet finished its work and so it could still\npotentially access the admin queue resource while the admin queue had\nbeen already deleted and that causes the above crash.\n\nThe above kernel crash is regression caused due to changes implemented\nin commit a54a93d0e359 (\"nvme: move stopping keep-alive into\nnvme_uninit_ctrl()\"). Ideally we should stop keep-alive before destroyin\ng the admin queue and freeing the admin tagset so that it wouldn\u0027t sneak\nin during the shutdown operation. However we removed the keep alive stop\noperation from the beginning of the controller shutdown code path in commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\")\nand added it under nvme_uninit_ctrl() which executes very late in the\nshutdown code path after the admin queue is destroyed and its tagset is\nremoved. So this change created the possibility of keep-alive sneaking in\nand interfering with the shutdown operation and causing observed kernel\ncrash.\n\nTo fix the observed crash, we decided to move nvme_stop_keep_alive() from\nnvme_uninit_ctrl() to nvme_remove_admin_tag_set(). This change would ensure\nthat we don\u0027t forward progress and delete the admin queue until the keep-\nalive operation is finished (if it\u0027s in-flight) or cancelled and that would\nhelp contain the race condition explained above and hence avoid the crash.\n\nMoving nvme_stop_keep_alive() to nvme_remove_admin_tag_set() instead of\nadding nvme_stop_keep_alive() to the beginning of the controller shutdown\ncode path in nvme_stop_ctrl(), as was the case earlier before commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\"),\nwould help save one callsite of nvme_stop_keep_alive().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53169",
"url": "https://www.suse.com/security/cve/CVE-2024-53169"
},
{
"category": "external",
"summary": "SUSE Bug 1234900 for CVE-2024-53169",
"url": "https://bugzilla.suse.com/1234900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53169"
},
{
"cve": "CVE-2024-53170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix uaf for flush rq while iterating tags\n\nblk_mq_clear_flush_rq_mapping() is not called during scsi probe, by\nchecking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared\nin del_gendisk by commit aec89dc5d421 (\"block: keep q_usage_counter in\natomic mode after del_gendisk\"), hence for disk like scsi, following\nblk_mq_destroy_queue() will not clear flush rq from tags-\u003erqs[] as well,\ncause following uaf that is found by our syzkaller for v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in blk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nRead of size 4 at addr ffff88811c969c20 by task kworker/1:2H/224909\n\nCPU: 1 PID: 224909 Comm: kworker/1:2H Not tainted 6.6.0-ga836a5060850 #32\nWorkqueue: kblockd blk_mq_timeout_work\nCall Trace:\n\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106\nprint_address_description.constprop.0+0x66/0x300 mm/kasan/report.c:364\nprint_report+0x3e/0x70 mm/kasan/report.c:475\nkasan_report+0xb8/0xf0 mm/kasan/report.c:588\nblk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nbt_iter block/blk-mq-tag.c:288 [inline]\n__sbitmap_for_each_set include/linux/sbitmap.h:295 [inline]\nsbitmap_for_each_set include/linux/sbitmap.h:316 [inline]\nbt_for_each+0x455/0x790 block/blk-mq-tag.c:325\nblk_mq_queue_tag_busy_iter+0x320/0x740 block/blk-mq-tag.c:534\nblk_mq_timeout_work+0x1a3/0x7b0 block/blk-mq.c:1673\nprocess_one_work+0x7c4/0x1450 kernel/workqueue.c:2631\nprocess_scheduled_works kernel/workqueue.c:2704 [inline]\nworker_thread+0x804/0xe40 kernel/workqueue.c:2785\nkthread+0x346/0x450 kernel/kthread.c:388\nret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:293\n\nAllocated by task 942:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\n____kasan_kmalloc mm/kasan/common.c:374 [inline]\n__kasan_kmalloc mm/kasan/common.c:383 [inline]\n__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:380\nkasan_kmalloc include/linux/kasan.h:198 [inline]\n__do_kmalloc_node mm/slab_common.c:1007 [inline]\n__kmalloc_node+0x69/0x170 mm/slab_common.c:1014\nkmalloc_node include/linux/slab.h:620 [inline]\nkzalloc_node include/linux/slab.h:732 [inline]\nblk_alloc_flush_queue+0x144/0x2f0 block/blk-flush.c:499\nblk_mq_alloc_hctx+0x601/0x940 block/blk-mq.c:3788\nblk_mq_alloc_and_init_hctx+0x27f/0x330 block/blk-mq.c:4261\nblk_mq_realloc_hw_ctxs+0x488/0x5e0 block/blk-mq.c:4294\nblk_mq_init_allocated_queue+0x188/0x860 block/blk-mq.c:4350\nblk_mq_init_queue_data block/blk-mq.c:4166 [inline]\nblk_mq_init_queue+0x8d/0x100 block/blk-mq.c:4176\nscsi_alloc_sdev+0x843/0xd50 drivers/scsi/scsi_scan.c:335\nscsi_probe_and_add_lun+0x77c/0xde0 drivers/scsi/scsi_scan.c:1189\n__scsi_scan_target+0x1fc/0x5a0 drivers/scsi/scsi_scan.c:1727\nscsi_scan_channel drivers/scsi/scsi_scan.c:1815 [inline]\nscsi_scan_channel+0x14b/0x1e0 drivers/scsi/scsi_scan.c:1791\nscsi_scan_host_selected+0x2fe/0x400 drivers/scsi/scsi_scan.c:1844\nscsi_scan+0x3a0/0x3f0 drivers/scsi/scsi_sysfs.c:151\nstore_scan+0x2a/0x60 drivers/scsi/scsi_sysfs.c:191\ndev_attr_store+0x5c/0x90 drivers/base/core.c:2388\nsysfs_kf_write+0x11c/0x170 fs/sysfs/file.c:136\nkernfs_fop_write_iter+0x3fc/0x610 fs/kernfs/file.c:338\ncall_write_iter include/linux/fs.h:2083 [inline]\nnew_sync_write+0x1b4/0x2d0 fs/read_write.c:493\nvfs_write+0x76c/0xb00 fs/read_write.c:586\nksys_write+0x127/0x250 fs/read_write.c:639\ndo_syscall_x64 arch/x86/entry/common.c:51 [inline]\ndo_syscall_64+0x70/0x120 arch/x86/entry/common.c:81\nentry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nFreed by task 244687:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\nkasan_save_free_info+0x2b/0x50 mm/kasan/generic.c:522\n____kasan_slab_free mm/kasan/common.c:236 [inline]\n__kasan_slab_free+0x12a/0x1b0 mm/kasan/common.c:244\nkasan_slab_free include/linux/kasan.h:164 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53170",
"url": "https://www.suse.com/security/cve/CVE-2024-53170"
},
{
"category": "external",
"summary": "SUSE Bug 1234888 for CVE-2024-53170",
"url": "https://bugzilla.suse.com/1234888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53170"
},
{
"cve": "CVE-2024-53171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53171"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit\n\nAfter an insertion in TNC, the tree might split and cause a node to\nchange its `znode-\u003eparent`. A further deletion of other nodes in the\ntree (which also could free the nodes), the aforementioned node\u0027s\n`znode-\u003ecparent` could still point to a freed node. This\n`znode-\u003ecparent` may not be updated when getting nodes to commit in\n`ubifs_tnc_start_commit()`. This could then trigger a use-after-free\nwhen accessing the `znode-\u003ecparent` in `write_index()` in\n`ubifs_tnc_end_commit()`.\n\nThis can be triggered by running\n\n rm -f /etc/test-file.bin\n dd if=/dev/urandom of=/etc/test-file.bin bs=1M count=60 conv=fsync\n\nin a loop, and with `CONFIG_UBIFS_FS_AUTHENTICATION`. KASAN then\nreports:\n\n BUG: KASAN: use-after-free in ubifs_tnc_end_commit+0xa5c/0x1950\n Write of size 32 at addr ffffff800a3af86c by task ubifs_bgt0_20/153\n\n Call trace:\n dump_backtrace+0x0/0x340\n show_stack+0x18/0x24\n dump_stack_lvl+0x9c/0xbc\n print_address_description.constprop.0+0x74/0x2b0\n kasan_report+0x1d8/0x1f0\n kasan_check_range+0xf8/0x1a0\n memcpy+0x84/0xf4\n ubifs_tnc_end_commit+0xa5c/0x1950\n do_commit+0x4e0/0x1340\n ubifs_bg_thread+0x234/0x2e0\n kthread+0x36c/0x410\n ret_from_fork+0x10/0x20\n\n Allocated by task 401:\n kasan_save_stack+0x38/0x70\n __kasan_kmalloc+0x8c/0xd0\n __kmalloc+0x34c/0x5bc\n tnc_insert+0x140/0x16a4\n ubifs_tnc_add+0x370/0x52c\n ubifs_jnl_write_data+0x5d8/0x870\n do_writepage+0x36c/0x510\n ubifs_writepage+0x190/0x4dc\n __writepage+0x58/0x154\n write_cache_pages+0x394/0x830\n do_writepages+0x1f0/0x5b0\n filemap_fdatawrite_wbc+0x170/0x25c\n file_write_and_wait_range+0x140/0x190\n ubifs_fsync+0xe8/0x290\n vfs_fsync_range+0xc0/0x1e4\n do_fsync+0x40/0x90\n __arm64_sys_fsync+0x34/0x50\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\n Freed by task 403:\n kasan_save_stack+0x38/0x70\n kasan_set_track+0x28/0x40\n kasan_set_free_info+0x28/0x4c\n __kasan_slab_free+0xd4/0x13c\n kfree+0xc4/0x3a0\n tnc_delete+0x3f4/0xe40\n ubifs_tnc_remove_range+0x368/0x73c\n ubifs_tnc_remove_ino+0x29c/0x2e0\n ubifs_jnl_delete_inode+0x150/0x260\n ubifs_evict_inode+0x1d4/0x2e4\n evict+0x1c8/0x450\n iput+0x2a0/0x3c4\n do_unlinkat+0x2cc/0x490\n __arm64_sys_unlinkat+0x90/0x100\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\nThe offending `memcpy()` in `ubifs_copy_hash()` has a use-after-free\nwhen a node becomes root in TNC but still has a `cparent` to an already\nfreed node. More specifically, consider the following TNC:\n\n zroot\n /\n /\n zp1\n /\n /\n zn\n\nInserting a new node `zn_new` with a key smaller then `zn` will trigger\na split in `tnc_insert()` if `zp1` is full:\n\n zroot\n / \\\n / \\\n zp1 zp2\n / \\\n / \\\n zn_new zn\n\n`zn-\u003eparent` has now been moved to `zp2`, *but* `zn-\u003ecparent` still\npoints to `zp1`.\n\nNow, consider a removal of all the nodes _except_ `zn`. Just when\n`tnc_delete()` is about to delete `zroot` and `zp2`:\n\n zroot\n \\\n \\\n zp2\n \\\n \\\n zn\n\n`zroot` and `zp2` get freed and the tree collapses:\n\n zn\n\n`zn` now becomes the new `zroot`.\n\n`get_znodes_to_commit()` will now only find `zn`, the new `zroot`, and\n`write_index()` will check its `znode-\u003ecparent` that wrongly points to\nthe already freed `zp1`. `ubifs_copy_hash()` thus gets wrongly called\nwith `znode-\u003ecparent-\u003ezbranch[znode-\u003eiip].hash` that triggers the\nuse-after-free!\n\nFix this by explicitly setting `znode-\u003ecparent` to `NULL` in\n`get_znodes_to_commit()` for the root node. The search for the dirty\nnodes\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53171",
"url": "https://www.suse.com/security/cve/CVE-2024-53171"
},
{
"category": "external",
"summary": "SUSE Bug 1234889 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "external",
"summary": "SUSE Bug 1236234 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1236234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53171"
},
{
"cve": "CVE-2024-53172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53172"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: fastmap: Fix duplicate slab cache names while attaching\n\nSince commit 4c39529663b9 (\"slab: Warn on duplicate cache names when\nDEBUG_VM=y\"), the duplicate slab cache names can be detected and a\nkernel WARNING is thrown out.\nIn UBI fast attaching process, alloc_ai() could be invoked twice\nwith the same slab cache name \u0027ubi_aeb_slab_cache\u0027, which will trigger\nfollowing warning messages:\n kmem_cache of name \u0027ubi_aeb_slab_cache\u0027 already exists\n WARNING: CPU: 0 PID: 7519 at mm/slab_common.c:107\n __kmem_cache_create_args+0x100/0x5f0\n Modules linked in: ubi(+) nandsim [last unloaded: nandsim]\n CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2\n RIP: 0010:__kmem_cache_create_args+0x100/0x5f0\n Call Trace:\n __kmem_cache_create_args+0x100/0x5f0\n alloc_ai+0x295/0x3f0 [ubi]\n ubi_attach+0x3c3/0xcc0 [ubi]\n ubi_attach_mtd_dev+0x17cf/0x3fa0 [ubi]\n ubi_init+0x3fb/0x800 [ubi]\n do_init_module+0x265/0x7d0\n __x64_sys_finit_module+0x7a/0xc0\n\nThe problem could be easily reproduced by loading UBI device by fastmap\nwith CONFIG_DEBUG_VM=y.\nFix it by using different slab names for alloc_ai() callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53172",
"url": "https://www.suse.com/security/cve/CVE-2024-53172"
},
{
"category": "external",
"summary": "SUSE Bug 1234898 for CVE-2024-53172",
"url": "https://bugzilla.suse.com/1234898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53172"
},
{
"cve": "CVE-2024-53173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53173"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.0: Fix a use-after-free problem in the asynchronous open()\n\nYang Erkun reports that when two threads are opening files at the same\ntime, and are forced to abort before a reply is seen, then the call to\nnfs_release_seqid() in nfs4_opendata_free() can result in a\nuse-after-free of the pointer to the defunct rpc task of the other\nthread.\nThe fix is to ensure that if the RPC call is aborted before the call to\nnfs_wait_on_sequence() is complete, then we must call nfs_release_seqid()\nin nfs4_open_release() before the rpc_task is freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53173",
"url": "https://www.suse.com/security/cve/CVE-2024-53173"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234891 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "external",
"summary": "SUSE Bug 1234892 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53173"
},
{
"cve": "CVE-2024-53174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53174"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: make sure cache entry active before cache_show\n\nThe function `c_show` was called with protection from RCU. This only\nensures that `cp` will not be freed. Therefore, the reference count for\n`cp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `cache_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `cp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 7 PID: 822 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n\nCall Trace:\n \u003cTASK\u003e\n c_show+0x2fc/0x380 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53174",
"url": "https://www.suse.com/security/cve/CVE-2024-53174"
},
{
"category": "external",
"summary": "SUSE Bug 1234899 for CVE-2024-53174",
"url": "https://bugzilla.suse.com/1234899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53174"
},
{
"cve": "CVE-2024-53175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53175"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: fix memleak if msg_init_ns failed in create_ipc_ns\n\nPercpu memory allocation may failed during create_ipc_ns however this\nfail is not handled properly since ipc sysctls and mq sysctls is not\nreleased properly. Fix this by release these two resource when failure.\n\nHere is the kmemleak stack when percpu failed:\n\nunreferenced object 0xffff88819de2a600 (size 512):\n comm \"shmem_2nstest\", pid 120711, jiffies 4300542254\n hex dump (first 32 bytes):\n 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H.....\n 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V.....\n backtrace (crc be7cba35):\n [\u003cffffffff81b43f83\u003e] __kmalloc_node_track_caller_noprof+0x333/0x420\n [\u003cffffffff81a52e56\u003e] kmemdup_noprof+0x26/0x50\n [\u003cffffffff821b2f37\u003e] setup_mq_sysctls+0x57/0x1d0\n [\u003cffffffff821b29cc\u003e] copy_ipcs+0x29c/0x3b0\n [\u003cffffffff815d6a10\u003e] create_new_namespaces+0x1d0/0x920\n [\u003cffffffff815d7449\u003e] copy_namespaces+0x2e9/0x3e0\n [\u003cffffffff815458f3\u003e] copy_process+0x29f3/0x7ff0\n [\u003cffffffff8154b080\u003e] kernel_clone+0xc0/0x650\n [\u003cffffffff8154b6b1\u003e] __do_sys_clone+0xa1/0xe0\n [\u003cffffffff843df8ff\u003e] do_syscall_64+0xbf/0x1c0\n [\u003cffffffff846000b0\u003e] entry_SYSCALL_64_after_hwframe+0x4b/0x53",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53175",
"url": "https://www.suse.com/security/cve/CVE-2024-53175"
},
{
"category": "external",
"summary": "SUSE Bug 1234893 for CVE-2024-53175",
"url": "https://bugzilla.suse.com/1234893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53175"
},
{
"cve": "CVE-2024-53179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53179"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix use-after-free of signing key\n\nCustomers have reported use-after-free in @ses-\u003eauth_key.response with\nSMB2.1 + sign mounts which occurs due to following race:\n\ntask A task B\ncifs_mount()\n dfs_mount_share()\n get_session()\n cifs_mount_get_session() cifs_send_recv()\n cifs_get_smb_ses() compound_send_recv()\n cifs_setup_session() smb2_setup_request()\n kfree_sensitive() smb2_calc_signature()\n crypto_shash_setkey() *UAF*\n\nFix this by ensuring that we have a valid @ses-\u003eauth_key.response by\nchecking whether @ses-\u003eses_status is SES_GOOD or SES_EXITING with\n@ses-\u003eses_lock held. After commit 24a9799aa8ef (\"smb: client: fix UAF\nin smb2_reconnect_server()\"), we made sure to call -\u003elogoff() only\nwhen @ses was known to be good (e.g. valid -\u003eauth_key.response), so\nit\u0027s safe to access signing key when @ses-\u003eses_status == SES_EXITING.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53179",
"url": "https://www.suse.com/security/cve/CVE-2024-53179"
},
{
"category": "external",
"summary": "SUSE Bug 1234921 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "external",
"summary": "SUSE Bug 1234927 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53179"
},
{
"cve": "CVE-2024-53180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53180"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Add sanity NULL check for the default mmap fault handler\n\nA driver might allow the mmap access before initializing its\nruntime-\u003edma_area properly. Add a proper NULL check before passing to\nvirt_to_page() for avoiding a panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53180",
"url": "https://www.suse.com/security/cve/CVE-2024-53180"
},
{
"category": "external",
"summary": "SUSE Bug 1234929 for CVE-2024-53180",
"url": "https://bugzilla.suse.com/1234929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53180"
},
{
"cve": "CVE-2024-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix NULL ptr deref in crypto_aead_setkey()\n\nNeither SMB3.0 or SMB3.02 supports encryption negotiate context, so\nwhen SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response,\nthe client uses AES-128-CCM as the default cipher. See MS-SMB2\n3.3.5.4.\n\nCommit b0abcd65ec54 (\"smb: client: fix UAF in async decryption\") added\na @server-\u003ecipher_type check to conditionally call\nsmb3_crypto_aead_allocate(), but that check would always be false as\n@server-\u003ecipher_type is unset for SMB3.02.\n\nFix the following KASAN splat by setting @server-\u003ecipher_type for\nSMB3.02 as well.\n\nmount.cifs //srv/share /mnt -o vers=3.02,seal,...\n\nBUG: KASAN: null-ptr-deref in crypto_aead_setkey+0x2c/0x130\nRead of size 8 at addr 0000000000000020 by task mount.cifs/1095\nCPU: 1 UID: 0 PID: 1095 Comm: mount.cifs Not tainted 6.12.0 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? crypto_aead_setkey+0x2c/0x130\n kasan_report+0xda/0x110\n ? crypto_aead_setkey+0x2c/0x130\n crypto_aead_setkey+0x2c/0x130\n crypt_message+0x258/0xec0 [cifs]\n ? __asan_memset+0x23/0x50\n ? __pfx_crypt_message+0x10/0x10 [cifs]\n ? mark_lock+0xb0/0x6a0\n ? hlock_class+0x32/0xb0\n ? mark_lock+0xb0/0x6a0\n smb3_init_transform_rq+0x352/0x3f0 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n smb_send_rqst+0x144/0x230 [cifs]\n ? __pfx_smb_send_rqst+0x10/0x10 [cifs]\n ? hlock_class+0x32/0xb0\n ? smb2_setup_request+0x225/0x3a0 [cifs]\n ? __pfx_cifs_compound_last_callback+0x10/0x10 [cifs]\n compound_send_recv+0x59b/0x1140 [cifs]\n ? __pfx_compound_send_recv+0x10/0x10 [cifs]\n ? __create_object+0x5e/0x90\n ? hlock_class+0x32/0xb0\n ? do_raw_spin_unlock+0x9a/0xf0\n cifs_send_recv+0x23/0x30 [cifs]\n SMB2_tcon+0x3ec/0xb30 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? __pfx_lock_release+0x10/0x10\n ? do_raw_spin_trylock+0xc6/0x120\n ? lock_acquire+0x3f/0x90\n ? _get_xid+0x16/0xd0 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n ? __pfx_cifs_get_smb_ses+0x10/0x10 [cifs]\n ? cifs_get_tcp_session+0xaa0/0xca0 [cifs]\n cifs_mount_get_session+0x8a/0x210 [cifs]\n dfs_mount_share+0x1b0/0x11d0 [cifs]\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_dfs_mount_share+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? lock_release+0x203/0x5d0\n cifs_mount+0xb3/0x3d0 [cifs]\n ? do_raw_spin_trylock+0xc6/0x120\n ? __pfx_cifs_mount+0x10/0x10 [cifs]\n ? lock_acquire+0x3f/0x90\n ? find_nls+0x16/0xa0\n ? smb3_update_mnt_flags+0x372/0x3b0 [cifs]\n cifs_smb3_do_mount+0x1e2/0xc80 [cifs]\n ? __pfx_vfs_parse_fs_string+0x10/0x10\n ? __pfx_cifs_smb3_do_mount+0x10/0x10 [cifs]\n smb3_get_tree+0x1bf/0x330 [cifs]\n vfs_get_tree+0x4a/0x160\n path_mount+0x3c1/0xfb0\n ? kasan_quarantine_put+0xc7/0x1d0\n ? __pfx_path_mount+0x10/0x10\n ? kmem_cache_free+0x118/0x3e0\n ? user_path_at+0x74/0xa0\n __x64_sys_mount+0x1a6/0x1e0\n ? __pfx___x64_sys_mount+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53185",
"url": "https://www.suse.com/security/cve/CVE-2024-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1234901 for CVE-2024-53185",
"url": "https://bugzilla.suse.com/1234901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53185"
},
{
"cve": "CVE-2024-53187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53187"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check for overflows in io_pin_pages\n\nWARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144\nCPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0\nCall Trace:\n \u003cTASK\u003e\n __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183\n io_rings_map io_uring/io_uring.c:2611 [inline]\n io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470\n io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692\n io_uring_setup io_uring/io_uring.c:3781 [inline]\n ...\n \u003c/TASK\u003e\n\nio_pin_pages()\u0027s uaddr parameter came directly from the user and can be\ngarbage. Don\u0027t just add size to it as it can overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53187",
"url": "https://www.suse.com/security/cve/CVE-2024-53187"
},
{
"category": "external",
"summary": "SUSE Bug 1234947 for CVE-2024-53187",
"url": "https://bugzilla.suse.com/1234947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53187"
},
{
"cve": "CVE-2024-53188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53188"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix crash when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe function ath12k_dp_cc_cleanup is called to release resources.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nBUG: kernel NULL pointer dereference, address: 0000000000000020\nat RIP: 0010:ath12k_dp_cc_cleanup.part.0+0xb6/0x500 [ath12k]\nCall Trace:\nath12k_dp_cc_cleanup\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set to NULL the released structure in\nath12k_dp_cc_cleanup at the end.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53188",
"url": "https://www.suse.com/security/cve/CVE-2024-53188"
},
{
"category": "external",
"summary": "SUSE Bug 1234948 for CVE-2024-53188",
"url": "https://bugzilla.suse.com/1234948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53188"
},
{
"cve": "CVE-2024-53190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures\n\nSyzkaller reported a hung task with uevent_show() on stack trace. That\nspecific issue was addressed by another commit [0], but even with that\nfix applied (for example, running v6.12-rc5) we face another type of hung\ntask that comes from the same reproducer [1]. By investigating that, we\ncould narrow it to the following path:\n\n(a) Syzkaller emulates a Realtek USB WiFi adapter using raw-gadget and\ndummy_hcd infrastructure.\n\n(b) During the probe of rtl8192cu, the driver ends-up performing an efuse\nread procedure (which is related to EEPROM load IIUC), and here lies the\nissue: the function read_efuse() calls read_efuse_byte() many times, as\nloop iterations depending on the efuse size (in our example, 512 in total).\n\nThis procedure for reading efuse bytes relies in a loop that performs an\nI/O read up to *10k* times in case of failures. We measured the time of\nthe loop inside read_efuse_byte() alone, and in this reproducer (which\ninvolves the dummy_hcd emulation layer), it takes 15 seconds each. As a\nconsequence, we have the driver stuck in its probe routine for big time,\nexposing a stack trace like below if we attempt to reboot the system, for\nexample:\n\ntask:kworker/0:3 state:D stack:0 pid:662 tgid:662 ppid:2 flags:0x00004000\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n __schedule+0xe22/0xeb6\n schedule_timeout+0xe7/0x132\n __wait_for_common+0xb5/0x12e\n usb_start_wait_urb+0xc5/0x1ef\n ? usb_alloc_urb+0x95/0xa4\n usb_control_msg+0xff/0x184\n _usbctrl_vendorreq_sync+0xa0/0x161\n _usb_read_sync+0xb3/0xc5\n read_efuse_byte+0x13c/0x146\n read_efuse+0x351/0x5f0\n efuse_read_all_map+0x42/0x52\n rtl_efuse_shadow_map_update+0x60/0xef\n rtl_get_hwinfo+0x5d/0x1c2\n rtl92cu_read_eeprom_info+0x10a/0x8d5\n ? rtl92c_read_chip_version+0x14f/0x17e\n rtl_usb_probe+0x323/0x851\n usb_probe_interface+0x278/0x34b\n really_probe+0x202/0x4a4\n __driver_probe_device+0x166/0x1b2\n driver_probe_device+0x2f/0xd8\n [...]\n\nWe propose hereby to drastically reduce the attempts of doing the I/O\nreads in case of failures, restricted to USB devices (given that\nthey\u0027re inherently slower than PCIe ones). By retrying up to 10 times\n(instead of 10000), we got reponsiveness in the reproducer, while seems\nreasonable to believe that there\u0027s no sane USB device implementation in\nthe field requiring this amount of retries at every I/O read in order\nto properly work. Based on that assumption, it\u0027d be good to have it\nbackported to stable but maybe not since driver implementation (the 10k\nnumber comes from day 0), perhaps up to 6.x series makes sense.\n\n[0] Commit 15fffc6a5624 (\"driver core: Fix uevent_show() vs driver detach race\")\n\n[1] A note about that: this syzkaller report presents multiple reproducers\nthat differs by the type of emulated USB device. For this specific case,\ncheck the entry from 2024/08/08 06:23 in the list of crashes; the C repro\nis available at https://syzkaller.appspot.com/text?tag=ReproC\u0026x=1521fc83980000.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53190",
"url": "https://www.suse.com/security/cve/CVE-2024-53190"
},
{
"category": "external",
"summary": "SUSE Bug 1234950 for CVE-2024-53190",
"url": "https://bugzilla.suse.com/1234950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-53190"
},
{
"cve": "CVE-2024-53191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53191"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix warning when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe buffers dp-\u003etx_ring[i].tx_status are released.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nWARNING: CPU: 0 PID: 2098 at mm/slub.c:4689 free_large_kmalloc+0x4d/0x80\nCall Trace:\nfree_large_kmalloc\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set the buffers to NULL after releasing in\norder to avoid the double free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53191",
"url": "https://www.suse.com/security/cve/CVE-2024-53191"
},
{
"category": "external",
"summary": "SUSE Bug 1234952 for CVE-2024-53191",
"url": "https://bugzilla.suse.com/1234952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53191"
},
{
"cve": "CVE-2024-53194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53194"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix use-after-free of slot-\u003ebus on hot remove\n\nDennis reports a boot crash on recent Lenovo laptops with a USB4 dock.\n\nSince commit 0fc70886569c (\"thunderbolt: Reset USB4 v2 host router\") and\ncommit 59a54c5f3dbd (\"thunderbolt: Reset topology created by the boot\nfirmware\"), USB4 v2 and v1 Host Routers are reset on probe of the\nthunderbolt driver.\n\nThe reset clears the Presence Detect State and Data Link Layer Link Active\nbits at the USB4 Host Router\u0027s Root Port and thus causes hot removal of the\ndock.\n\nThe crash occurs when pciehp is unbound from one of the dock\u0027s Downstream\nPorts: pciehp creates a pci_slot on bind and destroys it on unbind. The\npci_slot contains a pointer to the pci_bus below the Downstream Port, but\na reference on that pci_bus is never acquired. The pci_bus is destroyed\nbefore the pci_slot, so a use-after-free ensues when pci_slot_release()\naccesses slot-\u003ebus.\n\nIn principle this should not happen because pci_stop_bus_device() unbinds\npciehp (and therefore destroys the pci_slot) before the pci_bus is\ndestroyed by pci_remove_bus_device().\n\nHowever the stacktrace provided by Dennis shows that pciehp is unbound from\npci_remove_bus_device() instead of pci_stop_bus_device(). To understand\nthe significance of this, one needs to know that the PCI core uses a two\nstep process to remove a portion of the hierarchy: It first unbinds all\ndrivers in the sub-hierarchy in pci_stop_bus_device() and then actually\nremoves the devices in pci_remove_bus_device(). There is no precaution to\nprevent driver binding in-between pci_stop_bus_device() and\npci_remove_bus_device().\n\nIn Dennis\u0027 case, it seems removal of the hierarchy by pciehp races with\ndriver binding by pci_bus_add_devices(). pciehp is bound to the\nDownstream Port after pci_stop_bus_device() has run, so it is unbound by\npci_remove_bus_device() instead of pci_stop_bus_device(). Because the\npci_bus has already been destroyed at that point, accesses to it result in\na use-after-free.\n\nOne might conclude that driver binding needs to be prevented after\npci_stop_bus_device() has run. However it seems risky that pci_slot points\nto pci_bus without holding a reference. Solely relying on correct ordering\nof driver unbind versus pci_bus destruction is certainly not defensive\nprogramming.\n\nIf pci_slot has a need to access data in pci_bus, it ought to acquire a\nreference. Amend pci_create_slot() accordingly. Dennis reports that the\ncrash is not reproducible with this change.\n\nAbridged stacktrace:\n\n pcieport 0000:00:07.0: PME: Signaling with IRQ 156\n pcieport 0000:00:07.0: pciehp: Slot #12 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ IbPresDis- LLActRep+\n pci_bus 0000:20: dev 00, created physical slot 12\n pcieport 0000:00:07.0: pciehp: Slot(12): Card not present\n ...\n pcieport 0000:21:02.0: pciehp: pcie_disable_notification: SLOTCTRL d8 write cmd 0\n Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b6b: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 13 UID: 0 PID: 134 Comm: irq/156-pciehp Not tainted 6.11.0-devel+ #1\n RIP: 0010:dev_driver_string+0x12/0x40\n pci_destroy_slot\n pciehp_remove\n pcie_port_remove_service\n device_release_driver_internal\n bus_remove_device\n device_del\n device_unregister\n remove_iter\n device_for_each_child\n pcie_portdrv_remove\n pci_device_remove\n device_release_driver_internal\n bus_remove_device\n device_del\n pci_remove_bus_device (recursive invocation)\n pci_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53194",
"url": "https://www.suse.com/security/cve/CVE-2024-53194"
},
{
"category": "external",
"summary": "SUSE Bug 1235459 for CVE-2024-53194",
"url": "https://bugzilla.suse.com/1235459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53194"
},
{
"cve": "CVE-2024-53195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Get rid of userspace_irqchip_in_use\n\nImproper use of userspace_irqchip_in_use led to syzbot hitting the\nfollowing WARN_ON() in kvm_timer_update_irq():\n\nWARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arch_timer.c:459\nkvm_timer_update_irq+0x21c/0x394\nCall trace:\n kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459\n kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968\n kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264\n kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline]\n kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline]\n kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695\n kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151\n el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe following sequence led to the scenario:\n - Userspace creates a VM and a vCPU.\n - The vCPU is initialized with KVM_ARM_VCPU_PMU_V3 during\n KVM_ARM_VCPU_INIT.\n - Without any other setup, such as vGIC or vPMU, userspace issues\n KVM_RUN on the vCPU. Since the vPMU is requested, but not setup,\n kvm_arm_pmu_v3_enable() fails in kvm_arch_vcpu_run_pid_change().\n As a result, KVM_RUN returns after enabling the timer, but before\n incrementing \u0027userspace_irqchip_in_use\u0027:\n kvm_arch_vcpu_run_pid_change()\n ret = kvm_arm_pmu_v3_enable()\n if (!vcpu-\u003earch.pmu.created)\n return -EINVAL;\n if (ret)\n return ret;\n [...]\n if (!irqchip_in_kernel(kvm))\n static_branch_inc(\u0026userspace_irqchip_in_use);\n - Userspace ignores the error and issues KVM_ARM_VCPU_INIT again.\n Since the timer is already enabled, control moves through the\n following flow, ultimately hitting the WARN_ON():\n kvm_timer_vcpu_reset()\n if (timer-\u003eenabled)\n kvm_timer_update_irq()\n if (!userspace_irqchip())\n ret = kvm_vgic_inject_irq()\n ret = vgic_lazy_init()\n if (unlikely(!vgic_initialized(kvm)))\n if (kvm-\u003earch.vgic.vgic_model !=\n KVM_DEV_TYPE_ARM_VGIC_V2)\n return -EBUSY;\n WARN_ON(ret);\n\nTheoretically, since userspace_irqchip_in_use\u0027s functionality can be\nsimply replaced by \u0027!irqchip_in_kernel()\u0027, get rid of the static key\nto avoid the mismanagement, which also helps with the syzbot issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53195",
"url": "https://www.suse.com/security/cve/CVE-2024-53195"
},
{
"category": "external",
"summary": "SUSE Bug 1234957 for CVE-2024-53195",
"url": "https://bugzilla.suse.com/1234957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53195"
},
{
"cve": "CVE-2024-53196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53196"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Don\u0027t retire aborted MMIO instruction\n\nReturning an abort to the guest for an unsupported MMIO access is a\ndocumented feature of the KVM UAPI. Nevertheless, it\u0027s clear that this\nplumbing has seen limited testing, since userspace can trivially cause a\nWARN in the MMIO return:\n\n WARNING: CPU: 0 PID: 30558 at arch/arm64/include/asm/kvm_emulate.h:536 kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n Call trace:\n kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n kvm_arch_vcpu_ioctl_run+0x98/0x15b4 arch/arm64/kvm/arm.c:1133\n kvm_vcpu_ioctl+0x75c/0xa78 virt/kvm/kvm_main.c:4487\n __do_sys_ioctl fs/ioctl.c:51 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x1e0/0x23c arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151\n el0_svc+0x38/0x68 arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x90/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe splat is complaining that KVM is advancing PC while an exception is\npending, i.e. that KVM is retiring the MMIO instruction despite a\npending synchronous external abort. Womp womp.\n\nFix the glaring UAPI bug by skipping over all the MMIO emulation in\ncase there is a pending synchronous exception. Note that while userspace\nis capable of pending an asynchronous exception (SError, IRQ, or FIQ),\nit is still safe to retire the MMIO instruction in this case as (1) they\nare by definition asynchronous, and (2) KVM relies on hardware support\nfor pending/delivering these exceptions instead of the software state\nmachine for advancing PC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53196",
"url": "https://www.suse.com/security/cve/CVE-2024-53196"
},
{
"category": "external",
"summary": "SUSE Bug 1234906 for CVE-2024-53196",
"url": "https://bugzilla.suse.com/1234906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53196"
},
{
"cve": "CVE-2024-53197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53197"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev-\u003econfig.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53197",
"url": "https://www.suse.com/security/cve/CVE-2024-53197"
},
{
"category": "external",
"summary": "SUSE Bug 1235464 for CVE-2024-53197",
"url": "https://bugzilla.suse.com/1235464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53198"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen: Fix the issue of resource not being properly released in xenbus_dev_probe()\n\nThis patch fixes an issue in the function xenbus_dev_probe(). In the\nxenbus_dev_probe() function, within the if (err) branch at line 313, the\nprogram incorrectly returns err directly without releasing the resources\nallocated by err = drv-\u003eprobe(dev, id). As the return value is non-zero,\nthe upper layers assume the processing logic has failed. However, the probe\noperation was performed earlier without a corresponding remove operation.\nSince the probe actually allocates resources, failing to perform the remove\noperation could lead to problems.\n\nTo fix this issue, we followed the resource release logic of the\nxenbus_dev_remove() function by adding a new block fail_remove before the\nfail_put block. After entering the branch if (err) at line 313, the\nfunction will use a goto statement to jump to the fail_remove block,\nensuring that the previously acquired resources are correctly released,\nthus preventing the reference count leak.\n\nThis bug was identified by an experimental static analysis tool developed\nby our team. The tool specializes in analyzing reference count operations\nand detecting potential issues where resources are not properly managed.\nIn this case, the tool flagged the missing release operation as a\npotential problem, which led to the development of this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53198",
"url": "https://www.suse.com/security/cve/CVE-2024-53198"
},
{
"category": "external",
"summary": "SUSE Bug 1234923 for CVE-2024-53198",
"url": "https://bugzilla.suse.com/1234923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53198"
},
{
"cve": "CVE-2024-53200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53200"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp\n\nThis commit addresses a null pointer dereference issue in\nhwss_setup_dpp(). The issue could occur when pipe_ctx-\u003eplane_state is\nnull. The fix adds a check to ensure `pipe_ctx-\u003eplane_state` is not null\nbefore accessing. This prevents a null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53200",
"url": "https://www.suse.com/security/cve/CVE-2024-53200"
},
{
"category": "external",
"summary": "SUSE Bug 1234968 for CVE-2024-53200",
"url": "https://bugzilla.suse.com/1234968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53200"
},
{
"cve": "CVE-2024-53201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53201"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\n\nThis commit addresses a null pointer dereference issue in\ndcn20_program_pipe(). Previously, commit 8e4ed3cf1642 (\"drm/amd/display:\nAdd null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\")\npartially fixed the null pointer dereference issue. However, in\ndcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and\nplane_state is accessed again through pipe_ctx. Multiple if statements\ndirectly call attributes of plane_state, leading to potential null\npointer dereference issues. This patch adds necessary null checks to\nensure stability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53201",
"url": "https://www.suse.com/security/cve/CVE-2024-53201"
},
{
"category": "external",
"summary": "SUSE Bug 1234969 for CVE-2024-53201",
"url": "https://bugzilla.suse.com/1234969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53201"
},
{
"cve": "CVE-2024-53202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware_loader: Fix possible resource leak in fw_log_firmware_info()\n\nThe alg instance should be released under the exception path, otherwise\nthere may be resource leak here.\n\nTo mitigate this, free the alg instance with crypto_free_shash when kmalloc\nfails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53202",
"url": "https://www.suse.com/security/cve/CVE-2024-53202"
},
{
"category": "external",
"summary": "SUSE Bug 1234970 for CVE-2024-53202",
"url": "https://bugzilla.suse.com/1234970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53202"
},
{
"cve": "CVE-2024-53203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: fix potential array underflow in ucsi_ccg_sync_control()\n\nThe \"command\" variable can be controlled by the user via debugfs. The\nworry is that if con_index is zero then \"\u0026uc-\u003eucsi-\u003econnector[con_index\n- 1]\" would be an array underflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53203",
"url": "https://www.suse.com/security/cve/CVE-2024-53203"
},
{
"category": "external",
"summary": "SUSE Bug 1235001 for CVE-2024-53203",
"url": "https://bugzilla.suse.com/1235001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53203"
},
{
"cve": "CVE-2024-53206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53206"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix use-after-free of nreq in reqsk_timer_handler().\n\nThe cited commit replaced inet_csk_reqsk_queue_drop_and_put() with\n__inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().\n\nThen, oreq should be passed to reqsk_put() instead of req; otherwise\nuse-after-free of nreq could happen when reqsk is migrated but the\nretry attempt failed (e.g. due to timeout).\n\nLet\u0027s pass oreq to reqsk_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53206",
"url": "https://www.suse.com/security/cve/CVE-2024-53206"
},
{
"category": "external",
"summary": "SUSE Bug 1234960 for CVE-2024-53206",
"url": "https://bugzilla.suse.com/1234960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53206"
},
{
"cve": "CVE-2024-53207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53207"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible deadlocks\n\nThis fixes possible deadlocks like the following caused by\nhci_cmd_sync_dequeue causing the destroy function to run:\n\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\n Tainted: G W O 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:kworker/u19:0 state:D stack:0 pid:143 tgid:143 ppid:2 flags:0x00004000\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\n Call Trace:\n \u003cTASK\u003e\n __schedule+0x374/0xaf0\n schedule+0x3c/0xf0\n schedule_preempt_disabled+0x1c/0x30\n __mutex_lock.constprop.0+0x3ef/0x7a0\n __mutex_lock_slowpath+0x13/0x20\n mutex_lock+0x3c/0x50\n mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\n ? kfree+0x211/0x2a0\n hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\n ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\n cmd_complete_rsp+0x26/0x80 [bluetooth]\n mgmt_pending_foreach+0x4d/0x70 [bluetooth]\n __mgmt_power_off+0x8d/0x180 [bluetooth]\n ? _raw_spin_unlock_irq+0x23/0x40\n hci_dev_close_sync+0x445/0x5b0 [bluetooth]\n hci_set_powered_sync+0x149/0x250 [bluetooth]\n set_powered_sync+0x24/0x60 [bluetooth]\n hci_cmd_sync_work+0x90/0x150 [bluetooth]\n process_one_work+0x13e/0x300\n worker_thread+0x2f7/0x420\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x107/0x140\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x3d/0x60\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53207",
"url": "https://www.suse.com/security/cve/CVE-2024-53207"
},
{
"category": "external",
"summary": "SUSE Bug 1234907 for CVE-2024-53207",
"url": "https://bugzilla.suse.com/1234907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53207"
},
{
"cve": "CVE-2024-53208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53208"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync\n\nThis fixes the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\nRead of size 8 at addr ffff888029b4dd18 by task kworker/u9:0/54\n\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc6-syzkaller-01155-gf723224742fc #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:93 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\nq kasan_report+0x143/0x180 mm/kasan/report.c:601\n set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\n hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:328\n process_one_work kernel/workqueue.c:3231 [inline]\n process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312\n worker_thread+0x86d/0xd10 kernel/workqueue.c:3389\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\nAllocated by task 5247:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:370 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387\n kasan_kmalloc include/linux/kasan.h:211 [inline]\n __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4193\n kmalloc_noprof include/linux/slab.h:681 [inline]\n kzalloc_noprof include/linux/slab.h:807 [inline]\n mgmt_pending_new+0x65/0x250 net/bluetooth/mgmt_util.c:269\n mgmt_pending_add+0x36/0x120 net/bluetooth/mgmt_util.c:296\n set_powered+0x3cd/0x5e0 net/bluetooth/mgmt.c:1394\n hci_mgmt_cmd+0xc47/0x11d0 net/bluetooth/hci_sock.c:1712\n hci_sock_sendmsg+0x7b8/0x11c0 net/bluetooth/hci_sock.c:1832\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n sock_write_iter+0x2dd/0x400 net/socket.c:1160\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xa72/0xc90 fs/read_write.c:590\n ksys_write+0x1a0/0x2c0 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 5246:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579\n poison_slab_object+0xe0/0x150 mm/kasan/common.c:240\n __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256\n kasan_slab_free include/linux/kasan.h:184 [inline]\n slab_free_hook mm/slub.c:2256 [inline]\n slab_free mm/slub.c:4477 [inline]\n kfree+0x149/0x360 mm/slub.c:4598\n settings_rsp+0x2bc/0x390 net/bluetooth/mgmt.c:1443\n mgmt_pending_foreach+0xd1/0x130 net/bluetooth/mgmt_util.c:259\n __mgmt_power_off+0x112/0x420 net/bluetooth/mgmt.c:9455\n hci_dev_close_sync+0x665/0x11a0 net/bluetooth/hci_sync.c:5191\n hci_dev_do_close net/bluetooth/hci_core.c:483 [inline]\n hci_dev_close+0x112/0x210 net/bluetooth/hci_core.c:508\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83gv\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53208",
"url": "https://www.suse.com/security/cve/CVE-2024-53208"
},
{
"category": "external",
"summary": "SUSE Bug 1234909 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "external",
"summary": "SUSE Bug 1236244 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1236244"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53208"
},
{
"cve": "CVE-2024-53209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53209"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix receive ring space parameters when XDP is active\n\nThe MTU setting at the time an XDP multi-buffer is attached\ndetermines whether the aggregation ring will be used and the\nrx_skb_func handler. This is done in bnxt_set_rx_skb_mode().\n\nIf the MTU is later changed, the aggregation ring setting may need\nto be changed and it may become out-of-sync with the settings\ninitially done in bnxt_set_rx_skb_mode(). This may result in\nrandom memory corruption and crashes as the HW may DMA data larger\nthan the allocated buffer size, such as:\n\nBUG: kernel NULL pointer dereference, address: 00000000000003c0\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 17 PID: 0 Comm: swapper/17 Kdump: loaded Tainted: G S OE 6.1.0-226bf9805506 #1\nHardware name: Wiwynn Delta Lake PVT BZA.02601.0150/Delta Lake-Class1, BIOS F0E_3A12 08/26/2021\nRIP: 0010:bnxt_rx_pkt+0xe97/0x1ae0 [bnxt_en]\nCode: 8b 95 70 ff ff ff 4c 8b 9d 48 ff ff ff 66 41 89 87 b4 00 00 00 e9 0b f7 ff ff 0f b7 43 0a 49 8b 95 a8 04 00 00 25 ff 0f 00 00 \u003c0f\u003e b7 14 42 48 c1 e2 06 49 03 95 a0 04 00 00 0f b6 42 33f\nRSP: 0018:ffffa19f40cc0d18 EFLAGS: 00010202\nRAX: 00000000000001e0 RBX: ffff8e2c805c6100 RCX: 00000000000007ff\nRDX: 0000000000000000 RSI: ffff8e2c271ab990 RDI: ffff8e2c84f12380\nRBP: ffffa19f40cc0e48 R08: 000000000001000d R09: 974ea2fcddfa4cbf\nR10: 0000000000000000 R11: ffffa19f40cc0ff8 R12: ffff8e2c94b58980\nR13: ffff8e2c952d6600 R14: 0000000000000016 R15: ffff8e2c271ab990\nFS: 0000000000000000(0000) GS:ffff8e3b3f840000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000000003c0 CR3: 0000000e8580a004 CR4: 00000000007706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n __bnxt_poll_work+0x1c2/0x3e0 [bnxt_en]\n\nTo address the issue, we now call bnxt_set_rx_skb_mode() within\nbnxt_change_mtu() to properly set the AGG rings configuration and\nupdate rx_skb_func based on the new MTU value.\nAdditionally, BNXT_FLAG_NO_AGG_RINGS is cleared at the beginning of\nbnxt_set_rx_skb_mode() to make sure it gets set or cleared based on\nthe current MTU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53209",
"url": "https://www.suse.com/security/cve/CVE-2024-53209"
},
{
"category": "external",
"summary": "SUSE Bug 1235002 for CVE-2024-53209",
"url": "https://bugzilla.suse.com/1235002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53209"
},
{
"cve": "CVE-2024-53210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53210"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\n\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\nat exit.\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\niucv_sock_destruct() during socket close. To fix this decrease\nskb refcount by one if MSG_PEEK is set in order to prevent memory\nleak and WARN_ON.\n\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G W 6.10.0-rc7 #1\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\nCall Trace:\n [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\n [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\n [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\n [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\n [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\n [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\n [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\n [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\n [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\n [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\n [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\n [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\n [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\n Last Breaking-Event-Address:\n [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53210",
"url": "https://www.suse.com/security/cve/CVE-2024-53210"
},
{
"category": "external",
"summary": "SUSE Bug 1234971 for CVE-2024-53210",
"url": "https://bugzilla.suse.com/1234971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53210"
},
{
"cve": "CVE-2024-53213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53213"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: lan78xx: Fix double free issue with interrupt buffer allocation\n\nIn lan78xx_probe(), the buffer `buf` was being freed twice: once\nimplicitly through `usb_free_urb(dev-\u003eurb_intr)` with the\n`URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused\na double free issue.\n\nTo resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to\nsimplify the initialization sequence and removed the redundant\n`kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring\nit is correctly managed by `usb_fill_int_urb()` and freed by\n`usb_free_urb()` as intended.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53213",
"url": "https://www.suse.com/security/cve/CVE-2024-53213"
},
{
"category": "external",
"summary": "SUSE Bug 1234973 for CVE-2024-53213",
"url": "https://bugzilla.suse.com/1234973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53213"
},
{
"cve": "CVE-2024-53214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53214"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: Properly hide first-in-list PCIe extended capability\n\nThere are cases where a PCIe extended capability should be hidden from\nthe user. For example, an unknown capability (i.e., capability with ID\ngreater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally\nchosen to be hidden from the user.\n\nHiding a capability is done by virtualizing and modifying the \u0027Next\nCapability Offset\u0027 field of the previous capability so it points to the\ncapability after the one that should be hidden.\n\nThe special case where the first capability in the list should be hidden\nis handled differently because there is no previous capability that can\nbe modified. In this case, the capability ID and version are zeroed\nwhile leaving the next pointer intact. This hides the capability and\nleaves an anchor for the rest of the capability list.\n\nHowever, today, hiding the first capability in the list is not done\nproperly if the capability is unknown, as struct\nvfio_pci_core_device-\u003epci_config_map is set to the capability ID during\ninitialization but the capability ID is not properly checked later when\nused in vfio_config_do_rw(). This leads to the following warning [1] and\nto an out-of-bounds access to ecap_perms array.\n\nFix it by checking cap_id in vfio_config_do_rw(), and if it is greater\nthan PCI_EXT_CAP_ID_MAX, use an alternative struct perm_bits for direct\nread only access instead of the ecap_perms array.\n\nNote that this is safe since the above is the only case where cap_id can\nexceed PCI_EXT_CAP_ID_MAX (except for the special capabilities, which\nare already checked before).\n\n[1]\n\nWARNING: CPU: 118 PID: 5329 at drivers/vfio/pci/vfio_pci_config.c:1900 vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\nCPU: 118 UID: 0 PID: 5329 Comm: simx-qemu-syste Not tainted 6.12.0+ #1\n(snip)\nCall Trace:\n \u003cTASK\u003e\n ? show_regs+0x69/0x80\n ? __warn+0x8d/0x140\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? report_bug+0x18f/0x1a0\n ? handle_bug+0x63/0xa0\n ? exc_invalid_op+0x19/0x70\n ? asm_exc_invalid_op+0x1b/0x20\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? vfio_pci_config_rw+0x244/0x430 [vfio_pci_core]\n vfio_pci_rw+0x101/0x1b0 [vfio_pci_core]\n vfio_pci_core_read+0x1d/0x30 [vfio_pci_core]\n vfio_device_fops_read+0x27/0x40 [vfio]\n vfs_read+0xbd/0x340\n ? vfio_device_fops_unl_ioctl+0xbb/0x740 [vfio]\n ? __rseq_handle_notify_resume+0xa4/0x4b0\n __x64_sys_pread64+0x96/0xc0\n x64_sys_call+0x1c3d/0x20d0\n do_syscall_64+0x4d/0x120\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53214",
"url": "https://www.suse.com/security/cve/CVE-2024-53214"
},
{
"category": "external",
"summary": "SUSE Bug 1235004 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "external",
"summary": "SUSE Bug 1235005 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53214"
},
{
"cve": "CVE-2024-53215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53215"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\n\nThere\u0027s issue as follows:\nRPC: Registered rdma transport module.\nRPC: Registered rdma backchannel transport module.\nRPC: Unregistered rdma transport module.\nRPC: Unregistered rdma backchannel transport module.\nBUG: unable to handle page fault for address: fffffbfff80c609a\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\nCall Trace:\n \u003cTASK\u003e\n __die+0x1f/0x70\n page_fault_oops+0x2cd/0x860\n spurious_kernel_fault+0x36/0x450\n do_kern_addr_fault+0xca/0x100\n exc_page_fault+0x128/0x150\n asm_exc_page_fault+0x26/0x30\n percpu_counter_destroy_many+0xf7/0x2a0\n mmdrop+0x209/0x350\n finish_task_switch.isra.0+0x481/0x840\n schedule_tail+0xe/0xd0\n ret_from_fork+0x23/0x80\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\ndestroy the percpu counters which init in svc_rdma_proc_init().\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\nleakage occurs.\nTo solve above issue just destroy all percpu counters when\nregister_sysctl() return NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53215",
"url": "https://www.suse.com/security/cve/CVE-2024-53215"
},
{
"category": "external",
"summary": "SUSE Bug 1234962 for CVE-2024-53215",
"url": "https://bugzilla.suse.com/1234962"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53215"
},
{
"cve": "CVE-2024-53216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53216"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: release svc_expkey/svc_export with rcu_work\n\nThe last reference for `cache_head` can be reduced to zero in `c_show`\nand `e_show`(using `rcu_read_lock` and `rcu_read_unlock`). Consequently,\n`svc_export_put` and `expkey_put` will be invoked, leading to two\nissues:\n\n1. The `svc_export_put` will directly free ex_uuid. However,\n `e_show`/`c_show` will access `ex_uuid` after `cache_put`, which can\n trigger a use-after-free issue, shown below.\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in svc_export_show+0x362/0x430 [nfsd]\n Read of size 1 at addr ff11000010fdc120 by task cat/870\n\n CPU: 1 UID: 0 PID: 870 Comm: cat Not tainted 6.12.0-rc3+ #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n 1.16.1-2.fc37 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x53/0x70\n print_address_description.constprop.0+0x2c/0x3a0\n print_report+0xb9/0x280\n kasan_report+0xae/0xe0\n svc_export_show+0x362/0x430 [nfsd]\n c_show+0x161/0x390 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Allocated by task 830:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x8f/0xa0\n __kmalloc_node_track_caller_noprof+0x1bc/0x400\n kmemdup_noprof+0x22/0x50\n svc_export_parse+0x8a9/0xb80 [nfsd]\n cache_do_downcall+0x71/0xa0 [sunrpc]\n cache_write_procfs+0x8e/0xd0 [sunrpc]\n proc_reg_write+0xe1/0x140\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 868:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x37/0x50\n kfree+0xf3/0x3e0\n svc_export_put+0x87/0xb0 [nfsd]\n cache_purge+0x17f/0x1f0 [sunrpc]\n nfsd_destroy_serv+0x226/0x2d0 [nfsd]\n nfsd_svc+0x125/0x1e0 [nfsd]\n write_threads+0x16a/0x2a0 [nfsd]\n nfsctl_transaction_write+0x74/0xa0 [nfsd]\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n2. We cannot sleep while using `rcu_read_lock`/`rcu_read_unlock`.\n However, `svc_export_put`/`expkey_put` will call path_put, which\n subsequently triggers a sleeping operation due to the following\n `dput`.\n\n =============================\n WARNING: suspicious RCU usage\n 5.10.0-dirty #141 Not tainted\n -----------------------------\n ...\n Call Trace:\n dump_stack+0x9a/0xd0\n ___might_sleep+0x231/0x240\n dput+0x39/0x600\n path_put+0x1b/0x30\n svc_export_put+0x17/0x80\n e_show+0x1c9/0x200\n seq_read_iter+0x63f/0x7c0\n seq_read+0x226/0x2d0\n vfs_read+0x113/0x2c0\n ksys_read+0xc9/0x170\n do_syscall_64+0x33/0x40\n entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nFix these issues by using `rcu_work` to help release\n`svc_expkey`/`svc_export`. This approach allows for an asynchronous\ncontext to invoke `path_put` and also facilitates the freeing of\n`uuid/exp/key` after an RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53216",
"url": "https://www.suse.com/security/cve/CVE-2024-53216"
},
{
"category": "external",
"summary": "SUSE Bug 1235003 for CVE-2024-53216",
"url": "https://bugzilla.suse.com/1235003"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53216"
},
{
"cve": "CVE-2024-53217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53217"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent NULL dereference in nfsd4_process_cb_update()\n\n@ses is initialized to NULL. If __nfsd4_find_backchannel() finds no\navailable backchannel session, setup_callback_client() will try to\ndereference @ses and segfault.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53217",
"url": "https://www.suse.com/security/cve/CVE-2024-53217"
},
{
"category": "external",
"summary": "SUSE Bug 1234999 for CVE-2024-53217",
"url": "https://bugzilla.suse.com/1234999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53217"
},
{
"cve": "CVE-2024-53222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53222"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: fix NULL pointer in comp_algorithm_show()\n\nLTP reported a NULL pointer dereference as followed:\n\n CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3\n Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : __pi_strcmp+0x24/0x140\n lr : zcomp_available_show+0x60/0x100 [zram]\n sp : ffff800088b93b90\n x29: ffff800088b93b90 x28: 0000000000000001 x27: 0000000000400cc0\n x26: 0000000000000ffe x25: ffff80007b3e2388 x24: 0000000000000000\n x23: ffff80007b3e2390 x22: ffff0004041a9000 x21: ffff80007b3e2900\n x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000\n x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000\n x11: 0000000000000000 x10: ffff80007b3e2900 x9 : ffff80007b3cb280\n x8 : 0101010101010101 x7 : 0000000000000000 x6 : 0000000000000000\n x5 : 0000000000000040 x4 : 0000000000000000 x3 : 00656c722d6f7a6c\n x2 : 0000000000000000 x1 : ffff80007b3e2900 x0 : 0000000000000000\n Call trace:\n __pi_strcmp+0x24/0x140\n comp_algorithm_show+0x40/0x70 [zram]\n dev_attr_show+0x28/0x80\n sysfs_kf_seq_show+0x90/0x140\n kernfs_seq_show+0x34/0x48\n seq_read_iter+0x1d4/0x4e8\n kernfs_fop_read_iter+0x40/0x58\n new_sync_read+0x9c/0x168\n vfs_read+0x1a8/0x1f8\n ksys_read+0x74/0x108\n __arm64_sys_read+0x24/0x38\n invoke_syscall+0x50/0x120\n el0_svc_common.constprop.0+0xc8/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x38/0x138\n el0t_64_sync_handler+0xc0/0xc8\n el0t_64_sync+0x188/0x190\n\nThe zram-\u003ecomp_algs[ZRAM_PRIMARY_COMP] can be NULL in zram_add() if\ncomp_algorithm_set() has not been called. User can access the zram device\nby sysfs after device_add_disk(), so there is a time window to trigger the\nNULL pointer dereference. Move it ahead device_add_disk() to make sure\nwhen user can access the zram device, it is ready. comp_algorithm_set()\nis protected by zram-\u003einit_lock in other places and no such problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53222",
"url": "https://www.suse.com/security/cve/CVE-2024-53222"
},
{
"category": "external",
"summary": "SUSE Bug 1234974 for CVE-2024-53222",
"url": "https://bugzilla.suse.com/1234974"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53222"
},
{
"cve": "CVE-2024-53224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53224"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Move events notifier registration to be after device registration\n\nMove pkey change work initialization and cleanup from device resources\nstage to notifier stage, since this is the stage which handles this work\nevents.\n\nFix a race between the device deregistration and pkey change work by moving\nMLX5_IB_STAGE_DEVICE_NOTIFIER to be after MLX5_IB_STAGE_IB_REG in order to\nensure that the notifier is deregistered before the device during cleanup.\nWhich ensures there are no works that are being executed after the\ndevice has already unregistered which can cause the panic below.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 1 PID: 630071 Comm: kworker/1:2 Kdump: loaded Tainted: G W OE --------- --- 5.14.0-162.6.1.el9_1.x86_64 #1\nHardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS 090008 02/27/2023\nWorkqueue: events pkey_change_handler [mlx5_ib]\nRIP: 0010:setup_qp+0x38/0x1f0 [mlx5_ib]\nCode: ee 41 54 45 31 e4 55 89 f5 53 48 89 fb 48 83 ec 20 8b 77 08 65 48 8b 04 25 28 00 00 00 48 89 44 24 18 48 8b 07 48 8d 4c 24 16 \u003c4c\u003e 8b 38 49 8b 87 80 0b 00 00 4c 89 ff 48 8b 80 08 05 00 00 8b 40\nRSP: 0018:ffffbcc54068be20 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffff954054494128 RCX: ffffbcc54068be36\nRDX: ffff954004934000 RSI: 0000000000000001 RDI: ffff954054494128\nRBP: 0000000000000023 R08: ffff954001be2c20 R09: 0000000000000001\nR10: ffff954001be2c20 R11: ffff9540260133c0 R12: 0000000000000000\nR13: 0000000000000023 R14: 0000000000000000 R15: ffff9540ffcb0905\nFS: 0000000000000000(0000) GS:ffff9540ffc80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000010625c001 CR4: 00000000003706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\nmlx5_ib_gsi_pkey_change+0x20/0x40 [mlx5_ib]\nprocess_one_work+0x1e8/0x3c0\nworker_thread+0x50/0x3b0\n? rescuer_thread+0x380/0x380\nkthread+0x149/0x170\n? set_kthread_struct+0x50/0x50\nret_from_fork+0x22/0x30\nModules linked in: rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) mlx5_fwctl(OE) fwctl(OE) ib_uverbs(OE) mlx5_core(OE) mlxdevm(OE) ib_core(OE) mlx_compat(OE) psample mlxfw(OE) tls knem(OE) netconsole nfsv3 nfs_acl nfs lockd grace fscache netfs qrtr rfkill sunrpc intel_rapl_msr intel_rapl_common rapl hv_balloon hv_utils i2c_piix4 pcspkr joydev fuse ext4 mbcache jbd2 sr_mod sd_mod cdrom t10_pi sg ata_generic pci_hyperv pci_hyperv_intf hyperv_drm drm_shmem_helper drm_kms_helper hv_storvsc syscopyarea hv_netvsc sysfillrect sysimgblt hid_hyperv fb_sys_fops scsi_transport_fc hyperv_keyboard drm ata_piix crct10dif_pclmul crc32_pclmul crc32c_intel libata ghash_clmulni_intel hv_vmbus serio_raw [last unloaded: ib_core]\nCR2: 0000000000000000\n---[ end trace f6f8be4eae12f7bc ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53224",
"url": "https://www.suse.com/security/cve/CVE-2024-53224"
},
{
"category": "external",
"summary": "SUSE Bug 1235009 for CVE-2024-53224",
"url": "https://bugzilla.suse.com/1235009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53224"
},
{
"cve": "CVE-2024-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n error = bfad_im_module_init()\n fc_release_transport(bfad_im_scsi_transport_template);\n if (error)\n goto ext;\n\next:\n bfad_im_module_exit();\n fc_release_transport(bfad_im_scsi_transport_template);\n --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53227",
"url": "https://www.suse.com/security/cve/CVE-2024-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1235011 for CVE-2024-53227",
"url": "https://bugzilla.suse.com/1235011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-53229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53229"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix the qp flush warnings in req\n\nWhen the qp is in error state, the status of WQEs in the queue should be\nset to error. Or else the following will appear.\n\n[ 920.617269] WARNING: CPU: 1 PID: 21 at drivers/infiniband/sw/rxe/rxe_comp.c:756 rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.617744] Modules linked in: rnbd_client(O) rtrs_client(O) rtrs_core(O) rdma_ucm rdma_cm iw_cm ib_cm crc32_generic rdma_rxe ip6_udp_tunnel udp_tunnel ib_uverbs ib_core loop brd null_blk ipv6\n[ 920.618516] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G O 6.1.113-storage+ #65\n[ 920.618986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 920.619396] RIP: 0010:rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.619658] Code: 0f b6 84 24 3a 02 00 00 41 89 84 24 44 04 00 00 e9 2a f7 ff ff 39 ca bb 03 00 00 00 b8 0e 00 00 00 48 0f 45 d8 e9 15 f7 ff ff \u003c0f\u003e 0b e9 cb f8 ff ff 41 bf f5 ff ff ff e9 08 f8 ff ff 49 8d bc 24\n[ 920.620482] RSP: 0018:ffff97b7c00bbc38 EFLAGS: 00010246\n[ 920.620817] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000008\n[ 920.621183] RDX: ffff960dc396ebc0 RSI: 0000000000005400 RDI: ffff960dc4e2fbac\n[ 920.621548] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffffac406450\n[ 920.621884] R10: ffffffffac4060c0 R11: 0000000000000001 R12: ffff960dc4e2f800\n[ 920.622254] R13: ffff960dc4e2f928 R14: ffff97b7c029c580 R15: 0000000000000000\n[ 920.622609] FS: 0000000000000000(0000) GS:ffff960ef7d00000(0000) knlGS:0000000000000000\n[ 920.622979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 920.623245] CR2: 00007fa056965e90 CR3: 00000001107f1000 CR4: 00000000000006e0\n[ 920.623680] Call Trace:\n[ 920.623815] \u003cTASK\u003e\n[ 920.623933] ? __warn+0x79/0xc0\n[ 920.624116] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.624356] ? report_bug+0xfb/0x150\n[ 920.624594] ? handle_bug+0x3c/0x60\n[ 920.624796] ? exc_invalid_op+0x14/0x70\n[ 920.624976] ? asm_exc_invalid_op+0x16/0x20\n[ 920.625203] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.625474] ? rxe_completer+0x329/0xcc0 [rdma_rxe]\n[ 920.625749] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.626037] rxe_requester+0x625/0xde0 [rdma_rxe]\n[ 920.626310] ? rxe_cq_post+0xe2/0x180 [rdma_rxe]\n[ 920.626583] ? do_complete+0x18d/0x220 [rdma_rxe]\n[ 920.626812] ? rxe_completer+0x1a3/0xcc0 [rdma_rxe]\n[ 920.627050] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.627285] tasklet_action_common.constprop.0+0xa4/0x120\n[ 920.627522] handle_softirqs+0xc2/0x250\n[ 920.627728] ? sort_range+0x20/0x20\n[ 920.627942] run_ksoftirqd+0x1f/0x30\n[ 920.628158] smpboot_thread_fn+0xc7/0x1b0\n[ 920.628334] kthread+0xd6/0x100\n[ 920.628504] ? kthread_complete_and_exit+0x20/0x20\n[ 920.628709] ret_from_fork+0x1f/0x30\n[ 920.628892] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53229",
"url": "https://www.suse.com/security/cve/CVE-2024-53229"
},
{
"category": "external",
"summary": "SUSE Bug 1234905 for CVE-2024-53229",
"url": "https://bugzilla.suse.com/1234905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53229"
},
{
"cve": "CVE-2024-53230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference,\nso check NULL for cppc_get_cpu_cost().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53230",
"url": "https://www.suse.com/security/cve/CVE-2024-53230"
},
{
"category": "external",
"summary": "SUSE Bug 1235976 for CVE-2024-53230",
"url": "https://bugzilla.suse.com/1235976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53230"
},
{
"cve": "CVE-2024-53231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53231",
"url": "https://www.suse.com/security/cve/CVE-2024-53231"
},
{
"category": "external",
"summary": "SUSE Bug 1235977 for CVE-2024-53231",
"url": "https://bugzilla.suse.com/1235977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53231"
},
{
"cve": "CVE-2024-53232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Implement blocking domain\n\nThis fixes a crash when surprise hot-unplugging a PCI device. This crash\nhappens because during hot-unplug __iommu_group_set_domain_nofail()\nattaching the default domain fails when the platform no longer\nrecognizes the device as it has already been removed and we end up with\na NULL domain pointer and UAF. This is exactly the case referred to in\nthe second comment in __iommu_device_set_domain() and just as stated\nthere if we can instead attach the blocking domain the UAF is prevented\nas this can handle the already removed device. Implement the blocking\ndomain to use this handling. With this change, the crash is fixed but\nwe still hit a warning attempting to change DMA ownership on a blocked\ndevice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53232",
"url": "https://www.suse.com/security/cve/CVE-2024-53232"
},
{
"category": "external",
"summary": "SUSE Bug 1235050 for CVE-2024-53232",
"url": "https://bugzilla.suse.com/1235050"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53232"
},
{
"cve": "CVE-2024-53233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nunicode: Fix utf8_load() error path\n\nutf8_load() requests the symbol \"utf8_data_table\" and then checks if the\nrequested UTF-8 version is supported. If it\u0027s unsupported, it tries to\nput the data table using symbol_put(). If an unsupported version is\nrequested, symbol_put() fails like this:\n\n kernel BUG at kernel/module/main.c:786!\n RIP: 0010:__symbol_put+0x93/0xb0\n Call Trace:\n \u003cTASK\u003e\n ? __die_body.cold+0x19/0x27\n ? die+0x2e/0x50\n ? do_trap+0xca/0x110\n ? do_error_trap+0x65/0x80\n ? __symbol_put+0x93/0xb0\n ? exc_invalid_op+0x51/0x70\n ? __symbol_put+0x93/0xb0\n ? asm_exc_invalid_op+0x1a/0x20\n ? __pfx_cmp_name+0x10/0x10\n ? __symbol_put+0x93/0xb0\n ? __symbol_put+0x62/0xb0\n utf8_load+0xf8/0x150\n\nThat happens because symbol_put() expects the unique string that\nidentify the symbol, instead of a pointer to the loaded symbol. Fix that\nby using such string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53233",
"url": "https://www.suse.com/security/cve/CVE-2024-53233"
},
{
"category": "external",
"summary": "SUSE Bug 1235046 for CVE-2024-53233",
"url": "https://bugzilla.suse.com/1235046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53233"
},
{
"cve": "CVE-2024-53234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53234"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: handle NONHEAD !delta[1] lclusters gracefully\n\nsyzbot reported a WARNING in iomap_iter_done:\n iomap_fiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80\n ioctl_fiemap fs/ioctl.c:220 [inline]\n\nGenerally, NONHEAD lclusters won\u0027t have delta[1]==0, except for crafted\nimages and filesystems created by pre-1.0 mkfs versions.\n\nPreviously, it would immediately bail out if delta[1]==0, which led to\ninadequate decompressed lengths (thus FIEMAP is impacted). Treat it as\ndelta[1]=1 to work around these legacy mkfs versions.\n\n`lclusterbits \u003e 14` is illegal for compact indexes, error out too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53234",
"url": "https://www.suse.com/security/cve/CVE-2024-53234"
},
{
"category": "external",
"summary": "SUSE Bug 1235045 for CVE-2024-53234",
"url": "https://bugzilla.suse.com/1235045"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53234"
},
{
"cve": "CVE-2024-53236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Free skb when TX metadata options are invalid\n\nWhen a new skb is allocated for transmitting an xsk descriptor, i.e., for\nevery non-multibuf descriptor or the first frag of a multibuf descriptor,\nbut the descriptor is later found to have invalid options set for the TX\nmetadata, the new skb is never freed. This can leak skbs until the send\nbuffer is full which makes sending more packets impossible.\n\nFix this by freeing the skb in the error path if we are currently dealing\nwith the first frag, i.e., an skb allocated in this iteration of\nxsk_build_skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53236",
"url": "https://www.suse.com/security/cve/CVE-2024-53236"
},
{
"category": "external",
"summary": "SUSE Bug 1235000 for CVE-2024-53236",
"url": "https://bugzilla.suse.com/1235000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53236"
},
{
"cve": "CVE-2024-53237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53237"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix use-after-free in device_for_each_child()\n\nSyzbot has reported the following KASAN splat:\n\nBUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0\nRead of size 8 at addr ffff88801f605308 by task kbnepd bnep0/4980\n\nCPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Not tainted 6.12.0-rc4-00161-gae90f6a6170d #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x100/0x190\n ? device_for_each_child+0x18f/0x1a0\n print_report+0x13a/0x4cb\n ? __virt_addr_valid+0x5e/0x590\n ? __phys_addr+0xc6/0x150\n ? device_for_each_child+0x18f/0x1a0\n kasan_report+0xda/0x110\n ? device_for_each_child+0x18f/0x1a0\n ? __pfx_dev_memalloc_noio+0x10/0x10\n device_for_each_child+0x18f/0x1a0\n ? __pfx_device_for_each_child+0x10/0x10\n pm_runtime_set_memalloc_noio+0xf2/0x180\n netdev_unregister_kobject+0x1ed/0x270\n unregister_netdevice_many_notify+0x123c/0x1d80\n ? __mutex_trylock_common+0xde/0x250\n ? __pfx_unregister_netdevice_many_notify+0x10/0x10\n ? trace_contention_end+0xe6/0x140\n ? __mutex_lock+0x4e7/0x8f0\n ? __pfx_lock_acquire.part.0+0x10/0x10\n ? rcu_is_watching+0x12/0xc0\n ? unregister_netdev+0x12/0x30\n unregister_netdevice_queue+0x30d/0x3f0\n ? __pfx_unregister_netdevice_queue+0x10/0x10\n ? __pfx_down_write+0x10/0x10\n unregister_netdev+0x1c/0x30\n bnep_session+0x1fb3/0x2ab0\n ? __pfx_bnep_session+0x10/0x10\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_woken_wake_function+0x10/0x10\n ? __kthread_parkme+0x132/0x200\n ? __pfx_bnep_session+0x10/0x10\n ? kthread+0x13a/0x370\n ? __pfx_bnep_session+0x10/0x10\n kthread+0x2b7/0x370\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x48/0x80\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 4974:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n __kmalloc_noprof+0x1d1/0x440\n hci_alloc_dev_priv+0x1d/0x2820\n __vhci_create_device+0xef/0x7d0\n vhci_write+0x2c7/0x480\n vfs_write+0x6a0/0xfc0\n ksys_write+0x12f/0x260\n do_syscall_64+0xc7/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 4979:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x4f/0x70\n kfree+0x141/0x490\n hci_release_dev+0x4d9/0x600\n bt_host_release+0x6a/0xb0\n device_release+0xa4/0x240\n kobject_put+0x1ec/0x5a0\n put_device+0x1f/0x30\n vhci_release+0x81/0xf0\n __fput+0x3f6/0xb30\n task_work_run+0x151/0x250\n do_exit+0xa79/0x2c30\n do_group_exit+0xd5/0x2a0\n get_signal+0x1fcd/0x2210\n arch_do_signal_or_restart+0x93/0x780\n syscall_exit_to_user_mode+0x140/0x290\n do_syscall_64+0xd4/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nIn \u0027hci_conn_del_sysfs()\u0027, \u0027device_unregister()\u0027 may be called when\nan underlying (kobject) reference counter is greater than 1. This\nmeans that reparenting (happened when the device is actually freed)\nis delayed and, during that delay, parent controller device (hciX)\nmay be deleted. Since the latter may create a dangling pointer to\nfreed parent, avoid that scenario by reparenting to NULL explicitly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53237",
"url": "https://www.suse.com/security/cve/CVE-2024-53237"
},
{
"category": "external",
"summary": "SUSE Bug 1235007 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "external",
"summary": "SUSE Bug 1235008 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53237"
},
{
"cve": "CVE-2024-53239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: Release resources at card release\n\nThe current 6fire code tries to release the resources right after the\ncall of usb6fire_chip_abort(). But at this moment, the card object\nmight be still in use (as we\u0027re calling snd_card_free_when_closed()).\n\nFor avoid potential UAFs, move the release of resources to the card\u0027s\nprivate_free instead of the manual call of usb6fire_chip_destroy() at\nthe USB disconnect callback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53239",
"url": "https://www.suse.com/security/cve/CVE-2024-53239"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235054 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "external",
"summary": "SUSE Bug 1235055 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-53239"
},
{
"cve": "CVE-2024-53240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53240"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netfront: fix crash when removing device\n\nWhen removing a netfront device directly after a suspend/resume cycle\nit might happen that the queues have not been setup again, causing a\ncrash during the attempt to stop the queues another time.\n\nFix that by checking the queues are existing before trying to stop\nthem.\n\nThis is XSA-465 / CVE-2024-53240.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53240",
"url": "https://www.suse.com/security/cve/CVE-2024-53240"
},
{
"category": "external",
"summary": "SUSE Bug 1234281 for CVE-2024-53240",
"url": "https://bugzilla.suse.com/1234281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53240"
},
{
"cve": "CVE-2024-53241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53241"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: don\u0027t do PV iret hypercall through hypercall page\n\nInstead of jumping to the Xen hypercall page for doing the iret\nhypercall, directly code the required sequence in xen-asm.S.\n\nThis is done in preparation of no longer using hypercall page at all,\nas it has shown to cause problems with speculation mitigations.\n\nThis is part of XSA-466 / CVE-2024-53241.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53241",
"url": "https://www.suse.com/security/cve/CVE-2024-53241"
},
{
"category": "external",
"summary": "SUSE Bug 1234282 for CVE-2024-53241",
"url": "https://bugzilla.suse.com/1234282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53241"
},
{
"cve": "CVE-2024-53685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: give up on paths longer than PATH_MAX\n\nIf the full path to be built by ceph_mdsc_build_path() happens to be\nlonger than PATH_MAX, then this function will enter an endless (retry)\nloop, effectively blocking the whole task. Most of the machine\nbecomes unusable, making this a very simple and effective DoS\nvulnerability.\n\nI cannot imagine why this retry was ever implemented, but it seems\nrather useless and harmful to me. Let\u0027s remove it and fail with\nENAMETOOLONG instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53685",
"url": "https://www.suse.com/security/cve/CVE-2024-53685"
},
{
"category": "external",
"summary": "SUSE Bug 1235720 for CVE-2024-53685",
"url": "https://bugzilla.suse.com/1235720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53685"
},
{
"cve": "CVE-2024-53690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: prevent use of deleted inode\n\nsyzbot reported a WARNING in nilfs_rmdir. [1]\n\nBecause the inode bitmap is corrupted, an inode with an inode number that\nshould exist as a \".nilfs\" file was reassigned by nilfs_mkdir for \"file0\",\ncausing an inode duplication during execution. And this causes an\nunderflow of i_nlink in rmdir operations.\n\nThe inode is used twice by the same task to unmount and remove directories\n\".nilfs\" and \"file0\", it trigger warning in nilfs_rmdir.\n\nAvoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means\nthat this inode has been deleted, and iput is executed to reclaim it.\n\n[1]\nWARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407\n...\nCall Trace:\n \u003cTASK\u003e\n nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342\n vfs_rmdir+0x3a3/0x510 fs/namei.c:4394\n do_rmdir+0x3b5/0x580 fs/namei.c:4453\n __do_sys_rmdir fs/namei.c:4472 [inline]\n __se_sys_rmdir fs/namei.c:4470 [inline]\n __x64_sys_rmdir+0x47/0x50 fs/namei.c:4470\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53690",
"url": "https://www.suse.com/security/cve/CVE-2024-53690"
},
{
"category": "external",
"summary": "SUSE Bug 1235842 for CVE-2024-53690",
"url": "https://bugzilla.suse.com/1235842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-53690"
},
{
"cve": "CVE-2024-54680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-54680"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-54680",
"url": "https://www.suse.com/security/cve/CVE-2024-54680"
},
{
"category": "external",
"summary": "SUSE Bug 1235723 for CVE-2024-54680",
"url": "https://bugzilla.suse.com/1235723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-54680"
},
{
"cve": "CVE-2024-55639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55639"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: renesas: rswitch: avoid use-after-put for a device tree node\n\nThe device tree node saved in the rswitch_device structure is used at\nseveral driver locations. So passing this node to of_node_put() after\nthe first use is wrong.\n\nMove of_node_put() for this node to exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55639",
"url": "https://www.suse.com/security/cve/CVE-2024-55639"
},
{
"category": "external",
"summary": "SUSE Bug 1235737 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "external",
"summary": "SUSE Bug 1235738 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-55639"
},
{
"cve": "CVE-2024-55881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Play nice with protected guests in complete_hypercall_exit()\n\nUse is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit\nhypercall when completing said hypercall. For guests with protected state,\ne.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit\nmode as the vCPU state needed to detect 64-bit mode is unavailable.\n\nHacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE\nhypercall via VMGEXIT trips the WARN:\n\n ------------[ cut here ]------------\n WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm]\n Modules linked in: kvm_amd kvm ... [last unloaded: kvm]\n CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat #470\n Hardware name: Google Astoria/astoria, BIOS 0.20240617.0-0 06/17/2024\n RIP: 0010:complete_hypercall_exit+0x44/0xe0 [kvm]\n Call Trace:\n \u003cTASK\u003e\n kvm_arch_vcpu_ioctl_run+0x2400/0x2720 [kvm]\n kvm_vcpu_ioctl+0x54f/0x630 [kvm]\n __se_sys_ioctl+0x6b/0xc0\n do_syscall_64+0x83/0x160\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55881",
"url": "https://www.suse.com/security/cve/CVE-2024-55881"
},
{
"category": "external",
"summary": "SUSE Bug 1235745 for CVE-2024-55881",
"url": "https://bugzilla.suse.com/1235745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-55881"
},
{
"cve": "CVE-2024-55916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet\n\nIf the KVP (or VSS) daemon starts before the VMBus channel\u0027s ringbuffer is\nfully initialized, we can hit the panic below:\n\nhv_utils: Registering HyperV Utility Driver\nhv_vmbus: registering driver hv_utils\n...\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1\nRIP: 0010:hv_pkt_iter_first+0x12/0xd0\nCall Trace:\n...\n vmbus_recvpacket\n hv_kvp_onchannelcallback\n vmbus_on_event\n tasklet_action_common\n tasklet_action\n handle_softirqs\n irq_exit_rcu\n sysvec_hyperv_stimer0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_hyperv_stimer0\n...\n kvp_register_done\n hvt_op_read\n vfs_read\n ksys_read\n __x64_sys_read\n\nThis can happen because the KVP/VSS channel callback can be invoked\neven before the channel is fully opened:\n1) as soon as hv_kvp_init() -\u003e hvutil_transport_init() creates\n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and\nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the\nfile (which is handled by kvp_on_msg() -\u003ekvp_handle_handshake()) and\nreading the file for the driver\u0027s response, which is handled by\nhvt_op_read(), which calls hvt-\u003eon_read(), i.e. kvp_register_done().\n\n2) the problem with kvp_register_done() is that it can cause the\nchannel callback to be called even before the channel is fully opened,\nand when the channel callback is starting to run, util_probe()-\u003e\nvmbus_open() may have not initialized the ringbuffer yet, so the\ncallback can hit the panic of NULL pointer dereference.\n\nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in\n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we\nunload and reload the driver hv_utils, and run the daemon manually within\nthe 10 seconds.\n\nFix the panic by reordering the steps in util_probe() so the char dev\nentry used by the KVP or VSS daemon is not created until after\nvmbus_open() has completed. This reordering prevents the race condition\nfrom happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55916",
"url": "https://www.suse.com/security/cve/CVE-2024-55916"
},
{
"category": "external",
"summary": "SUSE Bug 1235747 for CVE-2024-55916",
"url": "https://bugzilla.suse.com/1235747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-55916"
},
{
"cve": "CVE-2024-56369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/modes: Avoid divide by zero harder in drm_mode_vrefresh()\n\ndrm_mode_vrefresh() is trying to avoid divide by zero\nby checking whether htotal or vtotal are zero. But we may\nstill end up with a div-by-zero of vtotal*htotal*...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56369",
"url": "https://www.suse.com/security/cve/CVE-2024-56369"
},
{
"category": "external",
"summary": "SUSE Bug 1235750 for CVE-2024-56369",
"url": "https://bugzilla.suse.com/1235750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56369"
},
{
"cve": "CVE-2024-56372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56372"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: fix tun_napi_alloc_frags()\n\nsyzbot reported the following crash [1]\n\nIssue came with the blamed commit. Instead of going through\nall the iov components, we keep using the first one\nand end up with a malformed skb.\n\n[1]\n\nkernel BUG at net/core/skbuff.c:2849 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6230 Comm: syz-executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\n RIP: 0010:__pskb_pull_tail+0x1568/0x1570 net/core/skbuff.c:2848\nCode: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 92 96 74 f8 e9 25 f1 ff ff e8 e8 ae 09 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 d9 ae 09 f8 90 \u003c0f\u003e 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90\nRSP: 0018:ffffc90004cbef30 EFLAGS: 00010293\nRAX: ffffffff8995c347 RBX: 00000000fffffff2 RCX: ffff88802cf45a00\nRDX: 0000000000000000 RSI: 00000000fffffff2 RDI: 0000000000000000\nRBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c\nR10: dffffc0000000000 R11: ffffed100fbe185d R12: ffff888076e85d50\nR13: ffff888076e85c80 R14: ffff888076e85cf4 R15: ffff888076e85c80\nFS: 00007f0dca6ea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f0dca6ead58 CR3: 00000000119da000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_cow_data+0x2da/0xcb0 net/core/skbuff.c:5284\n tipc_aead_decrypt net/tipc/crypto.c:894 [inline]\n tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.c:1844\n tipc_rcv+0x57e/0x12a0 net/tipc/node.c:2109\n tipc_l2_rcv_msg+0x2bd/0x450 net/tipc/bearer.c:668\n __netif_receive_skb_list_ptype net/core/dev.c:5720 [inline]\n __netif_receive_skb_list_core+0x8b7/0x980 net/core/dev.c:5762\n __netif_receive_skb_list net/core/dev.c:5814 [inline]\n netif_receive_skb_list_internal+0xa51/0xe30 net/core/dev.c:5905\n gro_normal_list include/net/gro.h:515 [inline]\n napi_complete_done+0x2b5/0x870 net/core/dev.c:6256\n napi_complete include/linux/netdevice.h:567 [inline]\n tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2057\n do_iter_readv_writev+0x600/0x880\n vfs_writev+0x376/0xba0 fs/read_write.c:1050\n do_writev+0x1b6/0x360 fs/read_write.c:1096\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56372",
"url": "https://www.suse.com/security/cve/CVE-2024-56372"
},
{
"category": "external",
"summary": "SUSE Bug 1235753 for CVE-2024-56372",
"url": "https://bugzilla.suse.com/1235753"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56372"
},
{
"cve": "CVE-2024-56531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56531"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThis patch also splits the code to the disconnect and the free phases;\nthe former is called immediately at the USB disconnect callback while\nthe latter is called from the card destructor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56531",
"url": "https://www.suse.com/security/cve/CVE-2024-56531"
},
{
"category": "external",
"summary": "SUSE Bug 1235057 for CVE-2024-56531",
"url": "https://bugzilla.suse.com/1235057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56531"
},
{
"cve": "CVE-2024-56532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: us122l: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThe loop of us122l-\u003emmap_count check is dropped as well. The check is\nuseless for the asynchronous operation with *_when_closed().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56532",
"url": "https://www.suse.com/security/cve/CVE-2024-56532"
},
{
"category": "external",
"summary": "SUSE Bug 1235059 for CVE-2024-56532",
"url": "https://bugzilla.suse.com/1235059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56533"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56533",
"url": "https://www.suse.com/security/cve/CVE-2024-56533"
},
{
"category": "external",
"summary": "SUSE Bug 1235053 for CVE-2024-56533",
"url": "https://bugzilla.suse.com/1235053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56536"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cw1200: Fix potential NULL dereference\n\nA recent refactoring was identified by static analysis to\ncause a potential NULL dereference, fix this!",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56536",
"url": "https://www.suse.com/security/cve/CVE-2024-56536"
},
{
"category": "external",
"summary": "SUSE Bug 1234911 for CVE-2024-56536",
"url": "https://bugzilla.suse.com/1234911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56536"
},
{
"cve": "CVE-2024-56538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56538"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: zynqmp_kms: Unplug DRM device before removal\n\nPrevent userspace accesses to the DRM device from causing\nuse-after-frees by unplugging the device before we remove it. This\ncauses any further userspace accesses to result in an error without\nfurther calls into this driver\u0027s internals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56538",
"url": "https://www.suse.com/security/cve/CVE-2024-56538"
},
{
"category": "external",
"summary": "SUSE Bug 1235051 for CVE-2024-56538",
"url": "https://bugzilla.suse.com/1235051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56538"
},
{
"cve": "CVE-2024-56539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56539"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()\n\nReplace one-element array with a flexible-array member in `struct\nmwifiex_ie_types_wildcard_ssid_params` to fix the following warning\non a MT8173 Chromebook (mt8173-elm-hana):\n\n[ 356.775250] ------------[ cut here ]------------\n[ 356.784543] memcpy: detected field-spanning write (size 6) of single field \"wildcard_ssid_tlv-\u003essid\" at drivers/net/wireless/marvell/mwifiex/scan.c:904 (size 1)\n[ 356.813403] WARNING: CPU: 3 PID: 742 at drivers/net/wireless/marvell/mwifiex/scan.c:904 mwifiex_scan_networks+0x4fc/0xf28 [mwifiex]\n\nThe \"(size 6)\" above is exactly the length of the SSID of the network\nthis device was connected to. The source of the warning looks like:\n\n ssid_len = user_scan_in-\u003essid_list[i].ssid_len;\n [...]\n memcpy(wildcard_ssid_tlv-\u003essid,\n user_scan_in-\u003essid_list[i].ssid, ssid_len);\n\nThere is a #define WILDCARD_SSID_TLV_MAX_SIZE that uses sizeof() on this\nstruct, but it already didn\u0027t account for the size of the one-element\narray, so it doesn\u0027t need to be changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56539",
"url": "https://www.suse.com/security/cve/CVE-2024-56539"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234963 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "external",
"summary": "SUSE Bug 1234964 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56539"
},
{
"cve": "CVE-2024-56543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56543"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Skip Rx TID cleanup for self peer\n\nDuring peer create, dp setup for the peer is done where Rx TID is\nupdated for all the TIDs. Peer object for self peer will not go through\ndp setup.\n\nWhen core halts, dp cleanup is done for all the peers. While cleanup,\nrx_tid::ab is accessed which causes below stack trace for self peer.\n\nWARNING: CPU: 6 PID: 12297 at drivers/net/wireless/ath/ath12k/dp_rx.c:851\nCall Trace:\n__warn+0x7b/0x1a0\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nreport_bug+0x10b/0x200\nhandle_bug+0x3f/0x70\nexc_invalid_op+0x13/0x60\nasm_exc_invalid_op+0x16/0x20\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nath12k_dp_rx_frags_cleanup+0xca/0xe0 [ath12k]\nath12k_dp_rx_peer_tid_cleanup+0x39/0xa0 [ath12k]\nath12k_mac_peer_cleanup_all+0x61/0x100 [ath12k]\nath12k_core_halt+0x3b/0x100 [ath12k]\nath12k_core_reset+0x494/0x4c0 [ath12k]\n\nsta object in peer will be updated when remote peer is created. Hence\nuse peer::sta to detect the self peer and skip the cleanup.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56543",
"url": "https://www.suse.com/security/cve/CVE-2024-56543"
},
{
"category": "external",
"summary": "SUSE Bug 1235065 for CVE-2024-56543",
"url": "https://bugzilla.suse.com/1235065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56543"
},
{
"cve": "CVE-2024-56546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56546"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()\n\nIf we fail to allocate memory for cb_data by kmalloc, the memory\nallocation for eve_data is never freed, add the missing kfree()\nin the error handling path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56546",
"url": "https://www.suse.com/security/cve/CVE-2024-56546"
},
{
"category": "external",
"summary": "SUSE Bug 1235070 for CVE-2024-56546",
"url": "https://bugzilla.suse.com/1235070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56546"
},
{
"cve": "CVE-2024-56548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56548"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: don\u0027t query the device logical block size multiple times\n\nDevices block sizes may change. One of these cases is a loop device by\nusing ioctl LOOP_SET_BLOCK_SIZE.\n\nWhile this may cause other issues like IO being rejected, in the case of\nhfsplus, it will allocate a block by using that size and potentially write\nout-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the\nlatter function reads a different io_size.\n\nUsing a new min_io_size initally set to sb_min_blocksize works for the\npurposes of the original fix, since it will be set to the max between\nHFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the\nmax between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not\ninitialized.\n\nTested by mounting an hfsplus filesystem with loop block sizes 512, 1024\nand 4096.\n\nThe produced KASAN report before the fix looks like this:\n\n[ 419.944641] ==================================================================\n[ 419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a\n[ 419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678\n[ 419.947612]\n[ 419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84\n[ 419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[ 419.950035] Call Trace:\n[ 419.950384] \u003cTASK\u003e\n[ 419.950676] dump_stack_lvl+0x57/0x78\n[ 419.951212] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.951830] print_report+0x14c/0x49e\n[ 419.952361] ? __virt_addr_valid+0x267/0x278\n[ 419.952979] ? kmem_cache_debug_flags+0xc/0x1d\n[ 419.953561] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.954231] kasan_report+0x89/0xb0\n[ 419.954748] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955367] hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955948] ? __pfx_hfsplus_read_wrapper+0x10/0x10\n[ 419.956618] ? do_raw_spin_unlock+0x59/0x1a9\n[ 419.957214] ? _raw_spin_unlock+0x1a/0x2e\n[ 419.957772] hfsplus_fill_super+0x348/0x1590\n[ 419.958355] ? hlock_class+0x4c/0x109\n[ 419.958867] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.959499] ? __pfx_string+0x10/0x10\n[ 419.960006] ? lock_acquire+0x3e2/0x454\n[ 419.960532] ? bdev_name.constprop.0+0xce/0x243\n[ 419.961129] ? __pfx_bdev_name.constprop.0+0x10/0x10\n[ 419.961799] ? pointer+0x3f0/0x62f\n[ 419.962277] ? __pfx_pointer+0x10/0x10\n[ 419.962761] ? vsnprintf+0x6c4/0xfba\n[ 419.963178] ? __pfx_vsnprintf+0x10/0x10\n[ 419.963621] ? setup_bdev_super+0x376/0x3b3\n[ 419.964029] ? snprintf+0x9d/0xd2\n[ 419.964344] ? __pfx_snprintf+0x10/0x10\n[ 419.964675] ? lock_acquired+0x45c/0x5e9\n[ 419.965016] ? set_blocksize+0x139/0x1c1\n[ 419.965381] ? sb_set_blocksize+0x6d/0xae\n[ 419.965742] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.966179] mount_bdev+0x12f/0x1bf\n[ 419.966512] ? __pfx_mount_bdev+0x10/0x10\n[ 419.966886] ? vfs_parse_fs_string+0xce/0x111\n[ 419.967293] ? __pfx_vfs_parse_fs_string+0x10/0x10\n[ 419.967702] ? __pfx_hfsplus_mount+0x10/0x10\n[ 419.968073] legacy_get_tree+0x104/0x178\n[ 419.968414] vfs_get_tree+0x86/0x296\n[ 419.968751] path_mount+0xba3/0xd0b\n[ 419.969157] ? __pfx_path_mount+0x10/0x10\n[ 419.969594] ? kmem_cache_free+0x1e2/0x260\n[ 419.970311] do_mount+0x99/0xe0\n[ 419.970630] ? __pfx_do_mount+0x10/0x10\n[ 419.971008] __do_sys_mount+0x199/0x1c9\n[ 419.971397] do_syscall_64+0xd0/0x135\n[ 419.971761] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 419.972233] RIP: 0033:0x7c3cb812972e\n[ 419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48\n[ 419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5\n[ 419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e\n[ 419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56548",
"url": "https://www.suse.com/security/cve/CVE-2024-56548"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235073 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "external",
"summary": "SUSE Bug 1235074 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56548"
},
{
"cve": "CVE-2024-56549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56549"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: Fix NULL pointer dereference in object-\u003efile\n\nAt present, the object-\u003efile has the NULL pointer dereference problem in\nondemand-mode. The root cause is that the allocated fd and object-\u003efile\nlifetime are inconsistent, and the user-space invocation to anon_fd uses\nobject-\u003efile. Following is the process that triggers the issue:\n\n\t [write fd]\t\t\t\t[umount]\ncachefiles_ondemand_fd_write_iter\n\t\t\t\t fscache_cookie_state_machine\n\t\t\t\t\t cachefiles_withdraw_cookie\n if (!file) return -ENOBUFS\n\t\t\t\t\t cachefiles_clean_up_object\n\t\t\t\t\t cachefiles_unmark_inode_in_use\n\t\t\t\t\t fput(object-\u003efile)\n\t\t\t\t\t object-\u003efile = NULL\n // file NULL pointer dereference!\n __cachefiles_write(..., file, ...)\n\nFix this issue by add an additional reference count to the object-\u003efile\nbefore write/llseek, and decrement after it finished.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56549",
"url": "https://www.suse.com/security/cve/CVE-2024-56549"
},
{
"category": "external",
"summary": "SUSE Bug 1234912 for CVE-2024-56549",
"url": "https://bugzilla.suse.com/1234912"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56549"
},
{
"cve": "CVE-2024-56551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56551"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix usage slab after free\n\n[ +0.000021] BUG: KASAN: slab-use-after-free in drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000027] Read of size 8 at addr ffff8881b8605f88 by task amd_pci_unplug/2147\n\n[ +0.000023] CPU: 6 PID: 2147 Comm: amd_pci_unplug Not tainted 6.10.0+ #1\n[ +0.000016] Hardware name: ASUS System Product Name/ROG STRIX B550-F GAMING (WI-FI), BIOS 1401 12/03/2020\n[ +0.000016] Call Trace:\n[ +0.000008] \u003cTASK\u003e\n[ +0.000009] dump_stack_lvl+0x76/0xa0\n[ +0.000017] print_report+0xce/0x5f0\n[ +0.000017] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] ? srso_return_thunk+0x5/0x5f\n[ +0.000015] ? kasan_complete_mode_report_info+0x72/0x200\n[ +0.000016] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] kasan_report+0xbe/0x110\n[ +0.000015] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000023] __asan_report_load8_noabort+0x14/0x30\n[ +0.000014] drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000016] ? __pfx_drm_sched_entity_flush+0x10/0x10 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? enable_work+0x124/0x220\n[ +0.000015] ? __pfx_enable_work+0x10/0x10\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? free_large_kmalloc+0x85/0xf0\n[ +0.000016] drm_sched_entity_destroy+0x18/0x30 [gpu_sched]\n[ +0.000020] amdgpu_vce_sw_fini+0x55/0x170 [amdgpu]\n[ +0.000735] ? __kasan_check_read+0x11/0x20\n[ +0.000016] vce_v4_0_sw_fini+0x80/0x110 [amdgpu]\n[ +0.000726] amdgpu_device_fini_sw+0x331/0xfc0 [amdgpu]\n[ +0.000679] ? mutex_unlock+0x80/0xe0\n[ +0.000017] ? __pfx_amdgpu_device_fini_sw+0x10/0x10 [amdgpu]\n[ +0.000662] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? mutex_unlock+0x80/0xe0\n[ +0.000016] amdgpu_driver_release_kms+0x16/0x80 [amdgpu]\n[ +0.000663] drm_minor_release+0xc9/0x140 [drm]\n[ +0.000081] drm_release+0x1fd/0x390 [drm]\n[ +0.000082] __fput+0x36c/0xad0\n[ +0.000018] __fput_sync+0x3c/0x50\n[ +0.000014] __x64_sys_close+0x7d/0xe0\n[ +0.000014] x64_sys_call+0x1bc6/0x2680\n[ +0.000014] do_syscall_64+0x70/0x130\n[ +0.000014] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit_to_user_mode+0x60/0x190\n[ +0.000015] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit+0x43/0x50\n[ +0.000012] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? exc_page_fault+0x7c/0x110\n[ +0.000015] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ +0.000014] RIP: 0033:0x7ffff7b14f67\n[ +0.000013] Code: ff e8 0d 16 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 03 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 73 ba f7 ff\n[ +0.000026] RSP: 002b:00007fffffffe378 EFLAGS: 00000246 ORIG_RAX: 0000000000000003\n[ +0.000019] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffff7b14f67\n[ +0.000014] RDX: 0000000000000000 RSI: 00007ffff7f6f47a RDI: 0000000000000003\n[ +0.000014] RBP: 00007fffffffe3a0 R08: 0000555555569890 R09: 0000000000000000\n[ +0.000014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffffffe5c8\n[ +0.000013] R13: 00005555555552a9 R14: 0000555555557d48 R15: 00007ffff7ffd040\n[ +0.000020] \u003c/TASK\u003e\n\n[ +0.000016] Allocated by task 383 on cpu 7 at 26.880319s:\n[ +0.000014] kasan_save_stack+0x28/0x60\n[ +0.000008] kasan_save_track+0x18/0x70\n[ +0.000007] kasan_save_alloc_info+0x38/0x60\n[ +0.000007] __kasan_kmalloc+0xc1/0xd0\n[ +0.000007] kmalloc_trace_noprof+0x180/0x380\n[ +0.000007] drm_sched_init+0x411/0xec0 [gpu_sched]\n[ +0.000012] amdgpu_device_init+0x695f/0xa610 [amdgpu]\n[ +0.000658] amdgpu_driver_load_kms+0x1a/0x120 [amdgpu]\n[ +0.000662] amdgpu_pci_p\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56551",
"url": "https://www.suse.com/security/cve/CVE-2024-56551"
},
{
"category": "external",
"summary": "SUSE Bug 1235075 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "external",
"summary": "SUSE Bug 1235102 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56551"
},
{
"cve": "CVE-2024-56557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56557"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer\n\nThe AD7923 was updated to support devices with 8 channels, but the size\nof tx_buf and ring_xfer was not increased accordingly, leading to a\npotential buffer overflow in ad7923_update_scan_mode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56557",
"url": "https://www.suse.com/security/cve/CVE-2024-56557"
},
{
"category": "external",
"summary": "SUSE Bug 1235122 for CVE-2024-56557",
"url": "https://bugzilla.suse.com/1235122"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56557"
},
{
"cve": "CVE-2024-56558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56558"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: make sure exp active before svc_export_show\n\nThe function `e_show` was called with protection from RCU. This only\nensures that `exp` will not be freed. Therefore, the reference count for\n`exp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `exp_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `exp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 3 PID: 819 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n...\nCall Trace:\n \u003cTASK\u003e\n e_show+0x20b/0x230 [nfsd]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56558",
"url": "https://www.suse.com/security/cve/CVE-2024-56558"
},
{
"category": "external",
"summary": "SUSE Bug 1235100 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "external",
"summary": "SUSE Bug 1243648 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1243648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56558"
},
{
"cve": "CVE-2024-56562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56562"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()\n\nif (dev-\u003eboardinfo \u0026\u0026 dev-\u003eboardinfo-\u003einit_dyn_addr)\n ^^^ here check \"init_dyn_addr\"\n\ti3c_bus_set_addr_slot_status(\u0026master-\u003ebus, dev-\u003einfo.dyn_addr, ...)\n\t\t\t\t\t\t ^^^^\n\t\t\t\t\t\t\tfree \"dyn_addr\"\nFix copy/paste error \"dyn_addr\" by replacing it with \"init_dyn_addr\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56562",
"url": "https://www.suse.com/security/cve/CVE-2024-56562"
},
{
"category": "external",
"summary": "SUSE Bug 1234930 for CVE-2024-56562",
"url": "https://bugzilla.suse.com/1234930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56562"
},
{
"cve": "CVE-2024-56566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56566"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slub: Avoid list corruption when removing a slab from the full list\n\nBoot with slub_debug=UFPZ.\n\nIf allocated object failed in alloc_consistency_checks, all objects of\nthe slab will be marked as used, and then the slab will be removed from\nthe partial list.\n\nWhen an object belonging to the slab got freed later, the remove_full()\nfunction is called. Because the slab is neither on the partial list nor\non the full list, it eventually lead to a list corruption (actually a\nlist poison being detected).\n\nSo we need to mark and isolate the slab page with metadata corruption,\ndo not put it back in circulation.\n\nBecause the debug caches avoid all the fastpaths, reusing the frozen bit\nto mark slab page with metadata corruption seems to be fine.\n\n[ 4277.385669] list_del corruption, ffffea00044b3e50-\u003enext is LIST_POISON1 (dead000000000100)\n[ 4277.387023] ------------[ cut here ]------------\n[ 4277.387880] kernel BUG at lib/list_debug.c:56!\n[ 4277.388680] invalid opcode: 0000 [#1] PREEMPT SMP PTI\n[ 4277.389562] CPU: 5 PID: 90 Comm: kworker/5:1 Kdump: loaded Tainted: G OE 6.6.1-1 #1\n[ 4277.392113] Workqueue: xfs-inodegc/vda1 xfs_inodegc_worker [xfs]\n[ 4277.393551] RIP: 0010:__list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.394518] Code: 48 91 82 e8 37 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 28 49 91 82 e8 26 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 58 49 91\n[ 4277.397292] RSP: 0018:ffffc90000333b38 EFLAGS: 00010082\n[ 4277.398202] RAX: 000000000000004e RBX: ffffea00044b3e50 RCX: 0000000000000000\n[ 4277.399340] RDX: 0000000000000002 RSI: ffffffff828f8715 RDI: 00000000ffffffff\n[ 4277.400545] RBP: ffffea00044b3e40 R08: 0000000000000000 R09: ffffc900003339f0\n[ 4277.401710] R10: 0000000000000003 R11: ffffffff82d44088 R12: ffff888112cf9910\n[ 4277.402887] R13: 0000000000000001 R14: 0000000000000001 R15: ffff8881000424c0\n[ 4277.404049] FS: 0000000000000000(0000) GS:ffff88842fd40000(0000) knlGS:0000000000000000\n[ 4277.405357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4277.406389] CR2: 00007f2ad0b24000 CR3: 0000000102a3a006 CR4: 00000000007706e0\n[ 4277.407589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 4277.408780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 4277.410000] PKRU: 55555554\n[ 4277.410645] Call Trace:\n[ 4277.411234] \u003cTASK\u003e\n[ 4277.411777] ? die+0x32/0x80\n[ 4277.412439] ? do_trap+0xd6/0x100\n[ 4277.413150] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.414158] ? do_error_trap+0x6a/0x90\n[ 4277.414948] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.415915] ? exc_invalid_op+0x4c/0x60\n[ 4277.416710] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.417675] ? asm_exc_invalid_op+0x16/0x20\n[ 4277.418482] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.419466] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.420410] free_to_partial_list+0x515/0x5e0\n[ 4277.421242] ? xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.422298] xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.423316] ? xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.424383] xfs_bmap_del_extent_delay+0x4fe/0x7d0 [xfs]\n[ 4277.425490] __xfs_bunmapi+0x50d/0x840 [xfs]\n[ 4277.426445] xfs_itruncate_extents_flags+0x13a/0x490 [xfs]\n[ 4277.427553] xfs_inactive_truncate+0xa3/0x120 [xfs]\n[ 4277.428567] xfs_inactive+0x22d/0x290 [xfs]\n[ 4277.429500] xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.430479] process_one_work+0x171/0x340\n[ 4277.431227] worker_thread+0x277/0x390\n[ 4277.431962] ? __pfx_worker_thread+0x10/0x10\n[ 4277.432752] kthread+0xf0/0x120\n[ 4277.433382] ? __pfx_kthread+0x10/0x10\n[ 4277.434134] ret_from_fork+0x2d/0x50\n[ 4277.434837] ? __pfx_kthread+0x10/0x10\n[ 4277.435566] ret_from_fork_asm+0x1b/0x30\n[ 4277.436280] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56566",
"url": "https://www.suse.com/security/cve/CVE-2024-56566"
},
{
"category": "external",
"summary": "SUSE Bug 1235033 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "external",
"summary": "SUSE Bug 1235034 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56566"
},
{
"cve": "CVE-2024-56567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56567"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nad7780: fix division by zero in ad7780_write_raw()\n\nIn the ad7780_write_raw() , val2 can be zero, which might lead to a\ndivision by zero error in DIV_ROUND_CLOSEST(). The ad7780_write_raw()\nis based on iio_info\u0027s write_raw. While val is explicitly declared that\ncan be zero (in read mode), val2 is not specified to be non-zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56567",
"url": "https://www.suse.com/security/cve/CVE-2024-56567"
},
{
"category": "external",
"summary": "SUSE Bug 1234916 for CVE-2024-56567",
"url": "https://bugzilla.suse.com/1234916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56567"
},
{
"cve": "CVE-2024-56568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56568"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Defer probe of clients after smmu device bound\n\nNull pointer dereference occurs due to a race between smmu\ndriver probe and client driver probe, when of_dma_configure()\nfor client is called after the iommu_device_register() for smmu driver\nprobe has executed but before the driver_bound() for smmu driver\nhas been called.\n\nFollowing is how the race occurs:\n\nT1:Smmu device probe\t\tT2: Client device probe\n\nreally_probe()\narm_smmu_device_probe()\niommu_device_register()\n\t\t\t\t\treally_probe()\n\t\t\t\t\tplatform_dma_configure()\n\t\t\t\t\tof_dma_configure()\n\t\t\t\t\tof_dma_configure_id()\n\t\t\t\t\tof_iommu_configure()\n\t\t\t\t\tiommu_probe_device()\n\t\t\t\t\tiommu_init_device()\n\t\t\t\t\tarm_smmu_probe_device()\n\t\t\t\t\tarm_smmu_get_by_fwnode()\n\t\t\t\t\t\tdriver_find_device_by_fwnode()\n\t\t\t\t\t\tdriver_find_device()\n\t\t\t\t\t\tnext_device()\n\t\t\t\t\t\tklist_next()\n\t\t\t\t\t\t /* null ptr\n\t\t\t\t\t\t assigned to smmu */\n\t\t\t\t\t/* null ptr dereference\n\t\t\t\t\t while smmu-\u003estreamid_mask */\ndriver_bound()\n\tklist_add_tail()\n\nWhen this null smmu pointer is dereferenced later in\narm_smmu_probe_device, the device crashes.\n\nFix this by deferring the probe of the client device\nuntil the smmu device has bound to the arm smmu driver.\n\n[will: Add comment]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56568",
"url": "https://www.suse.com/security/cve/CVE-2024-56568"
},
{
"category": "external",
"summary": "SUSE Bug 1235032 for CVE-2024-56568",
"url": "https://bugzilla.suse.com/1235032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56568"
},
{
"cve": "CVE-2024-56569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix regression with module command in stack_trace_filter\n\nWhen executing the following command:\n\n # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter\n\nThe current mod command causes a null pointer dereference. While commit\n0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\")\nhas addressed part of the issue, it left a corner case unhandled, which still\nresults in a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56569",
"url": "https://www.suse.com/security/cve/CVE-2024-56569"
},
{
"category": "external",
"summary": "SUSE Bug 1235031 for CVE-2024-56569",
"url": "https://bugzilla.suse.com/1235031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: Filter invalid inodes with missing lookup function\n\nAdd a check to the ovl_dentry_weird() function to prevent the\nprocessing of directory inodes that lack the lookup function.\nThis is important because such inodes can cause errors in overlayfs\nwhen passed to the lowerstack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56570",
"url": "https://www.suse.com/security/cve/CVE-2024-56570"
},
{
"category": "external",
"summary": "SUSE Bug 1235035 for CVE-2024-56570",
"url": "https://bugzilla.suse.com/1235035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56571"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56571",
"url": "https://www.suse.com/security/cve/CVE-2024-56571"
},
{
"category": "external",
"summary": "SUSE Bug 1235037 for CVE-2024-56571",
"url": "https://bugzilla.suse.com/1235037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56571"
},
{
"cve": "CVE-2024-56572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56572"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()\n\nThe buffer in the loop should be released under the exception path,\notherwise there may be a memory leak here.\n\nTo mitigate this, free the buffer when allegro_alloc_buffer fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56572",
"url": "https://www.suse.com/security/cve/CVE-2024-56572"
},
{
"category": "external",
"summary": "SUSE Bug 1235043 for CVE-2024-56572",
"url": "https://bugzilla.suse.com/1235043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56572"
},
{
"cve": "CVE-2024-56573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56573"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/libstub: Free correct pointer on failure\n\ncmdline_ptr is an out parameter, which is not allocated by the function\nitself, and likely points into the caller\u0027s stack.\n\ncmdline refers to the pool allocation that should be freed when cleaning\nup after a failure, so pass this instead to free_pool().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56573",
"url": "https://www.suse.com/security/cve/CVE-2024-56573"
},
{
"category": "external",
"summary": "SUSE Bug 1235042 for CVE-2024-56573",
"url": "https://bugzilla.suse.com/1235042"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56573"
},
{
"cve": "CVE-2024-56574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56574"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ts2020: fix null-ptr-deref in ts2020_probe()\n\nKASAN reported a null-ptr-deref issue when executing the following\ncommand:\n\n # echo ts2020 0x20 \u003e /sys/bus/i2c/devices/i2c-0/new_device\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]\n RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809\n RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010\n RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6\n R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790\n R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001\n FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n ts2020_probe+0xad/0xe10 [ts2020]\n i2c_device_probe+0x421/0xb40\n really_probe+0x266/0x850\n ...\n\nThe cause of the problem is that when using sysfs to dynamically register\nan i2c device, there is no platform data, but the probe process of ts2020\nneeds to use platform data, resulting in a null pointer being accessed.\n\nSolve this problem by adding checks to platform data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56574",
"url": "https://www.suse.com/security/cve/CVE-2024-56574"
},
{
"category": "external",
"summary": "SUSE Bug 1235040 for CVE-2024-56574",
"url": "https://bugzilla.suse.com/1235040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56575"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Ensure power suppliers be suspended before detach them\n\nThe power suppliers are always requested to suspend asynchronously,\ndev_pm_domain_detach() requires the caller to ensure proper\nsynchronization of this function with power management callbacks.\notherwise the detach may led to kernel panic, like below:\n\n[ 1457.107934] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000040\n[ 1457.116777] Mem abort info:\n[ 1457.119589] ESR = 0x0000000096000004\n[ 1457.123358] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 1457.128692] SET = 0, FnV = 0\n[ 1457.131764] EA = 0, S1PTW = 0\n[ 1457.134920] FSC = 0x04: level 0 translation fault\n[ 1457.139812] Data abort info:\n[ 1457.142707] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 1457.148196] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 1457.153256] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 1457.158563] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001138b6000\n[ 1457.165000] [0000000000000040] pgd=0000000000000000, p4d=0000000000000000\n[ 1457.171792] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 1457.178045] Modules linked in: v4l2_jpeg wave6_vpu_ctrl(-) [last unloaded: mxc_jpeg_encdec]\n[ 1457.186383] CPU: 0 PID: 51938 Comm: kworker/0:3 Not tainted 6.6.36-gd23d64eea511 #66\n[ 1457.194112] Hardware name: NXP i.MX95 19X19 board (DT)\n[ 1457.199236] Workqueue: pm pm_runtime_work\n[ 1457.203247] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 1457.210188] pc : genpd_runtime_suspend+0x20/0x290\n[ 1457.214886] lr : __rpm_callback+0x48/0x1d8\n[ 1457.218968] sp : ffff80008250bc50\n[ 1457.222270] x29: ffff80008250bc50 x28: 0000000000000000 x27: 0000000000000000\n[ 1457.229394] x26: 0000000000000000 x25: 0000000000000008 x24: 00000000000f4240\n[ 1457.236518] x23: 0000000000000000 x22: ffff00008590f0e4 x21: 0000000000000008\n[ 1457.243642] x20: ffff80008099c434 x19: ffff00008590f000 x18: ffffffffffffffff\n[ 1457.250766] x17: 5300326563697665 x16: 645f676e696c6f6f x15: 63343a6d726f6674\n[ 1457.257890] x14: 0000000000000004 x13: 00000000000003a4 x12: 0000000000000002\n[ 1457.265014] x11: 0000000000000000 x10: 0000000000000a60 x9 : ffff80008250bbb0\n[ 1457.272138] x8 : ffff000092937200 x7 : ffff0003fdf6af80 x6 : 0000000000000000\n[ 1457.279262] x5 : 00000000410fd050 x4 : 0000000000200000 x3 : 0000000000000000\n[ 1457.286386] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008590f000\n[ 1457.293510] Call trace:\n[ 1457.295946] genpd_runtime_suspend+0x20/0x290\n[ 1457.300296] __rpm_callback+0x48/0x1d8\n[ 1457.304038] rpm_callback+0x6c/0x78\n[ 1457.307515] rpm_suspend+0x10c/0x570\n[ 1457.311077] pm_runtime_work+0xc4/0xc8\n[ 1457.314813] process_one_work+0x138/0x248\n[ 1457.318816] worker_thread+0x320/0x438\n[ 1457.322552] kthread+0x110/0x114\n[ 1457.325767] ret_from_fork+0x10/0x20",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56575",
"url": "https://www.suse.com/security/cve/CVE-2024-56575"
},
{
"category": "external",
"summary": "SUSE Bug 1235039 for CVE-2024-56575",
"url": "https://bugzilla.suse.com/1235039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56575"
},
{
"cve": "CVE-2024-56576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56576"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: tc358743: Fix crash in the probe error path when using polling\n\nIf an error occurs in the probe() function, we should remove the polling\ntimer that was alarmed earlier, otherwise the timer is called with\narguments that are already freed, which results in a crash.\n\n------------[ cut here ]------------\nWARNING: CPU: 3 PID: 0 at kernel/time/timer.c:1830 __run_timers+0x244/0x268\nModules linked in:\nCPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0 #226\nHardware name: Diasom DS-RK3568-SOM-EVB (DT)\npstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __run_timers+0x244/0x268\nlr : __run_timers+0x1d4/0x268\nsp : ffffff80eff2baf0\nx29: ffffff80eff2bb50 x28: 7fffffffffffffff x27: ffffff80eff2bb00\nx26: ffffffc080f669c0 x25: ffffff80efef6bf0 x24: ffffff80eff2bb00\nx23: 0000000000000000 x22: dead000000000122 x21: 0000000000000000\nx20: ffffff80efef6b80 x19: ffffff80041c8bf8 x18: ffffffffffffffff\nx17: ffffffc06f146000 x16: ffffff80eff27dc0 x15: 000000000000003e\nx14: 0000000000000000 x13: 00000000000054da x12: 0000000000000000\nx11: 00000000000639c0 x10: 000000000000000c x9 : 0000000000000009\nx8 : ffffff80eff2cb40 x7 : ffffff80eff2cb40 x6 : ffffff8002bee480\nx5 : ffffffc080cb2220 x4 : ffffffc080cb2150 x3 : 00000000000f4240\nx2 : 0000000000000102 x1 : ffffff80eff2bb00 x0 : ffffff80041c8bf0\nCall trace:\n __run_timers+0x244/0x268\n timer_expire_remote+0x50/0x68\n tmigr_handle_remote+0x388/0x39c\n run_timer_softirq+0x38/0x44\n handle_softirqs+0x138/0x298\n __do_softirq+0x14/0x20\n ____do_softirq+0x10/0x1c\n call_on_irq_stack+0x24/0x4c\n do_softirq_own_stack+0x1c/0x2c\n irq_exit_rcu+0x9c/0xcc\n el1_interrupt+0x48/0xc0\n el1h_64_irq_handler+0x18/0x24\n el1h_64_irq+0x7c/0x80\n default_idle_call+0x34/0x68\n do_idle+0x23c/0x294\n cpu_startup_entry+0x38/0x3c\n secondary_start_kernel+0x128/0x160\n __secondary_switched+0xb8/0xbc\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56576",
"url": "https://www.suse.com/security/cve/CVE-2024-56576"
},
{
"category": "external",
"summary": "SUSE Bug 1235019 for CVE-2024-56576",
"url": "https://bugzilla.suse.com/1235019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56576"
},
{
"cve": "CVE-2024-56577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56577"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-jpeg: Fix null-ptr-deref during unload module\n\nThe workqueue should be destroyed in mtk_jpeg_core.c since commit\n09aea13ecf6f (\"media: mtk-jpeg: refactor some variables\"), otherwise\nthe below calltrace can be easily triggered.\n\n[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023\n[ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]\n...\n[ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17\n...\n[ 677.882838] pc : destroy_workqueue+0x3c/0x770\n[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.884314] sp : ffff80008ad974f0\n[ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070\n[ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690\n[ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff800000000000\n[ 677.887515] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800085397ac0\n[ 677.888438] x17: 0000000000000000 x16: ffff8000801b87c8 x15: 1ffff000115b2e10\n[ 677.889361] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d\n[ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90\n[ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001\n[ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000\n[ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118\n[ 677.893977] Call trace:\n[ 677.894297] destroy_workqueue+0x3c/0x770\n[ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.895677] devm_action_release+0x50/0x90\n[ 677.896211] release_nodes+0xe8/0x170\n[ 677.896688] devres_release_all+0xf8/0x178\n[ 677.897219] device_unbind_cleanup+0x24/0x170\n[ 677.897785] device_release_driver_internal+0x35c/0x480\n[ 677.898461] device_release_driver+0x20/0x38\n...\n[ 677.912665] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56577",
"url": "https://www.suse.com/security/cve/CVE-2024-56577"
},
{
"category": "external",
"summary": "SUSE Bug 1235112 for CVE-2024-56577",
"url": "https://bugzilla.suse.com/1235112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56577"
},
{
"cve": "CVE-2024-56578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Set video drvdata before register video device\n\nThe video drvdata should be set before the video device is registered,\notherwise video_drvdata() may return NULL in the open() file ops, and led\nto oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56578",
"url": "https://www.suse.com/security/cve/CVE-2024-56578"
},
{
"category": "external",
"summary": "SUSE Bug 1235115 for CVE-2024-56578",
"url": "https://bugzilla.suse.com/1235115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56578"
},
{
"cve": "CVE-2024-56582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56582"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free in btrfs_encoded_read_endio()\n\nShinichiro reported the following use-after free that sometimes is\nhappening in our CI system when running fstests\u0027 btrfs/284 on a TCMU\nrunner device:\n\n BUG: KASAN: slab-use-after-free in lock_release+0x708/0x780\n Read of size 8 at addr ffff888106a83f18 by task kworker/u80:6/219\n\n CPU: 8 UID: 0 PID: 219 Comm: kworker/u80:6 Not tainted 6.12.0-rc6-kts+ #15\n Hardware name: Supermicro Super Server/X11SPi-TF, BIOS 3.3 02/21/2020\n Workqueue: btrfs-endio btrfs_end_bio_work [btrfs]\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x6e/0xa0\n ? lock_release+0x708/0x780\n print_report+0x174/0x505\n ? lock_release+0x708/0x780\n ? __virt_addr_valid+0x224/0x410\n ? lock_release+0x708/0x780\n kasan_report+0xda/0x1b0\n ? lock_release+0x708/0x780\n ? __wake_up+0x44/0x60\n lock_release+0x708/0x780\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_do_raw_spin_lock+0x10/0x10\n ? lock_is_held_type+0x9a/0x110\n _raw_spin_unlock_irqrestore+0x1f/0x60\n __wake_up+0x44/0x60\n btrfs_encoded_read_endio+0x14b/0x190 [btrfs]\n btrfs_check_read_bio+0x8d9/0x1360 [btrfs]\n ? lock_release+0x1b0/0x780\n ? trace_lock_acquire+0x12f/0x1a0\n ? __pfx_btrfs_check_read_bio+0x10/0x10 [btrfs]\n ? process_one_work+0x7e3/0x1460\n ? lock_acquire+0x31/0xc0\n ? process_one_work+0x7e3/0x1460\n process_one_work+0x85c/0x1460\n ? __pfx_process_one_work+0x10/0x10\n ? assign_work+0x16c/0x240\n worker_thread+0x5e6/0xfc0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x2c3/0x3a0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x31/0x70\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\n Allocated by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n btrfs_encoded_read_regular_fill_pages+0x16c/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x70\n __kasan_slab_free+0x4f/0x70\n kfree+0x143/0x490\n btrfs_encoded_read_regular_fill_pages+0x531/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n The buggy address belongs to the object at ffff888106a83f00\n which belongs to the cache kmalloc-rnd-07-96 of size 96\n The buggy address is located 24 bytes inside of\n freed 96-byte region [ffff888106a83f00, ffff888106a83f60)\n\n The buggy address belongs to the physical page:\n page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888106a83800 pfn:0x106a83\n flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff)\n page_type: f5(slab)\n raw: 0017ffffc0000000 ffff888100053680 ffffea0004917200 0000000000000004\n raw: ffff888106a83800 0000000080200019 00000001f5000000 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff888106a83e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a83e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n \u003effff888106a83f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ^\n ffff888106a83f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a84000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ==================================================================\n\nFurther analyzing the trace and \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56582",
"url": "https://www.suse.com/security/cve/CVE-2024-56582"
},
{
"category": "external",
"summary": "SUSE Bug 1235128 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "external",
"summary": "SUSE Bug 1235129 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56582"
},
{
"cve": "CVE-2024-56584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56584"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/tctx: work around xa_store() allocation error issue\n\nsyzbot triggered the following WARN_ON:\n\nWARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51\n\nwhich is the\n\nWARN_ON_ONCE(!xa_empty(\u0026tctx-\u003exa));\n\nsanity check in __io_uring_free() when a io_uring_task is going through\nits final put. The syzbot test case includes injecting memory allocation\nfailures, and it very much looks like xa_store() can fail one of its\nmemory allocations and end up with -\u003ehead being non-NULL even though no\nentries exist in the xarray.\n\nUntil this issue gets sorted out, work around it by attempting to\niterate entries in our xarray, and WARN_ON_ONCE() if one is found.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56584",
"url": "https://www.suse.com/security/cve/CVE-2024-56584"
},
{
"category": "external",
"summary": "SUSE Bug 1235117 for CVE-2024-56584",
"url": "https://bugzilla.suse.com/1235117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56584"
},
{
"cve": "CVE-2024-56587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56587"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex\n\nThere is NULL pointer issue observed if from Process A where hid device\nbeing added which results in adding a led_cdev addition and later a\nanother call to access of led_cdev attribute from Process B can result\nin NULL pointer issue.\n\nUse mutex led_cdev-\u003eled_access to protect access to led-\u003ecdev and its\nattribute inside brightness_show() and max_brightness_show() and also\nupdate the comment for mutex that it should be used to protect the led\nclass device fields.\n\n\tProcess A \t\t\t\tProcess B\n\n kthread+0x114\n worker_thread+0x244\n process_scheduled_works+0x248\n uhid_device_add_worker+0x24\n hid_add_device+0x120\n device_add+0x268\n bus_probe_device+0x94\n device_initial_probe+0x14\n __device_attach+0xfc\n bus_for_each_drv+0x10c\n __device_attach_driver+0x14c\n driver_probe_device+0x3c\n __driver_probe_device+0xa0\n really_probe+0x190\n hid_device_probe+0x130\n ps_probe+0x990\n ps_led_register+0x94\n devm_led_classdev_register_ext+0x58\n led_classdev_register_ext+0x1f8\n device_create_with_groups+0x48\n device_create_groups_vargs+0xc8\n device_add+0x244\n kobject_uevent+0x14\n kobject_uevent_env[jt]+0x224\n mutex_unlock[jt]+0xc4\n __mutex_unlock_slowpath+0xd4\n wake_up_q+0x70\n try_to_wake_up[jt]+0x48c\n preempt_schedule_common+0x28\n __schedule+0x628\n __switch_to+0x174\n\t\t\t\t\t\tel0t_64_sync+0x1a8/0x1ac\n\t\t\t\t\t\tel0t_64_sync_handler+0x68/0xbc\n\t\t\t\t\t\tel0_svc+0x38/0x68\n\t\t\t\t\t\tdo_el0_svc+0x1c/0x28\n\t\t\t\t\t\tel0_svc_common+0x80/0xe0\n\t\t\t\t\t\tinvoke_syscall+0x58/0x114\n\t\t\t\t\t\t__arm64_sys_read+0x1c/0x2c\n\t\t\t\t\t\tksys_read+0x78/0xe8\n\t\t\t\t\t\tvfs_read+0x1e0/0x2c8\n\t\t\t\t\t\tkernfs_fop_read_iter+0x68/0x1b4\n\t\t\t\t\t\tseq_read_iter+0x158/0x4ec\n\t\t\t\t\t\tkernfs_seq_show+0x44/0x54\n\t\t\t\t\t\tsysfs_kf_seq_show+0xb4/0x130\n\t\t\t\t\t\tdev_attr_show+0x38/0x74\n\t\t\t\t\t\tbrightness_show+0x20/0x4c\n\t\t\t\t\t\tdualshock4_led_get_brightness+0xc/0x74\n\n[ 3313.874295][ T4013] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[ 3313.874301][ T4013] Mem abort info:\n[ 3313.874303][ T4013] ESR = 0x0000000096000006\n[ 3313.874305][ T4013] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 3313.874307][ T4013] SET = 0, FnV = 0\n[ 3313.874309][ T4013] EA = 0, S1PTW = 0\n[ 3313.874311][ T4013] FSC = 0x06: level 2 translation fault\n[ 3313.874313][ T4013] Data abort info:\n[ 3313.874314][ T4013] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000\n[ 3313.874316][ T4013] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 3313.874318][ T4013] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 3313.874320][ T4013] user pgtable: 4k pages, 39-bit VAs, pgdp=00000008f2b0a000\n..\n\n[ 3313.874332][ T4013] Dumping ftrace buffer:\n[ 3313.874334][ T4013] (ftrace buffer empty)\n..\n..\n[ dd3313.874639][ T4013] CPU: 6 PID: 4013 Comm: InputReader\n[ 3313.874648][ T4013] pc : dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874653][ T4013] lr : led_update_brightness+0x38/0x60\n[ 3313.874656][ T4013] sp : ffffffc0b910bbd0\n..\n..\n[ 3313.874685][ T4013] Call trace:\n[ 3313.874687][ T4013] dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874690][ T4013] brightness_show+0x20/0x4c\n[ 3313.874692][ T4013] dev_attr_show+0x38/0x74\n[ 3313.874696][ T4013] sysfs_kf_seq_show+0xb4/0x130\n[ 3313.874700][ T4013] kernfs_seq_show+0x44/0x54\n[ 3313.874703][ T4013] seq_read_iter+0x158/0x4ec\n[ 3313.874705][ T4013] kernfs_fop_read_iter+0x68/0x1b4\n[ 3313.874708][ T4013] vfs_read+0x1e0/0x2c8\n[ 3313.874711][ T4013] ksys_read+0x78/0xe8\n[ 3313.874714][ T4013] __arm64_sys_read+0x1c/0x2c\n[ 3313.874718][ T4013] invoke_syscall+0x58/0x114\n[ 3313.874721][ T4013] el0_svc_common+0x80/0xe0\n[ 3313.874724][ T4013] do_el0_svc+0x1c/0x28\n[ 3313.874727][ T4013] el0_svc+0x38/0x68\n[ 3313.874730][ T4013] el0t_64_sync_handler+0x68/0xbc\n[ 3313.874732][ T4013] el0t_64_sync+0x1a8/0x1ac",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56587",
"url": "https://www.suse.com/security/cve/CVE-2024-56587"
},
{
"category": "external",
"summary": "SUSE Bug 1235125 for CVE-2024-56587",
"url": "https://bugzilla.suse.com/1235125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56587"
},
{
"cve": "CVE-2024-56588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56588"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Create all dump files during debugfs initialization\n\nFor the current debugfs of hisi_sas, after user triggers dump, the\ndriver allocate memory space to save the register information and create\ndebugfs files to display the saved information. In this process, the\ndebugfs files created after each dump.\n\nTherefore, when the dump is triggered while the driver is unbind, the\nfollowing hang occurs:\n\n[67840.853907] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[67840.862947] Mem abort info:\n[67840.865855] ESR = 0x0000000096000004\n[67840.869713] EC = 0x25: DABT (current EL), IL = 32 bits\n[67840.875125] SET = 0, FnV = 0\n[67840.878291] EA = 0, S1PTW = 0\n[67840.881545] FSC = 0x04: level 0 translation fault\n[67840.886528] Data abort info:\n[67840.889524] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[67840.895117] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[67840.900284] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[67840.905709] user pgtable: 4k pages, 48-bit VAs, pgdp=0000002803a1f000\n[67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000\n[67840.919177] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[67840.996435] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[67841.003628] pc : down_write+0x30/0x98\n[67841.007546] lr : start_creating.part.0+0x60/0x198\n[67841.012495] sp : ffff8000b979ba20\n[67841.016046] x29: ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40\n[67841.023412] x26: 0000000000000012 x25: ffff20202b355ae8 x24: ffff20202b35a8c8\n[67841.030779] x23: ffffa36877928208 x22: ffffa368b4972240 x21: ffff8000b979bb18\n[67841.038147] x20: ffff00281dc1e3c0 x19: fffffffffffffffe x18: 0000000000000020\n[67841.045515] x17: 0000000000000000 x16: ffffa368b128a530 x15: ffffffffffffffff\n[67841.052888] x14: ffff8000b979bc18 x13: ffffffffffffffff x12: ffff8000b979bb18\n[67841.060263] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa368b1289b18\n[67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6 : 00000000000003a9\n[67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001\n[67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0\n[67841.089759] Call trace:\n[67841.092456] down_write+0x30/0x98\n[67841.096017] start_creating.part.0+0x60/0x198\n[67841.100613] debugfs_create_dir+0x48/0x1f8\n[67841.104950] debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw]\n[67841.111447] debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw]\n[67841.118111] debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw]\n[67841.125115] full_proxy_write+0x68/0xc8\n[67841.129175] vfs_write+0xd8/0x3f0\n[67841.132708] ksys_write+0x70/0x108\n[67841.136317] __arm64_sys_write+0x24/0x38\n[67841.140440] invoke_syscall+0x50/0x128\n[67841.144385] el0_svc_common.constprop.0+0xc8/0xf0\n[67841.149273] do_el0_svc+0x24/0x38\n[67841.152773] el0_svc+0x38/0xd8\n[67841.156009] el0t_64_sync_handler+0xc0/0xc8\n[67841.160361] el0t_64_sync+0x1a4/0x1a8\n[67841.164189] Code: b9000882 d2800002 d2800023 f9800011 (c85ffc05)\n[67841.170443] ---[ end trace 0000000000000000 ]---\n\nTo fix this issue, create all directories and files during debugfs\ninitialization. In this way, the driver only needs to allocate memory\nspace to save information each time the user triggers dumping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56588",
"url": "https://www.suse.com/security/cve/CVE-2024-56588"
},
{
"category": "external",
"summary": "SUSE Bug 1235123 for CVE-2024-56588",
"url": "https://bugzilla.suse.com/1235123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56588"
},
{
"cve": "CVE-2024-56589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56589"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Add cond_resched() for no forced preemption model\n\nFor no forced preemption model kernel, in the scenario where the\nexpander is connected to 12 high performance SAS SSDs, the following\ncall trace may occur:\n\n[ 214.409199][ C240] watchdog: BUG: soft lockup - CPU#240 stuck for 22s! [irq/149-hisi_sa:3211]\n[ 214.568533][ C240] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)\n[ 214.575224][ C240] pc : fput_many+0x8c/0xdc\n[ 214.579480][ C240] lr : fput+0x1c/0xf0\n[ 214.583302][ C240] sp : ffff80002de2b900\n[ 214.587298][ C240] x29: ffff80002de2b900 x28: ffff1082aa412000\n[ 214.593291][ C240] x27: ffff3062a0348c08 x26: ffff80003a9f6000\n[ 214.599284][ C240] x25: ffff1062bbac5c40 x24: 0000000000001000\n[ 214.605277][ C240] x23: 000000000000000a x22: 0000000000000001\n[ 214.611270][ C240] x21: 0000000000001000 x20: 0000000000000000\n[ 214.617262][ C240] x19: ffff3062a41ae580 x18: 0000000000010000\n[ 214.623255][ C240] x17: 0000000000000001 x16: ffffdb3a6efe5fc0\n[ 214.629248][ C240] x15: ffffffffffffffff x14: 0000000003ffffff\n[ 214.635241][ C240] x13: 000000000000ffff x12: 000000000000029c\n[ 214.641234][ C240] x11: 0000000000000006 x10: ffff80003a9f7fd0\n[ 214.647226][ C240] x9 : ffffdb3a6f0482fc x8 : 0000000000000001\n[ 214.653219][ C240] x7 : 0000000000000002 x6 : 0000000000000080\n[ 214.659212][ C240] x5 : ffff55480ee9b000 x4 : fffffde7f94c6554\n[ 214.665205][ C240] x3 : 0000000000000002 x2 : 0000000000000020\n[ 214.671198][ C240] x1 : 0000000000000021 x0 : ffff3062a41ae5b8\n[ 214.677191][ C240] Call trace:\n[ 214.680320][ C240] fput_many+0x8c/0xdc\n[ 214.684230][ C240] fput+0x1c/0xf0\n[ 214.687707][ C240] aio_complete_rw+0xd8/0x1fc\n[ 214.692225][ C240] blkdev_bio_end_io+0x98/0x140\n[ 214.696917][ C240] bio_endio+0x160/0x1bc\n[ 214.701001][ C240] blk_update_request+0x1c8/0x3bc\n[ 214.705867][ C240] scsi_end_request+0x3c/0x1f0\n[ 214.710471][ C240] scsi_io_completion+0x7c/0x1a0\n[ 214.715249][ C240] scsi_finish_command+0x104/0x140\n[ 214.720200][ C240] scsi_softirq_done+0x90/0x180\n[ 214.724892][ C240] blk_mq_complete_request+0x5c/0x70\n[ 214.730016][ C240] scsi_mq_done+0x48/0xac\n[ 214.734194][ C240] sas_scsi_task_done+0xbc/0x16c [libsas]\n[ 214.739758][ C240] slot_complete_v3_hw+0x260/0x760 [hisi_sas_v3_hw]\n[ 214.746185][ C240] cq_thread_v3_hw+0xbc/0x190 [hisi_sas_v3_hw]\n[ 214.752179][ C240] irq_thread_fn+0x34/0xa4\n[ 214.756435][ C240] irq_thread+0xc4/0x130\n[ 214.760520][ C240] kthread+0x108/0x13c\n[ 214.764430][ C240] ret_from_fork+0x10/0x18\n\nThis is because in the hisi_sas driver, both the hardware interrupt\nhandler and the interrupt thread are executed on the same CPU. In the\nperformance test scenario, function irq_wait_for_interrupt() will always\nreturn 0 if lots of interrupts occurs and the CPU will be continuously\nconsumed. As a result, the CPU cannot run the watchdog thread. When the\nwatchdog time exceeds the specified time, call trace occurs.\n\nTo fix it, add cond_resched() to execute the watchdog thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56589",
"url": "https://www.suse.com/security/cve/CVE-2024-56589"
},
{
"category": "external",
"summary": "SUSE Bug 1235241 for CVE-2024-56589",
"url": "https://bugzilla.suse.com/1235241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56589"
},
{
"cve": "CVE-2024-56590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56590"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix not checking skb length on hci_acldata_packet\n\nThis fixes not checking if skb really contains an ACL header otherwise\nthe code may attempt to access some uninitilized/invalid memory past the\nvalid skb-\u003edata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56590",
"url": "https://www.suse.com/security/cve/CVE-2024-56590"
},
{
"category": "external",
"summary": "SUSE Bug 1235038 for CVE-2024-56590",
"url": "https://bugzilla.suse.com/1235038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56590"
},
{
"cve": "CVE-2024-56593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56593"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()\n\nThis patch fixes a NULL pointer dereference bug in brcmfmac that occurs\nwhen a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs\nare sent from the pkt queue.\n\nThe problem is the number of entries in the pre-allocated sgtable, it is\nnents = max(rxglom_size, txglom_size) + max(rxglom_size, txglom_size) \u003e\u003e 4 + 1.\nGiven the default [rt]xglom_size=32 it\u0027s actually 35 which is too small.\nWorst case, the pkt queue can end up with 64 SKBs. This occurs when a new SKB\nis added for each original SKB if tailroom isn\u0027t enough to hold tail_pad.\nAt least one sg entry is needed for each SKB. So, eventually the \"skb_queue_walk loop\"\nin brcmf_sdiod_sglist_rw may run out of sg entries. This makes sg_next return\nNULL and this causes the oops.\n\nThe patch sets nents to max(rxglom_size, txglom_size) * 2 to be able handle\nthe worst-case.\nBtw. this requires only 64-35=29 * 16 (or 20 if CONFIG_NEED_SG_DMA_LENGTH) = 464\nadditional bytes of memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56593",
"url": "https://www.suse.com/security/cve/CVE-2024-56593"
},
{
"category": "external",
"summary": "SUSE Bug 1235252 for CVE-2024-56593",
"url": "https://bugzilla.suse.com/1235252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56594"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: set the right AMDGPU sg segment limitation\n\nThe driver needs to set the correct max_segment_size;\notherwise debug_dma_map_sg() will complain about the\nover-mapping of the AMDGPU sg length as following:\n\nWARNING: CPU: 6 PID: 1964 at kernel/dma/debug.c:1178 debug_dma_map_sg+0x2dc/0x370\n[ 364.049444] Modules linked in: veth amdgpu(OE) amdxcp drm_exec gpu_sched drm_buddy drm_ttm_helper ttm(OE) drm_suballoc_helper drm_display_helper drm_kms_helper i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc amd_atl intel_rapl_msr intel_rapl_common sunrpc sch_fq_codel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd binfmt_misc snd_hda_codec snd_pci_acp6x snd_hda_core snd_acp_config snd_hwdep snd_soc_acpi kvm_amd snd_pcm kvm snd_seq_midi snd_seq_midi_event crct10dif_pclmul ghash_clmulni_intel sha512_ssse3 snd_rawmidi sha256_ssse3 sha1_ssse3 aesni_intel snd_seq nls_iso8859_1 crypto_simd snd_seq_device cryptd snd_timer rapl input_leds snd\n[ 364.049532] ipmi_devintf wmi_bmof ccp serio_raw k10temp sp5100_tco soundcore ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 364.049576] CPU: 6 PID: 1964 Comm: rocminfo Tainted: G OE 6.10.0-custom #492\n[ 364.049579] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 364.049582] RIP: 0010:debug_dma_map_sg+0x2dc/0x370\n[ 364.049585] Code: 89 4d b8 e8 36 b1 86 00 8b 4d b8 48 8b 55 b0 44 8b 45 a8 4c 8b 4d a0 48 89 c6 48 c7 c7 00 4b 74 bc 4c 89 4d b8 e8 b4 73 f3 ff \u003c0f\u003e 0b 4c 8b 4d b8 8b 15 c8 2c b8 01 85 d2 0f 85 ee fd ff ff 8b 05\n[ 364.049588] RSP: 0018:ffff9ca600b57ac0 EFLAGS: 00010286\n[ 364.049590] RAX: 0000000000000000 RBX: ffff88b7c132b0c8 RCX: 0000000000000027\n[ 364.049592] RDX: ffff88bb0f521688 RSI: 0000000000000001 RDI: ffff88bb0f521680\n[ 364.049594] RBP: ffff9ca600b57b20 R08: 000000000000006f R09: ffff9ca600b57930\n[ 364.049596] R10: ffff9ca600b57928 R11: ffffffffbcb46328 R12: 0000000000000000\n[ 364.049597] R13: 0000000000000001 R14: ffff88b7c19c0700 R15: ffff88b7c9059800\n[ 364.049599] FS: 00007fb2d3516e80(0000) GS:ffff88bb0f500000(0000) knlGS:0000000000000000\n[ 364.049601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 364.049603] CR2: 000055610bd03598 CR3: 00000001049f6000 CR4: 0000000000350ef0\n[ 364.049605] Call Trace:\n[ 364.049607] \u003cTASK\u003e\n[ 364.049609] ? show_regs+0x6d/0x80\n[ 364.049614] ? __warn+0x8c/0x140\n[ 364.049618] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049621] ? report_bug+0x193/0x1a0\n[ 364.049627] ? handle_bug+0x46/0x80\n[ 364.049631] ? exc_invalid_op+0x1d/0x80\n[ 364.049635] ? asm_exc_invalid_op+0x1f/0x30\n[ 364.049642] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049647] __dma_map_sg_attrs+0x90/0xe0\n[ 364.049651] dma_map_sgtable+0x25/0x40\n[ 364.049654] amdgpu_bo_move+0x59a/0x850 [amdgpu]\n[ 364.049935] ? srso_return_thunk+0x5/0x5f\n[ 364.049939] ? amdgpu_ttm_tt_populate+0x5d/0xc0 [amdgpu]\n[ 364.050095] ttm_bo_handle_move_mem+0xc3/0x180 [ttm]\n[ 364.050103] ttm_bo_validate+0xc1/0x160 [ttm]\n[ 364.050108] ? amdgpu_ttm_tt_get_user_pages+0xe5/0x1b0 [amdgpu]\n[ 364.050263] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0xa12/0xc90 [amdgpu]\n[ 364.050473] kfd_ioctl_alloc_memory_of_gpu+0x16b/0x3b0 [amdgpu]\n[ 364.050680] kfd_ioctl+0x3c2/0x530 [amdgpu]\n[ 364.050866] ? __pfx_kfd_ioctl_alloc_memory_of_gpu+0x10/0x10 [amdgpu]\n[ 364.05105\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56594",
"url": "https://www.suse.com/security/cve/CVE-2024-56594"
},
{
"category": "external",
"summary": "SUSE Bug 1235413 for CVE-2024-56594",
"url": "https://bugzilla.suse.com/1235413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56595"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add a check to prevent array-index-out-of-bounds in dbAdjTree\n\nWhen the value of lp is 0 at the beginning of the for loop, it will\nbecome negative in the next assignment and we should bail out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56595",
"url": "https://www.suse.com/security/cve/CVE-2024-56595"
},
{
"category": "external",
"summary": "SUSE Bug 1235410 for CVE-2024-56595",
"url": "https://bugzilla.suse.com/1235410"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56595"
},
{
"cve": "CVE-2024-56596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56596"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in jfs_readdir\n\nThe stbl might contain some invalid values. Added a check to\nreturn error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56596",
"url": "https://www.suse.com/security/cve/CVE-2024-56596"
},
{
"category": "external",
"summary": "SUSE Bug 1235458 for CVE-2024-56596",
"url": "https://bugzilla.suse.com/1235458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56596"
},
{
"cve": "CVE-2024-56597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56597"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix shift-out-of-bounds in dbSplit\n\nWhen dmt_budmin is less than zero, it causes errors\nin the later stages. Added a check to return an error beforehand\nin dbAllocCtl itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56597",
"url": "https://www.suse.com/security/cve/CVE-2024-56597"
},
{
"category": "external",
"summary": "SUSE Bug 1235222 for CVE-2024-56597",
"url": "https://bugzilla.suse.com/1235222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56597"
},
{
"cve": "CVE-2024-56598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: array-index-out-of-bounds fix in dtReadFirst\n\nThe value of stbl can be sometimes out of bounds due\nto a bad filesystem. Added a check with appopriate return\nof error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56598",
"url": "https://www.suse.com/security/cve/CVE-2024-56598"
},
{
"category": "external",
"summary": "SUSE Bug 1235220 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "external",
"summary": "SUSE Bug 1235221 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56598"
},
{
"cve": "CVE-2024-56599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56599"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath10k: avoid NULL pointer error during sdio remove\n\nWhen running \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will free sdio\nworkqueue by destroy_workqueue(). But if CONFIG_INIT_ON_FREE_DEFAULT_ON\nis set to yes, kernel panic will happen:\nCall trace:\n destroy_workqueue+0x1c/0x258\n ath10k_sdio_remove+0x84/0x94\n sdio_bus_remove+0x50/0x16c\n device_release_driver_internal+0x188/0x25c\n device_driver_detach+0x20/0x2c\n\nThis is because during \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will call\nath10k_core_destroy() before destroy_workqueue(). wiphy_dev_release()\nwill finally be called in ath10k_core_destroy(). This function will free\nstruct cfg80211_registered_device *rdev and all its members, including\nwiphy, dev and the pointer of sdio workqueue. Then the pointer of sdio\nworkqueue will be set to NULL due to CONFIG_INIT_ON_FREE_DEFAULT_ON.\n\nAfter device release, destroy_workqueue() will use NULL pointer then the\nkernel panic happen.\n\nCall trace:\nath10k_sdio_remove\n -\u003eath10k_core_unregister\n \u2026\u2026\n -\u003eath10k_core_stop\n -\u003eath10k_hif_stop\n -\u003eath10k_sdio_irq_disable\n -\u003eath10k_hif_power_down\n -\u003edel_timer_sync(\u0026ar_sdio-\u003esleep_timer)\n -\u003eath10k_core_destroy\n -\u003eath10k_mac_destroy\n -\u003eieee80211_free_hw\n -\u003ewiphy_free\n \u2026\u2026\n -\u003ewiphy_dev_release\n -\u003edestroy_workqueue\n\nNeed to call destroy_workqueue() before ath10k_core_destroy(), free\nthe work queue buffer first and then free pointer of work queue by\nath10k_core_destroy(). This order matches the error path order in\nath10k_sdio_probe().\n\nNo work will be queued on sdio workqueue between it is destroyed and\nath10k_core_destroy() is called. Based on the call_stack above, the\nreason is:\nOnly ath10k_sdio_sleep_timer_handler(), ath10k_sdio_hif_tx_sg() and\nath10k_sdio_irq_disable() will queue work on sdio workqueue.\nSleep timer will be deleted before ath10k_core_destroy() in\nath10k_hif_power_down().\nath10k_sdio_irq_disable() only be called in ath10k_hif_stop().\nath10k_core_unregister() will call ath10k_hif_power_down() to stop hif\nbus, so ath10k_sdio_hif_tx_sg() won\u0027t be called anymore.\n\nTested-on: QCA6174 hw3.2 SDIO WLAN.RMH.4.4.1-00189",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56599",
"url": "https://www.suse.com/security/cve/CVE-2024-56599"
},
{
"category": "external",
"summary": "SUSE Bug 1235138 for CVE-2024-56599",
"url": "https://bugzilla.suse.com/1235138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56599"
},
{
"cve": "CVE-2024-5660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-5660"
}
],
"notes": [
{
"category": "general",
"text": "Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-5660",
"url": "https://www.suse.com/security/cve/CVE-2024-5660"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "critical"
}
],
"title": "CVE-2024-5660"
},
{
"cve": "CVE-2024-56600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet6: do not leave a dangling sk pointer in inet6_create()\n\nsock_init_data() attaches the allocated sk pointer to the provided sock\nobject. If inet6_create() fails later, the sk object is released, but the\nsock object retains the dangling sk pointer, which may cause use-after-free\nlater.\n\nClear the sock sk pointer on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56600",
"url": "https://www.suse.com/security/cve/CVE-2024-56600"
},
{
"category": "external",
"summary": "SUSE Bug 1235217 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "external",
"summary": "SUSE Bug 1235218 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56601"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet: do not leave a dangling sk pointer in inet_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If inet_create() fails later, the sk object is freed, but the\nsock object retains the dangling pointer, which may create use-after-free\nlater.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56601",
"url": "https://www.suse.com/security/cve/CVE-2024-56601"
},
{
"category": "external",
"summary": "SUSE Bug 1235230 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "external",
"summary": "SUSE Bug 1235231 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235231"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56602"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: do not leave a dangling sk pointer in ieee802154_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If ieee802154_create() fails later, the allocated sk object is\nfreed, but the dangling pointer remains in the provided sock object, which\nmay allow use-after-free.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56602",
"url": "https://www.suse.com/security/cve/CVE-2024-56602"
},
{
"category": "external",
"summary": "SUSE Bug 1235521 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "external",
"summary": "SUSE Bug 1235522 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2024-56603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56603"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: af_can: do not leave a dangling sk pointer in can_create()\n\nOn error can_create() frees the allocated sk object, but sock_init_data()\nhas already attached it to the provided sock object. This will leave a\ndangling sk pointer in the sock object and may cause use-after-free later.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56603",
"url": "https://www.suse.com/security/cve/CVE-2024-56603"
},
{
"category": "external",
"summary": "SUSE Bug 1235415 for CVE-2024-56603",
"url": "https://bugzilla.suse.com/1235415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56603"
},
{
"cve": "CVE-2024-56604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56604"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()\n\nbt_sock_alloc() attaches allocated sk object to the provided sock object.\nIf rfcomm_dlc_alloc() fails, we release the sk object, but leave the\ndangling pointer in the sock object, which may cause use-after-free.\n\nFix this by swapping calls to bt_sock_alloc() and rfcomm_dlc_alloc().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56604",
"url": "https://www.suse.com/security/cve/CVE-2024-56604"
},
{
"category": "external",
"summary": "SUSE Bug 1235056 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "external",
"summary": "SUSE Bug 1235058 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56604"
},
{
"cve": "CVE-2024-56605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56605"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()\n\nbt_sock_alloc() allocates the sk object and attaches it to the provided\nsock object. On error l2cap_sock_alloc() frees the sk object, but the\ndangling pointer is still attached to the sock object, which may create\nuse-after-free in other code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56605",
"url": "https://www.suse.com/security/cve/CVE-2024-56605"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235061 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "external",
"summary": "SUSE Bug 1235062 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235062"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56605"
},
{
"cve": "CVE-2024-56606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56606"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: avoid erroring out after sock_init_data() in packet_create()\n\nAfter sock_init_data() the allocated sk object is attached to the provided\nsock object. On error, packet_create() frees the sk object leaving the\ndangling pointer in the sock object on return. Some other code may try\nto use this pointer and cause use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56606",
"url": "https://www.suse.com/security/cve/CVE-2024-56606"
},
{
"category": "external",
"summary": "SUSE Bug 1235417 for CVE-2024-56606",
"url": "https://bugzilla.suse.com/1235417"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56607"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()\n\nWhen I try to manually set bitrates:\n\niw wlan0 set bitrates legacy-2.4 1\n\nI get sleeping from invalid context error, see below. Fix that by switching to\nuse recently introduced ieee80211_iterate_stations_mtx().\n\nDo note that WCN6855 firmware is still crashing, I\u0027m not sure if that firmware\neven supports bitrate WMI commands and should we consider disabling\nath12k_mac_op_set_bitrate_mask() for WCN6855? But that\u0027s for another patch.\n\nBUG: sleeping function called from invalid context at drivers/net/wireless/ath/ath12k/wmi.c:420\nin_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 2236, name: iw\npreempt_count: 0, expected: 0\nRCU nest depth: 1, expected: 0\n3 locks held by iw/2236:\n #0: ffffffffabc6f1d8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40\n #1: ffff888138410810 (\u0026rdev-\u003ewiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x54d/0x800 [cfg80211]\n #2: ffffffffab2cfaa0 (rcu_read_lock){....}-{1:2}, at: ieee80211_iterate_stations_atomic+0x2f/0x200 [mac80211]\nCPU: 3 UID: 0 PID: 2236 Comm: iw Not tainted 6.11.0-rc7-wt-ath+ #1772\nHardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xa4/0xe0\n dump_stack+0x10/0x20\n __might_resched+0x363/0x5a0\n ? __alloc_skb+0x165/0x340\n __might_sleep+0xad/0x160\n ath12k_wmi_cmd_send+0xb1/0x3d0 [ath12k]\n ? ath12k_wmi_init_wcn7850+0xa40/0xa40 [ath12k]\n ? __netdev_alloc_skb+0x45/0x7b0\n ? __asan_memset+0x39/0x40\n ? ath12k_wmi_alloc_skb+0xf0/0x150 [ath12k]\n ? reacquire_held_locks+0x4d0/0x4d0\n ath12k_wmi_set_peer_param+0x340/0x5b0 [ath12k]\n ath12k_mac_disable_peer_fixed_rate+0xa3/0x110 [ath12k]\n ? ath12k_mac_vdev_stop+0x4f0/0x4f0 [ath12k]\n ieee80211_iterate_stations_atomic+0xd4/0x200 [mac80211]\n ath12k_mac_op_set_bitrate_mask+0x5d2/0x1080 [ath12k]\n ? ath12k_mac_vif_chan+0x320/0x320 [ath12k]\n drv_set_bitrate_mask+0x267/0x470 [mac80211]\n ieee80211_set_bitrate_mask+0x4cc/0x8a0 [mac80211]\n ? __this_cpu_preempt_check+0x13/0x20\n nl80211_set_tx_bitrate_mask+0x2bc/0x530 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? trace_contention_end+0xef/0x140\n ? rtnl_unlock+0x9/0x10\n ? nl80211_pre_doit+0x557/0x800 [cfg80211]\n genl_family_rcv_msg_doit+0x1f0/0x2e0\n ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250\n ? ns_capable+0x57/0xd0\n genl_family_rcv_msg+0x34c/0x600\n ? genl_family_rcv_msg_dumpit+0x310/0x310\n ? __lock_acquire+0xc62/0x1de0\n ? he_set_mcs_mask.isra.0+0x8d0/0x8d0 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? cfg80211_external_auth_request+0x690/0x690 [cfg80211]\n genl_rcv_msg+0xa0/0x130\n netlink_rcv_skb+0x14c/0x400\n ? genl_family_rcv_msg+0x600/0x600\n ? netlink_ack+0xd70/0xd70\n ? rwsem_optimistic_spin+0x4f0/0x4f0\n ? genl_rcv+0x14/0x40\n ? down_read_killable+0x580/0x580\n ? netlink_deliver_tap+0x13e/0x350\n ? __this_cpu_preempt_check+0x13/0x20\n genl_rcv+0x23/0x40\n netlink_unicast+0x45e/0x790\n ? netlink_attachskb+0x7f0/0x7f0\n netlink_sendmsg+0x7eb/0xdb0\n ? netlink_unicast+0x790/0x790\n ? __this_cpu_preempt_check+0x13/0x20\n ? selinux_socket_sendmsg+0x31/0x40\n ? netlink_unicast+0x790/0x790\n __sock_sendmsg+0xc9/0x160\n ____sys_sendmsg+0x620/0x990\n ? kernel_sendmsg+0x30/0x30\n ? __copy_msghdr+0x410/0x410\n ? __kasan_check_read+0x11/0x20\n ? mark_lock+0xe6/0x1470\n ___sys_sendmsg+0xe9/0x170\n ? copy_msghdr_from_user+0x120/0x120\n ? __lock_acquire+0xc62/0x1de0\n ? do_fault_around+0x2c6/0x4e0\n ? do_user_addr_fault+0x8c1/0xde0\n ? reacquire_held_locks+0x220/0x4d0\n ? do_user_addr_fault+0x8c1/0xde0\n ? __kasan_check_read+0x11/0x20\n ? __fdget+0x4e/0x1d0\n ? sockfd_lookup_light+0x1a/0x170\n __sys_sendmsg+0xd2/0x180\n ? __sys_sendmsg_sock+0x20/0x20\n ? reacquire_held_locks+0x4d0/0x4d0\n ? debug_smp_processor_id+0x17/0x20\n __x64_sys_sendmsg+0x72/0xb0\n ? lockdep_hardirqs_on+0x7d/0x100\n x64_sys_call+0x894/0x9f0\n do_syscall_64+0x64/0x130\n entry_SYSCALL_64_after_\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56607",
"url": "https://www.suse.com/security/cve/CVE-2024-56607"
},
{
"category": "external",
"summary": "SUSE Bug 1235423 for CVE-2024-56607",
"url": "https://bugzilla.suse.com/1235423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56607"
},
{
"cve": "CVE-2024-56608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56608"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027\n\nAn issue was identified in the dcn21_link_encoder_create function where\nan out-of-bounds access could occur when the hpd_source index was used\nto reference the link_enc_hpd_regs array. This array has a fixed size\nand the index was not being checked against the array\u0027s bounds before\naccessing it.\n\nThis fix adds a conditional check to ensure that the hpd_source index is\nwithin the valid range of the link_enc_hpd_regs array. If the index is\nout of bounds, the function now returns NULL to prevent undefined\nbehavior.\n\nReferences:\n\n[ 65.920507] ------------[ cut here ]------------\n[ 65.920510] UBSAN: array-index-out-of-bounds in drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn21/dcn21_resource.c:1312:29\n[ 65.920519] index 7 is out of range for type \u0027dcn10_link_enc_hpd_registers [5]\u0027\n[ 65.920523] CPU: 3 PID: 1178 Comm: modprobe Tainted: G OE 6.8.0-cleanershaderfeatureresetasdntipmi200nv2132 #13\n[ 65.920525] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS WMJ0429N_Weekly_20_04_2 04/29/2020\n[ 65.920527] Call Trace:\n[ 65.920529] \u003cTASK\u003e\n[ 65.920532] dump_stack_lvl+0x48/0x70\n[ 65.920541] dump_stack+0x10/0x20\n[ 65.920543] __ubsan_handle_out_of_bounds+0xa2/0xe0\n[ 65.920549] dcn21_link_encoder_create+0xd9/0x140 [amdgpu]\n[ 65.921009] link_create+0x6d3/0xed0 [amdgpu]\n[ 65.921355] create_links+0x18a/0x4e0 [amdgpu]\n[ 65.921679] dc_create+0x360/0x720 [amdgpu]\n[ 65.921999] ? dmi_matches+0xa0/0x220\n[ 65.922004] amdgpu_dm_init+0x2b6/0x2c90 [amdgpu]\n[ 65.922342] ? console_unlock+0x77/0x120\n[ 65.922348] ? dev_printk_emit+0x86/0xb0\n[ 65.922354] dm_hw_init+0x15/0x40 [amdgpu]\n[ 65.922686] amdgpu_device_init+0x26a8/0x33a0 [amdgpu]\n[ 65.922921] amdgpu_driver_load_kms+0x1b/0xa0 [amdgpu]\n[ 65.923087] amdgpu_pci_probe+0x1b7/0x630 [amdgpu]\n[ 65.923087] local_pci_probe+0x4b/0xb0\n[ 65.923087] pci_device_probe+0xc8/0x280\n[ 65.923087] really_probe+0x187/0x300\n[ 65.923087] __driver_probe_device+0x85/0x130\n[ 65.923087] driver_probe_device+0x24/0x110\n[ 65.923087] __driver_attach+0xac/0x1d0\n[ 65.923087] ? __pfx___driver_attach+0x10/0x10\n[ 65.923087] bus_for_each_dev+0x7d/0xd0\n[ 65.923087] driver_attach+0x1e/0x30\n[ 65.923087] bus_add_driver+0xf2/0x200\n[ 65.923087] driver_register+0x64/0x130\n[ 65.923087] ? __pfx_amdgpu_init+0x10/0x10 [amdgpu]\n[ 65.923087] __pci_register_driver+0x61/0x70\n[ 65.923087] amdgpu_init+0x7d/0xff0 [amdgpu]\n[ 65.923087] do_one_initcall+0x49/0x310\n[ 65.923087] ? kmalloc_trace+0x136/0x360\n[ 65.923087] do_init_module+0x6a/0x270\n[ 65.923087] load_module+0x1fce/0x23a0\n[ 65.923087] init_module_from_file+0x9c/0xe0\n[ 65.923087] ? init_module_from_file+0x9c/0xe0\n[ 65.923087] idempotent_init_module+0x179/0x230\n[ 65.923087] __x64_sys_finit_module+0x5d/0xa0\n[ 65.923087] do_syscall_64+0x76/0x120\n[ 65.923087] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n[ 65.923087] RIP: 0033:0x7f2d80f1e88d\n[ 65.923087] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[ 65.923087] RSP: 002b:00007ffc7bc1aa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139\n[ 65.923087] RAX: ffffffffffffffda RBX: 0000564c9c1db130 RCX: 00007f2d80f1e88d\n[ 65.923087] RDX: 0000000000000000 RSI: 0000564c9c1e5480 RDI: 000000000000000f\n[ 65.923087] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000002\n[ 65.923087] R10: 000000000000000f R11: 0000000000000246 R12: 0000564c9c1e5480\n[ 65.923087] R13: 0000564c9c1db260 R14: 0000000000000000 R15: 0000564c9c1e54b0\n[ 65.923087] \u003c/TASK\u003e\n[ 65.923927] ---[ end trace ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56608",
"url": "https://www.suse.com/security/cve/CVE-2024-56608"
},
{
"category": "external",
"summary": "SUSE Bug 1235487 for CVE-2024-56608",
"url": "https://bugzilla.suse.com/1235487"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56608"
},
{
"cve": "CVE-2024-56609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56609"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb\n\nWhen removing kernel modules by:\n rmmod rtw88_8723cs rtw88_8703b rtw88_8723x rtw88_sdio rtw88_core\n\nDriver uses skb_queue_purge() to purge TX skb, but not report tx status\ncausing \"Have pending ack frames!\" warning. Use ieee80211_purge_tx_queue()\nto correct this.\n\nSince ieee80211_purge_tx_queue() doesn\u0027t take locks, to prevent racing\nbetween TX work and purge TX queue, flush and destroy TX work in advance.\n\n wlan0: deauthenticating from aa:f5:fd:60:4c:a8 by local\n choice (Reason: 3=DEAUTH_LEAVING)\n ------------[ cut here ]------------\n Have pending ack frames!\n WARNING: CPU: 3 PID: 9232 at net/mac80211/main.c:1691\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n CPU: 3 PID: 9232 Comm: rmmod Tainted: G C\n 6.10.1-200.fc40.aarch64 #1\n Hardware name: pine64 Pine64 PinePhone Braveheart\n (1.1)/Pine64 PinePhone Braveheart (1.1), BIOS 2024.01 01/01/2024\n pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n lr : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n sp : ffff80008c1b37b0\n x29: ffff80008c1b37b0 x28: ffff000003be8000 x27: 0000000000000000\n x26: 0000000000000000 x25: ffff000003dc14b8 x24: ffff80008c1b37d0\n x23: ffff000000ff9f80 x22: 0000000000000000 x21: 000000007fffffff\n x20: ffff80007c7e93d8 x19: ffff00006e66f400 x18: 0000000000000000\n x17: ffff7ffffd2b3000 x16: ffff800083fc0000 x15: 0000000000000000\n x14: 0000000000000000 x13: 2173656d61726620 x12: 6b636120676e6964\n x11: 0000000000000000 x10: 000000000000005d x9 : ffff8000802af2b0\n x8 : ffff80008c1b3430 x7 : 0000000000000001 x6 : 0000000000000001\n x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000003be8000\n Call trace:\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n idr_for_each+0x74/0x110\n ieee80211_free_hw+0x44/0xe8 [mac80211]\n rtw_sdio_remove+0x9c/0xc0 [rtw88_sdio]\n sdio_bus_remove+0x44/0x180\n device_remove+0x54/0x90\n device_release_driver_internal+0x1d4/0x238\n driver_detach+0x54/0xc0\n bus_remove_driver+0x78/0x108\n driver_unregister+0x38/0x78\n sdio_unregister_driver+0x2c/0x40\n rtw_8723cs_driver_exit+0x18/0x1000 [rtw88_8723cs]\n __do_sys_delete_module.isra.0+0x190/0x338\n __arm64_sys_delete_module+0x1c/0x30\n invoke_syscall+0x74/0x100\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x158\n el0t_64_sync_handler+0x120/0x138\n el0t_64_sync+0x194/0x198\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56609",
"url": "https://www.suse.com/security/cve/CVE-2024-56609"
},
{
"category": "external",
"summary": "SUSE Bug 1235389 for CVE-2024-56609",
"url": "https://bugzilla.suse.com/1235389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56609"
},
{
"cve": "CVE-2024-56610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56610"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcsan: Turn report_filterlist_lock into a raw_spinlock\n\nRan Xiaokai reports that with a KCSAN-enabled PREEMPT_RT kernel, we can see\nsplats like:\n\n| BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\n| in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/1\n| preempt_count: 10002, expected: 0\n| RCU nest depth: 0, expected: 0\n| no locks held by swapper/1/0.\n| irq event stamp: 156674\n| hardirqs last enabled at (156673): [\u003cffffffff81130bd9\u003e] do_idle+0x1f9/0x240\n| hardirqs last disabled at (156674): [\u003cffffffff82254f84\u003e] sysvec_apic_timer_interrupt+0x14/0xc0\n| softirqs last enabled at (0): [\u003cffffffff81099f47\u003e] copy_process+0xfc7/0x4b60\n| softirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n| Preemption disabled at:\n| [\u003cffffffff814a3e2a\u003e] paint_ptr+0x2a/0x90\n| CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0+ #3\n| Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-0-ga698c8995f-prebuilt.qemu.org 04/01/2014\n| Call Trace:\n| \u003cIRQ\u003e\n| dump_stack_lvl+0x7e/0xc0\n| dump_stack+0x1d/0x30\n| __might_resched+0x1a2/0x270\n| rt_spin_lock+0x68/0x170\n| kcsan_skip_report_debugfs+0x43/0xe0\n| print_report+0xb5/0x590\n| kcsan_report_known_origin+0x1b1/0x1d0\n| kcsan_setup_watchpoint+0x348/0x650\n| __tsan_unaligned_write1+0x16d/0x1d0\n| hrtimer_interrupt+0x3d6/0x430\n| __sysvec_apic_timer_interrupt+0xe8/0x3a0\n| sysvec_apic_timer_interrupt+0x97/0xc0\n| \u003c/IRQ\u003e\n\nOn a detected data race, KCSAN\u0027s reporting logic checks if it should\nfilter the report. That list is protected by the report_filterlist_lock\n*non-raw* spinlock which may sleep on RT kernels.\n\nSince KCSAN may report data races in any context, convert it to a\nraw_spinlock.\n\nThis requires being careful about when to allocate memory for the filter\nlist itself which can be done via KCSAN\u0027s debugfs interface. Concurrent\nmodification of the filter list via debugfs should be rare: the chosen\nstrategy is to optimistically pre-allocate memory before the critical\nsection and discard if unused.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56610",
"url": "https://www.suse.com/security/cve/CVE-2024-56610"
},
{
"category": "external",
"summary": "SUSE Bug 1235390 for CVE-2024-56610",
"url": "https://bugzilla.suse.com/1235390"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56610"
},
{
"cve": "CVE-2024-56611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM\n\nWe currently assume that there is at least one VMA in a MM, which isn\u0027t\ntrue.\n\nSo we might end up having find_vma() return NULL, to then de-reference\nNULL. So properly handle find_vma() returning NULL.\n\nThis fixes the report:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nCPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nRIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]\nRIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194\nCode: ...\nRSP: 0018:ffffc9000375fd08 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000\nRDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044\nRBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1\nR10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003\nR13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8\nFS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709\n __do_sys_migrate_pages mm/mempolicy.c:1727 [inline]\n __se_sys_migrate_pages mm/mempolicy.c:1723 [inline]\n __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n[akpm@linux-foundation.org: add unlikely()]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56611",
"url": "https://www.suse.com/security/cve/CVE-2024-56611"
},
{
"category": "external",
"summary": "SUSE Bug 1235391 for CVE-2024-56611",
"url": "https://bugzilla.suse.com/1235391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56611"
},
{
"cve": "CVE-2024-56614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56614"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix OOB map writes when deleting elements\n\nJordy says:\n\n\"\nIn the xsk_map_delete_elem function an unsigned integer\n(map-\u003emax_entries) is compared with a user-controlled signed integer\n(k). Due to implicit type conversion, a large unsigned value for\nmap-\u003emax_entries can bypass the intended bounds check:\n\n\tif (k \u003e= map-\u003emax_entries)\n\t\treturn -EINVAL;\n\nThis allows k to hold a negative value (between -2147483648 and -2),\nwhich is then used as an array index in m-\u003exsk_map[k], which results\nin an out-of-bounds access.\n\n\tspin_lock_bh(\u0026m-\u003elock);\n\tmap_entry = \u0026m-\u003exsk_map[k]; // Out-of-bounds map_entry\n\told_xs = unrcu_pointer(xchg(map_entry, NULL)); // Oob write\n\tif (old_xs)\n\t\txsk_map_sock_delete(old_xs, map_entry);\n\tspin_unlock_bh(\u0026m-\u003elock);\n\nThe xchg operation can then be used to cause an out-of-bounds write.\nMoreover, the invalid map_entry passed to xsk_map_sock_delete can lead\nto further memory corruption.\n\"\n\nIt indeed results in following splat:\n\n[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108\n[76612.904330] #PF: supervisor write access in kernel mode\n[76612.909639] #PF: error_code(0x0002) - not-present page\n[76612.914855] PGD 0 P4D 0\n[76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP\n[76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470\n[76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60\n[76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff \u003c48\u003e 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31\n[76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246\n[76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000\n[76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000\n[76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007\n[76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8\n[76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0\n[76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000\n[76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0\n[76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[76613.041086] PKRU: 55555554\n[76613.043842] Call Trace:\n[76613.046331] \u003cTASK\u003e\n[76613.048468] ? __die+0x20/0x60\n[76613.051581] ? page_fault_oops+0x15a/0x450\n[76613.055747] ? search_extable+0x22/0x30\n[76613.059649] ? search_bpf_extables+0x5f/0x80\n[76613.063988] ? exc_page_fault+0xa9/0x140\n[76613.067975] ? asm_exc_page_fault+0x22/0x30\n[76613.072229] ? xsk_map_delete_elem+0x2d/0x60\n[76613.076573] ? xsk_map_delete_elem+0x23/0x60\n[76613.080914] __sys_bpf+0x19b7/0x23c0\n[76613.084555] __x64_sys_bpf+0x1a/0x20\n[76613.088194] do_syscall_64+0x37/0xb0\n[76613.091832] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n[76613.096962] RIP: 0033:0x7f80b6d1e88d\n[76613.100592] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[76613.119631] RSP: 002b:00007ffd1ae0ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000141\n[76613.131330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80b6d1e88d\n[76613.142632] RDX: 0000000000000098 RSI: 00007ffd1ae0ad20 RDI: 0000000000000003\n[76613.153967] RBP: 00007ffd1ae0adc0 R08: 0000000000000000 R09: 0000000000000000\n[76613.166030] R10: 00007f80b6f77040 R11: 0000000000000206 R12: 00007ffd1ae0aed8\n[76613.177130] R13: 000055ddf42ce1e9 R14: 000055ddf42d0d98 R15: 00\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56614",
"url": "https://www.suse.com/security/cve/CVE-2024-56614"
},
{
"category": "external",
"summary": "SUSE Bug 1235424 for CVE-2024-56614",
"url": "https://bugzilla.suse.com/1235424"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56614"
},
{
"cve": "CVE-2024-56615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix OOB devmap writes when deleting elements\n\nJordy reported issue against XSKMAP which also applies to DEVMAP - the\nindex used for accessing map entry, due to being a signed integer,\ncauses the OOB writes. Fix is simple as changing the type from int to\nu32, however, when compared to XSKMAP case, one more thing needs to be\naddressed.\n\nWhen map is released from system via dev_map_free(), we iterate through\nall of the entries and an iterator variable is also an int, which\nimplies OOB accesses. Again, change it to be u32.\n\nExample splat below:\n\n[ 160.724676] BUG: unable to handle page fault for address: ffffc8fc2c001000\n[ 160.731662] #PF: supervisor read access in kernel mode\n[ 160.736876] #PF: error_code(0x0000) - not-present page\n[ 160.742095] PGD 0 P4D 0\n[ 160.744678] Oops: Oops: 0000 [#1] PREEMPT SMP\n[ 160.749106] CPU: 1 UID: 0 PID: 520 Comm: kworker/u145:12 Not tainted 6.12.0-rc1+ #487\n[ 160.757050] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[ 160.767642] Workqueue: events_unbound bpf_map_free_deferred\n[ 160.773308] RIP: 0010:dev_map_free+0x77/0x170\n[ 160.777735] Code: 00 e8 fd 91 ed ff e8 b8 73 ed ff 41 83 7d 18 19 74 6e 41 8b 45 24 49 8b bd f8 00 00 00 31 db 85 c0 74 48 48 63 c3 48 8d 04 c7 \u003c48\u003e 8b 28 48 85 ed 74 30 48 8b 7d 18 48 85 ff 74 05 e8 b3 52 fa ff\n[ 160.796777] RSP: 0018:ffffc9000ee1fe38 EFLAGS: 00010202\n[ 160.802086] RAX: ffffc8fc2c001000 RBX: 0000000080000000 RCX: 0000000000000024\n[ 160.809331] RDX: 0000000000000000 RSI: 0000000000000024 RDI: ffffc9002c001000\n[ 160.816576] RBP: 0000000000000000 R08: 0000000000000023 R09: 0000000000000001\n[ 160.823823] R10: 0000000000000001 R11: 00000000000ee6b2 R12: dead000000000122\n[ 160.831066] R13: ffff88810c928e00 R14: ffff8881002df405 R15: 0000000000000000\n[ 160.838310] FS: 0000000000000000(0000) GS:ffff8897e0c40000(0000) knlGS:0000000000000000\n[ 160.846528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 160.852357] CR2: ffffc8fc2c001000 CR3: 0000000005c32006 CR4: 00000000007726f0\n[ 160.859604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 160.866847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 160.874092] PKRU: 55555554\n[ 160.876847] Call Trace:\n[ 160.879338] \u003cTASK\u003e\n[ 160.881477] ? __die+0x20/0x60\n[ 160.884586] ? page_fault_oops+0x15a/0x450\n[ 160.888746] ? search_extable+0x22/0x30\n[ 160.892647] ? search_bpf_extables+0x5f/0x80\n[ 160.896988] ? exc_page_fault+0xa9/0x140\n[ 160.900973] ? asm_exc_page_fault+0x22/0x30\n[ 160.905232] ? dev_map_free+0x77/0x170\n[ 160.909043] ? dev_map_free+0x58/0x170\n[ 160.912857] bpf_map_free_deferred+0x51/0x90\n[ 160.917196] process_one_work+0x142/0x370\n[ 160.921272] worker_thread+0x29e/0x3b0\n[ 160.925082] ? rescuer_thread+0x4b0/0x4b0\n[ 160.929157] kthread+0xd4/0x110\n[ 160.932355] ? kthread_park+0x80/0x80\n[ 160.936079] ret_from_fork+0x2d/0x50\n[ 160.943396] ? kthread_park+0x80/0x80\n[ 160.950803] ret_from_fork_asm+0x11/0x20\n[ 160.958482] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56615",
"url": "https://www.suse.com/security/cve/CVE-2024-56615"
},
{
"category": "external",
"summary": "SUSE Bug 1235426 for CVE-2024-56615",
"url": "https://bugzilla.suse.com/1235426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56616"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix MST sideband message body length check\n\nFix the MST sideband message body length check, which must be at least 1\nbyte accounting for the message body CRC (aka message data CRC) at the\nend of the message.\n\nThis fixes a case where an MST branch device returns a header with a\ncorrect header CRC (indicating a correctly received body length), with\nthe body length being incorrectly set to 0. This will later lead to a\nmemory corruption in drm_dp_sideband_append_payload() and the following\nerrors in dmesg:\n\n UBSAN: array-index-out-of-bounds in drivers/gpu/drm/display/drm_dp_mst_topology.c:786:25\n index -1 is out of range for type \u0027u8 [48]\u0027\n Call Trace:\n drm_dp_sideband_append_payload+0x33d/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]\n\n memcpy: detected field-spanning write (size 18446744073709551615) of single field \"\u0026msg-\u003emsg[msg-\u003ecurlen]\" at drivers/gpu/drm/display/drm_dp_mst_topology.c:791 (size 256)\n Call Trace:\n drm_dp_sideband_append_payload+0x324/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56616",
"url": "https://www.suse.com/security/cve/CVE-2024-56616"
},
{
"category": "external",
"summary": "SUSE Bug 1235427 for CVE-2024-56616",
"url": "https://bugzilla.suse.com/1235427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56616"
},
{
"cve": "CVE-2024-56617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56617"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU\n\nCommit\n\n 5944ce092b97 (\"arch_topology: Build cacheinfo from primary CPU\")\n\nadds functionality that architectures can use to optionally allocate and\nbuild cacheinfo early during boot. Commit\n\n 6539cffa9495 (\"cacheinfo: Add arch specific early level initializer\")\n\nlets secondary CPUs correct (and reallocate memory) cacheinfo data if\nneeded.\n\nIf the early build functionality is not used and cacheinfo does not need\ncorrection, memory for cacheinfo is never allocated. x86 does not use\nthe early build functionality. Consequently, during the cacheinfo CPU\nhotplug callback, last_level_cache_is_valid() attempts to dereference\na NULL pointer:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000100\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEPMT SMP NOPTI\n CPU: 0 PID 19 Comm: cpuhp/0 Not tainted 6.4.0-rc2 #1\n RIP: 0010: last_level_cache_is_valid+0x95/0xe0a\n\nAllocate memory for cacheinfo during the cacheinfo CPU hotplug callback\nif not done earlier.\n\nMoreover, before determining the validity of the last-level cache info,\nensure that it has been allocated. Simply checking for non-zero\ncache_leaves() is not sufficient, as some architectures (e.g., Intel\nprocessors) have non-zero cache_leaves() before allocation.\n\nDereferencing NULL cacheinfo can occur in update_per_cpu_data_slice_size().\nThis function iterates over all online CPUs. However, a CPU may have come\nonline recently, but its cacheinfo may not have been allocated yet.\n\nWhile here, remove an unnecessary indentation in allocate_cache_info().\n\n [ bp: Massage. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56617",
"url": "https://www.suse.com/security/cve/CVE-2024-56617"
},
{
"category": "external",
"summary": "SUSE Bug 1235429 for CVE-2024-56617",
"url": "https://bugzilla.suse.com/1235429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56617"
},
{
"cve": "CVE-2024-56619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()\n\nSyzbot reported that when searching for records in a directory where the\ninode\u0027s i_size is corrupted and has a large value, memory access outside\nthe folio/page range may occur, or a use-after-free bug may be detected if\nKASAN is enabled.\n\nThis is because nilfs_last_byte(), which is called by nilfs_find_entry()\nand others to calculate the number of valid bytes of directory data in a\npage from i_size and the page index, loses the upper 32 bits of the 64-bit\nsize information due to an inappropriate type of local variable to which\nthe i_size value is assigned.\n\nThis caused a large byte offset value due to underflow in the end address\ncalculation in the calling nilfs_find_entry(), resulting in memory access\nthat exceeds the folio/page size.\n\nFix this issue by changing the type of the local variable causing the bit\nloss from \"unsigned int\" to \"u64\". The return value of nilfs_last_byte()\nis also of type \"unsigned int\", but it is truncated so as not to exceed\nPAGE_SIZE and no bit loss occurs, so no change is required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56619",
"url": "https://www.suse.com/security/cve/CVE-2024-56619"
},
{
"category": "external",
"summary": "SUSE Bug 1235224 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "external",
"summary": "SUSE Bug 1235225 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56619"
},
{
"cve": "CVE-2024-56620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56620"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: qcom: Only free platform MSIs when ESI is enabled\n\nOtherwise, it will result in a NULL pointer dereference as below:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000008\nCall trace:\n mutex_lock+0xc/0x54\n platform_device_msi_free_irqs_all+0x14/0x20\n ufs_qcom_remove+0x34/0x48 [ufs_qcom]\n platform_remove+0x28/0x44\n device_remove+0x4c/0x80\n device_release_driver_internal+0xd8/0x178\n driver_detach+0x50/0x9c\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n platform_driver_unregister+0x14/0x20\n ufs_qcom_pltform_exit+0x18/0xb94 [ufs_qcom]\n __arm64_sys_delete_module+0x180/0x260\n invoke_syscall+0x44/0x100\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0xdc\n el0t_64_sync_handler+0xc0/0xc4\n el0t_64_sync+0x190/0x194",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56620",
"url": "https://www.suse.com/security/cve/CVE-2024-56620"
},
{
"category": "external",
"summary": "SUSE Bug 1235227 for CVE-2024-56620",
"url": "https://bugzilla.suse.com/1235227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56620"
},
{
"cve": "CVE-2024-56622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56622"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: sysfs: Prevent div by zero\n\nPrevent a division by 0 when monitoring is not enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56622",
"url": "https://www.suse.com/security/cve/CVE-2024-56622"
},
{
"category": "external",
"summary": "SUSE Bug 1235251 for CVE-2024-56622",
"url": "https://bugzilla.suse.com/1235251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56622"
},
{
"cve": "CVE-2024-56623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread. Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022] ? __dentry_kill+0x121/0x170\n[596663.813030] ? _cond_resched+0x15/0x30\n[596663.813034] ? _cond_resched+0x15/0x30\n[596663.813039] ? wait_for_completion+0x35/0x190\n[596663.813048] ? try_to_wake_up+0x63/0x540\n[596663.813055] free_task+0x5a/0x60\n[596663.813061] kthread_stop+0xf3/0x100\n[596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56623",
"url": "https://www.suse.com/security/cve/CVE-2024-56623"
},
{
"category": "external",
"summary": "SUSE Bug 1235466 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "external",
"summary": "SUSE Bug 1235468 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56625"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: can_set_termination(): allow sleeping GPIOs\n\nIn commit 6e86a1543c37 (\"can: dev: provide optional GPIO based\ntermination support\") GPIO based termination support was added.\n\nFor no particular reason that patch uses gpiod_set_value() to set the\nGPIO. This leads to the following warning, if the systems uses a\nsleeping GPIO, i.e. behind an I2C port expander:\n\n| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c\n| CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c\n\nReplace gpiod_set_value() by gpiod_set_value_cansleep() to allow the\nuse of sleeping GPIOs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56625",
"url": "https://www.suse.com/security/cve/CVE-2024-56625"
},
{
"category": "external",
"summary": "SUSE Bug 1235223 for CVE-2024-56625",
"url": "https://bugzilla.suse.com/1235223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56625"
},
{
"cve": "CVE-2024-56629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56629"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix when get product name maybe null pointer\n\nDue to incorrect dev-\u003eproduct reporting by certain devices, null\npointer dereferences occur when dev-\u003eproduct is empty, leading to\npotential system crashes.\n\nThis issue was found on EXCELSIOR DL37-D05 device with\nLoongson-LS3A6000-7A2000-DL37 motherboard.\n\nKernel logs:\n[ 56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci\n[ 56.671638] usb 4-3: string descriptor 0 read error: -22\n[ 56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07\n[ 56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3\n[ 56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0\n[ 56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80\n[ 56.697732] Oops[#1]:\n[ 56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G OE 6.6.0-loong64-desktop #25.00.2000.015\n[ 56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00 10/11/2024\n[ 56.697739] pc 90000000066e35c8 ra ffff800004f98a80 tp 9000000125478000 sp 900000012547b8a0\n[ 56.697741] a0 0000000000000000 a1 ffff800004818b28 a2 0000000000000000 a3 0000000000000000\n[ 56.697743] a4 900000012547b8f0 a5 0000000000000000 a6 0000000000000000 a7 0000000000000000\n[ 56.697745] t0 ffff800004818b2d t1 0000000000000000 t2 0000000000000003 t3 0000000000000005\n[ 56.697747] t4 0000000000000000 t5 0000000000000000 t6 0000000000000000 t7 0000000000000000\n[ 56.697748] t8 0000000000000000 u0 0000000000000000 s9 0000000000000000 s0 900000011aa48028\n[ 56.697750] s1 0000000000000000 s2 0000000000000000 s3 ffff800004818e80 s4 ffff800004810000\n[ 56.697751] s5 90000001000b98d0 s6 ffff800004811f88 s7 ffff800005470440 s8 0000000000000000\n[ 56.697753] ra: ffff800004f98a80 wacom_update_name+0xe0/0x300 [wacom]\n[ 56.697802] ERA: 90000000066e35c8 strstr+0x28/0x120\n[ 56.697806] CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)\n[ 56.697816] PRMD: 0000000c (PPLV0 +PIE +PWE)\n[ 56.697821] EUEN: 00000000 (-FPE -SXE -ASXE -BTE)\n[ 56.697827] ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)\n[ 56.697831] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)\n[ 56.697835] BADV: 0000000000000000\n[ 56.697836] PRID: 0014d000 (Loongson-64bit, Loongson-3A6000)\n[ 56.697838] Modules linked in: wacom(+) bnep bluetooth rfkill qrtr nls_iso8859_1 nls_cp437 snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_timer snd soundcore input_leds mousedev led_class joydev deepin_netmonitor(OE) fuse nfnetlink dmi_sysfs ip_tables x_tables overlay amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_suballoc_helper i2c_algo_bit drm_ttm_helper r8169 ttm drm_display_helper spi_loongson_pci xhci_pci cec xhci_pci_renesas spi_loongson_core hid_generic realtek gpio_loongson_64bit\n[ 56.697887] Process (udev-worker) (pid: 2742, threadinfo=00000000aee0d8b4, task=00000000a9eff1f3)\n[ 56.697890] Stack : 0000000000000000 ffff800004817e00 0000000000000000 0000251c00000000\n[ 56.697896] 0000000000000000 00000011fffffffd 0000000000000000 0000000000000000\n[ 56.697901] 0000000000000000 1b67a968695184b9 0000000000000000 90000001000b98d0\n[ 56.697906] 90000001000bb8d0 900000011aa48028 0000000000000000 ffff800004f9d74c\n[ 56.697911] 90000001000ba000 ffff800004f9ce58 0000000000000000 ffff800005470440\n[ 56.697916] ffff800004811f88 90000001000b98d0 9000000100da2aa8 90000001000bb8d0\n[ 56.697921] 0000000000000000 90000001000ba000 900000011aa48028 ffff800004f9d74c\n[ 56.697926] ffff8000054704e8 90000001000bb8b8 90000001000ba000 0000000000000000\n[ 56.697931] 90000001000bb8d0 \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56629",
"url": "https://www.suse.com/security/cve/CVE-2024-56629"
},
{
"category": "external",
"summary": "SUSE Bug 1235473 for CVE-2024-56629",
"url": "https://bugzilla.suse.com/1235473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56629"
},
{
"cve": "CVE-2024-56630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: free inode when ocfs2_get_init_inode() fails\n\nsyzbot is reporting busy inodes after unmount, for commit 9c89fe0af826\n(\"ocfs2: Handle error from dquot_initialize()\") forgot to call iput() when\nnew_inode() succeeded and dquot_initialize() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56630",
"url": "https://www.suse.com/security/cve/CVE-2024-56630"
},
{
"category": "external",
"summary": "SUSE Bug 1235479 for CVE-2024-56630",
"url": "https://bugzilla.suse.com/1235479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56631"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Fix slab-use-after-free read in sg_release()\n\nFix a use-after-free bug in sg_release(), detected by syzbot with KASAN:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30\nkernel/locking/lockdep.c:5838\n__mutex_unlock_slowpath+0xe2/0x750 kernel/locking/mutex.c:912\nsg_release+0x1f4/0x2e0 drivers/scsi/sg.c:407\n\nIn sg_release(), the function kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) is\ncalled before releasing the open_rel_lock mutex. The kref_put() call may\ndecrement the reference count of sfp to zero, triggering its cleanup\nthrough sg_remove_sfp(). This cleanup includes scheduling deferred work\nvia sg_remove_sfp_usercontext(), which ultimately frees sfp.\n\nAfter kref_put(), sg_release() continues to unlock open_rel_lock and may\nreference sfp or sdp. If sfp has already been freed, this results in a\nslab-use-after-free error.\n\nMove the kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) call after unlocking the\nopen_rel_lock mutex. This ensures:\n\n - No references to sfp or sdp occur after the reference count is\n decremented.\n\n - Cleanup functions such as sg_remove_sfp() and\n sg_remove_sfp_usercontext() can safely execute without impacting the\n mutex handling in sg_release().\n\nThe fix has been tested and validated by syzbot. This patch closes the\nbug reported at the following syzkaller link and ensures proper\nsequencing of resource cleanup and mutex operations, eliminating the\nrisk of use-after-free errors in sg_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56631",
"url": "https://www.suse.com/security/cve/CVE-2024-56631"
},
{
"category": "external",
"summary": "SUSE Bug 1235480 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "external",
"summary": "SUSE Bug 1235482 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56631"
},
{
"cve": "CVE-2024-56632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix the memleak while create new ctrl failed\n\nNow while we create new ctrl failed, we have not free the\ntagset occupied by admin_q, here try to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56632",
"url": "https://www.suse.com/security/cve/CVE-2024-56632"
},
{
"category": "external",
"summary": "SUSE Bug 1235483 for CVE-2024-56632",
"url": "https://bugzilla.suse.com/1235483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56632"
},
{
"cve": "CVE-2024-56634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56634"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: grgpio: Add NULL check in grgpio_probe\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in grgpio_probe is not checked.\nAdd NULL check in grgpio_probe, to handle kernel NULL\npointer dereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56634",
"url": "https://www.suse.com/security/cve/CVE-2024-56634"
},
{
"category": "external",
"summary": "SUSE Bug 1235486 for CVE-2024-56634",
"url": "https://bugzilla.suse.com/1235486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56634"
},
{
"cve": "CVE-2024-56635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56635"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid potential UAF in default_operstate()\n\nsyzbot reported an UAF in default_operstate() [1]\n\nIssue is a race between device and netns dismantles.\n\nAfter calling __rtnl_unlock() from netdev_run_todo(),\nwe can not assume the netns of each device is still alive.\n\nMake sure the device is not in NETREG_UNREGISTERED state,\nand add an ASSERT_RTNL() before the call to\n__dev_get_by_index().\n\nWe might move this ASSERT_RTNL() in __dev_get_by_index()\nin the future.\n\n[1]\n\nBUG: KASAN: slab-use-after-free in __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\nRead of size 8 at addr ffff888043eba1b0 by task syz.0.0/5339\n\nCPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\n default_operstate net/core/link_watch.c:51 [inline]\n rfc2863_policy+0x224/0x300 net/core/link_watch.c:67\n linkwatch_do_dev+0x3e/0x170 net/core/link_watch.c:170\n netdev_run_todo+0x461/0x1000 net/core/dev.c:10894\n rtnl_unlock net/core/rtnetlink.c:152 [inline]\n rtnl_net_unlock include/linux/rtnetlink.h:133 [inline]\n rtnl_dellink+0x760/0x8d0 net/core/rtnetlink.c:3520\n rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:726\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583\n ___sys_sendmsg net/socket.c:2637 [inline]\n __sys_sendmsg+0x269/0x350 net/socket.c:2669\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f2a3cb80809\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f2a3d9cd058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f2a3cd45fa0 RCX: 00007f2a3cb80809\nRDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008\nRBP: 00007f2a3cbf393e R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007f2a3cd45fa0 R15: 00007ffd03bc65c8\n \u003c/TASK\u003e\n\nAllocated by task 5339:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4314\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kmalloc_array_noprof include/linux/slab.h:945 [inline]\n netdev_create_hash net/core/dev.c:11870 [inline]\n netdev_init+0x10c/0x250 net/core/dev.c:11890\n ops_init+0x31e/0x590 net/core/net_namespace.c:138\n setup_net+0x287/0x9e0 net/core/net_namespace.c:362\n copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500\n create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228\n ksys_unshare+0x57d/0xa70 kernel/fork.c:3314\n __do_sys_unshare kernel/fork.c:3385 [inline]\n __se_sys_unshare kernel/fork.c:3383 [inline]\n __x64_sys_unshare+0x38/0x40 kernel/fork.c:3383\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x8\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56635",
"url": "https://www.suse.com/security/cve/CVE-2024-56635"
},
{
"category": "external",
"summary": "SUSE Bug 1235519 for CVE-2024-56635",
"url": "https://bugzilla.suse.com/1235519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56635"
},
{
"cve": "CVE-2024-56636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56636"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: do not assume mac header is set in geneve_xmit_skb()\n\nWe should not assume mac header is set in output path.\n\nUse skb_eth_hdr() instead of eth_hdr() to fix the issue.\n\nsysbot reported the following :\n\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 skb_mac_header include/linux/skbuff.h:3052 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 eth_hdr include/linux/if_ether.h:24 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nModules linked in:\nCPU: 0 UID: 0 PID: 11635 Comm: syz.4.1423 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_mac_header include/linux/skbuff.h:3052 [inline]\n RIP: 0010:eth_hdr include/linux/if_ether.h:24 [inline]\n RIP: 0010:geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n RIP: 0010:geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nCode: 21 c6 02 e9 35 d4 ff ff e8 a5 48 4c fb 90 0f 0b 90 e9 fd f5 ff ff e8 97 48 4c fb 90 0f 0b 90 e9 d8 f5 ff ff e8 89 48 4c fb 90 \u003c0f\u003e 0b 90 e9 41 e4 ff ff e8 7b 48 4c fb 90 0f 0b 90 e9 cd e7 ff ff\nRSP: 0018:ffffc90003b2f870 EFLAGS: 00010283\nRAX: 000000000000037a RBX: 000000000000ffff RCX: ffffc9000dc3d000\nRDX: 0000000000080000 RSI: ffffffff86428417 RDI: 0000000000000003\nRBP: ffffc90003b2f9f0 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000002 R12: ffff88806603c000\nR13: 0000000000000000 R14: ffff8880685b2780 R15: 0000000000000e23\nFS: 00007fdc2deed6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b30a1dff8 CR3: 0000000056b8c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n __dev_direct_xmit+0x58a/0x720 net/core/dev.c:4490\n dev_direct_xmit include/linux/netdevice.h:3181 [inline]\n packet_xmit+0x1e4/0x360 net/packet/af_packet.c:285\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x2700/0x5660 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x488/0x4f0 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2200\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56636",
"url": "https://www.suse.com/security/cve/CVE-2024-56636"
},
{
"category": "external",
"summary": "SUSE Bug 1235520 for CVE-2024-56636",
"url": "https://bugzilla.suse.com/1235520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56636"
},
{
"cve": "CVE-2024-56637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56637"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: Hold module reference while requesting a module\n\nUser space may unload ip_set.ko while it is itself requesting a set type\nbackend module, leading to a kernel crash. The race condition may be\nprovoked by inserting an mdelay() right after the nfnl_unlock() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56637",
"url": "https://www.suse.com/security/cve/CVE-2024-56637"
},
{
"category": "external",
"summary": "SUSE Bug 1235523 for CVE-2024-56637",
"url": "https://bugzilla.suse.com/1235523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n Workqueue: events smc_lgr_terminate_work [smc]\n RIP: 0010:__flush_work+0x19e/0x1b0\n Call Trace:\n ? __wake_up_common+0x7a/0x190\n ? work_busy+0x80/0x80\n __cancel_work_timer+0xe3/0x160\n smc_close_cancel_work+0x1a/0x70 [smc]\n smc_close_active_abort+0x207/0x360 [smc]\n __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n process_one_work+0x19e/0x340\n worker_thread+0x30/0x370\n ? process_one_work+0x340/0x340\n kthread+0x117/0x130\n ? __kthread_cancel_work+0x50/0x50\n ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn-\u003eclose_work is\nflushed before initialization, resulting in WARN_ON(!work-\u003efunc).\n\n__smc_lgr_terminate | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr-\u003econns_all |\n\\- smc_conn_kill |\n \\- smc_close_active_abort |\n \\- smc_close_cancel_work |\n \\- cancel_work_sync |\n \\- __flush_work |\n\t (close_work) |\n\t | smc_close_init\n\t | \\- INIT_WORK(\u0026close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56641",
"url": "https://www.suse.com/security/cve/CVE-2024-56641"
},
{
"category": "external",
"summary": "SUSE Bug 1235526 for CVE-2024-56641",
"url": "https://bugzilla.suse.com/1235526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56641"
},
{
"cve": "CVE-2024-56642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56642"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free of kernel socket in cleanup_bearer().\n\nsyzkaller reported a use-after-free of UDP kernel socket\nin cleanup_bearer() without repro. [0][1]\n\nWhen bearer_disable() calls tipc_udp_disable(), cleanup\nof the UDP kernel socket is deferred by work calling\ncleanup_bearer().\n\ntipc_exit_net() waits for such works to finish by checking\ntipc_net(net)-\u003ewq_count. However, the work decrements the\ncount too early before releasing the kernel socket,\nunblocking cleanup_net() and resulting in use-after-free.\n\nLet\u0027s move the decrement after releasing the socket in\ncleanup_bearer().\n\n[0]:\nref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at\n sk_alloc+0x438/0x608\n inet_create+0x4c8/0xcb0\n __sock_create+0x350/0x6b8\n sock_create_kern+0x58/0x78\n udp_sock_create4+0x68/0x398\n udp_sock_create+0x88/0xc8\n tipc_udp_enable+0x5e8/0x848\n __tipc_nl_bearer_enable+0x84c/0xed8\n tipc_nl_bearer_enable+0x38/0x60\n genl_family_rcv_msg_doit+0x170/0x248\n genl_rcv_msg+0x400/0x5b0\n netlink_rcv_skb+0x1dc/0x398\n genl_rcv+0x44/0x68\n netlink_unicast+0x678/0x8b0\n netlink_sendmsg+0x5e4/0x898\n ____sys_sendmsg+0x500/0x830\n\n[1]:\nBUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline]\nBUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n udp_hashslot include/net/udp.h:85 [inline]\n udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n sk_common_release+0xaf/0x3f0 net/core/sock.c:3820\n inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437\n inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489\n __sock_release net/socket.c:658 [inline]\n sock_release+0xa0/0x210 net/socket.c:686\n cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\n slab_free_hook mm/slub.c:2269 [inline]\n slab_free mm/slub.c:4580 [inline]\n kmem_cache_free+0x207/0xc40 mm/slub.c:4682\n net_free net/core/net_namespace.c:454 [inline]\n cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: events cleanup_bearer",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56642",
"url": "https://www.suse.com/security/cve/CVE-2024-56642"
},
{
"category": "external",
"summary": "SUSE Bug 1235433 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "external",
"summary": "SUSE Bug 1235434 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56642"
},
{
"cve": "CVE-2024-56643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56643"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: Fix memory leak in dccp_feat_change_recv\n\nIf dccp_feat_push_confirm() fails after new value for SP feature was accepted\nwithout reconciliation (\u0027entry == NULL\u0027 branch), memory allocated for that value\nwith dccp_feat_clone_sp_val() is never freed.\n\nHere is the kmemleak stack for this:\n\nunreferenced object 0xffff88801d4ab488 (size 8):\n comm \"syz-executor310\", pid 1127, jiffies 4295085598 (age 41.666s)\n hex dump (first 8 bytes):\n 01 b4 4a 1d 80 88 ff ff ..J.....\n backtrace:\n [\u003c00000000db7cabfe\u003e] kmemdup+0x23/0x50 mm/util.c:128\n [\u003c0000000019b38405\u003e] kmemdup include/linux/string.h:465 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:371 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:367 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_change_recv net/dccp/feat.c:1145 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_parse_options+0x1196/0x2180 net/dccp/feat.c:1416\n [\u003c00000000b1f6d94a\u003e] dccp_parse_options+0xa2a/0x1260 net/dccp/options.c:125\n [\u003c0000000030d7b621\u003e] dccp_rcv_state_process+0x197/0x13d0 net/dccp/input.c:650\n [\u003c000000001f74c72e\u003e] dccp_v4_do_rcv+0xf9/0x1a0 net/dccp/ipv4.c:688\n [\u003c00000000a6c24128\u003e] sk_backlog_rcv include/net/sock.h:1041 [inline]\n [\u003c00000000a6c24128\u003e] __release_sock+0x139/0x3b0 net/core/sock.c:2570\n [\u003c00000000cf1f3a53\u003e] release_sock+0x54/0x1b0 net/core/sock.c:3111\n [\u003c000000008422fa23\u003e] inet_wait_for_connect net/ipv4/af_inet.c:603 [inline]\n [\u003c000000008422fa23\u003e] __inet_stream_connect+0x5d0/0xf70 net/ipv4/af_inet.c:696\n [\u003c0000000015b6f64d\u003e] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:735\n [\u003c0000000010122488\u003e] __sys_connect_file+0x15c/0x1a0 net/socket.c:1865\n [\u003c00000000b4b70023\u003e] __sys_connect+0x165/0x1a0 net/socket.c:1882\n [\u003c00000000f4cb3815\u003e] __do_sys_connect net/socket.c:1892 [inline]\n [\u003c00000000f4cb3815\u003e] __se_sys_connect net/socket.c:1889 [inline]\n [\u003c00000000f4cb3815\u003e] __x64_sys_connect+0x6e/0xb0 net/socket.c:1889\n [\u003c00000000e7b1e839\u003e] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46\n [\u003c0000000055e91434\u003e] entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nClean up the allocated memory in case of dccp_feat_push_confirm() failure\nand bail out with an error reset code.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56643",
"url": "https://www.suse.com/security/cve/CVE-2024-56643"
},
{
"category": "external",
"summary": "SUSE Bug 1235132 for CVE-2024-56643",
"url": "https://bugzilla.suse.com/1235132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56644"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: release expired exception dst cached in socket\n\nDst objects get leaked in ip6_negative_advice() when this function is\nexecuted for an expired IPv6 route located in the exception table. There\nare several conditions that must be fulfilled for the leak to occur:\n* an ICMPv6 packet indicating a change of the MTU for the path is received,\n resulting in an exception dst being created\n* a TCP connection that uses the exception dst for routing packets must\n start timing out so that TCP begins retransmissions\n* after the exception dst expires, the FIB6 garbage collector must not run\n before TCP executes ip6_negative_advice() for the expired exception dst\n\nWhen TCP executes ip6_negative_advice() for an exception dst that has\nexpired and if no other socket holds a reference to the exception dst, the\nrefcount of the exception dst is 2, which corresponds to the increment\nmade by dst_init() and the increment made by the TCP socket for which the\nconnection is timing out. The refcount made by the socket is never\nreleased. The refcount of the dst is decremented in sk_dst_reset() but\nthat decrement is counteracted by a dst_hold() intentionally placed just\nbefore the sk_dst_reset() in ip6_negative_advice(). After\nip6_negative_advice() has finished, there is no other object tied to the\ndst. The socket lost its reference stored in sk_dst_cache and the dst is\nno longer in the exception table. The exception dst becomes a leaked\nobject.\n\nAs a result of this dst leak, an unbalanced refcount is reported for the\nloopback device of a net namespace being destroyed under kernels that do\nnot contain e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"):\nunregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFix the dst leak by removing the dst_hold() in ip6_negative_advice(). The\npatch that introduced the dst_hold() in ip6_negative_advice() was\n92f1655aa2b22 (\"net: fix __dst_negative_advice() race\"). But 92f1655aa2b22\nmerely refactored the code with regards to the dst refcount so the issue\nwas present even before 92f1655aa2b22. The bug was introduced in\n54c1a859efd9f (\"ipv6: Don\u0027t drop cache route entry unless timer actually\nexpired.\") where the expired cached route is deleted and the sk_dst_cache\nmember of the socket is set to NULL by calling dst_negative_advice() but\nthe refcount belonging to the socket is left unbalanced.\n\nThe IPv4 version - ipv4_negative_advice() - is not affected by this bug.\nWhen the TCP connection times out ipv4_negative_advice() merely resets the\nsk_dst_cache of the socket while decrementing the refcount of the\nexception dst.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56644",
"url": "https://www.suse.com/security/cve/CVE-2024-56644"
},
{
"category": "external",
"summary": "SUSE Bug 1235133 for CVE-2024-56644",
"url": "https://bugzilla.suse.com/1235133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: j1939: j1939_session_new(): fix skb reference counting\n\nSince j1939_session_skb_queue() does an extra skb_get() for each new\nskb, do the same for the initial one in j1939_session_new() to avoid\nrefcount underflow.\n\n[mkl: clean up commit message]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56645",
"url": "https://www.suse.com/security/cve/CVE-2024-56645"
},
{
"category": "external",
"summary": "SUSE Bug 1235134 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "external",
"summary": "SUSE Bug 1235135 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235135"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56645"
},
{
"cve": "CVE-2024-56648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: avoid potential out-of-bound access in fill_frame_info()\n\nsyzbot is able to feed a packet with 14 bytes, pretending\nit is a vlan one.\n\nSince fill_frame_info() is relying on skb-\u003emac_len already,\nextend the check to cover this case.\n\nBUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606\n __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x91ae/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4091 [inline]\n slab_alloc_node mm/slub.c:4134 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1323 [inline]\n alloc_skb_with_frags+0xc8/0xd00 net/core/skbuff.c:6612\n sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2881\n packet_alloc_skb net/packet/af_packet.c:2995 [inline]\n packet_snd net/packet/af_packet.c:3089 [inline]\n packet_sendmsg+0x74c6/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56648",
"url": "https://www.suse.com/security/cve/CVE-2024-56648"
},
{
"category": "external",
"summary": "SUSE Bug 1235451 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "external",
"summary": "SUSE Bug 1235452 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56648"
},
{
"cve": "CVE-2024-56649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: enetc: Do not configure preemptible TCs if SIs do not support\n\nBoth ENETC PF and VF drivers share enetc_setup_tc_mqprio() to configure\nMQPRIO. And enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs()\nto configure preemptible TCs. However, only PF is able to configure\npreemptible TCs. Because only PF has related registers, while VF does not\nhave these registers. So for VF, its hw-\u003eport pointer is NULL. Therefore,\nVF will access an invalid pointer when accessing a non-existent register,\nwhich will cause a crash issue. The simplified log is as follows.\n\nroot@ls1028ardb:~# tc qdisc add dev eno0vf0 parent root handle 100: \\\nmqprio num_tc 4 map 0 0 1 1 2 2 3 3 queues 1@0 1@1 1@2 1@3 hw 1\n[ 187.290775] Unable to handle kernel paging request at virtual address 0000000000001f00\n[ 187.424831] pc : enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.430518] lr : enetc_mm_commit_preemptible_tcs+0x30c/0x400\n[ 187.511140] Call trace:\n[ 187.513588] enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.518918] enetc_setup_tc_mqprio+0x180/0x214\n[ 187.523374] enetc_vf_setup_tc+0x1c/0x30\n[ 187.527306] mqprio_enable_offload+0x144/0x178\n[ 187.531766] mqprio_init+0x3ec/0x668\n[ 187.535351] qdisc_create+0x15c/0x488\n[ 187.539023] tc_modify_qdisc+0x398/0x73c\n[ 187.542958] rtnetlink_rcv_msg+0x128/0x378\n[ 187.547064] netlink_rcv_skb+0x60/0x130\n[ 187.550910] rtnetlink_rcv+0x18/0x24\n[ 187.554492] netlink_unicast+0x300/0x36c\n[ 187.558425] netlink_sendmsg+0x1a8/0x420\n[ 187.606759] ---[ end trace 0000000000000000 ]---\n\nIn addition, some PFs also do not support configuring preemptible TCs,\nsuch as eno1 and eno3 on LS1028A. It won\u0027t crash like it does for VFs,\nbut we should prevent these PFs from accessing these unimplemented\nregisters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56649",
"url": "https://www.suse.com/security/cve/CVE-2024-56649"
},
{
"category": "external",
"summary": "SUSE Bug 1235449 for CVE-2024-56649",
"url": "https://bugzilla.suse.com/1235449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56649"
},
{
"cve": "CVE-2024-56650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix LED ID check in led_tg_check()\n\nSyzbot has reported the following BUG detected by KASAN:\n\nBUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70\nRead of size 1 at addr ffff8881022da0c8 by task repro/5879\n...\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x241/0x360\n ? __pfx_dump_stack_lvl+0x10/0x10\n ? __pfx__printk+0x10/0x10\n ? _printk+0xd5/0x120\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n print_report+0x169/0x550\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x45f/0x530\n ? __phys_addr+0xba/0x170\n ? strlen+0x58/0x70\n kasan_report+0x143/0x180\n ? strlen+0x58/0x70\n strlen+0x58/0x70\n kstrdup+0x20/0x80\n led_tg_check+0x18b/0x3c0\n xt_check_target+0x3bb/0xa40\n ? __pfx_xt_check_target+0x10/0x10\n ? stack_depot_save_flags+0x6e4/0x830\n ? nft_target_init+0x174/0xc30\n nft_target_init+0x82d/0xc30\n ? __pfx_nft_target_init+0x10/0x10\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? rcu_is_watching+0x15/0xb0\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? __kmalloc_noprof+0x21a/0x400\n nf_tables_newrule+0x1860/0x2980\n ? __pfx_nf_tables_newrule+0x10/0x10\n ? __nla_parse+0x40/0x60\n nfnetlink_rcv+0x14e5/0x2ab0\n ? __pfx_validate_chain+0x10/0x10\n ? __pfx_nfnetlink_rcv+0x10/0x10\n ? __lock_acquire+0x1384/0x2050\n ? netlink_deliver_tap+0x2e/0x1b0\n ? __pfx_lock_release+0x10/0x10\n ? netlink_deliver_tap+0x2e/0x1b0\n netlink_unicast+0x7f8/0x990\n ? __pfx_netlink_unicast+0x10/0x10\n ? __virt_addr_valid+0x183/0x530\n ? __check_object_size+0x48e/0x900\n netlink_sendmsg+0x8e4/0xcb0\n ? __pfx_netlink_sendmsg+0x10/0x10\n ? aa_sock_msg_perm+0x91/0x160\n ? __pfx_netlink_sendmsg+0x10/0x10\n __sock_sendmsg+0x223/0x270\n ____sys_sendmsg+0x52a/0x7e0\n ? __pfx_____sys_sendmsg+0x10/0x10\n __sys_sendmsg+0x292/0x380\n ? __pfx___sys_sendmsg+0x10/0x10\n ? lockdep_hardirqs_on_prepare+0x43d/0x780\n ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10\n ? exc_page_fault+0x590/0x8c0\n ? do_syscall_64+0xb6/0x230\n do_syscall_64+0xf3/0x230\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n...\n \u003c/TASK\u003e\n\nSince an invalid (without \u0027\\0\u0027 byte at all) byte sequence may be passed\nfrom userspace, add an extra check to ensure that such a sequence is\nrejected as possible ID and so never passed to \u0027kstrdup()\u0027 and further.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56650",
"url": "https://www.suse.com/security/cve/CVE-2024-56650"
},
{
"category": "external",
"summary": "SUSE Bug 1235430 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "external",
"summary": "SUSE Bug 1235431 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: hi311x: hi3110_can_ist(): fix potential use-after-free\n\nThe commit a22bd630cfff (\"can: hi311x: do not report txerr and rxerr\nduring bus-off\") removed the reporting of rxerr and txerr even in case\nof correct operation (i. e. not bus-off).\n\nThe error count information added to the CAN frame after netif_rx() is\na potential use after free, since there is no guarantee that the skb\nis in the same state. It might be freed or reused.\n\nFix the issue by postponing the netif_rx() call in case of txerr and\nrxerr reporting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56651",
"url": "https://www.suse.com/security/cve/CVE-2024-56651"
},
{
"category": "external",
"summary": "SUSE Bug 1235528 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "external",
"summary": "SUSE Bug 1236570 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1236570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56651"
},
{
"cve": "CVE-2024-56654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56654"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating\n\nThe usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is\nnot safe since for the most part entries fetched this way shall be\ntreated as rcu_dereference:\n\n\tNote that the value returned by rcu_dereference() is valid\n\tonly within the enclosing RCU read-side critical section [1]_.\n\tFor example, the following is **not** legal::\n\n\t\trcu_read_lock();\n\t\tp = rcu_dereference(head.next);\n\t\trcu_read_unlock();\n\t\tx = p-\u003eaddress;\t/* BUG!!! */\n\t\trcu_read_lock();\n\t\ty = p-\u003edata;\t/* BUG!!! */\n\t\trcu_read_unlock();",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56654",
"url": "https://www.suse.com/security/cve/CVE-2024-56654"
},
{
"category": "external",
"summary": "SUSE Bug 1235532 for CVE-2024-56654",
"url": "https://bugzilla.suse.com/1235532"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56654"
},
{
"cve": "CVE-2024-56656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips\n\nThe 5760X (P7) chip\u0027s HW GRO/LRO interface is very similar to that of\nthe previous generation (5750X or P5). However, the aggregation ID\nfields in the completion structures on P7 have been redefined from\n16 bits to 12 bits. The freed up 4 bits are redefined for part of the\nmetadata such as the VLAN ID. The aggregation ID mask was not modified\nwhen adding support for P7 chips. Including the extra 4 bits for the\naggregation ID can potentially cause the driver to store or fetch the\npacket header of GRO/LRO packets in the wrong TPA buffer. It may hit\nthe BUG() condition in __skb_pull() because the SKB contains no valid\npacket header:\n\nkernel BUG at include/linux/skbuff.h:2766!\nOops: invalid opcode: 0000 1 PREEMPT SMP NOPTI\nCPU: 4 UID: 0 PID: 0 Comm: swapper/4 Kdump: loaded Tainted: G OE 6.12.0-rc2+ #7\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: Dell Inc. PowerEdge R760/0VRV9X, BIOS 1.0.1 12/27/2022\nRIP: 0010:eth_type_trans+0xda/0x140\nCode: 80 00 00 00 eb c1 8b 47 70 2b 47 74 48 8b 97 d0 00 00 00 83 f8 01 7e 1b 48 85 d2 74 06 66 83 3a ff 74 09 b8 00 04 00 00 eb a5 \u003c0f\u003e 0b b8 00 01 00 00 eb 9c 48 85 ff 74 eb 31 f6 b9 02 00 00 00 48\nRSP: 0018:ff615003803fcc28 EFLAGS: 00010283\nRAX: 00000000000022d2 RBX: 0000000000000003 RCX: ff2e8c25da334040\nRDX: 0000000000000040 RSI: ff2e8c25c1ce8000 RDI: ff2e8c25869f9000\nRBP: ff2e8c258c31c000 R08: ff2e8c25da334000 R09: 0000000000000001\nR10: ff2e8c25da3342c0 R11: ff2e8c25c1ce89c0 R12: ff2e8c258e0990b0\nR13: ff2e8c25bb120000 R14: ff2e8c25c1ce89c0 R15: ff2e8c25869f9000\nFS: 0000000000000000(0000) GS:ff2e8c34be300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055f05317e4c8 CR3: 000000108bac6006 CR4: 0000000000773ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n ? die+0x33/0x90\n ? do_trap+0xd9/0x100\n ? eth_type_trans+0xda/0x140\n ? do_error_trap+0x65/0x80\n ? eth_type_trans+0xda/0x140\n ? exc_invalid_op+0x4e/0x70\n ? eth_type_trans+0xda/0x140\n ? asm_exc_invalid_op+0x16/0x20\n ? eth_type_trans+0xda/0x140\n bnxt_tpa_end+0x10b/0x6b0 [bnxt_en]\n ? bnxt_tpa_start+0x195/0x320 [bnxt_en]\n bnxt_rx_pkt+0x902/0xd90 [bnxt_en]\n ? __bnxt_tx_int.constprop.0+0x89/0x300 [bnxt_en]\n ? kmem_cache_free+0x343/0x440\n ? __bnxt_tx_int.constprop.0+0x24f/0x300 [bnxt_en]\n __bnxt_poll_work+0x193/0x370 [bnxt_en]\n bnxt_poll_p5+0x9a/0x300 [bnxt_en]\n ? try_to_wake_up+0x209/0x670\n __napi_poll+0x29/0x1b0\n\nFix it by redefining the aggregation ID mask for P5_PLUS chips to be\n12 bits. This will work because the maximum aggregation ID is less\nthan 4096 on all P5_PLUS chips.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56656",
"url": "https://www.suse.com/security/cve/CVE-2024-56656"
},
{
"category": "external",
"summary": "SUSE Bug 1235444 for CVE-2024-56656",
"url": "https://bugzilla.suse.com/1235444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56656"
},
{
"cve": "CVE-2024-56659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56659"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lapb: increase LAPB_HEADER_LEN\n\nIt is unclear if net/lapb code is supposed to be ready for 8021q.\n\nWe can at least avoid crashes like the following :\n\nskbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2\n------------[ cut here ]------------\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc90002ddf638 EFLAGS: 00010282\nRAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600\nRDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000\nRBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60\nR10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140\nR13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016\nFS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n nr_header+0x36/0x320 net/netrom/nr_dev.c:69\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n vlan_dev_hard_header+0x359/0x480 net/8021q/vlan_dev.c:83\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n lapbeth_data_transmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257\n lapb_data_transmit+0x91/0xb0 net/lapb/lapb_iface.c:447\n lapb_transmit_buffer+0x168/0x1f0 net/lapb/lapb_out.c:149\n lapb_establish_data_link+0x84/0xd0\n lapb_device_event+0x4e0/0x670\n notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93\n __dev_notify_flags+0x207/0x400\n dev_change_flags+0xf0/0x1a0 net/core/dev.c:8922\n devinet_ioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188\n inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1003\n sock_do_ioctl+0x158/0x460 net/socket.c:1227\n sock_ioctl+0x626/0x8e0 net/socket.c:1346\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56659",
"url": "https://www.suse.com/security/cve/CVE-2024-56659"
},
{
"category": "external",
"summary": "SUSE Bug 1235439 for CVE-2024-56659",
"url": "https://bugzilla.suse.com/1235439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56659"
},
{
"cve": "CVE-2024-56660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: DR, prevent potential error pointer dereference\n\nThe dr_domain_add_vport_cap() function generally returns NULL on error\nbut sometimes we want it to return ERR_PTR(-EBUSY) so the caller can\nretry. The problem here is that \"ret\" can be either -EBUSY or -ENOMEM\nand if it\u0027s and -ENOMEM then the error pointer is propogated back and\neventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56660",
"url": "https://www.suse.com/security/cve/CVE-2024-56660"
},
{
"category": "external",
"summary": "SUSE Bug 1235437 for CVE-2024-56660",
"url": "https://bugzilla.suse.com/1235437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56660"
},
{
"cve": "CVE-2024-56661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix NULL deref in cleanup_bearer()\n\nsyzbot found [1] that after blamed commit, ub-\u003eubsock-\u003esk\nwas NULL when attempting the atomic_dec() :\n\natomic_dec(\u0026tipc_net(sock_net(ub-\u003eubsock-\u003esk))-\u003ewq_count);\n\nFix this by caching the tipc_net pointer.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\nCPU: 0 UID: 0 PID: 5896 Comm: kworker/0:3 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events cleanup_bearer\n RIP: 0010:read_pnet include/net/net_namespace.h:387 [inline]\n RIP: 0010:sock_net include/net/sock.h:655 [inline]\n RIP: 0010:cleanup_bearer+0x1f7/0x280 net/tipc/udp_media.c:820\nCode: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c f7 99 f6 48 8b 1b 48 83 c3 30 e8 f0 e4 60 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 80 3c 28 00 74 08 48 89 df e8 1a f7 99 f6 49 83 c7 e8 48 8b 1b\nRSP: 0018:ffffc9000410fb70 EFLAGS: 00010206\nRAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88802fe45a00\nRDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000410f900\nRBP: ffff88807e1f0908 R08: ffffc9000410f907 R09: 1ffff92000821f20\nR10: dffffc0000000000 R11: fffff52000821f21 R12: ffff888031d19980\nR13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e1f0918\nFS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556ca050b000 CR3: 0000000031c0c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56661",
"url": "https://www.suse.com/security/cve/CVE-2024-56661"
},
{
"category": "external",
"summary": "SUSE Bug 1234931 for CVE-2024-56661",
"url": "https://bugzilla.suse.com/1234931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl\n\nFix an issue detected by syzbot with KASAN:\n\nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/\ncore.c:416 [inline]\nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0\ndrivers/acpi/nfit/core.c:459\n\nThe issue occurs in cmd_to_func when the call_pkg-\u003end_reserved2\narray is accessed without verifying that call_pkg points to a buffer\nthat is appropriately sized as a struct nd_cmd_pkg. This can lead\nto out-of-bounds access and undefined behavior if the buffer does not\nhave sufficient space.\n\nTo address this, a check was added in acpi_nfit_ctl() to ensure that\nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)\nbefore accessing it. This ensures safe access to the members of\ncall_pkg, including the nd_reserved2 array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56662",
"url": "https://www.suse.com/security/cve/CVE-2024-56662"
},
{
"category": "external",
"summary": "SUSE Bug 1235533 for CVE-2024-56662",
"url": "https://bugzilla.suse.com/1235533"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one\n\nSince the netlink attribute range validation provides inclusive\nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be\nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.\n\nOne crash stack for demonstration:\n==================================================================\nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508\n\nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106\n print_report+0xe0/0x750 mm/kasan/report.c:398\n kasan_report+0x139/0x170 mm/kasan/report.c:495\n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189\n memcpy+0x25/0x60 mm/kasan/shadow.c:65\n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]\n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453\n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756\n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]\n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850\n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508\n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861\n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]\n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352\n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874\n sock_sendmsg_nosec net/socket.c:716 [inline]\n __sock_sendmsg net/socket.c:728 [inline]\n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499\n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553\n __sys_sendmsg net/socket.c:2582 [inline]\n __do_sys_sendmsg net/socket.c:2591 [inline]\n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUpdate the policy to ensure correct validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56663",
"url": "https://www.suse.com/security/cve/CVE-2024-56663"
},
{
"category": "external",
"summary": "SUSE Bug 1235454 for CVE-2024-56663",
"url": "https://bugzilla.suse.com/1235454"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56663"
},
{
"cve": "CVE-2024-56664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix race between element replace and close()\n\nElement replace (with a socket different from the one stored) may race\nwith socket\u0027s close() link popping \u0026 unlinking. __sock_map_delete()\nunconditionally unrefs the (wrong) element:\n\n// set map[0] = s0\nmap_update_elem(map, 0, s0)\n\n// drop fd of s0\nclose(s0)\n sock_map_close()\n lock_sock(sk) (s0!)\n sock_map_remove_links(sk)\n link = sk_psock_link_pop()\n sock_map_unlink(sk, link)\n sock_map_delete_from_link\n // replace map[0] with s1\n map_update_elem(map, 0, s1)\n sock_map_update_elem\n (s1!) lock_sock(sk)\n sock_map_update_common\n psock = sk_psock(sk)\n spin_lock(\u0026stab-\u003elock)\n osk = stab-\u003esks[idx]\n sock_map_add_link(..., \u0026stab-\u003esks[idx])\n sock_map_unref(osk, \u0026stab-\u003esks[idx])\n psock = sk_psock(osk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test(\u0026psock))\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n unlock_sock(sk)\n __sock_map_delete\n spin_lock(\u0026stab-\u003elock)\n sk = *psk // s1 replaced s0; sk == s1\n if (!sk_test || sk_test == sk) // sk_test (s0) != sk (s1); no branch\n sk = xchg(psk, NULL)\n if (sk)\n sock_map_unref(sk, psk) // unref s1; sks[idx] will dangle\n psock = sk_psock(sk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test())\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n release_sock(sk)\n\nThen close(map) enqueues bpf_map_free_deferred, which finally calls\nsock_map_free(). This results in some refcount_t warnings along with\na KASAN splat [1].\n\nFix __sock_map_delete(), do not allow sock_map_unref() on elements that\nmay have been replaced.\n\n[1]:\nBUG: KASAN: slab-use-after-free in sock_map_free+0x10e/0x330\nWrite of size 4 at addr ffff88811f5b9100 by task kworker/u64:12/1063\n\nCPU: 14 UID: 0 PID: 1063 Comm: kworker/u64:12 Not tainted 6.12.0+ #125\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014\nWorkqueue: events_unbound bpf_map_free_deferred\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x68/0x90\n print_report+0x174/0x4f6\n kasan_report+0xb9/0x190\n kasan_check_range+0x10f/0x1e0\n sock_map_free+0x10e/0x330\n bpf_map_free_deferred+0x173/0x320\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 1202:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n __kasan_slab_alloc+0x85/0x90\n kmem_cache_alloc_noprof+0x131/0x450\n sk_prot_alloc+0x5b/0x220\n sk_alloc+0x2c/0x870\n unix_create1+0x88/0x8a0\n unix_create+0xc5/0x180\n __sock_create+0x241/0x650\n __sys_socketpair+0x1ce/0x420\n __x64_sys_socketpair+0x92/0x100\n do_syscall_64+0x93/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 46:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x37/0x60\n __kasan_slab_free+0x4b/0x70\n kmem_cache_free+0x1a1/0x590\n __sk_destruct+0x388/0x5a0\n sk_psock_destroy+0x73e/0xa50\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nThe bu\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56664",
"url": "https://www.suse.com/security/cve/CVE-2024-56664"
},
{
"category": "external",
"summary": "SUSE Bug 1235249 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "external",
"summary": "SUSE Bug 1235250 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56664"
},
{
"cve": "CVE-2024-56665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56665"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog\n\nSyzbot reported [1] crash that happens for following tracing scenario:\n\n - create tracepoint perf event with attr.inherit=1, attach it to the\n process and set bpf program to it\n - attached process forks -\u003e chid creates inherited event\n\n the new child event shares the parent\u0027s bpf program and tp_event\n (hence prog_array) which is global for tracepoint\n\n - exit both process and its child -\u003e release both events\n - first perf_event_detach_bpf_prog call will release tp_event-\u003eprog_array\n and second perf_event_detach_bpf_prog will crash, because\n tp_event-\u003eprog_array is NULL\n\nThe fix makes sure the perf_event_detach_bpf_prog checks prog_array\nis valid before it tries to remove the bpf program from it.\n\n[1] https://lore.kernel.org/bpf/Z1MR6dCIKajNS6nU@krava/T/#m91dbf0688221ec7a7fc95e896a7ef9ff93b0b8ad",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56665",
"url": "https://www.suse.com/security/cve/CVE-2024-56665"
},
{
"category": "external",
"summary": "SUSE Bug 1235489 for CVE-2024-56665",
"url": "https://bugzilla.suse.com/1235489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56665"
},
{
"cve": "CVE-2024-56667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56667"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix NULL pointer dereference in capture_engine\n\nWhen the intel_context structure contains NULL,\nit raises a NULL pointer dereference error in drm_info().\n\n(cherry picked from commit 754302a5bc1bd8fd3b7d85c168b0a1af6d4bba4d)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56667",
"url": "https://www.suse.com/security/cve/CVE-2024-56667"
},
{
"category": "external",
"summary": "SUSE Bug 1235016 for CVE-2024-56667",
"url": "https://bugzilla.suse.com/1235016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56667"
},
{
"cve": "CVE-2024-56670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer\n\nConsidering that in some extreme cases,\nwhen u_serial driver is accessed by multiple threads,\nThread A is executing the open operation and calling the gs_open,\nThread B is executing the disconnect operation and calling the\ngserial_disconnect function,The port-\u003eport_usb pointer will be set to NULL.\n\nE.g.\n Thread A Thread B\n gs_open() gadget_unbind_driver()\n gs_start_io() composite_disconnect()\n gs_start_rx() gserial_disconnect()\n ... ...\n spin_unlock(\u0026port-\u003eport_lock)\n status = usb_ep_queue() spin_lock(\u0026port-\u003eport_lock)\n spin_lock(\u0026port-\u003eport_lock) port-\u003eport_usb = NULL\n gs_free_requests(port-\u003eport_usb-\u003ein) spin_unlock(\u0026port-\u003eport_lock)\n Crash\n\nThis causes thread A to access a null pointer (port-\u003eport_usb is null)\nwhen calling the gs_free_requests function, causing a crash.\n\nIf port_usb is NULL, the release request will be skipped as it\nwill be done by gserial_disconnect.\n\nSo add a null pointer check to gs_start_io before attempting\nto access the value of the pointer port-\u003eport_usb.\n\nCall trace:\n gs_start_io+0x164/0x25c\n gs_open+0x108/0x13c\n tty_open+0x314/0x638\n chrdev_open+0x1b8/0x258\n do_dentry_open+0x2c4/0x700\n vfs_open+0x2c/0x3c\n path_openat+0xa64/0xc60\n do_filp_open+0xb8/0x164\n do_sys_openat2+0x84/0xf0\n __arm64_sys_openat+0x70/0x9c\n invoke_syscall+0x58/0x114\n el0_svc_common+0x80/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x38/0x68",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56670",
"url": "https://www.suse.com/security/cve/CVE-2024-56670"
},
{
"category": "external",
"summary": "SUSE Bug 1235488 for CVE-2024-56670",
"url": "https://bugzilla.suse.com/1235488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56670"
},
{
"cve": "CVE-2024-56672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56672"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: Fix UAF in blkcg_unpin_online()\n\nblkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To\nwalk up, it uses blkcg_parent(blkcg) but it was calling that after\nblkcg_destroy_blkgs(blkcg) which could free the blkcg, leading to the\nfollowing UAF:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in blkcg_unpin_online+0x15a/0x270\n Read of size 8 at addr ffff8881057678c0 by task kworker/9:1/117\n\n CPU: 9 UID: 0 PID: 117 Comm: kworker/9:1 Not tainted 6.13.0-rc1-work-00182-gb8f52214c61a-dirty #48\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 02/02/2022\n Workqueue: cgwb_release cgwb_release_workfn\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x27/0x80\n print_report+0x151/0x710\n kasan_report+0xc0/0x100\n blkcg_unpin_online+0x15a/0x270\n cgwb_release_workfn+0x194/0x480\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n ...\n Freed by task 1944:\n kasan_save_track+0x2b/0x70\n kasan_save_free_info+0x3c/0x50\n __kasan_slab_free+0x33/0x50\n kfree+0x10c/0x330\n css_free_rwork_fn+0xe6/0xb30\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n\nNote that the UAF is not easy to trigger as the free path is indirected\nbehind a couple RCU grace periods and a work item execution. I could only\ntrigger it with artifical msleep() injected in blkcg_unpin_online().\n\nFix it by reading the parent pointer before destroying the blkcg\u0027s blkg\u0027s.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56672",
"url": "https://www.suse.com/security/cve/CVE-2024-56672"
},
{
"category": "external",
"summary": "SUSE Bug 1235534 for CVE-2024-56672",
"url": "https://bugzilla.suse.com/1235534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56672"
},
{
"cve": "CVE-2024-56675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors\n\nUprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU\nprotection. But it is possible to attach a non-sleepable BPF program to a\nuprobe, and non-sleepable BPF programs are freed via normal RCU (see\n__bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal\nRCU grace period does not imply a tasks-trace-RCU grace period.\n\nFix it by explicitly waiting for a tasks-trace-RCU grace period after\nremoving the attachment of a bpf_prog to a perf_event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56675",
"url": "https://www.suse.com/security/cve/CVE-2024-56675"
},
{
"category": "external",
"summary": "SUSE Bug 1235555 for CVE-2024-56675",
"url": "https://bugzilla.suse.com/1235555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56675"
},
{
"cve": "CVE-2024-56677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56677"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()\n\nDuring early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE,\nsince pageblock_order is still zero and it gets initialized\nlater during initmem_init() e.g.\nsetup_arch() -\u003e initmem_init() -\u003e sparse_init() -\u003e set_pageblock_order()\n\nOne such use case where this causes issue is -\nearly_setup() -\u003e early_init_devtree() -\u003e fadump_reserve_mem() -\u003e fadump_cma_init()\n\nThis causes CMA memory alignment check to be bypassed in\ncma_init_reserved_mem(). Then later cma_activate_area() can hit\na VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1)) if the reserved memory\narea was not pageblock_order aligned.\n\nFix it by moving the fadump_cma_init() after initmem_init(),\nwhere other such cma reservations also gets called.\n\n\u003cstack trace\u003e\n==============\npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10010\nflags: 0x13ffff800000000(node=1|zone=0|lastcpupid=0x7ffff) CMA\nraw: 013ffff800000000 5deadbeef0000100 5deadbeef0000122 0000000000000000\nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1))\n------------[ cut here ]------------\nkernel BUG at mm/page_alloc.c:778!\n\nCall Trace:\n__free_one_page+0x57c/0x7b0 (unreliable)\nfree_pcppages_bulk+0x1a8/0x2c8\nfree_unref_page_commit+0x3d4/0x4e4\nfree_unref_page+0x458/0x6d0\ninit_cma_reserved_pageblock+0x114/0x198\ncma_init_reserved_areas+0x270/0x3e0\ndo_one_initcall+0x80/0x2f8\nkernel_init_freeable+0x33c/0x530\nkernel_init+0x34/0x26c\nret_from_kernel_user_thread+0x14/0x1c",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56677",
"url": "https://www.suse.com/security/cve/CVE-2024-56677"
},
{
"category": "external",
"summary": "SUSE Bug 1235494 for CVE-2024-56677",
"url": "https://bugzilla.suse.com/1235494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56677"
},
{
"cve": "CVE-2024-56678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/mm/fault: Fix kfence page fault reporting\n\ncopy_from_kernel_nofault() can be called when doing read of /proc/kcore.\n/proc/kcore can have some unmapped kfence objects which when read via\ncopy_from_kernel_nofault() can cause page faults. Since *_nofault()\nfunctions define their own fixup table for handling fault, use that\ninstead of asking kfence to handle such faults.\n\nHence we search the exception tables for the nip which generated the\nfault. If there is an entry then we let the fixup table handler handle the\npage fault by returning an error from within ___do_page_fault().\n\nThis can be easily triggered if someone tries to do dd from /proc/kcore.\neg. dd if=/proc/kcore of=/dev/null bs=1M\n\nSome example false negatives:\n\n ===============================\n BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0\n Invalid read at 0xc0000000fdff0000:\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec\n\n BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0\n Use-after-free read at 0xc0000000fe050000 (in kfence-#2):\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56678",
"url": "https://www.suse.com/security/cve/CVE-2024-56678"
},
{
"category": "external",
"summary": "SUSE Bug 1235495 for CVE-2024-56678",
"url": "https://bugzilla.suse.com/1235495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56678"
},
{
"cve": "CVE-2024-56679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56679"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56679",
"url": "https://www.suse.com/security/cve/CVE-2024-56679"
},
{
"category": "external",
"summary": "SUSE Bug 1235498 for CVE-2024-56679",
"url": "https://bugzilla.suse.com/1235498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56679"
},
{
"cve": "CVE-2024-56681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: bcm - add error check in the ahash_hmac_init function\n\nThe ahash_init functions may return fails. The ahash_hmac_init should\nnot return ok when ahash_init returns error. For an example, ahash_init\nwill return -ENOMEM when allocation memory is error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56681",
"url": "https://www.suse.com/security/cve/CVE-2024-56681"
},
{
"category": "external",
"summary": "SUSE Bug 1235557 for CVE-2024-56681",
"url": "https://bugzilla.suse.com/1235557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56683"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hdmi: Avoid hang with debug registers when suspended\n\nTrying to read /sys/kernel/debug/dri/1/hdmi1_regs\nwhen the hdmi is disconnected results in a fatal system hang.\n\nThis is due to the pm suspend code disabling the dvp clock.\nThat is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG,\nwhich results in accesses hanging AXI bus.\n\nProtect against this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56683",
"url": "https://www.suse.com/security/cve/CVE-2024-56683"
},
{
"category": "external",
"summary": "SUSE Bug 1235497 for CVE-2024-56683",
"url": "https://bugzilla.suse.com/1235497"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56683"
},
{
"cve": "CVE-2024-56687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: musb: Fix hardware lockup on first Rx endpoint request\n\nThere is a possibility that a request\u0027s callback could be invoked from\nusb_ep_queue() (call trace below, supplemented with missing calls):\n\nreq-\u003ecomplete from usb_gadget_giveback_request\n\t(drivers/usb/gadget/udc/core.c:999)\nusb_gadget_giveback_request from musb_g_giveback\n\t(drivers/usb/musb/musb_gadget.c:147)\nmusb_g_giveback from rxstate\n\t(drivers/usb/musb/musb_gadget.c:784)\nrxstate from musb_ep_restart\n\t(drivers/usb/musb/musb_gadget.c:1169)\nmusb_ep_restart from musb_ep_restart_resume_work\n\t(drivers/usb/musb/musb_gadget.c:1176)\nmusb_ep_restart_resume_work from musb_queue_resume_work\n\t(drivers/usb/musb/musb_core.c:2279)\nmusb_queue_resume_work from musb_gadget_queue\n\t(drivers/usb/musb/musb_gadget.c:1241)\nmusb_gadget_queue from usb_ep_queue\n\t(drivers/usb/gadget/udc/core.c:300)\n\nAccording to the docstring of usb_ep_queue(), this should not happen:\n\n\"Note that @req\u0027s -\u003ecomplete() callback must never be called from within\nusb_ep_queue() as that can create deadlock situations.\"\n\nIn fact, a hardware lockup might occur in the following sequence:\n\n1. The gadget is initialized using musb_gadget_enable().\n2. Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an\n interrupt.\n3. If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an\n empty queue (next_request() returns NULL). The interrupt flag has\n already been cleared by the glue layer handler, but the RXPKTRDY flag\n remains set.\n4. The first request is enqueued using usb_ep_queue(), leading to the call\n of req-\u003ecomplete(), as shown in the call trace above.\n5. If the callback enables IRQs and another packet is waiting, step (3)\n repeats. The request queue is empty because usb_g_giveback() removes the\n request before invoking the callback.\n6. The endpoint remains locked up, as the interrupt triggered by hardware\n setting the RXPKTRDY flag has been handled, but the flag itself remains\n set.\n\nFor this scenario to occur, it is only necessary for IRQs to be enabled at\nsome point during the complete callback. This happens with the USB Ethernet\ngadget, whose rx_complete() callback calls netif_rx(). If called in the\ntask context, netif_rx() disables the bottom halves (BHs). When the BHs are\nre-enabled, IRQs are also enabled to allow soft IRQs to be processed. The\ngadget itself is initialized at module load (or at boot if built-in), but\nthe first request is enqueued when the network interface is brought up,\ntriggering rx_complete() in the task context via ioctl(). If a packet\narrives while the interface is down, it can prevent the interface from\nreceiving any further packets from the USB host.\n\nThe situation is quite complicated with many parties involved. This\nparticular issue can be resolved in several possible ways:\n\n1. Ensure that callbacks never enable IRQs. This would be difficult to\n enforce, as discovering how netif_rx() interacts with interrupts was\n already quite challenging and u_ether is not the only function driver.\n Similar \"bugs\" could be hidden in other drivers as well.\n2. Disable MUSB interrupts in musb_g_giveback() before calling the callback\n and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(),\n for example). This would ensure that MUSB interrupts are not handled\n during the callback, even if IRQs are enabled. In fact, it would allow\n IRQs to be enabled when releasing the lock. However, this feels like an\n inelegant hack.\n3. Modify the interrupt handler to clear the RXPKTRDY flag if the request\n queue is empty. While this approach also feels like a hack, it wastes\n CPU time by attempting to handle incoming packets when the software is\n not ready to process them.\n4. Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart().\n This ensures that the hardware can receive packets when there is at\n least one request in the queue. Once I\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56687",
"url": "https://www.suse.com/security/cve/CVE-2024-56687"
},
{
"category": "external",
"summary": "SUSE Bug 1235537 for CVE-2024-56687",
"url": "https://bugzilla.suse.com/1235537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56687"
},
{
"cve": "CVE-2024-56688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56688"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport\n\nSince transport-\u003esock has been set to NULL during reset transport,\nXPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the\nxs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request()\nto dereference the transport-\u003esock that has been set to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56688",
"url": "https://www.suse.com/security/cve/CVE-2024-56688"
},
{
"category": "external",
"summary": "SUSE Bug 1235538 for CVE-2024-56688",
"url": "https://bugzilla.suse.com/1235538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56688"
},
{
"cve": "CVE-2024-56690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY\n\nSince commit 8f4f68e788c3 (\"crypto: pcrypt - Fix hungtask for\nPADATA_RESET\"), the pcrypt encryption and decryption operations return\n-EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is\ngenerated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns\n-EAGAIN, the unnecessary panic will occur when panic_on_warn set 1.\nFix this issue by calling crypto layer directly without parallelization\nin that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56690",
"url": "https://www.suse.com/security/cve/CVE-2024-56690"
},
{
"category": "external",
"summary": "SUSE Bug 1235428 for CVE-2024-56690",
"url": "https://bugzilla.suse.com/1235428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56690"
},
{
"cve": "CVE-2024-56691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56691"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56691",
"url": "https://www.suse.com/security/cve/CVE-2024-56691"
},
{
"category": "external",
"summary": "SUSE Bug 1235425 for CVE-2024-56691",
"url": "https://bugzilla.suse.com/1235425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56691"
},
{
"cve": "CVE-2024-56693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56693"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbrd: defer automatic disk creation until module initialization succeeds\n\nMy colleague Wupeng found the following problems during fault injection:\n\nBUG: unable to handle page fault for address: fffffbfff809d073\nPGD 6e648067 P4D 123ec8067 PUD 123ec4067 PMD 100e38067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nCPU: 5 UID: 0 PID: 755 Comm: modprobe Not tainted 6.12.0-rc3+ #17\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:__asan_load8+0x4c/0xa0\n...\nCall Trace:\n \u003cTASK\u003e\n blkdev_put_whole+0x41/0x70\n bdev_release+0x1a3/0x250\n blkdev_release+0x11/0x20\n __fput+0x1d7/0x4a0\n task_work_run+0xfc/0x180\n syscall_exit_to_user_mode+0x1de/0x1f0\n do_syscall_64+0x6b/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nloop_init() is calling loop_add() after __register_blkdev() succeeds and\nis ignoring disk_add() failure from loop_add(), for loop_add() failure\nis not fatal and successfully created disks are already visible to\nbdev_open().\n\nbrd_init() is currently calling brd_alloc() before __register_blkdev()\nsucceeds and is releasing successfully created disks when brd_init()\nreturns an error. This can cause UAF for the latter two case:\n\ncase 1:\n T1:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n add_disk\n disk_scan_partitions\n bdev_file_open_by_dev // alloc file\n fput // won\u0027t free until back to userspace\n brd_alloc(1) // failed since mem alloc error inject\n // error path for modprobe will release code segment\n // back to userspace\n __fput\n blkdev_release\n bdev_release\n blkdev_put_whole\n bdev-\u003ebd_disk-\u003efops-\u003erelease // fops is freed now, UAF!\n\ncase 2:\n T1: T2:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n open(/dev/ram0)\n brd_alloc(1) // fail\n // error path for modprobe\n\n close(/dev/ram0)\n ...\n /* UAF! */\n bdev-\u003ebd_disk-\u003efops-\u003erelease\n\nFix this problem by following what loop_init() does. Besides,\nreintroduce brd_devices_mutex to help serialize modifications to\nbrd_list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56693",
"url": "https://www.suse.com/security/cve/CVE-2024-56693"
},
{
"category": "external",
"summary": "SUSE Bug 1235418 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "external",
"summary": "SUSE Bug 1235419 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56693"
},
{
"cve": "CVE-2024-56694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix recursive lock when verdict program return SK_PASS\n\nWhen the stream_verdict program returns SK_PASS, it places the received skb\ninto its own receive queue, but a recursive lock eventually occurs, leading\nto an operating system deadlock. This issue has been present since v6.9.\n\n\u0027\u0027\u0027\nsk_psock_strp_data_ready\n write_lock_bh(\u0026sk-\u003esk_callback_lock)\n strp_data_ready\n strp_read_sock\n read_sock -\u003e tcp_read_sock\n strp_recv\n cb.rcv_msg -\u003e sk_psock_strp_read\n # now stream_verdict return SK_PASS without peer sock assign\n __SK_PASS = sk_psock_map_verd(SK_PASS, NULL)\n sk_psock_verdict_apply\n sk_psock_skb_ingress_self\n sk_psock_skb_ingress_enqueue\n sk_psock_data_ready\n read_lock_bh(\u0026sk-\u003esk_callback_lock) \u003c= dead lock\n\n\u0027\u0027\u0027\n\nThis topic has been discussed before, but it has not been fixed.\nPrevious discussion:\nhttps://lore.kernel.org/all/6684a5864ec86_403d20898@john.notmuch",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56694",
"url": "https://www.suse.com/security/cve/CVE-2024-56694"
},
{
"category": "external",
"summary": "SUSE Bug 1235412 for CVE-2024-56694",
"url": "https://bugzilla.suse.com/1235412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56694"
},
{
"cve": "CVE-2024-56698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56698"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Fix looping of queued SG entries\n\nThe dwc3_request-\u003enum_queued_sgs is decremented on completion. If a\npartially completed request is handled, then the\ndwc3_request-\u003enum_queued_sgs no longer reflects the total number of\nnum_queued_sgs (it would be cleared).\n\nCorrectly check the number of request SG entries remained to be prepare\nand queued. Failure to do this may cause null pointer dereference when\naccessing non-existent SG entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56698",
"url": "https://www.suse.com/security/cve/CVE-2024-56698"
},
{
"category": "external",
"summary": "SUSE Bug 1235491 for CVE-2024-56698",
"url": "https://bugzilla.suse.com/1235491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56698"
},
{
"cve": "CVE-2024-56700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56700"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: wl128x: Fix atomicity violation in fmc_send_cmd()\n\nAtomicity violation occurs when the fmc_send_cmd() function is executed\nsimultaneously with the modification of the fmdev-\u003eresp_skb value.\nConsider a scenario where, after passing the validity check within the\nfunction, a non-null fmdev-\u003eresp_skb variable is assigned a null value.\nThis results in an invalid fmdev-\u003eresp_skb variable passing the validity\ncheck. As seen in the later part of the function, skb = fmdev-\u003eresp_skb;\nwhen the invalid fmdev-\u003eresp_skb passes the check, a null pointer\ndereference error may occur at line 478, evt_hdr = (void *)skb-\u003edata;\n\nTo address this issue, it is recommended to include the validity check of\nfmdev-\u003eresp_skb within the locked section of the function. This\nmodification ensures that the value of fmdev-\u003eresp_skb does not change\nduring the validation process, thereby maintaining its validity.\n\nThis possible bug is found by an experimental static analysis tool\ndeveloped by our team. This tool analyzes the locking APIs\nto extract function pairs that can be concurrently executed, and then\nanalyzes the instructions in the paired functions to identify possible\nconcurrency bugs including data races and atomicity violations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56700",
"url": "https://www.suse.com/security/cve/CVE-2024-56700"
},
{
"category": "external",
"summary": "SUSE Bug 1235500 for CVE-2024-56700",
"url": "https://bugzilla.suse.com/1235500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix dtl_access_lock to be a rw_semaphore\n\nThe dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because\nthe code calls kmalloc() while holding it, which can sleep:\n\n # echo 1 \u003e /proc/powerpc/vcpudispatch_stats\n BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 199, name: sh\n preempt_count: 1, expected: 0\n 3 locks held by sh/199:\n #0: c00000000a0743f8 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x324/0x438\n #1: c0000000028c7058 (dtl_enable_mutex){+.+.}-{3:3}, at: vcpudispatch_stats_write+0xd4/0x5f4\n #2: c0000000028c70b8 (dtl_access_lock){+.+.}-{2:2}, at: vcpudispatch_stats_write+0x220/0x5f4\n CPU: 0 PID: 199 Comm: sh Not tainted 6.10.0-rc4 #152\n Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1202 0xf000005 of:SLOF,HEAD hv:linux,kvm pSeries\n Call Trace:\n dump_stack_lvl+0x130/0x148 (unreliable)\n __might_resched+0x174/0x410\n kmem_cache_alloc_noprof+0x340/0x3d0\n alloc_dtl_buffers+0x124/0x1ac\n vcpudispatch_stats_write+0x2a8/0x5f4\n proc_reg_write+0xf4/0x150\n vfs_write+0xfc/0x438\n ksys_write+0x88/0x148\n system_call_exception+0x1c4/0x5a0\n system_call_common+0xf4/0x258",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56701",
"url": "https://www.suse.com/security/cve/CVE-2024-56701"
},
{
"category": "external",
"summary": "SUSE Bug 1235496 for CVE-2024-56701",
"url": "https://bugzilla.suse.com/1235496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56701"
},
{
"cve": "CVE-2024-56704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56704"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p/xen: fix release of IRQ\n\nKernel logs indicate an IRQ was double-freed.\n\nPass correct device ID during IRQ release.\n\n[Dominique: remove confusing variable reset to 0]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56704",
"url": "https://www.suse.com/security/cve/CVE-2024-56704"
},
{
"category": "external",
"summary": "SUSE Bug 1235584 for CVE-2024-56704",
"url": "https://bugzilla.suse.com/1235584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56704"
},
{
"cve": "CVE-2024-56705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56705"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Add check for rgby_data memory allocation failure\n\nIn ia_css_3a_statistics_allocate(), there is no check on the allocation\nresult of the rgby_data memory. If rgby_data is not successfully\nallocated, it may trigger the assert(host_stats-\u003ergby_data) assertion in\nia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56705",
"url": "https://www.suse.com/security/cve/CVE-2024-56705"
},
{
"category": "external",
"summary": "SUSE Bug 1235568 for CVE-2024-56705",
"url": "https://bugzilla.suse.com/1235568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56705"
},
{
"cve": "CVE-2024-56707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56707"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c\n\nAdd error pointer checks after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56707",
"url": "https://www.suse.com/security/cve/CVE-2024-56707"
},
{
"category": "external",
"summary": "SUSE Bug 1235545 for CVE-2024-56707",
"url": "https://bugzilla.suse.com/1235545"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56707"
},
{
"cve": "CVE-2024-56708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56708"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/igen6: Avoid segmentation fault on module unload\n\nThe segmentation fault happens because:\n\nDuring modprobe:\n1. In igen6_probe(), igen6_pvt will be allocated with kzalloc()\n2. In igen6_register_mci(), mci-\u003epvt_info will point to\n \u0026igen6_pvt-\u003eimc[mc]\n\nDuring rmmod:\n1. In mci_release() in edac_mc.c, it will kfree(mci-\u003epvt_info)\n2. In igen6_remove(), it will kfree(igen6_pvt);\n\nFix this issue by setting mci-\u003epvt_info to NULL to avoid the double\nkfree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56708",
"url": "https://www.suse.com/security/cve/CVE-2024-56708"
},
{
"category": "external",
"summary": "SUSE Bug 1235564 for CVE-2024-56708",
"url": "https://bugzilla.suse.com/1235564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56708"
},
{
"cve": "CVE-2024-56709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check if iowq is killed before queuing\n\ntask work can be executed after the task has gone through io_uring\ntermination, whether it\u0027s the final task_work run or the fallback path.\nIn this case, task work will find -\u003eio_wq being already killed and\nnull\u0027ed, which is a problem if it then tries to forward the request to\nio_queue_iowq(). Make io_queue_iowq() fail requests in this case.\n\nNote that it also checks PF_KTHREAD, because the user can first close\na DEFER_TASKRUN ring and shortly after kill the task, in which case\n-\u003eiowq check would race.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56709",
"url": "https://www.suse.com/security/cve/CVE-2024-56709"
},
{
"category": "external",
"summary": "SUSE Bug 1235552 for CVE-2024-56709",
"url": "https://bugzilla.suse.com/1235552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56709"
},
{
"cve": "CVE-2024-56712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56712"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: fix memory leak on last export_udmabuf() error path\n\nIn export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a\ndma_buf owning the udmabuf has already been created; but the error handling\nin udmabuf_create() will tear down the udmabuf without doing anything about\nthe containing dma_buf.\n\nThis leaves a dma_buf in memory that contains a dangling pointer; though\nthat doesn\u0027t seem to lead to anything bad except a memory leak.\n\nFix it by moving the dma_buf_fd() call out of export_udmabuf() so that we\ncan give it different error handling.\n\nNote that the shape of this code changed a lot in commit 5e72b2b41a21\n(\"udmabuf: convert udmabuf driver to use folios\"); but the memory leak\nseems to have existed since the introduction of udmabuf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56712",
"url": "https://www.suse.com/security/cve/CVE-2024-56712"
},
{
"category": "external",
"summary": "SUSE Bug 1235565 for CVE-2024-56712",
"url": "https://bugzilla.suse.com/1235565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56712"
},
{
"cve": "CVE-2024-56715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56715"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nionic: Fix netdev notifier unregister on failure\n\nIf register_netdev() fails, then the driver leaks the netdev notifier.\nFix this by calling ionic_lif_unregister() on register_netdev()\nfailure. This will also call ionic_lif_unregister_phc() if it has\nalready been registered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56715",
"url": "https://www.suse.com/security/cve/CVE-2024-56715"
},
{
"category": "external",
"summary": "SUSE Bug 1235612 for CVE-2024-56715",
"url": "https://bugzilla.suse.com/1235612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56715"
},
{
"cve": "CVE-2024-56716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56716"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: prevent bad user input in nsim_dev_health_break_write()\n\nIf either a zero count or a large one is provided, kernel can crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56716",
"url": "https://www.suse.com/security/cve/CVE-2024-56716"
},
{
"category": "external",
"summary": "SUSE Bug 1235587 for CVE-2024-56716",
"url": "https://bugzilla.suse.com/1235587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56716"
},
{
"cve": "CVE-2024-56722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix cpu stuck caused by printings during reset\n\nDuring reset, cmd to destroy resources such as qp, cq, and mr may fail,\nand error logs will be printed. When a large number of resources are\ndestroyed, there will be lots of printings, and it may lead to a cpu\nstuck.\n\nDelete some unnecessary printings and replace other printing functions\nin these paths with the ratelimited version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56722",
"url": "https://www.suse.com/security/cve/CVE-2024-56722"
},
{
"category": "external",
"summary": "SUSE Bug 1235570 for CVE-2024-56722",
"url": "https://bugzilla.suse.com/1235570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56722"
},
{
"cve": "CVE-2024-56723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56723"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56723",
"url": "https://www.suse.com/security/cve/CVE-2024-56723"
},
{
"category": "external",
"summary": "SUSE Bug 1235571 for CVE-2024-56723",
"url": "https://bugzilla.suse.com/1235571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56723"
},
{
"cve": "CVE-2024-56724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56724"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56724",
"url": "https://www.suse.com/security/cve/CVE-2024-56724"
},
{
"category": "external",
"summary": "SUSE Bug 1235577 for CVE-2024-56724",
"url": "https://bugzilla.suse.com/1235577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56724"
},
{
"cve": "CVE-2024-56725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56725"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56725",
"url": "https://www.suse.com/security/cve/CVE-2024-56725"
},
{
"category": "external",
"summary": "SUSE Bug 1235578 for CVE-2024-56725",
"url": "https://bugzilla.suse.com/1235578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56725"
},
{
"cve": "CVE-2024-56726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56726"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56726",
"url": "https://www.suse.com/security/cve/CVE-2024-56726"
},
{
"category": "external",
"summary": "SUSE Bug 1235582 for CVE-2024-56726",
"url": "https://bugzilla.suse.com/1235582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56726"
},
{
"cve": "CVE-2024-56727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56727"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c\n\nAdding error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56727",
"url": "https://www.suse.com/security/cve/CVE-2024-56727"
},
{
"category": "external",
"summary": "SUSE Bug 1235583 for CVE-2024-56727",
"url": "https://bugzilla.suse.com/1235583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56727"
},
{
"cve": "CVE-2024-56728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56728"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56728",
"url": "https://www.suse.com/security/cve/CVE-2024-56728"
},
{
"category": "external",
"summary": "SUSE Bug 1235656 for CVE-2024-56728",
"url": "https://bugzilla.suse.com/1235656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56728"
},
{
"cve": "CVE-2024-56729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56729"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: Initialize cfid-\u003etcon before performing network ops\n\nAvoid leaking a tcon ref when a lease break races with opening the\ncached directory. Processing the leak break might take a reference to\nthe tcon in cached_dir_lease_break() and then fail to release the ref in\ncached_dir_offload_close, since cfid-\u003etcon is still NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56729",
"url": "https://www.suse.com/security/cve/CVE-2024-56729"
},
{
"category": "external",
"summary": "SUSE Bug 1235503 for CVE-2024-56729",
"url": "https://bugzilla.suse.com/1235503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56729"
},
{
"cve": "CVE-2024-56739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: check if __rtc_read_time was successful in rtc_timer_do_work()\n\nIf the __rtc_read_time call fails,, the struct rtc_time tm; may contain\nuninitialized data, or an illegal date/time read from the RTC hardware.\n\nWhen calling rtc_tm_to_ktime later, the result may be a very large value\n(possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue,\nthey will continually expire, may causing kernel softlockup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56739",
"url": "https://www.suse.com/security/cve/CVE-2024-56739"
},
{
"category": "external",
"summary": "SUSE Bug 1235611 for CVE-2024-56739",
"url": "https://bugzilla.suse.com/1235611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56741"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56741",
"url": "https://www.suse.com/security/cve/CVE-2024-56741"
},
{
"category": "external",
"summary": "SUSE Bug 1235502 for CVE-2024-56741",
"url": "https://bugzilla.suse.com/1235502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56741"
},
{
"cve": "CVE-2024-56745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56745"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reset_method_store() memory leak\n\nIn reset_method_store(), a string is allocated via kstrndup() and assigned\nto the local \"options\". options is then used in with strsep() to find\nspaces:\n\n while ((name = strsep(\u0026options, \" \")) != NULL) {\n\nIf there are no remaining spaces, then options is set to NULL by strsep(),\nso the subsequent kfree(options) doesn\u0027t free the memory allocated via\nkstrndup().\n\nFix by using a separate tmp_options to iterate with strsep() so options is\npreserved.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56745",
"url": "https://www.suse.com/security/cve/CVE-2024-56745"
},
{
"category": "external",
"summary": "SUSE Bug 1235563 for CVE-2024-56745",
"url": "https://bugzilla.suse.com/1235563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56745"
},
{
"cve": "CVE-2024-56746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56746"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()\n\nWhen information such as info-\u003escreen_base is not ready, calling\nsh7760fb_free_mem() does not release memory correctly. Call\ndma_free_coherent() instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56746",
"url": "https://www.suse.com/security/cve/CVE-2024-56746"
},
{
"category": "external",
"summary": "SUSE Bug 1235622 for CVE-2024-56746",
"url": "https://bugzilla.suse.com/1235622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56746"
},
{
"cve": "CVE-2024-56747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()\n\nHook \"qedi_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56747",
"url": "https://www.suse.com/security/cve/CVE-2024-56747"
},
{
"category": "external",
"summary": "SUSE Bug 1234934 for CVE-2024-56747",
"url": "https://bugzilla.suse.com/1234934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()\n\nHook \"qed_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56748",
"url": "https://www.suse.com/security/cve/CVE-2024-56748"
},
{
"category": "external",
"summary": "SUSE Bug 1235627 for CVE-2024-56748",
"url": "https://bugzilla.suse.com/1235627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56752"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()\n\nWhen the call to gf100_grctx_generate() fails, unlock gr-\u003efecs.mutex\nbefore returning the error.\n\nFixes smatch warning:\n\ndrivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480 gf100_gr_chan_new() warn: inconsistent returns \u0027\u0026gr-\u003efecs.mutex\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56752",
"url": "https://www.suse.com/security/cve/CVE-2024-56752"
},
{
"category": "external",
"summary": "SUSE Bug 1234937 for CVE-2024-56752",
"url": "https://bugzilla.suse.com/1234937"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56752"
},
{
"cve": "CVE-2024-56754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56754"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: caam - Fix the pointer passed to caam_qi_shutdown()\n\nThe type of the last parameter given to devm_add_action_or_reset() is\n\"struct caam_drv_private *\", but in caam_qi_shutdown(), it is casted to\n\"struct device *\".\n\nPass the correct parameter to devm_add_action_or_reset() so that the\nresources are released as expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56754",
"url": "https://www.suse.com/security/cve/CVE-2024-56754"
},
{
"category": "external",
"summary": "SUSE Bug 1234918 for CVE-2024-56754",
"url": "https://bugzilla.suse.com/1234918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56754"
},
{
"cve": "CVE-2024-56755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56755"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING\n\nIn fscache_create_volume(), there is a missing memory barrier between the\nbit-clearing operation and the wake-up operation. This may cause a\nsituation where, after a wake-up, the bit-clearing operation hasn\u0027t been\ndetected yet, leading to an indefinite wait. The triggering process is as\nfollows:\n\n [cookie1] [cookie2] [volume_work]\nfscache_perform_lookup\n fscache_create_volume\n fscache_perform_lookup\n fscache_create_volume\n\t\t\t fscache_create_volume_work\n cachefiles_acquire_volume\n clear_and_wake_up_bit\n test_and_set_bit\n test_and_set_bit\n goto maybe_wait\n goto no_wait\n\nIn the above process, cookie1 and cookie2 has the same volume. When cookie1\nenters the -no_wait- process, it will clear the bit and wake up the waiting\nprocess. If a barrier is missing, it may cause cookie2 to remain in the\n-wait- process indefinitely.\n\nIn commit 3288666c7256 (\"fscache: Use clear_and_wake_up_bit() in\nfscache_create_volume_work()\"), barriers were added to similar operations\nin fscache_create_volume_work(), but fscache_create_volume() was missed.\n\nBy combining the clear and wake operations into clear_and_wake_up_bit() to\nfix this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56755",
"url": "https://www.suse.com/security/cve/CVE-2024-56755"
},
{
"category": "external",
"summary": "SUSE Bug 1234920 for CVE-2024-56755",
"url": "https://bugzilla.suse.com/1234920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-56755"
},
{
"cve": "CVE-2024-56756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56756"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix freeing of the HMB descriptor table\n\nThe HMB descriptor table is sized to the maximum number of descriptors\nthat could be used for a given device, but __nvme_alloc_host_mem could\nbreak out of the loop earlier on memory allocation failure and end up\nusing less descriptors than planned for, which leads to an incorrect\nsize passed to dma_free_coherent.\n\nIn practice this was not showing up because the number of descriptors\ntends to be low and the dma coherent allocator always allocates and\nfrees at least a page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56756",
"url": "https://www.suse.com/security/cve/CVE-2024-56756"
},
{
"category": "external",
"summary": "SUSE Bug 1234922 for CVE-2024-56756",
"url": "https://bugzilla.suse.com/1234922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56756"
},
{
"cve": "CVE-2024-56759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free when COWing tree bock and tracing is enabled\n\nWhen a COWing a tree block, at btrfs_cow_block(), and we have the\ntracepoint trace_btrfs_cow_block() enabled and preemption is also enabled\n(CONFIG_PREEMPT=y), we can trigger a use-after-free in the COWed extent\nbuffer while inside the tracepoint code. This is because in some paths\nthat call btrfs_cow_block(), such as btrfs_search_slot(), we are holding\nthe last reference on the extent buffer @buf so btrfs_force_cow_block()\ndrops the last reference on the @buf extent buffer when it calls\nfree_extent_buffer_stale(buf), which schedules the release of the extent\nbuffer with RCU. This means that if we are on a kernel with preemption,\nthe current task may be preempted before calling trace_btrfs_cow_block()\nand the extent buffer already released by the time trace_btrfs_cow_block()\nis called, resulting in a use-after-free.\n\nFix this by moving the trace_btrfs_cow_block() from btrfs_cow_block() to\nbtrfs_force_cow_block() before the COWed extent buffer is freed.\nThis also has a side effect of invoking the tracepoint in the tree defrag\ncode, at defrag.c:btrfs_realloc_node(), since btrfs_force_cow_block() is\ncalled there, but this is fine and it was actually missing there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56759",
"url": "https://www.suse.com/security/cve/CVE-2024-56759"
},
{
"category": "external",
"summary": "SUSE Bug 1235645 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "external",
"summary": "SUSE Bug 1236569 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1236569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56759"
},
{
"cve": "CVE-2024-56760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/MSI: Handle lack of irqdomain gracefully\n\nAlexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a\nRISCV platform which does not provide PCI/MSI support:\n\n WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32\n __pci_enable_msix_range+0x30c/0x596\n pci_msi_setup_msi_irqs+0x2c/0x32\n pci_alloc_irq_vectors_affinity+0xb8/0xe2\n\nRISCV uses hierarchical interrupt domains and correctly does not implement\nthe legacy fallback. The warning triggers from the legacy fallback stub.\n\nThat warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent\ndomain is associated with the device or not. There is a check for MSI-X,\nwhich has a legacy assumption. But that legacy fallback assumption is only\nvalid when legacy support is enabled, but otherwise the check should simply\nreturn -ENOTSUPP.\n\nLoongarch tripped over the same problem and blindly enabled legacy support\nwithout implementing the legacy fallbacks. There are weak implementations\nwhich return an error, so the problem was papered over.\n\nCorrect pci_msi_domain_supports() to evaluate the legacy mode and add\nthe missing supported check into the MSI enable path to complete it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56760",
"url": "https://www.suse.com/security/cve/CVE-2024-56760"
},
{
"category": "external",
"summary": "SUSE Bug 1235616 for CVE-2024-56760",
"url": "https://bugzilla.suse.com/1235616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56760"
},
{
"cve": "CVE-2024-56763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent bad count for tracing_cpumask_write\n\nIf a large count is provided, it will trigger a warning in bitmap_parse_user.\nAlso check zero for it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56763",
"url": "https://www.suse.com/security/cve/CVE-2024-56763"
},
{
"category": "external",
"summary": "SUSE Bug 1235638 for CVE-2024-56763",
"url": "https://bugzilla.suse.com/1235638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56763"
},
{
"cve": "CVE-2024-56765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/vas: Add close() callback in vas_vm_ops struct\n\nThe mapping VMA address is saved in VAS window struct when the\npaste address is mapped. This VMA address is used during migration\nto unmap the paste address if the window is active. The paste\naddress mapping will be removed when the window is closed or with\nthe munmap(). But the VMA address in the VAS window is not updated\nwith munmap() which is causing invalid access during migration.\n\nThe KASAN report shows:\n[16386.254991] BUG: KASAN: slab-use-after-free in reconfig_close_windows+0x1a0/0x4e8\n[16386.255043] Read of size 8 at addr c00000014a819670 by task drmgr/696928\n\n[16386.255096] CPU: 29 UID: 0 PID: 696928 Comm: drmgr Kdump: loaded Tainted: G B 6.11.0-rc5-nxgzip #2\n[16386.255128] Tainted: [B]=BAD_PAGE\n[16386.255148] Hardware name: IBM,9080-HEX Power11 (architected) 0x820200 0xf000007 of:IBM,FW1110.00 (NH1110_016) hv:phyp pSeries\n[16386.255181] Call Trace:\n[16386.255202] [c00000016b297660] [c0000000018ad0ac] dump_stack_lvl+0x84/0xe8 (unreliable)\n[16386.255246] [c00000016b297690] [c0000000006e8a90] print_report+0x19c/0x764\n[16386.255285] [c00000016b297760] [c0000000006e9490] kasan_report+0x128/0x1f8\n[16386.255309] [c00000016b297880] [c0000000006eb5c8] __asan_load8+0xac/0xe0\n[16386.255326] [c00000016b2978a0] [c00000000013f898] reconfig_close_windows+0x1a0/0x4e8\n[16386.255343] [c00000016b297990] [c000000000140e58] vas_migration_handler+0x3a4/0x3fc\n[16386.255368] [c00000016b297a90] [c000000000128848] pseries_migrate_partition+0x4c/0x4c4\n...\n\n[16386.256136] Allocated by task 696554 on cpu 31 at 16377.277618s:\n[16386.256149] kasan_save_stack+0x34/0x68\n[16386.256163] kasan_save_track+0x34/0x80\n[16386.256175] kasan_save_alloc_info+0x58/0x74\n[16386.256196] __kasan_slab_alloc+0xb8/0xdc\n[16386.256209] kmem_cache_alloc_noprof+0x200/0x3d0\n[16386.256225] vm_area_alloc+0x44/0x150\n[16386.256245] mmap_region+0x214/0x10c4\n[16386.256265] do_mmap+0x5fc/0x750\n[16386.256277] vm_mmap_pgoff+0x14c/0x24c\n[16386.256292] ksys_mmap_pgoff+0x20c/0x348\n[16386.256303] sys_mmap+0xd0/0x160\n...\n\n[16386.256350] Freed by task 0 on cpu 31 at 16386.204848s:\n[16386.256363] kasan_save_stack+0x34/0x68\n[16386.256374] kasan_save_track+0x34/0x80\n[16386.256384] kasan_save_free_info+0x64/0x10c\n[16386.256396] __kasan_slab_free+0x120/0x204\n[16386.256415] kmem_cache_free+0x128/0x450\n[16386.256428] vm_area_free_rcu_cb+0xa8/0xd8\n[16386.256441] rcu_do_batch+0x2c8/0xcf0\n[16386.256458] rcu_core+0x378/0x3c4\n[16386.256473] handle_softirqs+0x20c/0x60c\n[16386.256495] do_softirq_own_stack+0x6c/0x88\n[16386.256509] do_softirq_own_stack+0x58/0x88\n[16386.256521] __irq_exit_rcu+0x1a4/0x20c\n[16386.256533] irq_exit+0x20/0x38\n[16386.256544] interrupt_async_exit_prepare.constprop.0+0x18/0x2c\n...\n\n[16386.256717] Last potentially related work creation:\n[16386.256729] kasan_save_stack+0x34/0x68\n[16386.256741] __kasan_record_aux_stack+0xcc/0x12c\n[16386.256753] __call_rcu_common.constprop.0+0x94/0xd04\n[16386.256766] vm_area_free+0x28/0x3c\n[16386.256778] remove_vma+0xf4/0x114\n[16386.256797] do_vmi_align_munmap.constprop.0+0x684/0x870\n[16386.256811] __vm_munmap+0xe0/0x1f8\n[16386.256821] sys_munmap+0x54/0x6c\n[16386.256830] system_call_exception+0x1a0/0x4a0\n[16386.256841] system_call_vectored_common+0x15c/0x2ec\n\n[16386.256868] The buggy address belongs to the object at c00000014a819670\n which belongs to the cache vm_area_struct of size 168\n[16386.256887] The buggy address is located 0 bytes inside of\n freed 168-byte region [c00000014a819670, c00000014a819718)\n\n[16386.256915] The buggy address belongs to the physical page:\n[16386.256928] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a81\n[16386.256950] memcg:c0000000ba430001\n[16386.256961] anon flags: 0x43ffff800000000(node=4|zone=0|lastcpupid=0x7ffff)\n[16386.256975] page_type: 0xfdffffff(slab)\n[16386\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56765",
"url": "https://www.suse.com/security/cve/CVE-2024-56765"
},
{
"category": "external",
"summary": "SUSE Bug 1235643 for CVE-2024-56765",
"url": "https://bugzilla.suse.com/1235643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56765"
},
{
"cve": "CVE-2024-56766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56766"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc(). Calling kfree(user) will lead to a\ndouble free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56766",
"url": "https://www.suse.com/security/cve/CVE-2024-56766"
},
{
"category": "external",
"summary": "SUSE Bug 1235219 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "external",
"summary": "SUSE Bug 1240426 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1240426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-56766"
},
{
"cve": "CVE-2024-56767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56767"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset\n\nThe at_xdmac_memset_create_desc may return NULL, which will lead to a\nnull pointer dereference. For example, the len input is error, or the\natchan-\u003efree_descs_list is empty and memory is exhausted. Therefore, add\ncheck to avoid this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56767",
"url": "https://www.suse.com/security/cve/CVE-2024-56767"
},
{
"category": "external",
"summary": "SUSE Bug 1235160 for CVE-2024-56767",
"url": "https://bugzilla.suse.com/1235160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56767"
},
{
"cve": "CVE-2024-56769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg\n\nSyzbot reports [1] an uninitialized value issue found by KMSAN in\ndib3000_read_reg().\n\nLocal u8 rb[2] is used in i2c_transfer() as a read buffer; in case\nthat call fails, the buffer may end up with some undefined values.\n\nSince no elaborate error handling is expected in dib3000_write_reg(),\nsimply zero out rb buffer to mitigate the problem.\n\n[1] Syzkaller report\ndvb-usb: bulk message failed: -22 (6/0)\n=====================================================\nBUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31\n dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290\n dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline]\n dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]\n dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310\n dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110\n...\nLocal variable rb created at:\n dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54\n dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56769",
"url": "https://www.suse.com/security/cve/CVE-2024-56769"
},
{
"category": "external",
"summary": "SUSE Bug 1235155 for CVE-2024-56769",
"url": "https://bugzilla.suse.com/1235155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56769"
},
{
"cve": "CVE-2024-56774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56774"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: add a sanity check for btrfs root in btrfs_search_slot()\n\nSyzbot reports a null-ptr-deref in btrfs_search_slot().\n\nThe reproducer is using rescue=ibadroots, and the extent tree root is\ncorrupted thus the extent tree is NULL.\n\nWhen scrub tries to search the extent tree to gather the needed extent\ninfo, btrfs_search_slot() doesn\u0027t check if the target root is NULL or\nnot, resulting the null-ptr-deref.\n\nAdd sanity check for btrfs root before using it in btrfs_search_slot().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56774",
"url": "https://www.suse.com/security/cve/CVE-2024-56774"
},
{
"category": "external",
"summary": "SUSE Bug 1235653 for CVE-2024-56774",
"url": "https://bugzilla.suse.com/1235653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56774"
},
{
"cve": "CVE-2024-56775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56775"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix handling of plane refcount\n\n[Why]\nThe mechanism to backup and restore plane states doesn\u0027t maintain\nrefcount, which can cause issues if the refcount of the plane changes\nin between backup and restore operations, such as memory leaks if the\nrefcount was supposed to go down, or double frees / invalid memory\naccesses if the refcount was supposed to go up.\n\n[How]\nCache and re-apply current refcount when restoring plane states.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56775",
"url": "https://www.suse.com/security/cve/CVE-2024-56775"
},
{
"category": "external",
"summary": "SUSE Bug 1235657 for CVE-2024-56775",
"url": "https://bugzilla.suse.com/1235657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56775"
},
{
"cve": "CVE-2024-56776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56776"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56776",
"url": "https://www.suse.com/security/cve/CVE-2024-56776"
},
{
"category": "external",
"summary": "SUSE Bug 1235647 for CVE-2024-56776",
"url": "https://bugzilla.suse.com/1235647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56776"
},
{
"cve": "CVE-2024-56777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56777"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56777",
"url": "https://www.suse.com/security/cve/CVE-2024-56777"
},
{
"category": "external",
"summary": "SUSE Bug 1235641 for CVE-2024-56777",
"url": "https://bugzilla.suse.com/1235641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56777"
},
{
"cve": "CVE-2024-56778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56778",
"url": "https://www.suse.com/security/cve/CVE-2024-56778"
},
{
"category": "external",
"summary": "SUSE Bug 1235635 for CVE-2024-56778",
"url": "https://bugzilla.suse.com/1235635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56778"
},
{
"cve": "CVE-2024-56779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\n\nThe action force umount(umount -f) will attempt to kill all rpc_task even\numount operation may ultimately fail if some files remain open.\nConsequently, if an action attempts to open a file, it can potentially\nsend two rpc_task to nfs server.\n\n NFS CLIENT\nthread1 thread2\nopen(\"file\")\n...\nnfs4_do_open\n _nfs4_do_open\n _nfs4_open_and_get_state\n _nfs4_proc_open\n nfs4_run_open_task\n /* rpc_task1 */\n rpc_run_task\n rpc_wait_for_completion_task\n\n umount -f\n nfs_umount_begin\n rpc_killall_tasks\n rpc_signal_task\n rpc_task1 been wakeup\n and return -512\n _nfs4_do_open // while loop\n ...\n nfs4_run_open_task\n /* rpc_task2 */\n rpc_run_task\n rpc_wait_for_completion_task\n\nWhile processing an open request, nfsd will first attempt to find or\nallocate an nfs4_openowner. If it finds an nfs4_openowner that is not\nmarked as NFS4_OO_CONFIRMED, this nfs4_openowner will released. Since\ntwo rpc_task can attempt to open the same file simultaneously from the\nclient to server, and because two instances of nfsd can run\nconcurrently, this situation can lead to lots of memory leak.\nAdditionally, when we echo 0 to /proc/fs/nfsd/threads, warning will be\ntriggered.\n\n NFS SERVER\nnfsd1 nfsd2 echo 0 \u003e /proc/fs/nfsd/threads\n\nnfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // alloc oo1, stateid1\n nfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // find oo1, without NFS4_OO_CONFIRMED\n release_openowner\n unhash_openowner_locked\n list_del_init(\u0026oo-\u003eoo_perclient)\n // cannot find this oo\n // from client, LEAK!!!\n alloc_stateowner // alloc oo2\n\n nfsd4_process_open2\n init_open_stateid\n // associate oo1\n // with stateid1, stateid1 LEAK!!!\n nfs4_get_vfs_file\n // alloc nfsd_file1 and nfsd_file_mark1\n // all LEAK!!!\n\n nfsd4_process_open2\n ...\n\n write_threads\n ...\n nfsd_destroy_serv\n nfsd_shutdown_net\n nfs4_state_shutdown_net\n nfs4_state_destroy_net\n destroy_client\n __destroy_client\n // won\u0027t find oo1!!!\n nfsd_shutdown_generic\n nfsd_file_cache_shutdown\n kmem_cache_destroy\n for nfsd_file_slab\n and nfsd_file_mark_slab\n // bark since nfsd_file1\n // and nfsd_file_mark1\n // still alive\n\n=======================================================================\nBUG nfsd_file (Not tainted): Objects remaining in nfsd_file on\n__kmem_cache_shutdown()\n-----------------------------------------------------------------------\n\nSlab 0xffd4000004438a80 objects=34 used=1 fp=0xff11000110e2ad28\nflags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff)\nCPU: 4 UID: 0 PID: 757 Comm: sh Not tainted 6.12.0-rc6+ #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dum\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56779",
"url": "https://www.suse.com/security/cve/CVE-2024-56779"
},
{
"category": "external",
"summary": "SUSE Bug 1235632 for CVE-2024-56779",
"url": "https://bugzilla.suse.com/1235632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: flush quota_release_work upon quota writeback\n\nOne of the paths quota writeback is called from is:\n\nfreeze_super()\n sync_filesystem()\n ext4_sync_fs()\n dquot_writeback_dquots()\n\nSince we currently don\u0027t always flush the quota_release_work queue in\nthis path, we can end up with the following race:\n\n 1. dquot are added to releasing_dquots list during regular operations.\n 2. FS Freeze starts, however, this does not flush the quota_release_work queue.\n 3. Freeze completes.\n 4. Kernel eventually tries to flush the workqueue while FS is frozen which\n hits a WARN_ON since transaction gets started during frozen state:\n\n ext4_journal_check_start+0x28/0x110 [ext4] (unreliable)\n __ext4_journal_start_sb+0x64/0x1c0 [ext4]\n ext4_release_dquot+0x90/0x1d0 [ext4]\n quota_release_workfn+0x43c/0x4d0\n\nWhich is the following line:\n\n WARN_ON(sb-\u003es_writers.frozen == SB_FREEZE_COMPLETE);\n\nWhich ultimately results in generic/390 failing due to dmesg\nnoise. This was detected on powerpc machine 15 cores.\n\nTo avoid this, make sure to flush the workqueue during\ndquot_writeback_dquots() so we dont have any pending workitems after\nfreeze.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56780",
"url": "https://www.suse.com/security/cve/CVE-2024-56780"
},
{
"category": "external",
"summary": "SUSE Bug 1235650 for CVE-2024-56780",
"url": "https://bugzilla.suse.com/1235650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-56787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56787"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: imx8m: Probe the SoC driver as platform driver\n\nWith driver_async_probe=* on kernel command line, the following trace is\nproduced because on i.MX8M Plus hardware because the soc-imx8m.c driver\ncalls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock\ndriver is not yet probed. This was not detected during regular testing\nwithout driver_async_probe.\n\nConvert the SoC code to platform driver and instantiate a platform device\nin its current device_initcall() to probe the platform driver. Rework\n.soc_revision callback to always return valid error code and return SoC\nrevision via parameter. This way, if anything in the .soc_revision callback\nreturn -EPROBE_DEFER, it gets propagated to .probe and the .probe will get\nretried later.\n\n\"\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180\nCPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603\nHardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : imx8mm_soc_revision+0xdc/0x180\nlr : imx8mm_soc_revision+0xd0/0x180\nsp : ffff8000821fbcc0\nx29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120\nx26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311\nx23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb\nx20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff\nx17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8\nx14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801\nx11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c\nx8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3\nx5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000\nx2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb\nCall trace:\n imx8mm_soc_revision+0xdc/0x180\n imx8_soc_init+0xb0/0x1e0\n do_one_initcall+0x94/0x1a8\n kernel_init_freeable+0x240/0x2a8\n kernel_init+0x28/0x140\n ret_from_fork+0x10/0x20\n---[ end trace 0000000000000000 ]---\nSoC: i.MX8MP revision 1.1\n\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56787",
"url": "https://www.suse.com/security/cve/CVE-2024-56787"
},
{
"category": "external",
"summary": "SUSE Bug 1235663 for CVE-2024-56787",
"url": "https://bugzilla.suse.com/1235663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-56787"
},
{
"cve": "CVE-2024-57791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check return value of sock_recvmsg when draining clc data\n\nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the\nlength of msg should be received from network and the value should not be\nfully trusted as it is from the network. Once the value of length exceeds\nthe value of buflen in function smc_clc_wait_msg it may run into deadloop\nwhen trying to drain the remaining data exceeding buflen.\n\nThis patch checks the return value of sock_recvmsg when draining data in\ncase of deadloop in draining.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57791",
"url": "https://www.suse.com/security/cve/CVE-2024-57791"
},
{
"category": "external",
"summary": "SUSE Bug 1235759 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "external",
"summary": "SUSE Bug 1235760 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235760"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57791"
},
{
"cve": "CVE-2024-57792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57792"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57792",
"url": "https://www.suse.com/security/cve/CVE-2024-57792"
},
{
"category": "external",
"summary": "SUSE Bug 1235764 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "external",
"summary": "SUSE Bug 1236568 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1236568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57792"
},
{
"cve": "CVE-2024-57793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57793"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors\n\nIn CoCo VMs it is possible for the untrusted host to cause\nset_memory_decrypted() to fail such that an error is returned\nand the resulting memory is shared. Callers need to take care\nto handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional\nor security issues.\n\nLeak the decrypted memory when set_memory_decrypted() fails,\nand don\u0027t need to print an error since set_memory_decrypted()\nwill call WARN_ONCE().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57793",
"url": "https://www.suse.com/security/cve/CVE-2024-57793"
},
{
"category": "external",
"summary": "SUSE Bug 1235768 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "external",
"summary": "SUSE Bug 1235769 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57793"
},
{
"cve": "CVE-2024-57795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Remove the direct link to net_device\n\nThe similar patch in siw is in the link:\nhttps://git.kernel.org/rdma/rdma/c/16b87037b48889\n\nThis problem also occurred in RXE. The following analyze this problem.\nIn the following Call Traces:\n\"\nBUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\nRead of size 4 at addr ffff8880554640b0 by task kworker/1:4/5295\n\nCPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted\n6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0\nHardware name: Google Compute Engine/Google Compute Engine,\nBIOS Google 09/13/2024\nWorkqueue: infiniband ib_cache_event_task\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\n rxe_query_port+0x12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60\n __ib_query_port drivers/infiniband/core/device.c:2111 [inline]\n ib_query_port+0x168/0x7d0 drivers/infiniband/core/device.c:2143\n ib_cache_update+0x1a9/0xb80 drivers/infiniband/core/cache.c:1494\n ib_cache_event_task+0xf3/0x1e0 drivers/infiniband/core/cache.c:1568\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f2/0x390 kernel/kthread.c:389\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\"\n\n1). In the link [1],\n\n\"\n infiniband syz2: set down\n\"\n\nThis means that on 839.350575, the event ib_cache_event_task was sent andi\nqueued in ib_wq.\n\n2). In the link [1],\n\n\"\n team0 (unregistering): Port device team_slave_0 removed\n\"\n\nIt indicates that before 843.251853, the net device should be freed.\n\n3). In the link [1],\n\n\"\n BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0\n\"\n\nThis means that on 850.559070, this slab-use-after-free problem occurred.\n\nIn all, on 839.350575, the event ib_cache_event_task was sent and queued\nin ib_wq,\n\nbefore 843.251853, the net device veth was freed.\n\non 850.559070, this event was executed, and the mentioned freed net device\nwas called. Thus, the above call trace occurred.\n\n[1] https://syzkaller.appspot.com/x/log.txt?x=12e7025f980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57795",
"url": "https://www.suse.com/security/cve/CVE-2024-57795"
},
{
"category": "external",
"summary": "SUSE Bug 1235906 for CVE-2024-57795",
"url": "https://bugzilla.suse.com/1235906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57795"
},
{
"cve": "CVE-2024-57798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57798"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()\n\nWhile receiving an MST up request message from one thread in\ndrm_dp_mst_handle_up_req(), the MST topology could be removed from\nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing\nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.\nThis could lead to a NULL deref/use-after-free of mst_primary in\ndrm_dp_mst_handle_up_req().\n\nAvoid the above by holding a reference for mst_primary in\ndrm_dp_mst_handle_up_req() while it\u0027s used.\n\nv2: Fix kfreeing the request if getting an mst_primary reference fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57798",
"url": "https://www.suse.com/security/cve/CVE-2024-57798"
},
{
"category": "external",
"summary": "SUSE Bug 1235818 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "external",
"summary": "SUSE Bug 1235819 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57798"
},
{
"cve": "CVE-2024-57801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Skip restore TC rules for vport rep without loaded flag\n\nDuring driver unload, unregister_netdev is called after unloading\nvport rep. So, the mlx5e_rep_priv is already freed while trying to get\nrpriv-\u003enetdev, or walk rpriv-\u003etc_ht, which results in use-after-free.\nSo add the checking to make sure access the data of vport rep which is\nstill loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57801",
"url": "https://www.suse.com/security/cve/CVE-2024-57801"
},
{
"category": "external",
"summary": "SUSE Bug 1235940 for CVE-2024-57801",
"url": "https://bugzilla.suse.com/1235940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57801"
},
{
"cve": "CVE-2024-57802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: check buffer length before accessing it\n\nSyzkaller reports an uninit value read from ax25cmp when sending raw message\nthrough ieee802154 implementation.\n\n=====================================================\nBUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601\n nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774\n nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\n xmit_one net/core/dev.c:3548 [inline]\n dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564\n __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\n raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x318/0x740 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1286 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2780\n sock_alloc_send_skb include/net/sock.h:1884 [inline]\n raw_sendmsg+0x36d/0xc10 net/ieee802154/socket.c:282\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nCPU: 0 PID: 5037 Comm: syz-executor166 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\n=====================================================\n\nThis issue occurs because the skb buffer is too small, and it\u0027s actual\nallocation is aligned. This hides an actual issue, which is that nr_route_frame\ndoes not validate the buffer size before using it.\n\nFix this issue by checking skb-\u003elen before accessing any fields in skb-\u003edata.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57802",
"url": "https://www.suse.com/security/cve/CVE-2024-57802"
},
{
"category": "external",
"summary": "SUSE Bug 1235941 for CVE-2024-57802",
"url": "https://bugzilla.suse.com/1235941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57802"
},
{
"cve": "CVE-2024-57804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57804"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs\n\nThe driver, through the SAS transport, exposes a sysfs interface to\nenable/disable PHYs in a controller/expander setup. When multiple PHYs\nare disabled and enabled in rapid succession, the persistent and current\nconfig pages related to SAS IO unit/SAS Expander pages could get\ncorrupted.\n\nUse separate memory for each config request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57804",
"url": "https://www.suse.com/security/cve/CVE-2024-57804"
},
{
"category": "external",
"summary": "SUSE Bug 1235779 for CVE-2024-57804",
"url": "https://bugzilla.suse.com/1235779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57804"
},
{
"cve": "CVE-2024-57809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: imx6: Fix suspend/resume support on i.MX6QDL\n\nThe suspend/resume functionality is currently broken on the i.MX6QDL\nplatform, as documented in the NXP errata (ERR005723):\n\n https://www.nxp.com/docs/en/errata/IMX6DQCE.pdf\n\nThis patch addresses the issue by sharing most of the suspend/resume\nsequences used by other i.MX devices, while avoiding modifications to\ncritical registers that disrupt the PCIe functionality. It targets the\nsame problem as the following downstream commit:\n\n https://github.com/nxp-imx/linux-imx/commit/4e92355e1f79d225ea842511fcfd42b343b32995\n\nUnlike the downstream commit, this patch also resets the connected PCIe\ndevice if possible. Without this reset, certain drivers, such as ath10k\nor iwlwifi, will crash on resume. The device reset is also done by the\ndriver on other i.MX platforms, making this patch consistent with\nexisting practices.\n\nUpon resuming, the kernel will hang and display an error. Here\u0027s an\nexample of the error encountered with the ath10k driver:\n\n ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible\n Unhandled fault: imprecise external abort (0x1406) at 0x0106f944\n\nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a\nPCIe device is connected.\n\n[kwilczynski: commit log, added tag for stable releases]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57809",
"url": "https://www.suse.com/security/cve/CVE-2024-57809"
},
{
"category": "external",
"summary": "SUSE Bug 1235793 for CVE-2024-57809",
"url": "https://bugzilla.suse.com/1235793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57809"
},
{
"cve": "CVE-2024-57838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Mark IRQ entries to fix stack depot warnings\n\nThe stack depot filters out everything outside of the top interrupt\ncontext as an uninteresting or irrelevant part of the stack traces. This\nhelps with stack trace de-duplication, avoiding an explosion of saved\nstack traces that share the same IRQ context code path but originate\nfrom different randomly interrupted points, eventually exhausting the\nstack depot.\n\nFiltering uses in_irqentry_text() to identify functions within the\n.irqentry.text and .softirqentry.text sections, which then become the\nlast stack trace entries being saved.\n\nWhile __do_softirq() is placed into the .softirqentry.text section by\ncommon code, populating .irqentry.text is architecture-specific.\n\nCurrently, the .irqentry.text section on s390 is empty, which prevents\nstack depot filtering and de-duplication and could result in warnings\nlike:\n\nStack depot reached limit capacity\nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8\n\nwith PREEMPT and KASAN enabled.\n\nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into\nthe .irqentry.text section and updating the kprobes blacklist to include\nthe .irqentry.text section.\n\nThis is done only for asynchronous interrupts and explicitly not for\nprogram checks, which are synchronous and where the context beyond the\nprogram check is important to preserve. Despite machine checks being\nsomewhat in between, they are extremely rare, and preserving context\nwhen possible is also of value.\n\nSVCs and Restart Interrupts are not relevant, one being always at the\nboundary to user space and the other being a one-time thing.\n\nIRQ entries filtering is also optionally used in ftrace function graph,\nwhere the same logic applies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57838",
"url": "https://www.suse.com/security/cve/CVE-2024-57838"
},
{
"category": "external",
"summary": "SUSE Bug 1235798 for CVE-2024-57838",
"url": "https://bugzilla.suse.com/1235798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57838"
},
{
"cve": "CVE-2024-57849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_sf: Handle CPU hotplug remove during sampling\n\nCPU hotplug remove handling triggers the following function\ncall sequence:\n\n CPUHP_AP_PERF_S390_SF_ONLINE --\u003e s390_pmu_sf_offline_cpu()\n ...\n CPUHP_AP_PERF_ONLINE --\u003e perf_event_exit_cpu()\n\nThe s390 CPUMF sampling CPU hotplug handler invokes:\n\n s390_pmu_sf_offline_cpu()\n +--\u003e cpusf_pmu_setup()\n +--\u003e setup_pmc_cpu()\n +--\u003e deallocate_buffers()\n\nThis function de-allocates all sampling data buffers (SDBs) allocated\nfor that CPU at event initialization. It also clears the\nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.\n\nWith the event still being active on the removed CPU, the CPU event\nhotplug support in kernel performance subsystem triggers the\nfollowing function calls on the removed CPU:\n\n perf_event_exit_cpu()\n +--\u003e perf_event_exit_cpu_context()\n +--\u003e __perf_event_exit_context()\n\t +--\u003e __perf_remove_from_context()\n\t +--\u003e event_sched_out()\n\t +--\u003e cpumsf_pmu_del()\n\t +--\u003e cpumsf_pmu_stop()\n +--\u003e hw_perf_event_update()\n\nto stop and remove the event. During removal of the event, the\nsampling device driver tries to read out the remaining samples from\nthe sample data buffers (SDBs). But they have already been freed\n(and may have been re-assigned). This may lead to a use after free\nsituation in which case the samples are most likely invalid. In the\nbest case the memory has not been reassigned and still contains\nvalid data.\n\nRemedy this situation and check if the CPU is still in reserved\nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been\nreleased an contain valid data. This is always the case when\nthe event is removed (and no CPU hotplug off occured).\nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57849",
"url": "https://www.suse.com/security/cve/CVE-2024-57849"
},
{
"category": "external",
"summary": "SUSE Bug 1235814 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "external",
"summary": "SUSE Bug 1235815 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57849"
},
{
"cve": "CVE-2024-57850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: Prevent rtime decompress memory corruption\n\nThe rtime decompression routine does not fully check bounds during the\nentirety of the decompression pass and can corrupt memory outside the\ndecompression buffer if the compressed data is corrupted. This adds the\nrequired check to prevent this failure mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57850",
"url": "https://www.suse.com/security/cve/CVE-2024-57850"
},
{
"category": "external",
"summary": "SUSE Bug 1235812 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "external",
"summary": "SUSE Bug 1235813 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57850"
},
{
"cve": "CVE-2024-57857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Remove direct link to net_device\n\nDo not manage a per device direct link to net_device. Rely\non associated ib_devices net_device management, not doubling\nthe effort locally. A badly managed local link to net_device\nwas causing a \u0027KASAN: slab-use-after-free\u0027 exception during\nsiw_query_port() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57857",
"url": "https://www.suse.com/security/cve/CVE-2024-57857"
},
{
"category": "external",
"summary": "SUSE Bug 1235946 for CVE-2024-57857",
"url": "https://bugzilla.suse.com/1235946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57857"
},
{
"cve": "CVE-2024-57874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57874"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL\n\nCurrently tagged_addr_ctrl_set() doesn\u0027t initialize the temporary \u0027ctrl\u0027\nvariable, and a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently tagged_addr_ctrl_set() will consume an\narbitrary value, potentially leaking up to 64 bits of memory from the\nkernel stack. The read is limited to a specific slot on the stack, and\nthe issue does not provide a write mechanism.\n\nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and\nrejects other values, a partial SETREGSET attempt will randomly succeed\nor fail depending on the value of the uninitialized value, and the\nexposure is significantly limited.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\nvalue of the tagged address ctrl will be retained.\n\nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the\nuser_aarch64_view used by a native AArch64 task to manipulate another\nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error\nvalue when called for a compat task, tagged_addr_ctrl_get() and\ntagged_addr_ctrl_set() should never observe an error value from\nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that\nsuch an error would be unexpected, and error handlnig is not missing in\neither case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57874",
"url": "https://www.suse.com/security/cve/CVE-2024-57874"
},
{
"category": "external",
"summary": "SUSE Bug 1235808 for CVE-2024-57874",
"url": "https://bugzilla.suse.com/1235808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-57874"
},
{
"cve": "CVE-2024-57876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57876"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix resetting msg rx state after topology removal\n\nIf the MST topology is removed during the reception of an MST down reply\nor MST up request sideband message, the\ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset\nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with\nthe reading/parsing of the message from another thread via\ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is\npossible since the reader/parser doesn\u0027t hold any lock while accessing\nthe reception state. This in turn can lead to a memory corruption in the\nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST\nsideband message body length check\").\n\nFix the above by resetting the message reception state if needed before\nreading/parsing a message. Another solution would be to hold the\ndrm_dp_mst_topology_mgr::lock for the whole duration of the message\nreception/parsing in drm_dp_mst_handle_down_rep() and\ndrm_dp_mst_handle_up_req(), however this would require a bigger change.\nSince the fix is also needed for stable, opting for the simpler solution\nin this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57876",
"url": "https://www.suse.com/security/cve/CVE-2024-57876"
},
{
"category": "external",
"summary": "SUSE Bug 1235806 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "external",
"summary": "SUSE Bug 1235807 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57876"
},
{
"cve": "CVE-2024-57884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()\n\nThe task sometimes continues looping in throttle_direct_reclaim() because\nallow_direct_reclaim(pgdat) keeps returning false. \n\n #0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac\n #1 [ffff80002cb6f900] __schedule at ffff800008abbd1c\n #2 [ffff80002cb6f990] schedule at ffff800008abc50c\n #3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550\n #4 [ffff80002cb6fa20] try_to_free_pages at ffff800008277b68\n #5 [ffff80002cb6fae0] __alloc_pages_nodemask at ffff8000082c4660\n #6 [ffff80002cb6fc50] alloc_pages_vma at ffff8000082e4a98\n #7 [ffff80002cb6fca0] do_anonymous_page at ffff80000829f5a8\n #8 [ffff80002cb6fce0] __handle_mm_fault at ffff8000082a5974\n #9 [ffff80002cb6fd90] handle_mm_fault at ffff8000082a5bd4\n\nAt this point, the pgdat contains the following two zones:\n\n NODE: 4 ZONE: 0 ADDR: ffff00817fffe540 NAME: \"DMA32\"\n SIZE: 20480 MIN/LOW/HIGH: 11/28/45\n VM_STAT:\n NR_FREE_PAGES: 359\n NR_ZONE_INACTIVE_ANON: 18813\n NR_ZONE_ACTIVE_ANON: 0\n NR_ZONE_INACTIVE_FILE: 50\n NR_ZONE_ACTIVE_FILE: 0\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\n NODE: 4 ZONE: 1 ADDR: ffff00817fffec00 NAME: \"Normal\"\n SIZE: 8454144 PRESENT: 98304 MIN/LOW/HIGH: 68/166/264\n VM_STAT:\n NR_FREE_PAGES: 146\n NR_ZONE_INACTIVE_ANON: 94668\n NR_ZONE_ACTIVE_ANON: 3\n NR_ZONE_INACTIVE_FILE: 735\n NR_ZONE_ACTIVE_FILE: 78\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\nIn allow_direct_reclaim(), while processing ZONE_DMA32, the sum of\ninactive/active file-backed pages calculated in zone_reclaimable_pages()\nbased on the result of zone_page_state_snapshot() is zero. \n\nAdditionally, since this system lacks swap, the calculation of inactive/\nactive anonymous pages is skipped.\n\n crash\u003e p nr_swap_pages\n nr_swap_pages = $1937 = {\n counter = 0\n }\n\nAs a result, ZONE_DMA32 is deemed unreclaimable and skipped, moving on to\nthe processing of the next zone, ZONE_NORMAL, despite ZONE_DMA32 having\nfree pages significantly exceeding the high watermark.\n\nThe problem is that the pgdat-\u003ekswapd_failures hasn\u0027t been incremented.\n\n crash\u003e px ((struct pglist_data *) 0xffff00817fffe540)-\u003ekswapd_failures\n $1935 = 0x0\n\nThis is because the node deemed balanced. The node balancing logic in\nbalance_pgdat() evaluates all zones collectively. If one or more zones\n(e.g., ZONE_DMA32) have enough free pages to meet their watermarks, the\nentire node is deemed balanced. This causes balance_pgdat() to exit early\nbefore incrementing the kswapd_failures, as it considers the overall\nmemory state acceptable, even though some zones (like ZONE_NORMAL) remain\nunder significant pressure.\n\n\nThe patch ensures that zone_reclaimable_pages() includes free pages\n(NR_FREE_PAGES) in its calculation when no other reclaimable pages are\navailable (e.g., file-backed or anonymous pages). This change prevents\nzones like ZONE_DMA32, which have sufficient free pages, from being\nmistakenly deemed unreclaimable. By doing so, the patch ensures proper\nnode balancing, avoids masking pressure on other zones like ZONE_NORMAL,\nand prevents infinite loops in throttle_direct_reclaim() caused by\nallow_direct_reclaim(pgdat) repeatedly returning false.\n\n\nThe kernel hangs due to a task stuck in throttle_direct_reclaim(), caused\nby a node being incorrectly deemed balanced despite pressure in certain\nzones, such as ZONE_NORMAL. This issue arises from\nzone_reclaimable_pages\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57884",
"url": "https://www.suse.com/security/cve/CVE-2024-57884"
},
{
"category": "external",
"summary": "SUSE Bug 1235948 for CVE-2024-57884",
"url": "https://bugzilla.suse.com/1235948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57884"
},
{
"cve": "CVE-2024-57887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()\n\nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and\nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue\nby dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()\nin error path of probe() and also in the remove().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57887",
"url": "https://www.suse.com/security/cve/CVE-2024-57887"
},
{
"category": "external",
"summary": "SUSE Bug 1235952 for CVE-2024-57887",
"url": "https://bugzilla.suse.com/1235952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57887"
},
{
"cve": "CVE-2024-57888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57888"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker\n\nAfter commit\n746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")\namdgpu started seeing the following warning:\n\n [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu]\n...\n [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched]\n...\n [ ] Call Trace:\n [ ] \u003cTASK\u003e\n...\n [ ] ? check_flush_dependency+0xf5/0x110\n...\n [ ] cancel_delayed_work_sync+0x6e/0x80\n [ ] amdgpu_gfx_off_ctrl+0xab/0x140 [amdgpu]\n [ ] amdgpu_ring_alloc+0x40/0x50 [amdgpu]\n [ ] amdgpu_ib_schedule+0xf4/0x810 [amdgpu]\n [ ] ? drm_sched_run_job_work+0x22c/0x430 [gpu_sched]\n [ ] amdgpu_job_run+0xaa/0x1f0 [amdgpu]\n [ ] drm_sched_run_job_work+0x257/0x430 [gpu_sched]\n [ ] process_one_work+0x217/0x720\n...\n [ ] \u003c/TASK\u003e\n\nThe intent of the verifcation done in check_flush_depedency is to ensure\nforward progress during memory reclaim, by flagging cases when either a\nmemory reclaim process, or a memory reclaim work item is flushed from a\ncontext not marked as memory reclaim safe.\n\nThis is correct when flushing, but when called from the\ncancel(_delayed)_work_sync() paths it is a false positive because work is\neither already running, or will not be running at all. Therefore\ncancelling it is safe and we can relax the warning criteria by letting the\nhelper know of the calling context.\n\nReferences: 746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57888",
"url": "https://www.suse.com/security/cve/CVE-2024-57888"
},
{
"category": "external",
"summary": "SUSE Bug 1235918 for CVE-2024-57888",
"url": "https://bugzilla.suse.com/1235918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57888"
},
{
"cve": "CVE-2024-57890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping. Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap. The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it\u0027s fine on\n64bit systems.\n\nThis patch does two things. First, I\u0027ve re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math. Then I\u0027ve modified\nall the callers to use size_mul() for the multiplications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57890",
"url": "https://www.suse.com/security/cve/CVE-2024-57890"
},
{
"category": "external",
"summary": "SUSE Bug 1235919 for CVE-2024-57890",
"url": "https://bugzilla.suse.com/1235919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57890"
},
{
"cve": "CVE-2024-57892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57892"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv\n\nWhen mounting ocfs2 and then remounting it as read-only, a\nslab-use-after-free occurs after the user uses a syscall to\nquota_getnextquota. Specifically, sb_dqinfo(sb, type)-\u003edqi_priv is the\ndangling pointer.\n\nDuring the remounting process, the pointer dqi_priv is freed but is never\nset as null leaving it to be accessed. Additionally, the read-only option\nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the\nDQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the\nnext quota, the function ocfs2_get_next_id is called and only checks the\nquota usage flags and not the quota suspended flags.\n\nTo fix this, I set dqi_priv to null when it is freed after remounting with\nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.\n\n[akpm@linux-foundation.org: coding-style cleanups]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57892",
"url": "https://www.suse.com/security/cve/CVE-2024-57892"
},
{
"category": "external",
"summary": "SUSE Bug 1235964 for CVE-2024-57892",
"url": "https://bugzilla.suse.com/1235964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57892"
},
{
"cve": "CVE-2024-57893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix races at processing SysEx messages\n\nOSS sequencer handles the SysEx messages split in 6 bytes packets, and\nALSA sequencer OSS layer tries to combine those. It stores the data\nin the internal buffer and this access is racy as of now, which may\nlead to the out-of-bounds access.\n\nAs a temporary band-aid fix, introduce a mutex for serializing the\nprocess of the SysEx message packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57893",
"url": "https://www.suse.com/security/cve/CVE-2024-57893"
},
{
"category": "external",
"summary": "SUSE Bug 1235920 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "external",
"summary": "SUSE Bug 1235921 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57893"
},
{
"cve": "CVE-2024-57896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57896",
"url": "https://www.suse.com/security/cve/CVE-2024-57896"
},
{
"category": "external",
"summary": "SUSE Bug 1235965 for CVE-2024-57896",
"url": "https://bugzilla.suse.com/1235965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57896"
},
{
"cve": "CVE-2024-57897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Correct the migration DMA map direction\n\nThe SVM DMA device map direction should be set the same as\nthe DMA unmap setting, otherwise the DMA core will report\nthe following warning.\n\nBefore finialize this solution, there\u0027re some discussion on\nthe DMA mapping type(stream-based or coherent) in this KFD\nmigration case, followed by https://lore.kernel.org/all/04d4ab32\n-45a1-4b88-86ee-fb0f35a0ca40@amd.com/T/.\n\nAs there\u0027s no dma_sync_single_for_*() in the DMA buffer accessed\nthat because this migration operation should be sync properly and\nautomatically. Give that there\u0027s might not be a performance problem\nin various cache sync policy of DMA sync. Therefore, in order to\nsimplify the DMA direction setting alignment, let\u0027s set the DMA map\ndirection as BIDIRECTIONAL.\n\n[ 150.834218] WARNING: CPU: 8 PID: 1812 at kernel/dma/debug.c:1028 check_unmap+0x1cc/0x930\n[ 150.834225] Modules linked in: amdgpu(OE) amdxcp drm_exec(OE) gpu_sched drm_buddy(OE) drm_ttm_helper(OE) ttm(OE) drm_suballoc_helper(OE) drm_display_helper(OE) drm_kms_helper(OE) i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc sch_fq_codel intel_rapl_msr amd_atl intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd snd_pci_acp6x snd_hda_codec snd_acp_config snd_hda_core snd_hwdep snd_soc_acpi kvm_amd sunrpc snd_pcm kvm binfmt_misc snd_seq_midi crct10dif_pclmul snd_seq_midi_event ghash_clmulni_intel sha512_ssse3 snd_rawmidi nls_iso8859_1 sha256_ssse3 sha1_ssse3 snd_seq aesni_intel snd_seq_device crypto_simd snd_timer cryptd input_leds\n[ 150.834310] wmi_bmof serio_raw k10temp rapl snd sp5100_tco ipmi_devintf soundcore ccp ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport efi_pstore drm(OE) ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 150.834354] CPU: 8 PID: 1812 Comm: rocrtst64 Tainted: G OE 6.10.0-custom #492\n[ 150.834358] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 150.834360] RIP: 0010:check_unmap+0x1cc/0x930\n[ 150.834363] Code: c0 4c 89 4d c8 e8 34 bf 86 00 4c 8b 4d c8 4c 8b 45 c0 48 8b 4d b8 48 89 c6 41 57 4c 89 ea 48 c7 c7 80 49 b4 84 e8 b4 81 f3 ff \u003c0f\u003e 0b 48 c7 c7 04 83 ac 84 e8 76 ba fc ff 41 8b 76 4c 49 8d 7e 50\n[ 150.834365] RSP: 0018:ffffaac5023739e0 EFLAGS: 00010086\n[ 150.834368] RAX: 0000000000000000 RBX: ffffffff8566a2e0 RCX: 0000000000000027\n[ 150.834370] RDX: ffff8f6a8f621688 RSI: 0000000000000001 RDI: ffff8f6a8f621680\n[ 150.834372] RBP: ffffaac502373a30 R08: 00000000000000c9 R09: ffffaac502373850\n[ 150.834373] R10: ffffaac502373848 R11: ffffffff84f46328 R12: ffffaac502373a40\n[ 150.834375] R13: ffff8f6741045330 R14: ffff8f6741a77700 R15: ffffffff84ac831b\n[ 150.834377] FS: 00007faf0fc94c00(0000) GS:ffff8f6a8f600000(0000) knlGS:0000000000000000\n[ 150.834379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 150.834381] CR2: 00007faf0b600020 CR3: 000000010a52e000 CR4: 0000000000350ef0\n[ 150.834383] Call Trace:\n[ 150.834385] \u003cTASK\u003e\n[ 150.834387] ? show_regs+0x6d/0x80\n[ 150.834393] ? __warn+0x8c/0x140\n[ 150.834397] ? check_unmap+0x1cc/0x930\n[ 150.834400] ? report_bug+0x193/0x1a0\n[ 150.834406] ? handle_bug+0x46/0x80\n[ 150.834410] ? exc_invalid_op+0x1d/0x80\n[ 150.834413] ? asm_exc_invalid_op+0x1f/0x30\n[ 150.834420] ? check_unmap+0x1cc/0x930\n[ 150.834425] debug_dma_unmap_page+0x86/0x90\n[ 150.834431] ? srso_return_thunk+0x5/0x5f\n[ 150.834435] \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57897",
"url": "https://www.suse.com/security/cve/CVE-2024-57897"
},
{
"category": "external",
"summary": "SUSE Bug 1235969 for CVE-2024-57897",
"url": "https://bugzilla.suse.com/1235969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57897"
},
{
"cve": "CVE-2024-57899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, \u0026bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n ? show_regs+0x54/0x58\n ? __warn+0x6b/0xd4\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? report_bug+0x113/0x150\n ? exc_overflow+0x30/0x30\n ? handle_bug+0x27/0x44\n ? exc_invalid_op+0x18/0x50\n ? handle_exception+0xf6/0xf6\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n ? process_one_work+0xf1/0x1fc\n ? worker_thread+0x2c0/0x3b4\n ? kthread+0xc7/0xf0\n ? mod_delayed_work_on+0x4c/0x4c\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork+0x24/0x38\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork_asm+0xf/0x14\n ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57899",
"url": "https://www.suse.com/security/cve/CVE-2024-57899"
},
{
"category": "external",
"summary": "SUSE Bug 1235924 for CVE-2024-57899",
"url": "https://bugzilla.suse.com/1235924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57899"
},
{
"cve": "CVE-2024-57903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_REUSEPORT to inet sockets\n\nAfter blamed commit, crypto sockets could accidentally be destroyed\nfrom RCU call back, as spotted by zyzbot [1].\n\nTrying to acquire a mutex in RCU callback is not allowed.\n\nRestrict SO_REUSEPORT socket option to inet sockets.\n\nv1 of this patch supported TCP, UDP and SCTP sockets,\nbut fcnal-test.sh test needed RAW and ICMP support.\n\n[1]\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1\npreempt_count: 100, expected: 0\nRCU nest depth: 0, expected: 0\n1 lock held by ksoftirqd/1/24:\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823\nPreemption disabled at:\n [\u003cffffffff8161c8c8\u003e] softirq_handle_begin kernel/softirq.c:402 [inline]\n [\u003cffffffff8161c8c8\u003e] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537\nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n __might_resched+0x5d4/0x780 kernel/sched/core.c:8758\n __mutex_lock_common kernel/locking/mutex.c:562 [inline]\n __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735\n crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179\n aead_release+0x3d/0x50 crypto/algif_aead.c:489\n alg_do_release crypto/af_alg.c:118 [inline]\n alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502\n __sk_destruct+0x58/0x5f0 net/core/sock.c:2260\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:950\n smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57903",
"url": "https://www.suse.com/security/cve/CVE-2024-57903"
},
{
"category": "external",
"summary": "SUSE Bug 1235967 for CVE-2024-57903",
"url": "https://bugzilla.suse.com/1235967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57903"
},
{
"cve": "CVE-2024-57904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: at91: call input_free_device() on allocated iio_dev\n\nCurrent implementation of at91_ts_register() calls input_free_deivce()\non st-\u003ets_input, however, the err label can be reached before the\nallocated iio_dev is stored to st-\u003ets_input. Thus call\ninput_free_device() on input instead of st-\u003ets_input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57904",
"url": "https://www.suse.com/security/cve/CVE-2024-57904"
},
{
"category": "external",
"summary": "SUSE Bug 1236078 for CVE-2024-57904",
"url": "https://bugzilla.suse.com/1236078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57904"
},
{
"cve": "CVE-2024-57906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads8688: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57906",
"url": "https://www.suse.com/security/cve/CVE-2024-57906"
},
{
"category": "external",
"summary": "SUSE Bug 1236088 for CVE-2024-57906",
"url": "https://bugzilla.suse.com/1236088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-57906"
},
{
"cve": "CVE-2024-57907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe \u0027data\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57907",
"url": "https://www.suse.com/security/cve/CVE-2024-57907"
},
{
"category": "external",
"summary": "SUSE Bug 1236090 for CVE-2024-57907",
"url": "https://bugzilla.suse.com/1236090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2024-57907"
},
{
"cve": "CVE-2024-57908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57908",
"url": "https://www.suse.com/security/cve/CVE-2024-57908"
},
{
"category": "external",
"summary": "SUSE Bug 1236091 for CVE-2024-57908",
"url": "https://bugzilla.suse.com/1236091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57908"
},
{
"cve": "CVE-2024-57910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57910"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: vcnl4035: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to userspace from a\ntriggered buffer, but it does not set an initial value for the single\ndata element, which is an u16 aligned to 8 bytes. That leaves at least\n4 bytes uninitialized even after writing an integer value with\nregmap_read().\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57910",
"url": "https://www.suse.com/security/cve/CVE-2024-57910"
},
{
"category": "external",
"summary": "SUSE Bug 1236097 for CVE-2024-57910",
"url": "https://bugzilla.suse.com/1236097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57910"
},
{
"cve": "CVE-2024-57911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n\nThe \u0027data\u0027 array is allocated via kmalloc() and it is used to push data\nto user space from a triggered buffer, but it does not set values for\ninactive channels, as it only uses iio_for_each_active_channel()\nto assign new values.\n\nUse kzalloc for the memory allocation to avoid pushing uninitialized\ninformation to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57911",
"url": "https://www.suse.com/security/cve/CVE-2024-57911"
},
{
"category": "external",
"summary": "SUSE Bug 1236098 for CVE-2024-57911",
"url": "https://bugzilla.suse.com/1236098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57911"
},
{
"cve": "CVE-2024-57912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe \u0027sample\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57912",
"url": "https://www.suse.com/security/cve/CVE-2024-57912"
},
{
"category": "external",
"summary": "SUSE Bug 1236101 for CVE-2024-57912",
"url": "https://bugzilla.suse.com/1236101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57912"
},
{
"cve": "CVE-2024-57913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n\nThis commit addresses an issue related to below kernel panic where\npanic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON\nin functionsfs_bind, which easily leads to the following scenarios.\n\n1.adb_write in adbd 2. UDC write via configfs\n =================\t =====================\n\n-\u003eusb_ffs_open_thread() -\u003eUDC write\n -\u003eopen_functionfs() -\u003econfigfs_write_iter()\n -\u003eadb_open() -\u003egadget_dev_desc_UDC_store()\n -\u003eadb_write() -\u003eusb_gadget_register_driver_owner\n -\u003edriver_register()\n-\u003eStartMonitor() -\u003ebus_add_driver()\n -\u003eadb_read() -\u003egadget_bind_driver()\n\u003ctimes-out without BIND event\u003e -\u003econfigfs_composite_bind()\n -\u003eusb_add_function()\n-\u003eopen_functionfs() -\u003effs_func_bind()\n -\u003eadb_open() -\u003efunctionfs_bind()\n \u003cffs-\u003estate !=FFS_ACTIVE\u003e\n\nThe adb_open, adb_read, and adb_write operations are invoked from the\ndaemon, but trying to bind the function is a process that is invoked by\nUDC write through configfs, which opens up the possibility of a race\ncondition between the two paths. In this race scenario, the kernel panic\noccurs due to the WARN_ON from functionfs_bind when panic_on_warn is\nenabled. This commit fixes the kernel panic by removing the unnecessary\nWARN_ON.\n\nKernel panic - not syncing: kernel: panic_on_warn set ...\n[ 14.542395] Call trace:\n[ 14.542464] ffs_func_bind+0x1c8/0x14a8\n[ 14.542468] usb_add_function+0xcc/0x1f0\n[ 14.542473] configfs_composite_bind+0x468/0x588\n[ 14.542478] gadget_bind_driver+0x108/0x27c\n[ 14.542483] really_probe+0x190/0x374\n[ 14.542488] __driver_probe_device+0xa0/0x12c\n[ 14.542492] driver_probe_device+0x3c/0x220\n[ 14.542498] __driver_attach+0x11c/0x1fc\n[ 14.542502] bus_for_each_dev+0x104/0x160\n[ 14.542506] driver_attach+0x24/0x34\n[ 14.542510] bus_add_driver+0x154/0x270\n[ 14.542514] driver_register+0x68/0x104\n[ 14.542518] usb_gadget_register_driver_owner+0x48/0xf4\n[ 14.542523] gadget_dev_desc_UDC_store+0xf8/0x144\n[ 14.542526] configfs_write_iter+0xf0/0x138",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57913",
"url": "https://www.suse.com/security/cve/CVE-2024-57913"
},
{
"category": "external",
"summary": "SUSE Bug 1236102 for CVE-2024-57913",
"url": "https://bugzilla.suse.com/1236102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57913"
},
{
"cve": "CVE-2024-57915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57915"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57915",
"url": "https://www.suse.com/security/cve/CVE-2024-57915"
},
{
"category": "external",
"summary": "SUSE Bug 1236120 for CVE-2024-57915",
"url": "https://bugzilla.suse.com/1236120"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57915"
},
{
"cve": "CVE-2024-57916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n\nResolve kernel panic caused by improper handling of IRQs while\naccessing GPIO values. This is done by replacing generic_handle_irq with\nhandle_nested_irq.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57916",
"url": "https://www.suse.com/security/cve/CVE-2024-57916"
},
{
"category": "external",
"summary": "SUSE Bug 1236125 for CVE-2024-57916",
"url": "https://bugzilla.suse.com/1236125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57916"
},
{
"cve": "CVE-2024-57917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntopology: Keep the cpumask unchanged when printing cpumap\n\nDuring fuzz testing, the following warning was discovered:\n\n different return values (15 and 11) from vsnprintf(\"%*pbl\n \", ...)\n\n test:keyward is WARNING in kvasprintf\n WARNING: CPU: 55 PID: 1168477 at lib/kasprintf.c:30 kvasprintf+0x121/0x130\n Call Trace:\n kvasprintf+0x121/0x130\n kasprintf+0xa6/0xe0\n bitmap_print_to_buf+0x89/0x100\n core_siblings_list_read+0x7e/0xb0\n kernfs_file_read_iter+0x15b/0x270\n new_sync_read+0x153/0x260\n vfs_read+0x215/0x290\n ksys_read+0xb9/0x160\n do_syscall_64+0x56/0x100\n entry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nThe call trace shows that kvasprintf() reported this warning during the\nprinting of core_siblings_list. kvasprintf() has several steps:\n\n (1) First, calculate the length of the resulting formatted string.\n\n (2) Allocate a buffer based on the returned length.\n\n (3) Then, perform the actual string formatting.\n\n (4) Check whether the lengths of the formatted strings returned in\n steps (1) and (2) are consistent.\n\nIf the core_cpumask is modified between steps (1) and (3), the lengths\nobtained in these two steps may not match. Indeed our test includes cpu\nhotplugging, which should modify core_cpumask while printing.\n\nTo fix this issue, cache the cpumask into a temporary variable before\ncalling cpumap_print_{list, cpumask}_to_buf(), to keep it unchanged\nduring the printing process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57917",
"url": "https://www.suse.com/security/cve/CVE-2024-57917"
},
{
"category": "external",
"summary": "SUSE Bug 1236127 for CVE-2024-57917",
"url": "https://bugzilla.suse.com/1236127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57917"
},
{
"cve": "CVE-2024-57922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57922",
"url": "https://www.suse.com/security/cve/CVE-2024-57922"
},
{
"category": "external",
"summary": "SUSE Bug 1236080 for CVE-2024-57922",
"url": "https://bugzilla.suse.com/1236080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57922"
},
{
"cve": "CVE-2024-57926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57926"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err\n\nThe pointer need to be set to NULL, otherwise KASAN complains about\nuse-after-free. Because in mtk_drm_bind, all private\u0027s drm are set\nas follows.\n\nprivate-\u003eall_drm_private[i]-\u003edrm = drm;\n\nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns\nfailure. However, the shutdown path still accesses the previous allocated\nmemory in drm_atomic_helper_shutdown.\n\n[ 84.874820] watchdog: watchdog0: watchdog did not stop!\n[ 86.512054] ==================================================================\n[ 86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1\n[ 86.515213]\n[ 86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55\n[ 86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022\n[ 86.517960] Call trace:\n[ 86.518333] show_stack+0x20/0x38 (C)\n[ 86.518891] dump_stack_lvl+0x90/0xd0\n[ 86.519443] print_report+0xf8/0x5b0\n[ 86.519985] kasan_report+0xb4/0x100\n[ 86.520526] __asan_report_load8_noabort+0x20/0x30\n[ 86.521240] drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.521966] mtk_drm_shutdown+0x54/0x80\n[ 86.522546] platform_shutdown+0x64/0x90\n[ 86.523137] device_shutdown+0x260/0x5b8\n[ 86.523728] kernel_restart+0x78/0xf0\n[ 86.524282] __do_sys_reboot+0x258/0x2f0\n[ 86.524871] __arm64_sys_reboot+0x90/0xd8\n[ 86.525473] invoke_syscall+0x74/0x268\n[ 86.526041] el0_svc_common.constprop.0+0xb0/0x240\n[ 86.526751] do_el0_svc+0x4c/0x70\n[ 86.527251] el0_svc+0x4c/0xc0\n[ 86.527719] el0t_64_sync_handler+0x144/0x168\n[ 86.528367] el0t_64_sync+0x198/0x1a0\n[ 86.528920]\n[ 86.529157] The buggy address belongs to the physical page:\n[ 86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc\n[ 86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)\n[ 86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000\n[ 86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000\n[ 86.534511] page dumped because: kasan: bad access detected\n[ 86.535323]\n[ 86.535559] Memory state around the buggy address:\n[ 86.536265] ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.537314] ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.538363] \u003effff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.544733] ^\n[ 86.551057] ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.557510] ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.563928] ==================================================================\n[ 86.571093] Disabling lock debugging due to kernel taint\n[ 86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b\n[ 86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57926",
"url": "https://www.suse.com/security/cve/CVE-2024-57926"
},
{
"category": "external",
"summary": "SUSE Bug 1236082 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "external",
"summary": "SUSE Bug 1236084 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-57926"
},
{
"cve": "CVE-2024-57929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: fix releasing a faulty array block twice in dm_array_cursor_end\n\nWhen dm_bm_read_lock() fails due to locking or checksum errors, it\nreleases the faulty block implicitly while leaving an invalid output\npointer behind. The caller of dm_bm_read_lock() should not operate on\nthis invalid dm_block pointer, or it will lead to undefined result.\nFor example, the dm_array_cursor incorrectly caches the invalid pointer\non reading a faulty array block, causing a double release in\ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().\n\nReproduce steps:\n\n1. initialize a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. wipe the second array block offline\n\ndmsteup remove cache cmeta cdata corig\nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock\n\n3. try reopen the cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10\ndevice-mapper: block manager: array validator check failed for block 10\ndevice-mapper: array: get_ablock failed\ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed\n------------[ cut here ]------------\nkernel BUG at drivers/md/dm-bufio.c:638!\n\nFix by setting the cached block pointer to NULL on errors.\n\nIn addition to the reproducer described above, this fix can be\nverified using the \"array_cursor/damaged\" test in dm-unit:\n dm-unit run /pdata/array_cursor/damaged --kernel-dir \u003cKERNEL_DIR\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57929",
"url": "https://www.suse.com/security/cve/CVE-2024-57929"
},
{
"category": "external",
"summary": "SUSE Bug 1236096 for CVE-2024-57929",
"url": "https://bugzilla.suse.com/1236096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57929"
},
{
"cve": "CVE-2024-57931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: ignore unknown extended permissions\n\nWhen evaluating extended permissions, ignore unknown permissions instead\nof calling BUG(). This commit ensures that future permissions can be\nadded without interfering with older kernels.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57931",
"url": "https://www.suse.com/security/cve/CVE-2024-57931"
},
{
"category": "external",
"summary": "SUSE Bug 1236192 for CVE-2024-57931",
"url": "https://bugzilla.suse.com/1236192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57931"
},
{
"cve": "CVE-2024-57932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv-\u003enum_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57932",
"url": "https://www.suse.com/security/cve/CVE-2024-57932"
},
{
"category": "external",
"summary": "SUSE Bug 1236190 for CVE-2024-57932",
"url": "https://bugzilla.suse.com/1236190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57932"
},
{
"cve": "CVE-2024-57933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XSK operations on the existence of queues\n\nThis patch predicates the enabling and disabling of XSK pools on the\nexistence of queues. As it stands, if the interface is down, disabling\nor enabling XSK pools would result in a crash, as the RX queue pointer\nwould be NULL. XSK pool registration will occur as part of the next\ninterface up.\n\nSimilarly, xsk_wakeup needs be guarded against queues disappearing\nwhile the function is executing, so a check against the\nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the\ndisabling of the bit and the synchronize_net() in gve_turndown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57933",
"url": "https://www.suse.com/security/cve/CVE-2024-57933"
},
{
"category": "external",
"summary": "SUSE Bug 1236178 for CVE-2024-57933",
"url": "https://bugzilla.suse.com/1236178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57933"
},
{
"cve": "CVE-2024-57935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57935",
"url": "https://www.suse.com/security/cve/CVE-2024-57935"
},
{
"category": "external",
"summary": "SUSE Bug 1236180 for CVE-2024-57935",
"url": "https://bugzilla.suse.com/1236180"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57935"
},
{
"cve": "CVE-2024-57936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Fix max SGEs for the Work Request\n\nGen P7 supports up to 13 SGEs for now. WQE software structure\ncan hold only 6 now. Since the max send sge is reported as\n13, the stack can give requests up to 13 SGEs. This is causing\ntraffic failures and system crashes.\n\nUse the define for max SGE supported for variable size. This\nwill work for both static and variable WQEs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57936",
"url": "https://www.suse.com/security/cve/CVE-2024-57936"
},
{
"category": "external",
"summary": "SUSE Bug 1236181 for CVE-2024-57936",
"url": "https://bugzilla.suse.com/1236181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57936"
},
{
"cve": "CVE-2024-57938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()\n\nWhile by default max_autoclose equals to INT_MAX / HZ, one may set\nnet.sctp.max_autoclose to UINT_MAX. There is code in\nsctp_association_init() that can consequently trigger overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57938",
"url": "https://www.suse.com/security/cve/CVE-2024-57938"
},
{
"category": "external",
"summary": "SUSE Bug 1236182 for CVE-2024-57938",
"url": "https://bugzilla.suse.com/1236182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57938"
},
{
"cve": "CVE-2024-57940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix the infinite loop in exfat_readdir()\n\nIf the file system is corrupted so that a cluster is linked to\nitself in the cluster chain, and there is an unused directory\nentry in the cluster, \u0027dentry\u0027 will not be incremented, causing\ncondition \u0027dentry \u003c max_dentries\u0027 unable to prevent an infinite\nloop.\n\nThis infinite loop causes s_lock not to be released, and other\ntasks will hang, such as exfat_sync_fs().\n\nThis commit stops traversing the cluster chain when there is unused\ndirectory entry in the cluster to avoid this infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57940",
"url": "https://www.suse.com/security/cve/CVE-2024-57940"
},
{
"category": "external",
"summary": "SUSE Bug 1236227 for CVE-2024-57940",
"url": "https://bugzilla.suse.com/1236227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57940"
},
{
"cve": "CVE-2024-57946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: don\u0027t keep queue frozen during system suspend\n\nCommit 4ce6e2db00de (\"virtio-blk: Ensure no requests in virtqueues before\ndeleting vqs.\") replaces queue quiesce with queue freeze in virtio-blk\u0027s\nPM callbacks. And the motivation is to drain inflight IOs before suspending.\n\nblock layer\u0027s queue freeze looks very handy, but it is also easy to cause\ndeadlock, such as, any attempt to call into bio_queue_enter() may run into\ndeadlock if the queue is frozen in current context. There are all kinds\nof -\u003esuspend() called in suspend context, so keeping queue frozen in the\nwhole suspend context isn\u0027t one good idea. And Marek reported lockdep\nwarning[1] caused by virtio-blk\u0027s freeze queue in virtblk_freeze().\n\n[1] https://lore.kernel.org/linux-block/ca16370e-d646-4eee-b9cc-87277c89c43c@samsung.com/\n\nGiven the motivation is to drain in-flight IOs, it can be done by calling\nfreeze \u0026 unfreeze, meantime restore to previous behavior by keeping queue\nquiesced during suspend.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57946",
"url": "https://www.suse.com/security/cve/CVE-2024-57946"
},
{
"category": "external",
"summary": "SUSE Bug 1236247 for CVE-2024-57946",
"url": "https://bugzilla.suse.com/1236247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2024-57946"
},
{
"cve": "CVE-2024-8805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-8805"
}
],
"notes": [
{
"category": "general",
"text": "BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-8805",
"url": "https://www.suse.com/security/cve/CVE-2024-8805"
},
{
"category": "external",
"summary": "SUSE Bug 1230697 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "external",
"summary": "SUSE Bug 1240804 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1240804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "important"
}
],
"title": "CVE-2024-8805"
},
{
"cve": "CVE-2025-21632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Ensure shadow stack is active before \"getting\" registers\n\nThe x86 shadow stack support has its own set of registers. Those registers\nare XSAVE-managed, but they are \"supervisor state components\" which means\nthat userspace can not touch them with XSAVE/XRSTOR. It also means that\nthey are not accessible from the existing ptrace ABI for XSAVE state.\nThus, there is a new ptrace get/set interface for it.\n\nThe regset code that ptrace uses provides an -\u003eactive() handler in\naddition to the get/set ones. For shadow stack this -\u003eactive() handler\nverifies that shadow stack is enabled via the ARCH_SHSTK_SHSTK bit in the\nthread struct. The -\u003eactive() handler is checked from some call sites of\nthe regset get/set handlers, but not the ptrace ones. This was not\nunderstood when shadow stack support was put in place.\n\nAs a result, both the set/get handlers can be called with\nXFEATURE_CET_USER in its init state, which would cause get_xsave_addr() to\nreturn NULL and trigger a WARN_ON(). The ssp_set() handler luckily has an\nssp_active() check to avoid surprising the kernel with shadow stack\nbehavior when the kernel is not ready for it (ARCH_SHSTK_SHSTK==0). That\ncheck just happened to avoid the warning.\n\nBut the -\u003eget() side wasn\u0027t so lucky. It can be called with shadow stacks\ndisabled, triggering the warning in practice, as reported by Christina\nSchimpe:\n\nWARNING: CPU: 5 PID: 1773 at arch/x86/kernel/fpu/regset.c:198 ssp_get+0x89/0xa0\n[...]\nCall Trace:\n\u003cTASK\u003e\n? show_regs+0x6e/0x80\n? ssp_get+0x89/0xa0\n? __warn+0x91/0x150\n? ssp_get+0x89/0xa0\n? report_bug+0x19d/0x1b0\n? handle_bug+0x46/0x80\n? exc_invalid_op+0x1d/0x80\n? asm_exc_invalid_op+0x1f/0x30\n? __pfx_ssp_get+0x10/0x10\n? ssp_get+0x89/0xa0\n? ssp_get+0x52/0xa0\n__regset_get+0xad/0xf0\ncopy_regset_to_user+0x52/0xc0\nptrace_regset+0x119/0x140\nptrace_request+0x13c/0x850\n? wait_task_inactive+0x142/0x1d0\n? do_syscall_64+0x6d/0x90\narch_ptrace+0x102/0x300\n[...]\n\nEnsure that shadow stacks are active in a thread before looking them up\nin the XSAVE buffer. Since ARCH_SHSTK_SHSTK and user_ssp[SHSTK_EN] are\nset at the same time, the active check ensures that there will be\nsomething to find in the XSAVE buffer.\n\n[ dhansen: changelog/subject tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21632",
"url": "https://www.suse.com/security/cve/CVE-2025-21632"
},
{
"category": "external",
"summary": "SUSE Bug 1236106 for CVE-2025-21632",
"url": "https://bugzilla.suse.com/1236106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21632"
},
{
"cve": "CVE-2025-21645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it\n\nWakeup for IRQ1 should be disabled only in cases where i8042 had\nactually enabled it, otherwise \"wake_depth\" for this IRQ will try to\ndrop below zero and there will be an unpleasant WARN() logged:\n\nkernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug\nkernel: ------------[ cut here ]------------\nkernel: Unbalanced IRQ 1 wake disable\nkernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0\n\nThe PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops\nwhich sets amd_pmc_suspend_handler() to the .suspend, .freeze, and\n.poweroff handlers. i8042_pm_suspend(), however, is only set as\nthe .suspend handler.\n\nFix the issue by call PMC suspend handler only from the same set of\ndev_pm_ops handlers as i8042_pm_suspend(), which currently means just\nthe .suspend handler.\n\nTo reproduce this issue try hibernating (S4) the machine after a fresh boot\nwithout putting it into s2idle first.\n\n[ij: edited the commit message.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21645",
"url": "https://www.suse.com/security/cve/CVE-2025-21645"
},
{
"category": "external",
"summary": "SUSE Bug 1236131 for CVE-2025-21645",
"url": "https://bugzilla.suse.com/1236131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21645"
},
{
"cve": "CVE-2025-21646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21646"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the maximum cell name length\n\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\nproblem occurs if someone actually does that: kafs tries to create a\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\nwith a warning:\n\n WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\n\nbecause procfs limits the maximum filename length to 255.\n\nHowever, the DNS limits the maximum lookup length and, by extension, the\nmaximum cell name, to 255 less two (length count and trailing NUL).\n\nFix this by limiting the maximum acceptable cellname length to 253. This\nalso allows us to be sure we can create the \"/afs/.\u003ccell\u003e/\" mountpoint too.\n\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\nexceeds 253.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21646",
"url": "https://www.suse.com/security/cve/CVE-2025-21646"
},
{
"category": "external",
"summary": "SUSE Bug 1236168 for CVE-2025-21646",
"url": "https://bugzilla.suse.com/1236168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21646"
},
{
"cve": "CVE-2025-21649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is sent on HIP08 devices\n\nCurrently, HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL. But the tx process would still try to set hardware time\nstamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.\n\n[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge]\n[ 128.292938] sp : ffff800059b93140\n[ 128.297200] x29: ffff800059b93140 x28: 0000000000003280\n[ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080\n[ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001\n[ 128.315969] x23: 0000000000000000 x22: 0000000000000194\n[ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000\n[ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000\n[ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24\n[ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000\n[ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368\n[ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02\n[ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0\n[ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000\n[ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff\n[ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294\n[ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080\n[ 128.390626] Call trace:\n[ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3]\n[ 128.405468] xmit_one.constprop.0+0xc4/0x200\n[ 128.410600] dev_hard_start_xmit+0x54/0xf0\n[ 128.415556] sch_direct_xmit+0xe8/0x634\n[ 128.420246] __dev_queue_xmit+0x224/0xc70\n[ 128.425101] dev_queue_xmit+0x1c/0x40\n[ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch]\n[ 128.435409] do_output+0x60/0x17c [openvswitch]\n[ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch]\n[ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch]\n[ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch]\n[ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch]\n[ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch]\n[ 128.471460] xmit_one.constprop.0+0xc4/0x200\n[ 128.476561] dev_hard_start_xmit+0x54/0xf0\n[ 128.481489] __dev_queue_xmit+0x968/0xc70\n[ 128.486330] dev_queue_xmit+0x1c/0x40\n[ 128.490856] ip_finish_output2+0x250/0x570\n[ 128.495810] __ip_finish_output+0x170/0x1e0\n[ 128.500832] ip_finish_output+0x3c/0xf0\n[ 128.505504] ip_output+0xbc/0x160\n[ 128.509654] ip_send_skb+0x58/0xd4\n[ 128.513892] udp_send_skb+0x12c/0x354\n[ 128.518387] udp_sendmsg+0x7a8/0x9c0\n[ 128.522793] inet_sendmsg+0x4c/0x8c\n[ 128.527116] __sock_sendmsg+0x48/0x80\n[ 128.531609] __sys_sendto+0x124/0x164\n[ 128.536099] __arm64_sys_sendto+0x30/0x5c\n[ 128.540935] invoke_syscall+0x50/0x130\n[ 128.545508] el0_svc_common.constprop.0+0x10c/0x124\n[ 128.551205] do_el0_svc+0x34/0xdc\n[ 128.555347] el0_svc+0x20/0x30\n[ 128.559227] el0_sync_handler+0xb8/0xc0\n[ 128.563883] el0_sync+0x160/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21649",
"url": "https://www.suse.com/security/cve/CVE-2025-21649"
},
{
"category": "external",
"summary": "SUSE Bug 1236143 for CVE-2025-21649",
"url": "https://bugzilla.suse.com/1236143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21649"
},
{
"cve": "CVE-2025-21650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue\n\nThe TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs\n1024-1279 are in different BAR space addresses. However,\nhclge_fetch_pf_reg does not distinguish the tqp space information when\nreading the tqp space information. When the number of TQPs is greater\nthan 1024, access bar space overwriting occurs.\nThe problem of different segments has been considered during the\ninitialization of tqp.io_base. Therefore, tqp.io_base is directly used\nwhen the queue is read in hclge_fetch_pf_reg.\n\nThe error message:\n\nUnable to handle kernel paging request at virtual address ffff800037200000\npc : hclge_fetch_pf_reg+0x138/0x250 [hclge]\nlr : hclge_get_regs+0x84/0x1d0 [hclge]\nCall trace:\n hclge_fetch_pf_reg+0x138/0x250 [hclge]\n hclge_get_regs+0x84/0x1d0 [hclge]\n hns3_get_regs+0x2c/0x50 [hns3]\n ethtool_get_regs+0xf4/0x270\n dev_ethtool+0x674/0x8a0\n dev_ioctl+0x270/0x36c\n sock_do_ioctl+0x110/0x2a0\n sock_ioctl+0x2ac/0x530\n __arm64_sys_ioctl+0xa8/0x100\n invoke_syscall+0x4c/0x124\n el0_svc_common.constprop.0+0x140/0x15c\n do_el0_svc+0x30/0xd0\n el0_svc+0x1c/0x2c\n el0_sync_handler+0xb0/0xb4\n el0_sync+0x168/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21650",
"url": "https://www.suse.com/security/cve/CVE-2025-21650"
},
{
"category": "external",
"summary": "SUSE Bug 1236144 for CVE-2025-21650",
"url": "https://bugzilla.suse.com/1236144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21650"
},
{
"cve": "CVE-2025-21651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: don\u0027t auto enable misc vector\n\nCurrently, there is a time window between misc irq enabled\nand service task inited. If an interrupte is reported at\nthis time, it will cause warning like below:\n\n[ 16.324639] Call trace:\n[ 16.324641] __queue_delayed_work+0xb8/0xe0\n[ 16.324643] mod_delayed_work_on+0x78/0xd0\n[ 16.324655] hclge_errhand_task_schedule+0x58/0x90 [hclge]\n[ 16.324662] hclge_misc_irq_handle+0x168/0x240 [hclge]\n[ 16.324666] __handle_irq_event_percpu+0x64/0x1e0\n[ 16.324667] handle_irq_event+0x80/0x170\n[ 16.324670] handle_fasteoi_edge_irq+0x110/0x2bc\n[ 16.324671] __handle_domain_irq+0x84/0xfc\n[ 16.324673] gic_handle_irq+0x88/0x2c0\n[ 16.324674] el1_irq+0xb8/0x140\n[ 16.324677] arch_cpu_idle+0x18/0x40\n[ 16.324679] default_idle_call+0x5c/0x1bc\n[ 16.324682] cpuidle_idle_call+0x18c/0x1c4\n[ 16.324684] do_idle+0x174/0x17c\n[ 16.324685] cpu_startup_entry+0x30/0x6c\n[ 16.324687] secondary_start_kernel+0x1a4/0x280\n[ 16.324688] ---[ end trace 6aa0bff672a964aa ]---\n\nSo don\u0027t auto enable misc vector when request irq..",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21651",
"url": "https://www.suse.com/security/cve/CVE-2025-21651"
},
{
"category": "external",
"summary": "SUSE Bug 1236145 for CVE-2025-21651",
"url": "https://bugzilla.suse.com/1236145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21651"
},
{
"cve": "CVE-2025-21652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21652"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Fix use-after-free in ipvlan_get_iflink().\n\nsyzbot presented an use-after-free report [0] regarding ipvlan and\nlinkwatch.\n\nipvlan does not hold a refcnt of the lower device unlike vlan and\nmacvlan.\n\nIf the linkwatch work is triggered for the ipvlan dev, the lower dev\nmight have already been freed, resulting in UAF of ipvlan-\u003ephy_dev in\nipvlan_get_iflink().\n\nWe can delay the lower dev unregistration like vlan and macvlan by\nholding the lower dev\u0027s refcnt in dev-\u003enetdev_ops-\u003endo_init() and\nreleasing it in dev-\u003epriv_destructor().\n\nJakub pointed out calling .ndo_XXX after unregister_netdevice() has\nreturned is error prone and suggested [1] addressing this UAF in the\ncore by taking commit 750e51603395 (\"net: avoid potential UAF in\ndefault_operstate()\") further.\n\nLet\u0027s assume unregistering devices DOWN and use RCU protection in\ndefault_operstate() not to race with the device unregistration.\n\n[0]:\nBUG: KASAN: slab-use-after-free in ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\nRead of size 4 at addr ffff0000d768c0e0 by task kworker/u8:35/6944\n\nCPU: 0 UID: 0 PID: 6944 Comm: kworker/u8:35 Not tainted 6.13.0-rc2-g9bc5c9515b48 #12 4c3cb9e8b4565456f6a355f312ff91f4f29b3c47\nHardware name: linux,dummy-virt (DT)\nWorkqueue: events_unbound linkwatch_event\nCall trace:\n show_stack+0x38/0x50 arch/arm64/kernel/stacktrace.c:484 (C)\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xbc/0x108 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x16c/0x6f0 mm/kasan/report.c:489\n kasan_report+0xc0/0x120 mm/kasan/report.c:602\n __asan_report_load4_noabort+0x20/0x30 mm/kasan/report_generic.c:380\n ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\n dev_get_iflink+0x7c/0xd8 net/core/dev.c:674\n default_operstate net/core/link_watch.c:45 [inline]\n rfc2863_policy+0x144/0x360 net/core/link_watch.c:72\n linkwatch_do_dev+0x60/0x228 net/core/link_watch.c:175\n __linkwatch_run_queue+0x2f4/0x5b8 net/core/link_watch.c:239\n linkwatch_event+0x64/0xa8 net/core/link_watch.c:282\n process_one_work+0x700/0x1398 kernel/workqueue.c:3229\n process_scheduled_works kernel/workqueue.c:3310 [inline]\n worker_thread+0x8c4/0xe10 kernel/workqueue.c:3391\n kthread+0x2b0/0x360 kernel/kthread.c:389\n ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862\n\nAllocated by task 9303:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x30/0x68 mm/kasan/common.c:68\n kasan_save_alloc_info+0x44/0x58 mm/kasan/generic.c:568\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x84/0xa0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4283 [inline]\n __kmalloc_node_noprof+0x2a0/0x560 mm/slub.c:4289\n __kvmalloc_node_noprof+0x9c/0x230 mm/util.c:650\n alloc_netdev_mqs+0xb4/0x1118 net/core/dev.c:11209\n rtnl_create_link+0x2b8/0xb60 net/core/rtnetlink.c:3595\n rtnl_newlink_create+0x19c/0x868 net/core/rtnetlink.c:3771\n __rtnl_newlink net/core/rtnetlink.c:3896 [inline]\n rtnl_newlink+0x122c/0x15c0 net/core/rtnetlink.c:4011\n rtnetlink_rcv_msg+0x61c/0x918 net/core/rtnetlink.c:6901\n netlink_rcv_skb+0x1dc/0x398 net/netlink/af_netlink.c:2542\n rtnetlink_rcv+0x34/0x50 net/core/rtnetlink.c:6928\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x618/0x838 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x5fc/0x8b0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x2ec/0x438 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __arm64_sys_sendto+0xe4/0x110 net/socket.c:2200\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x90/0x278 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x13c/0x250 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x54/0x70 arch/arm64/kernel/syscall.c:151\n el\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21652",
"url": "https://www.suse.com/security/cve/CVE-2025-21652"
},
{
"category": "external",
"summary": "SUSE Bug 1236160 for CVE-2025-21652",
"url": "https://bugzilla.suse.com/1236160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21652"
},
{
"cve": "CVE-2025-21653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute\n\nsyzbot found that TCA_FLOW_RSHIFT attribute was not validated.\nRight shitfing a 32bit integer is undefined for large shift values.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_flow.c:329:23\nshift exponent 9445 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: ipv6_addrconf addrconf_dad_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468\n flow_classify+0x24d5/0x25b0 net/sched/cls_flow.c:329\n tc_classify include/net/tc_wrapper.h:197 [inline]\n __tcf_classify net/sched/cls_api.c:1771 [inline]\n tcf_classify+0x420/0x1160 net/sched/cls_api.c:1867\n sfb_classify net/sched/sch_sfb.c:260 [inline]\n sfb_enqueue+0x3ad/0x18b0 net/sched/sch_sfb.c:318\n dev_qdisc_enqueue+0x4b/0x290 net/core/dev.c:3793\n __dev_xmit_skb net/core/dev.c:3889 [inline]\n __dev_queue_xmit+0xf0e/0x3f50 net/core/dev.c:4400\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n neigh_hh_output include/net/neighbour.h:523 [inline]\n neigh_output include/net/neighbour.h:537 [inline]\n ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236\n iptunnel_xmit+0x55d/0x9b0 net/ipv4/ip_tunnel_core.c:82\n udp_tunnel_xmit_skb+0x262/0x3b0 net/ipv4/udp_tunnel_core.c:173\n geneve_xmit_skb drivers/net/geneve.c:916 [inline]\n geneve_xmit+0x21dc/0x2d00 drivers/net/geneve.c:1039\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606\n __dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4434",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21653",
"url": "https://www.suse.com/security/cve/CVE-2025-21653"
},
{
"category": "external",
"summary": "SUSE Bug 1236161 for CVE-2025-21653",
"url": "https://bugzilla.suse.com/1236161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21653"
},
{
"cve": "CVE-2025-21655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21655"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/eventfd: ensure io_eventfd_signal() defers another RCU period\n\nio_eventfd_do_signal() is invoked from an RCU callback, but when\ndropping the reference to the io_ev_fd, it calls io_eventfd_free()\ndirectly if the refcount drops to zero. This isn\u0027t correct, as any\npotential freeing of the io_ev_fd should be deferred another RCU grace\nperiod.\n\nJust call io_eventfd_put() rather than open-code the dec-and-test and\nfree, which will correctly defer it another RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21655",
"url": "https://www.suse.com/security/cve/CVE-2025-21655"
},
{
"category": "external",
"summary": "SUSE Bug 1236163 for CVE-2025-21655",
"url": "https://bugzilla.suse.com/1236163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21655"
},
{
"cve": "CVE-2025-21656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur\n\nscsi_execute_cmd() function can return both negative (linux codes) and\npositive (scsi_cmnd result field) error codes.\n\nCurrently the driver just passes error codes of scsi_execute_cmd() to\nhwmon core, which is incorrect because hwmon only checks for negative\nerror codes. This leads to hwmon reporting uninitialized data to\nuserspace in case of SCSI errors (for example if the disk drive was\ndisconnected).\n\nThis patch checks scsi_execute_cmd() output and returns -EIO if it\u0027s\nerror code is positive.\n\n[groeck: Avoid inline variable declaration for portability]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21656",
"url": "https://www.suse.com/security/cve/CVE-2025-21656"
},
{
"category": "external",
"summary": "SUSE Bug 1236248 for CVE-2025-21656",
"url": "https://bugzilla.suse.com/1236248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "low"
}
],
"title": "CVE-2025-21656"
},
{
"cve": "CVE-2025-21662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix variable not being completed when function returns\n\nWhen cmd_alloc_index(), fails cmd_work_handler() needs\nto complete ent-\u003eslotted before returning early.\nOtherwise the task which issued the command may hang:\n\n mlx5_core 0000:01:00.0: cmd_work_handler:877:(pid 3880418): failed to allocate command entry\n INFO: task kworker/13:2:4055883 blocked for more than 120 seconds.\n Not tainted 4.19.90-25.44.v2101.ky10.aarch64 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n kworker/13:2 D 0 4055883 2 0x00000228\n Workqueue: events mlx5e_tx_dim_work [mlx5_core]\n Call trace:\n __switch_to+0xe8/0x150\n __schedule+0x2a8/0x9b8\n schedule+0x2c/0x88\n schedule_timeout+0x204/0x478\n wait_for_common+0x154/0x250\n wait_for_completion+0x28/0x38\n cmd_exec+0x7a0/0xa00 [mlx5_core]\n mlx5_cmd_exec+0x54/0x80 [mlx5_core]\n mlx5_core_modify_cq+0x6c/0x80 [mlx5_core]\n mlx5_core_modify_cq_moderation+0xa0/0xb8 [mlx5_core]\n mlx5e_tx_dim_work+0x54/0x68 [mlx5_core]\n process_one_work+0x1b0/0x448\n worker_thread+0x54/0x468\n kthread+0x134/0x138\n ret_from_fork+0x10/0x18",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21662",
"url": "https://www.suse.com/security/cve/CVE-2025-21662"
},
{
"category": "external",
"summary": "SUSE Bug 1236198 for CVE-2025-21662",
"url": "https://bugzilla.suse.com/1236198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21662"
},
{
"cve": "CVE-2025-21663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: dwmac-tegra: Read iommu stream id from device tree\n\nNvidia\u0027s Tegra MGBE controllers require the IOMMU \"Stream ID\" (SID) to be\nwritten to the MGBE_WRAP_AXI_ASID0_CTRL register.\n\nThe current driver is hard coded to use MGBE0\u0027s SID for all controllers.\nThis causes softirq time outs and kernel panics when using controllers\nother than MGBE0.\n\nExample dmesg errors when an ethernet cable is connected to MGBE1:\n\n[ 116.133290] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 121.851283] tegra-mgbe 6910000.ethernet eth1: NETDEV WATCHDOG: CPU: 5: transmit queue 0 timed out 5690 ms\n[ 121.851782] tegra-mgbe 6910000.ethernet eth1: Reset adapter.\n[ 121.892464] tegra-mgbe 6910000.ethernet eth1: Register MEM_TYPE_PAGE_POOL RxQ-0\n[ 121.905920] tegra-mgbe 6910000.ethernet eth1: PHY [stmmac-1:00] driver [Aquantia AQR113] (irq=171)\n[ 121.907356] tegra-mgbe 6910000.ethernet eth1: Enabling Safety Features\n[ 121.907578] tegra-mgbe 6910000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported\n[ 121.908399] tegra-mgbe 6910000.ethernet eth1: registered PTP clock\n[ 121.908582] tegra-mgbe 6910000.ethernet eth1: configuring for phy/10gbase-r link mode\n[ 125.961292] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 181.921198] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:\n[ 181.921404] rcu: \t7-....: (1 GPs behind) idle=540c/1/0x4000000000000002 softirq=1748/1749 fqs=2337\n[ 181.921684] rcu: \t(detected by 4, t=6002 jiffies, g=1357, q=1254 ncpus=8)\n[ 181.921878] Sending NMI from CPU 4 to CPUs 7:\n[ 181.921886] NMI backtrace for cpu 7\n[ 181.922131] CPU: 7 UID: 0 PID: 0 Comm: swapper/7 Kdump: loaded Not tainted 6.13.0-rc3+ #6\n[ 181.922390] Hardware name: NVIDIA CTI Forge + Orin AGX/Jetson, BIOS 202402.1-Unknown 10/28/2024\n[ 181.922658] pstate: 40400009 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 181.922847] pc : handle_softirqs+0x98/0x368\n[ 181.922978] lr : __do_softirq+0x18/0x20\n[ 181.923095] sp : ffff80008003bf50\n[ 181.923189] x29: ffff80008003bf50 x28: 0000000000000008 x27: 0000000000000000\n[ 181.923379] x26: ffffce78ea277000 x25: 0000000000000000 x24: 0000001c61befda0\n[ 181.924486] x23: 0000000060400009 x22: ffffce78e99918bc x21: ffff80008018bd70\n[ 181.925568] x20: ffffce78e8bb00d8 x19: ffff80008018bc20 x18: 0000000000000000\n[ 181.926655] x17: ffff318ebe7d3000 x16: ffff800080038000 x15: 0000000000000000\n[ 181.931455] x14: ffff000080816680 x13: ffff318ebe7d3000 x12: 000000003464d91d\n[ 181.938628] x11: 0000000000000040 x10: ffff000080165a70 x9 : ffffce78e8bb0160\n[ 181.945804] x8 : ffff8000827b3160 x7 : f9157b241586f343 x6 : eeb6502a01c81c74\n[ 181.953068] x5 : a4acfcdd2e8096bb x4 : ffffce78ea277340 x3 : 00000000ffffd1e1\n[ 181.960329] x2 : 0000000000000101 x1 : ffffce78ea277340 x0 : ffff318ebe7d3000\n[ 181.967591] Call trace:\n[ 181.970043] handle_softirqs+0x98/0x368 (P)\n[ 181.974240] __do_softirq+0x18/0x20\n[ 181.977743] ____do_softirq+0x14/0x28\n[ 181.981415] call_on_irq_stack+0x24/0x30\n[ 181.985180] do_softirq_own_stack+0x20/0x30\n[ 181.989379] __irq_exit_rcu+0x114/0x140\n[ 181.993142] irq_exit_rcu+0x14/0x28\n[ 181.996816] el1_interrupt+0x44/0xb8\n[ 182.000316] el1h_64_irq_handler+0x14/0x20\n[ 182.004343] el1h_64_irq+0x80/0x88\n[ 182.007755] cpuidle_enter_state+0xc4/0x4a8 (P)\n[ 182.012305] cpuidle_enter+0x3c/0x58\n[ 182.015980] cpuidle_idle_call+0x128/0x1c0\n[ 182.020005] do_idle+0xe0/0xf0\n[ 182.023155] cpu_startup_entry+0x3c/0x48\n[ 182.026917] secondary_start_kernel+0xdc/0x120\n[ 182.031379] __secondary_switched+0x74/0x78\n[ 212.971162] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 7-.... } 6103 jiffies s: 417 root: 0x80/.\n[ 212.985935] rcu: blocking rcu_node structures (internal RCU debug):\n[ 212.992758] Sending NMI from CPU 0 to CPUs 7:\n[ 212.998539] NMI backtrace for cpu 7\n[ 213.004304] CPU: 7 UID: 0 PI\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21663",
"url": "https://www.suse.com/security/cve/CVE-2025-21663"
},
{
"category": "external",
"summary": "SUSE Bug 1236260 for CVE-2025-21663",
"url": "https://bugzilla.suse.com/1236260"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21663"
},
{
"cve": "CVE-2025-21664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm thin: make get_first_thin use rcu-safe list first function\n\nThe documentation in rculist.h explains the absence of list_empty_rcu()\nand cautions programmers against relying on a list_empty() -\u003e\nlist_first() sequence in RCU safe code. This is because each of these\nfunctions performs its own READ_ONCE() of the list head. This can lead\nto a situation where the list_empty() sees a valid list entry, but the\nsubsequent list_first() sees a different view of list head state after a\nmodification.\n\nIn the case of dm-thin, this author had a production box crash from a GP\nfault in the process_deferred_bios path. This function saw a valid list\nhead in get_first_thin() but when it subsequently dereferenced that and\nturned it into a thin_c, it got the inside of the struct pool, since the\nlist was now empty and referring to itself. The kernel on which this\noccurred printed both a warning about a refcount_t being saturated, and\na UBSAN error for an out-of-bounds cpuid access in the queued spinlock,\nprior to the fault itself. When the resulting kdump was examined, it\nwas possible to see another thread patiently waiting in thin_dtr\u0027s\nsynchronize_rcu.\n\nThe thin_dtr call managed to pull the thin_c out of the active thins\nlist (and have it be the last entry in the active_thins list) at just\nthe wrong moment which lead to this crash.\n\nFortunately, the fix here is straight forward. Switch get_first_thin()\nfunction to use list_first_or_null_rcu() which performs just a single\nREAD_ONCE() and returns NULL if the list is already empty.\n\nThis was run against the devicemapper test suite\u0027s thin-provisioning\nsuites for delete and suspend and no regressions were observed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21664",
"url": "https://www.suse.com/security/cve/CVE-2025-21664"
},
{
"category": "external",
"summary": "SUSE Bug 1236262 for CVE-2025-21664",
"url": "https://bugzilla.suse.com/1236262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21664"
},
{
"cve": "CVE-2025-21674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21674"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel\n\nAttempt to enable IPsec packet offload in tunnel mode in debug kernel\ngenerates the following kernel panic, which is happening due to two\nissues:\n1. In SA add section, the should be _bh() variant when marking SA mode.\n2. There is not needed flush_workqueue in SA delete routine. It is not\nneeded as at this stage as it is removed from SADB and the running work\nwill be canceled later in SA free.\n\n =====================================================\n WARNING: SOFTIRQ-safe -\u003e SOFTIRQ-unsafe lock order detected\n 6.12.0+ #4 Not tainted\n -----------------------------------------------------\n charon/1337 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:\n ffff88810f365020 (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}, at: mlx5e_xfrm_del_state+0xca/0x1e0 [mlx5_core]\n\n and this task is already holding:\n ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n which would create a new lock dependency:\n (\u0026x-\u003elock){+.-.}-{3:3} -\u003e (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n but this new dependency connects a SOFTIRQ-irq-safe lock:\n (\u0026x-\u003elock){+.-.}-{3:3}\n\n ... which became SOFTIRQ-irq-safe at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n hrtimer_run_softirq+0x146/0x2e0\n handle_softirqs+0x266/0x860\n irq_exit_rcu+0x115/0x1a0\n sysvec_apic_timer_interrupt+0x6e/0x90\n asm_sysvec_apic_timer_interrupt+0x16/0x20\n default_idle+0x13/0x20\n default_idle_call+0x67/0xa0\n do_idle+0x2da/0x320\n cpu_startup_entry+0x50/0x60\n start_secondary+0x213/0x2a0\n common_startup_64+0x129/0x138\n\n to a SOFTIRQ-irq-unsafe lock:\n (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n ... which became SOFTIRQ-irq-unsafe at:\n ...\n lock_acquire+0x1be/0x520\n _raw_spin_lock+0x2c/0x40\n xa_set_mark+0x70/0x110\n mlx5e_xfrm_add_state+0xe48/0x2290 [mlx5_core]\n xfrm_dev_state_add+0x3bb/0xd70\n xfrm_add_sa+0x2451/0x4a90\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n other info that might help us debug this:\n\n Possible interrupt unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026xa-\u003exa_lock#24);\n local_irq_disable();\n lock(\u0026x-\u003elock);\n lock(\u0026xa-\u003exa_lock#24);\n \u003cInterrupt\u003e\n lock(\u0026x-\u003elock);\n\n *** DEADLOCK ***\n\n 2 locks held by charon/1337:\n #0: ffffffff87f8f858 (\u0026net-\u003exfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x5e/0x90\n #1: ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n\n the dependencies between SOFTIRQ-irq-safe lock and the holding lock:\n -\u003e (\u0026x-\u003elock){+.-.}-{3:3} ops: 29 {\n HARDIRQ-ON-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_alloc_spi+0xc0/0xe60\n xfrm_alloc_userspi+0x5f6/0xbc0\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n IN-SOFTIRQ-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21674",
"url": "https://www.suse.com/security/cve/CVE-2025-21674"
},
{
"category": "external",
"summary": "SUSE Bug 1236688 for CVE-2025-21674",
"url": "https://bugzilla.suse.com/1236688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21674"
},
{
"cve": "CVE-2025-21676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21676"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: handle page_pool_dev_alloc_pages error\n\nThe fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did\nnot handle the case when it returned NULL. There was a WARN_ON(!new_page)\nbut it would still proceed to use the NULL pointer and then crash.\n\nThis case does seem somewhat rare but when the system is under memory\npressure it can happen. One case where I can duplicate this with some\nfrequency is when writing over a smbd share to a SATA HDD attached to an\nimx6q.\n\nSetting /proc/sys/vm/min_free_kbytes to higher values also seems to solve\nthe problem for my test case. But it still seems wrong that the fec driver\nignores the memory allocation error and can crash.\n\nThis commit handles the allocation error by dropping the current packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21676",
"url": "https://www.suse.com/security/cve/CVE-2025-21676"
},
{
"category": "external",
"summary": "SUSE Bug 1236696 for CVE-2025-21676",
"url": "https://bugzilla.suse.com/1236696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21676"
},
{
"cve": "CVE-2025-21682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21682"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: bnxt: always recalculate features after XDP clearing, fix null-deref\n\nRecalculate features when XDP is detached.\n\nBefore:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: off [requested on]\n\nAfter:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: on\n\nThe fact that HW-GRO doesn\u0027t get re-enabled automatically is just\na minor annoyance. The real issue is that the features will randomly\ncome back during another reconfiguration which just happens to invoke\nnetdev_update_features(). The driver doesn\u0027t handle reconfiguring\ntwo things at a time very robustly.\n\nStarting with commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") we only reconfigure the RSS hash table\nif the \"effective\" number of Rx rings has changed. If HW-GRO is\nenabled \"effective\" number of rings is 2x what user sees.\nSo if we are in the bad state, with HW-GRO re-enablement \"pending\"\nafter XDP off, and we lower the rings by / 2 - the HW-GRO rings\ndoing 2x and the ethtool -L doing / 2 may cancel each other out,\nand the:\n\n if (old_rx_rings != bp-\u003ehw_resc.resv_rx_rings \u0026\u0026\n\ncondition in __bnxt_reserve_rings() will be false.\nThe RSS map won\u0027t get updated, and we\u0027ll crash with:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000168\n RIP: 0010:__bnxt_hwrm_vnic_set_rss+0x13a/0x1a0\n bnxt_hwrm_vnic_rss_cfg_p5+0x47/0x180\n __bnxt_setup_vnic_p5+0x58/0x110\n bnxt_init_nic+0xb72/0xf50\n __bnxt_open_nic+0x40d/0xab0\n bnxt_open_nic+0x2b/0x60\n ethtool_set_channels+0x18c/0x1d0\n\nAs we try to access a freed ring.\n\nThe issue is present since XDP support was added, really, but\nprior to commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") it wasn\u0027t causing major issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21682",
"url": "https://www.suse.com/security/cve/CVE-2025-21682"
},
{
"category": "external",
"summary": "SUSE Bug 1236703 for CVE-2025-21682",
"url": "https://bugzilla.suse.com/1236703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-devel-rt-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-rt-1-1.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-rt-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-source-rt-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-28T07:51:47Z",
"details": "moderate"
}
],
"title": "CVE-2025-21682"
}
]
}
suse-su-2025:20165-1
Vulnerability from csaf_suse
Published
2025-03-27 15:23
Modified
2025-03-27 15:23
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).
- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).
- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
- CVE-2024-44996: vsock: fix recursive ->recvmsg calls (bsc#1230205).
- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).
- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized
delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).
- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
- CVE-2024-53099: bpf: Check validity of link->type in bpf_link_show_fdinfo() (bsc#1233772).
- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).
- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).
- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).
- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).
- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)
- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).
- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).
- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).
- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).
- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).
- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).
- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).
- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).
- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
- CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before "getting" registers (bsc#1236106).
- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
The following non-security bugs were fixed:
- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).
- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).
- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).
- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).
- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).
- ACPI: resource: Fix memory resource type union access (git-fixes).
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).
- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).
- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).
- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).
- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).
- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).
- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).
- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).
- ALSA: line6: Fix racy access to midibuf (stable-fixes).
- ALSA: seq: Check UMP support for midi_version change (git-fixes).
- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).
- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).
- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).
- ALSA: seq: ump: Use guard() for locking (stable-fixes).
- ALSA: ump: Use guard() for locking (stable-fixes).
- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).
- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).
- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).
- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).
- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).
- ASoC: SOF: Remove libraries from topology lookups (git-fixes).
- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).
- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).
- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).
- ASoC: amd: yc: Fix the wrong return value (git-fixes).
- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).
- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).
- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).
- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).
- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).
- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).
- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).
- ASoC: nau8822: Lower debug print priority (stable-fixes).
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).
- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).
- ASoC: samsung: Add missing depends on I2C (git-fixes).
- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).
- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).
- ASoC: wm8994: Add depends on MFD core (stable-fixes).
- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).
- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).
- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).
- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).
- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).
- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).
- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).
- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).
- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).
- Bluetooth: iso: Fix recursive locking warning (git-fixes).
- Delete XHCI patch for regression (bsc#1235550)
- Disable ceph (jsc#PED-7242)
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).
- Drop downstream TPM fix patch (bsc#1233260 bsc#1233259 bsc#1232421)
- Drop uvcvideo fix due to regression (bsc#1235894)
- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).
- HID: fix generic desktop D-Pad controls (git-fixes).
- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).
- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).
- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).
- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).
- Input: bbnsm_pwrkey - add remove hook (git-fixes).
- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).
- Input: davinci-keyscan - remove leftover header (git-fixes).
- Input: xpad - add QH Electronics VID/PID (stable-fixes).
- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).
- Input: xpad - add support for Nacon Pro Compact (stable-fixes).
- Input: xpad - add support for wooting two he (arm) (stable-fixes).
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).
- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).
- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).
- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).
- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).
- NFSD: Async COPY result needs to return a write verifier (git-fixes).
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).
- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).
- NFSD: Prevent a potential integer overflow (git-fixes).
- NFSD: Remove a never-true comparison (git-fixes).
- NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (git-fixes).
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).
- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).
- PCI/AER: Disable AER service on suspend (stable-fixes).
- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (stable-fixes).
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).
- PCI: Add T_PERST_CLK_US macro (git-fixes).
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).
- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).
- PCI: Fix use-after-free of slot->bus on hot remove (stable-fixes).
- PCI: Use preserve_config in place of pci_flags (stable-fixes).
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).
- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).
- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).
- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).
- PCI: j721e: Add per platform maximum lane settings (stable-fixes).
- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).
- PCI: j721e: Add suspend and resume support (git-fixes).
- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).
- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).
- PCI: qcom: Add support for IPQ9574 (stable-fixes).
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).
- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).
- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).
- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)
- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)
- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)
- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)
- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)
- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)
- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)
- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)
- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)
- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)
- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)
- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)
- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)
- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)
- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)
- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)
- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)
- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)
- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)
- RDMA/rtrs: Ensure 'ib_sge list' is accessible (git-fixes)
- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)
- RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" (git-fixes)
- RDMA/srp: Fix error handling in srp_add_port (git-fixes)
- RDMA/uverbs: Prevent integer overflow issue (git-fixes)
- Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad" (stable-fixes).
- Revert "block/mq-deadline: use correct way to throttling write requests" (bsc#1234146).
- Revert "btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)"
- Revert "drm/i915/dpt: Make DPT object unshrinkable" (stable-fixes).
- Revert "igb: Disable threaded IRQ for igb_msix_other" (git-fixes).
- Revert "mm, kmsan: fix infinite recursion due to RCU critical section" (bsc#1230413)
- Revert "mm/sparsemem: fix race in accessing memory_section->usage" (bsc#1230413)
- Revert "mm: prevent derefencing NULL ptr in pfn_section_valid()" (bsc#1230413)
- Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (git-fixes).
- Revert "unicode: Do not special case ignorable code points" (stable-fixes).
- Revert "usb: gadget: u_serial: Disable ep before setting port to null
to fix the crash caused by port being null" (stable-fixes).
- Revert 'arm64: Kconfig: Make SME depend on BROKEN for now'
- Revert 0dd78566990 ("Disable ceph (jsc#PED-7242)")
- SUNRPC: make sure cache entry active before cache_show (git-fixes).
- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).
- USB: core: Disable LPM only for non-suspended ports (git-fixes).
- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).
- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).
- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).
- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
- USB: serial: option: add Neoway N723-EA support (stable-fixes).
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).
- USB: serial: option: add TCL IK512 MBIM & ECM (stable-fixes).
- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).
- USB: usblp: return error when setting unsupported protocol (git-fixes).
- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
- VMCI: fix reference to ioctl-number.rst (git-fixes).
- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).
- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).
- accel/habanalabs: fix debugfs files permissions (stable-fixes).
- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).
- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).
- afs: Automatically generate trace tag enums (git-fixes).
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).
- afs: Fix cleanup of immediately failed async calls (git-fixes).
- afs: Fix directory format encoding struct (git-fixes).
- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).
- afs: Fix the maximum cell name length (git-fixes).
- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).
- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).
- arch: Remove cmpxchg_double (bsc#1220773).
- arch: consolidate arch_irq_work_raise prototypes (git-fixes).
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (git-fixes)
- arm64: Force position-independent veneers (git-fixes).
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245)
- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).
- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).
- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)
- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).
- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).
- batman-adv: Do not send uninitialized TT changes (git-fixes).
- batman-adv: Remove uninitialized data in full table TT response (git-fixes).
- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).
- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).
- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).
- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).
- blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (bsc#1234140).
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).
- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).
- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).
- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).
- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).
- block/mq-deadline: Fix the tag reservation code (bsc#1234148).
- block: Call .limit_depth() after .hctx has been set (bsc#1234148).
- block: Fix where bio IO priority gets set (bsc#1234145).
- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).
- block: update the stable_writes flag in bdev_add (bsc#1234141).
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)
- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).
- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).
- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).
- bpf: verifier: prevent userspace memory access (git-fixes).
- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).
- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).
- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).
- can: j1939: fix error in J1939 documentation (stable-fixes).
- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
- checkpatch: always parse orig_commit in fixes tag (git-fixes).
- checkpatch: check for missing Fixes tags (stable-fixes).
- cleanup: Add conditional guard support (stable-fixes).
- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).
- cleanup: Remove address space of returned pointer (git-fixes).
- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).
- clocksource/drivers:sp804: Make user selectable (git-fixes).
- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).
- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).
- cpufreq: ACPI: Fix max-frequency computation (git-fixes).
- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).
- cpufreq: amd-pstate: remove global header file (git-fixes).
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).
- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).
- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).
- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).
- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).
- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).
- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).
- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).
- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).
- cpupower: fix TSC MHz calculation (git-fixes).
- crypto: caam - use JobR's space to access page 0 regs (git-fixes).
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).
- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).
- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).
- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (git-fixes).
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).
- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).
- crypto: qce - fix goto jump in error path (git-fixes).
- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).
- crypto: qce - unregister previously registered algos in error path (git-fixes).
- crypto: x86/sha256 - Add parentheses around macros' single arguments (stable-fixes).
- cyrpto/b128ops: Remove struct u128 (bsc#1220773).
- devcoredump: cleanup some comments (git-fixes).
- devlink: Fix length of eswitch inline-mode (git-fixes).
- dlm: fix possible lkb_resource null dereference (git-fixes).
- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).
- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).
- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).
- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).
- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).
- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).
- dmaengine: tegra: Return correct DMA status when paused (git-fixes).
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).
- docs: media: update location of the media patches (stable-fixes).
- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).
- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).
- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).
- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).
- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).
- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).
- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).
- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).
- drm/amd/display: Fix DSC-re-computing (stable-fixes).
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).
- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).
- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).
- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).
- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).
- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).
- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).
- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).
- drm/amdgpu/pm: Remove gpu_od if it's an empty directory (stable-fixes).
- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).
- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).
- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).
- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).
- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).
- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).
- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).
- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).
- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).
- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).
- drm/amdgpu: do not access invalid sched (git-fixes).
- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).
- drm/amdgpu: fix usage slab after free (stable-fixes).
- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).
- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).
- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).
- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).
- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).
- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).
- drm/amdkfd: Use device based logging for errors (stable-fixes).
- drm/amdkfd: Use the correct wptr size (stable-fixes).
- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).
- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).
- drm/bridge: it6505: Enable module autoloading (stable-fixes).
- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).
- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).
- drm/display: Fix building with GCC 15 (stable-fixes).
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).
- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).
- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).
- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).
- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).
- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).
- drm/i915/dg1: Fix power gate sequence (git-fixes).
- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).
- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).
- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).
- drm/mcde: Enable module autoloading (stable-fixes).
- drm/mediatek: Add return value check when reading DPCD (git-fixes).
- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).
- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).
- drm/mediatek: Fix mode valid issue for dp (git-fixes).
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (git-fixes).
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).
- drm/mediatek: stop selecting foreign drivers (git-fixes).
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).
- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).
- drm/msm: Check return value of of_dma_configure() (git-fixes).
- drm/msm: do not clean up priv->kms prematurely (git-fixes).
- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).
- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).
- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).
- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).
- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).
- drm/radeon: change rdev->ddev to rdev_to_drm(rdev) (stable-fixes).
- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).
- drm/sched: memset() 'job' in drm_sched_job_init() (stable-fixes).
- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).
- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).
- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).
- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).
- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).
- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).
- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).
- drm/vmwgfx: Add new keep_resv BO param (git-fixes).
- drm: adv7511: Drop dsi single lane support (git-fixes).
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).
- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).
- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
- erofs: avoid debugging output for (de)compressed data (git-fixes).
- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).
- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).
- exfat: fix the infinite loop in exfat_readdir() (git-fixes).
- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).
- ext4: add a new helper to check if es must be kept (bsc#1234170).
- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).
- ext4: add missed brelse in update_backups (bsc#1234171).
- ext4: allow for the last group to be marked as trimmed (bsc#1234278).
- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).
- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).
- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).
- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).
- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).
- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).
- ext4: check the extent status again before inserting delalloc block (bsc#1234186).
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).
- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).
- ext4: correct best extent lstart adjustment logic (bsc#1234179).
- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).
- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).
- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).
- ext4: correct the start block of counting reserved clusters (bsc#1234169).
- ext4: do not let fstrim block system suspend (bsc#1234166).
- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).
- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).
- ext4: factor out a common helper to query extent map (bsc#1234186).
- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).
- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).
- ext4: fix potential unnitialized variable (bsc#1234183).
- ext4: fix race between writepages and remount (bsc#1234168).
- ext4: fix rec_len verify error (bsc#1234167).
- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).
- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).
- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).
- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).
- ext4: make ext4_es_insert_extent() return void (bsc#1234170).
- ext4: make ext4_es_remove_extent() return void (bsc#1234170).
- ext4: make ext4_zeroout_es() return void (bsc#1234170).
- ext4: make sure allocate pending entry not fail (bsc#1234170).
- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).
- ext4: move 'ix' sanity check to corrent position (bsc#1234174).
- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).
- ext4: nested locking for xattr inode (bsc#1234189).
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).
- ext4: refactor ext4_da_map_blocks() (bsc#1234178).
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).
- ext4: remove the redundant folio_wait_stable() (bsc#1234184).
- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).
- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).
- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).
- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).
- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).
- filemap: Fix bounds checking in filemap_read() (bsc#1234209).
- filemap: add a per-mapping stable writes flag (bsc#1234141).
- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).
- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).
- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).
- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).
- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).
- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).
- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).
- genksyms: fix memory leak when the same symbol is added from source (git-fixes).
- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).
- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).
- gpio: grgpio: use a helper variable to store the address of ofdev->dev (stable-fixes).
- gpio: mxc: remove dead code after switch to DT-only (git-fixes).
- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
- hfsplus: do not query the device logical block size multiple times (git-fixes).
- hvc/xen: fix console unplug (git-fixes).
- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).
- hvc/xen: fix event channel handling for secondary consoles (git-fixes).
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).
- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).
- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).
- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).
- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).
- hwmon: (tmp513) Do not use "proxy" headers (stable-fixes).
- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).
- hwmon: (tmp513) Fix division of negative numbers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).
- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).
- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).
- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).
- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).
- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
- i2c: i801: Add support for Intel Panther Lake (stable-fixes).
- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).
- i2c: microchip-core: actually use repeated sends (git-fixes).
- i2c: microchip-core: fix "ghost" detections (git-fixes).
- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).
- i2c: pnx: Fix timeout in wait functions (git-fixes).
- i2c: rcar: fix NACK handling when being a target (git-fixes).
- i2c: riic: Always round-up when calculating bus period (git-fixes).
- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).
- i40e: Fix handling changed priv flags (git-fixes).
- i915/guc: Accumulate active runtime on gt reset (git-fixes).
- i915/guc: Ensure busyness counter increases motonically (git-fixes).
- i915/guc: Reset engine utilization buffer before registration (git-fixes).
- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
- ice: Unbind the workqueue (bsc#1234989)
- ice: change q_index variable type to s16 to store -1 value (git-fixes).
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).
- ice: fix PHY Clock Recovery availability check (git-fixes).
- idpf: add support for SW triggered interrupts (bsc#1235507).
- idpf: enable WB_ON_ITR (bsc#1235507).
- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).
- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).
- iio: adc: ad7124: Disable all channels at probe time (git-fixes).
- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).
- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).
- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).
- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).
- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).
- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).
- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).
- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).
- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).
- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).
- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).
- instrumentation: Wire up cmpxchg128() (bsc#1220773).
- intel_th: core: fix kernel-doc warnings (git-fixes).
- io_uring/rw: avoid punting to io-wq directly (git-fixes).
- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).
- io_uring: Fix registered ring file refcount leak (git-fixes).
- io_uring: always lock __io_cqring_overflow_flush (git-fixes).
- io_uring: check if iowq is killed before queuing (git-fixes).
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).
- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).
- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).
- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).
- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).
- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).
- jffs2: Fix rtime decompressor (git-fixes).
- jffs2: Prevent rtime decompress memory corruption (git-fixes).
- jffs2: fix use of uninitialized variable (git-fixes).
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).
- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).
- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).
- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).
- jfs: xattr: check invalid xattr size more strictly (git-fixes).
- kABI workaround for struct auto_pin_cfg_item change (git-fixes).
- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).
- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)
- kasan: make report_lock a raw spinlock (git-fixes).
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).
- kdb: Fix buffer overflow during tab-complete (bsc#1234652).
- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).
- kdb: Merge identical case statements in kdb_read() (bsc#1234657).
- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).
- kdb: Use format-strings rather than '\0' injection in kdb_read() (bsc#1234654).
- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).
- kdb: address -Wformat-security warnings (bsc#1234659).
- kgdb: Flush console before entering kgdb on panic (bsc#1234651).
- kheaders: Ignore silly-rename files (stable-fixes).
- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).
- ktest.pl: Check kernelrelease return in get_version (git-fixes).
- ktest.pl: Fix typo "accesing" (git-fixes).
- ktest.pl: Fix typo in comment (git-fixes).
- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).
- ktest: force $buildonly = 1 for 'make_warnings_file' test type (stable-fixes).
- landlock: Handle weird files (git-fixes).
- latencytop: use correct kernel-doc format for func params (git-fixes).
- leds: class: Protect brightness_show() with led_cdev->led_access mutex (stable-fixes).
- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).
- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).
- lib/inflate.c: remove dead code (git-fixes).
- lib/stackdepot: print disabled message only if truly disabled (git-fixes).
- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).
- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).
- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).
- mac80211: fix user-power when emulating chanctx (stable-fixes).
- mac802154: check local interfaces before deleting sdata list (stable-fixes).
- mailbox: pcc: Add support for platform notification handling (stable-fixes).
- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).
- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).
- maple_tree: simplify split calculation (git-fixes).
- media: camif-core: Add check for clk_enable() (git-fixes).
- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).
- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).
- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).
- media: i2c: imx412: Add missing newline to prints (git-fixes).
- media: i2c: ov9282: Correct the exposure offset (git-fixes).
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).
- media: imx296: Add standby delay during probe (git-fixes).
- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).
- media: marvell: Add check for clk_enable() (git-fixes).
- media: mc: fix endpoint iteration (git-fixes).
- media: mipi-csis: Add check for clk_enable() (git-fixes).
- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).
- media: ov5640: fix get_light_freq on auto (git-fixes).
- media: rc: iguanair: handle timeouts (git-fixes).
- media: rkisp1: Fix unused value issue (git-fixes).
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).
- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).
- media: uvcvideo: Fix double free in error path (git-fixes).
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).
- media: uvcvideo: Only save async fh if success (git-fixes).
- media: uvcvideo: Propagate buf->error to userspace (git-fixes).
- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).
- media: uvcvideo: Remove dangling pointers (git-fixes).
- media: uvcvideo: Remove redundant NULL assignment (git-fixes).
- media: uvcvideo: Support partial control reads (git-fixes).
- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).
- memory-failure: use a folio in me_huge_page() (git-fixes).
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).
- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).
- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).
- misc: fastrpc: Fix copy buffer page size (git-fixes).
- misc: fastrpc: Fix registered buffer page address (git-fixes).
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).
- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).
- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).
- mm/memory-failure: check the mapcount of the precise page (git-fixes).
- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).
- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).
- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).
- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).
- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).
- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).
- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).
- mm/migrate: putback split folios when numa hint migration fails (git-fixes).
- mm/migrate: split source folio if it is on deferred split list (git-fixes).
- mm/page_owner: remove free_ts from page_owner output (git-fixes).
- mm/readahead: do not allow order-1 folio (bsc#1234205).
- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).
- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).
- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).
- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).
- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).
- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).
- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).
- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).
- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).
- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).
- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).
- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).
- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).
- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).
- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).
- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).
- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).
- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).
- net/ipv6: release expired exception dst cached in socket (bsc#1216813).
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).
- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).
- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).
- net/qed: allow old cards not supporting "num_images" to work (git-fixes).
- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).
- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).
- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).
- net: rose: fix timer races against user threads (git-fixes).
- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).
- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).
- net: usb: rtl8150: enable basic endpoint checking (git-fixes).
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).
- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).
- nfsd: make sure exp active before svc_export_show (git-fixes).
- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).
- nfsd: restore callback functionality for NFSv4.0 (git-fixes).
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).
- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).
- nilfs2: prevent use of deleted inode (git-fixes).
- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).
- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).
- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).
- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).
- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).
- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).
- nvme: apple: fix device reference counting (git-fixes).
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).
- nvme: fix metadata handling in nvme-passthrough (git-fixes).
- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).
- nvmet: propagate npwg topology (git-fixes).
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).
- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).
- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).
- of: address: Report error on resource bounds overflow (stable-fixes).
- padata: add pd get/put refcnt helper (git-fixes).
- padata: avoid UAF for reorder_work (git-fixes).
- padata: fix UAF in padata_reorder (git-fixes).
- parisc: Raise minimal GCC version (bsc#1220773).
- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).
- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).
- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).
- percpu: Wire up cmpxchg128 (bsc#1220773).
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).
- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).
- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).
- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).
- phy: usb: Toggle the PHY power during init (git-fixes).
- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).
- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).
- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).
- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).
- pinmux: Use sequential access to access desc->pinmux data (stable-fixes).
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).
- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).
- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).
- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).
- platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect fan speed (stable-fixes).
- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).
- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).
- power: supply: gpio-charger: Fix set charge current limits (git-fixes).
- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).
- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).
- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).
- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).
- pps: add an error check in parport_attach (git-fixes).
- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- printk: Add is_printk_legacy_deferred() (bsc#1236733).
- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).
- pwm: stm32-lp: Add check for clk_enable() (git-fixes).
- pwm: stm32: Add check for clk_enable() (git-fixes).
- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).
- quota: explicitly forbid quota files from being encrypted (bsc#1234196).
- quota: flush quota_release_work upon quota writeback (bsc#1234195).
- quota: simplify drop_dquot_ref() (bsc#1234197).
- rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (git-fixes)
- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)
- rcu: Dump memory object info if callback function is invalid (git-fixes)
- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)
- rcuscale: Move rcu_scale_writer() (git-fixes)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)
- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).
- regmap: Use correct format specifier for logging range errors (stable-fixes).
- regulator: core: Add missing newline character (git-fixes).
- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).
- remoteproc: core: Fix ida_free call while not allocated (git-fixes).
- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).
- rtc: zynqmp: Fix optional clock name property (git-fixes).
- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).
- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).
- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).
- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).
- s390/facility: Disable compile time optimization for decompressor code (git-fixes).
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).
- s390/pageattr: Implement missing kernel_page_present() (git-fixes).
- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)
- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).
- scatterlist: fix incorrect func name in kernel-doc (git-fixes).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).
- sched/numa: fix memory leak due to the overwritten vma->numab_state (git fixes (sched/numa)).
- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).
- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).
- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).
- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).
- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).
- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).
- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).
- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).
- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).
- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).
- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).
- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).
- scsi: qla2xxx: Remove the unused 'del_list_entry' field in struct fc_port (bsc#1235406).
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).
- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).
- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).
- selftest: media_tests: fix trivial UAF typo (git-fixes).
- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).
- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).
- selftests/landlock: Fix error message (git-fixes).
- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).
- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).
- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).
- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).
- selftests: tc-testing: reduce rshift value (stable-fixes).
- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).
- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).
- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).
- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).
- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).
- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).
- serial: 8250_fintek: Add support for F81216E (stable-fixes).
- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).
- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).
- serial: amba-pl011: Use port lock wrappers (stable-fixes).
- serial: amba-pl011: fix build regression (git-fixes).
- serial: do not use uninitialized value in uart_poll_init() (git-fixes).
- serial: imx: only set receiver level if it is zero (git-fixes).
- serial: imx: set receiver level before starting uart (git-fixes).
- serial: qcom-geni: Do not cancel/abort if we can't get the port lock (git-fixes).
- serial: qcom-geni: disable interrupts during console writes (git-fixes).
- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).
- serial: qcom-geni: fix console corruption (git-fixes).
- serial: qcom-geni: fix dma rx cancellation (git-fixes).
- serial: qcom-geni: fix false console tx restart (git-fixes).
- serial: qcom-geni: fix fifo polling timeout (git-fixes).
- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).
- serial: qcom-geni: fix polled console corruption (git-fixes).
- serial: qcom-geni: fix polled console initialisation (git-fixes).
- serial: qcom-geni: fix receiver enable (git-fixes).
- serial: qcom-geni: fix shutdown race (git-fixes).
- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).
- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).
- serial: qcom-geni: revert broken hibernation support (git-fixes).
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).
- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).
- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).
- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).
- slub: Replace cmpxchg_double() (bsc#1220773).
- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).
- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]
- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).
- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).
- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).
- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).
- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).
- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).
- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).
- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).
- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).
- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).
- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).
- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).
- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).
- spi: zynq-qspi: Add check for clk_enable() (git-fixes).
- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)
- srcu: Only accelerate on enqueue time (git-fixes)
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).
- staging: iio: ad9832: Correct phase range check (git-fixes).
- staging: iio: ad9834: Correct phase range check (git-fixes).
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).
- staging: media: max96712: fix kernel oops when removing module (git-fixes).
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).
- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)
- svcrdma: Address an integer overflow (git-fixes).
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).
- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).
- swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (git-fixes).
- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).
- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).
- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).
- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
- tools: Sync if_xdp.h uapi tooling header (git-fixes).
- tools: hv: change permissions of NetworkManager configuration file (git-fixes).
- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).
- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)
- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).
- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).
- types: Introduce [us]128 (bsc#1220773).
- ubifs: Correct the total block count by deducting journal reservation (git-fixes).
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).
- ubifs: skip dumping tnc tree when zroot is null (git-fixes).
- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).
- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).
- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).
- udf: refactor inode_bmap() to handle error (bsc#1234242).
- udf: refactor udf_current_aext() to handle error (bsc#1234240).
- udf: refactor udf_next_aext() to handle error (bsc#1234241).
- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).
- uio: Fix return value of poll (git-fixes).
- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).
- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).
- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).
- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).
- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).
- usb: dwc2: Fix HCD port connection race (git-fixes).
- usb: dwc2: Fix HCD resume (git-fixes).
- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (git-fixes).
- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).
- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).
- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).
- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).
- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).
- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).
- usb: fix reference leak in usb_new_device() (git-fixes).
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).
- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).
- usb: gadget: f_tcm: Do not free command immediately (git-fixes).
- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).
- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).
- usb: gadget: f_tcm: Translate error to sense (git-fixes).
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).
- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).
- usb: host: xhci-plat: Assign shared_hcd->rsrc_start (git-fixes).
- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).
- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)
- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).
- usb: typec: use cleanup facility for 'altmodes_node' (stable-fixes).
- usbnet: ipheth: break up NCM header size computation (git-fixes).
- usbnet: ipheth: check that DPE points past NCM header (git-fixes).
- usbnet: ipheth: fix DPE OoB read (git-fixes).
- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).
- usbnet: ipheth: refactor NCM datagram loop (git-fixes).
- usbnet: ipheth: use static NDP16 location in URB (git-fixes).
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).
- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).
- vdpa: solidrun: Fix UB bug with devres (git-fixes).
- vfs: fix readahead(2) on block devices (bsc#1234201).
- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).
- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).
- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).
- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).
- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).
- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).
- wifi: ath5k: add PCI ID for SX76X (git-fixes).
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).
- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).
- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).
- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).
- wifi: cw1200: Fix potential NULL dereference (git-fixes).
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).
- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).
- wifi: mac80211: Add non-atomic station iterator (stable-fixes).
- wifi: mac80211: Fix common size calculation for ML element (git-fixes).
- wifi: mac80211: clean up 'ret' in sta_link_apply_parameters() (stable-fixes).
- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).
- wifi: mac80211: fix station NSS capability initialization order (git-fixes).
- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).
- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).
- wifi: mac80211: prohibit deactivating all links (git-fixes).
- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).
- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7915: fix register mapping (git-fixes).
- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).
- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).
- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).
- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).
- wifi: mt76: mt7996: fix ldpc setting (git-fixes).
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7996: fix register mapping (git-fixes).
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).
- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).
- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).
- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).
- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).
- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).
- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).
- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).
- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).
- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).
- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).
- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).
- xfs: do not allocate COW extents when unsharing a hole (git-fixes).
- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).
- xfs: remove unknown compat feature check in superblock write validation (git-fixes).
- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).
- xfs: sb_spino_align is not verified (git-fixes).
- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).
- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).
- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).
Patchnames
SUSE-SLE-Micro-6.0-kernel-3
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nThe SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).\n- CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).\n- CVE-2024-35839: kABI fix for netfilter: bridge: replace physindev with physinif in nf_bridge_info (bsc#1224726).\n- CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526).\n- CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).\n- CVE-2024-44996: vsock: fix recursive -\u003erecvmsg calls (bsc#1230205).\n- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).\n- CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).\n- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).\n- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).\n- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).\n- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).\n- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).\n- CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).\n- CVE-2024-50039: kABI: Restore deleted EXPORT_SYMBOL(__qdisc_calculate_pkt_len) (bsc#1231909).\n- CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).\n- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).\n- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).\n- CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).\n- CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).\n- CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).\n- CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized\n delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).\n- CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).\n- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).\n- CVE-2024-53050: drm/i915/hdcp: Add encoder check in hdcp2_get_capability (bsc#1233546).\n- CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).\n- CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).\n- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).\n- CVE-2024-53099: bpf: Check validity of link-\u003etype in bpf_link_show_fdinfo() (bsc#1233772).\n- CVE-2024-53105: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() (bsc#1234069).\n- CVE-2024-53111: mm/mremap: fix address wraparound in move_page_tables() (bsc#1234086).\n- CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).\n- CVE-2024-53117: virtio/vsock: Improve MSG_ZEROCOPY error handling (bsc#1234079).\n- CVE-2024-53118: vsock: Fix sk_error_queue memory leak (bsc#1234071).\n- CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).\n- CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).\n- CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).\n- CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).\n- CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).\n- CVE-2024-53133: drm/amd/display: Handle dml allocation failure to avoid crash (bsc#1234221)\n- CVE-2024-53134: pmdomain: imx93-blk-ctrl: correct remove path (bsc#1234159).\n- CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).\n- CVE-2024-53160: rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu (bsc#1234810).\n- CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).\n- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).\n- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).\n- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).\n- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).\n- CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).\n- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).\n- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).\n- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).\n- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).\n- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).\n- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).\n- CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).\n- CVE-2024-53216: nfsd: fix UAF when access ex_uuid or ex_stats (bsc#1235003).\n- CVE-2024-53222: zram: fix NULL pointer in comp_algorithm_show() (bsc#1234974).\n- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).\n- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).\n- CVE-2024-53234: erofs: handle NONHEAD !delta[1] lclusters gracefully (bsc#1235045).\n- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).\n- CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).\n- CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).\n- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).\n- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).\n- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).\n- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).\n- CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object-\u003efile (bsc#1234912).\n- CVE-2024-56566: mm/slub: Avoid list corruption when removing a slab from the full list (bsc#1235033).\n- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).\n- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).\n- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).\n- CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235128).\n- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).\n- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).\n- CVE-2024-56599: wifi: ath10k: avoid NULL pointer error during sdio remove (bsc#1235138).\n- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).\n- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).\n- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).\n- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).\n- CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).\n- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027 (bsc#1235487).\n- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).\n- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).\n- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).\n- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).\n- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).\n- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).\n- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).\n- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).\n- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).\n- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).\n- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).\n- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).\n- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).\n- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).\n- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).\n- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).\n- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).\n- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).\n- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).\n- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).\n- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).\n- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).\n- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).\n- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).\n- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).\n- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).\n- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).\n- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).\n- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).\n- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).\n- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).\n- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).\n- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).\n- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).\n- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).\n- CVE-2024-56729: smb: Initialize cfid-\u003etcon before performing network ops (bsc#1235503).\n- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).\n- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).\n- CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).\n- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).\n- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).\n- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).\n- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).\n- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).\n- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).\n- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).\n- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).\n- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).\n- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).\n- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).\n- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).\n- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).\n- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).\n- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).\n- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).\n- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).\n- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).\n- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).\n- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).\n- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).\n- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).\n- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).\n- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).\n- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before \"getting\" registers (bsc#1236106).\n- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).\n- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).\n- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).\n- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).\n- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).\n- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).\n- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).\n- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).\n- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).\n- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).\n- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).\n- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).\n\nThe following non-security bugs were fixed:\n\n- 9p: v9fs_fid_find: also lookup by inode if not found dentry (git-fixes).\n- ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).\n- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).\n- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).\n- ACPI: PRM: Add PRM handler direct call support (jsc#PED-10467).\n- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).\n- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).\n- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).\n- ACPI: resource: Fix memory resource type union access (git-fixes).\n- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).\n- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (stable-fixes).\n- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (stable-fixes).\n- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (stable-fixes).\n- ACPICA: events/evxfregn: do not release the ContextMutex that was never acquired (git-fixes).\n- ALSA hda/realtek: Add quirk for Framework F111:000C (stable-fixes).\n- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes).\n- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).\n- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).\n- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes).\n- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).\n- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).\n- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).\n- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).\n- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).\n- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5 (stable-fixes).\n- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).\n- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes).\n- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).\n- ALSA: line6: Fix racy access to midibuf (stable-fixes).\n- ALSA: seq: Check UMP support for midi_version change (git-fixes).\n- ALSA: seq: oss: Fix races at processing SysEx messages (stable-fixes).\n- ALSA: seq: ump: Fix seq port updates per FB info notify (git-fixes).\n- ALSA: seq: ump: Use automatic cleanup of kfree() (stable-fixes).\n- ALSA: seq: ump: Use guard() for locking (stable-fixes).\n- ALSA: ump: Use guard() for locking (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).\n- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).\n- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (stable-fixes).\n- ALSA: usb-audio: Notify xrun for low-latency mode (git-fixes).\n- ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes).\n- ALSA: usb-audio: US16x08: Initialize array before use (git-fixes).\n- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).\n- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C (stable-fixes).\n- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (stable-fixes).\n- ASoC: SOF: Remove libraries from topology lookups (git-fixes).\n- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).\n- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5 21MES00B00 (stable-fixes).\n- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6 21M1CTO1WW (stable-fixes).\n- ASoC: amd: yc: Fix the wrong return value (git-fixes).\n- ASoC: amd: yc: Support mic on HP 14-em0002la (stable-fixes).\n- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (stable-fixes).\n- ASoC: amd: yc: fix internal mic on Redmi G 2022 (stable-fixes).\n- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa883x: Correct Soundwire ports mask (git-fixes).\n- ASoC: codecs: wsa884x: Correct Soundwire ports mask (git-fixes).\n- ASoC: cs35l56: Handle OTP read latency over SoundWire (stable-fixes).\n- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (stable-fixes).\n- ASoC: fsl_micfil: Expand the range of FIFO watermark mask (stable-fixes).\n- ASoC: hdmi-codec: reorder channel allocation list (stable-fixes).\n- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).\n- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes).\n- ASoC: nau8822: Lower debug print priority (stable-fixes).\n- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).\n- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).\n- ASoC: samsung: Add missing depends on I2C (git-fixes).\n- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).\n- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).\n- ASoC: wm8994: Add depends on MFD core (stable-fixes).\n- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).\n- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (stable-fixes).\n- Bluetooth: ISO: Reassociate a socket with an active BIS (stable-fixes).\n- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).\n- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (stable-fixes).\n- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).\n- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).\n- Bluetooth: MGMT: Fix possible deadlocks (git-fixes).\n- Bluetooth: SCO: Add support for 16 bits transparent voice setting (git-fixes).\n- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).\n- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).\n- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables (stable-fixes).\n- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).\n- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).\n- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).\n- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).\n- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (stable-fixes).\n- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating (git-fixes).\n- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).\n- Bluetooth: iso: Fix recursive locking warning (git-fixes).\n- Delete XHCI patch for regression (bsc#1235550)\n- Disable ceph (jsc#PED-7242)\n- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (git-fixes).\n- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).\n- Drop downstream TPM fix patch (bsc#1233260 bsc#1233259 bsc#1232421)\n- Drop uvcvideo fix due to regression (bsc#1235894)\n- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).\n- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).\n- HID: fix generic desktop D-Pad controls (git-fixes).\n- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).\n- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).\n- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support (stable-fixes).\n- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).\n- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).\n- Input: bbnsm_pwrkey - add remove hook (git-fixes).\n- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).\n- Input: davinci-keyscan - remove leftover header (git-fixes).\n- Input: xpad - add QH Electronics VID/PID (stable-fixes).\n- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).\n- Input: xpad - add support for Nacon Pro Compact (stable-fixes).\n- Input: xpad - add support for wooting two he (arm) (stable-fixes).\n- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).\n- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).\n- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).\n- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).\n- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).\n- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).\n- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).\n- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).\n- NFSD: Async COPY result needs to return a write verifier (git-fixes).\n- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (git-fixes).\n- NFSD: Fix nfsd4_shutdown_copy() (git-fixes).\n- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).\n- NFSD: Prevent a potential integer overflow (git-fixes).\n- NFSD: Remove a never-true comparison (git-fixes).\n- NFSD: initialize copy-\u003ecp_clp early in nfsd4_copy for use by trace point (git-fixes).\n- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).\n- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).\n- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).\n- Octeontx2-pf: Free send queue buffers incase of leaf to inner (git-fixes).\n- PCI/AER: Disable AER service on suspend (stable-fixes).\n- PCI/MSI: Handle lack of irqdomain gracefully (git-fixes).\n- PCI: Add \u0027reset_subordinate\u0027 to reset hierarchy below bridge (stable-fixes).\n- PCI: Add ACS quirk for Broadcom BCM5760X NIC (stable-fixes).\n- PCI: Add ACS quirk for Wangxun FF5xxx NICs (stable-fixes).\n- PCI: Add T_PERST_CLK_US macro (git-fixes).\n- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).\n- PCI: Detect and trust built-in Thunderbolt chips (stable-fixes).\n- PCI: Fix use-after-free of slot-\u003ebus on hot remove (stable-fixes).\n- PCI: Use preserve_config in place of pci_flags (stable-fixes).\n- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup() (stable-fixes).\n- PCI: cadence: Set cdns_pcie_host_init() global (stable-fixes).\n- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (stable-fixes).\n- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).\n- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).\n- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).\n- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).\n- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).\n- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).\n- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).\n- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).\n- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).\n- PCI: j721e: Add PCIe 4x lane selection support (stable-fixes).\n- PCI: j721e: Add per platform maximum lane settings (stable-fixes).\n- PCI: j721e: Add reset GPIO to struct j721e_pcie (stable-fixes).\n- PCI: j721e: Add suspend and resume support (git-fixes).\n- PCI: j721e: Use T_PERST_CLK_US macro (git-fixes).\n- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).\n- PCI: qcom: Add support for IPQ9574 (stable-fixes).\n- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).\n- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs (stable-fixes).\n- PCI: vmd: Set devices to D0 before enabling PM L1 Substates (stable-fixes).\n- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).\n- RAS/AMD/ATL: Translate normalized to system physical addresses using PRM (jsc#PED-10467).\n- RDMA/bnxt_re: Add check for path mtu in modify_qp (git-fixes)\n- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)\n- RDMA/bnxt_re: Avoid initializing the software queue for user queues (git-fixes)\n- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters (git-fixes)\n- RDMA/bnxt_re: Disable use of reserved wqes (git-fixes)\n- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)\n- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)\n- RDMA/bnxt_re: Fix max_qp_wrs reported (git-fixes)\n- RDMA/bnxt_re: Fix reporting hw_ver in query_device (git-fixes)\n- RDMA/bnxt_re: Fix the check for 9060 condition (git-fixes)\n- RDMA/bnxt_re: Fix the locking while accessing the QP table (git-fixes)\n- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)\n- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)\n- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)\n- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)\n- RDMA/bnxt_re: Remove always true dattr validity check (git-fixes)\n- RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)\n- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP (git-fixes)\n- RDMA/hns: Fix mapping error of zero-hop WQE buffer (git-fixes)\n- RDMA/hns: Fix missing flush CQE for DWQE (git-fixes)\n- RDMA/hns: Fix warning storm caused by invalid input in IO path (git-fixes)\n- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)\n- RDMA/mlx5: Enforce same type port association for multiport RoCE (git-fixes)\n- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)\n- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)\n- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)\n- RDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible (git-fixes)\n- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)\n- RDMA/rxe: Fix the warning \"__rxe_cleanup+0x12c/0x170 [rdma_rxe]\" (git-fixes)\n- RDMA/srp: Fix error handling in srp_add_port (git-fixes)\n- RDMA/uverbs: Prevent integer overflow issue (git-fixes)\n- Revert \"HID: multitouch: Add support for lenovo Y9000P Touchpad\" (stable-fixes).\n- Revert \"block/mq-deadline: use correct way to throttling write requests\" (bsc#1234146).\n- Revert \"btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\"\n- Revert \"drm/i915/dpt: Make DPT object unshrinkable\" (stable-fixes).\n- Revert \"igb: Disable threaded IRQ for igb_msix_other\" (git-fixes).\n- Revert \"mm, kmsan: fix infinite recursion due to RCU critical section\" (bsc#1230413)\n- Revert \"mm/sparsemem: fix race in accessing memory_section-\u003eusage\" (bsc#1230413)\n- Revert \"mm: prevent derefencing NULL ptr in pfn_section_valid()\" (bsc#1230413)\n- Revert \"mtd: spi-nor: core: replace dummy buswidth from addr to data\" (git-fixes).\n- Revert \"unicode: Do not special case ignorable code points\" (stable-fixes).\n- Revert \"usb: gadget: u_serial: Disable ep before setting port to null\n to fix the crash caused by port being null\" (stable-fixes).\n- Revert \u0027arm64: Kconfig: Make SME depend on BROKEN for now\u0027 \n- Revert 0dd78566990 (\"Disable ceph (jsc#PED-7242)\") \n- SUNRPC: make sure cache entry active before cache_show (git-fixes).\n- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (git-fixes).\n- USB: core: Disable LPM only for non-suspended ports (git-fixes).\n- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).\n- USB: serial: option: add MediaTek T7XX compositions (stable-fixes).\n- USB: serial: option: add MeiG Smart SLM770A (stable-fixes).\n- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).\n- USB: serial: option: add Neoway N723-EA support (stable-fixes).\n- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (stable-fixes).\n- USB: serial: option: add TCL IK512 MBIM \u0026 ECM (stable-fixes).\n- USB: serial: option: add Telit FE910C04 rmnet compositions (stable-fixes).\n- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).\n- USB: usblp: return error when setting unsupported protocol (git-fixes).\n- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).\n- VMCI: fix reference to ioctl-number.rst (git-fixes).\n- accel/habanalabs/gaudi2: unsecure tpc count registers (stable-fixes).\n- accel/habanalabs: export dma-buf only if size/offset multiples of PAGE_SIZE (stable-fixes).\n- accel/habanalabs: fix debugfs files permissions (stable-fixes).\n- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings (stable-fixes).\n- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (git-fixes).\n- af_unix: Call manage_oob() for every skb in unix_stream_read_generic() (bsc#1234725).\n- afs: Automatically generate trace tag enums (git-fixes).\n- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).\n- afs: Fix cleanup of immediately failed async calls (git-fixes).\n- afs: Fix directory format encoding struct (git-fixes).\n- afs: Fix missing subdir edit when renamed between parent dirs (git-fixes).\n- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).\n- afs: Fix the maximum cell name length (git-fixes).\n- amdgpu/uvd: get ring reference from rq scheduler (git-fixes).\n- arch: Introduce arch_{,try_}_cmpxchg128{,_local}() (bsc#1220773).\n- arch: Remove cmpxchg_double (bsc#1220773).\n- arch: consolidate arch_irq_work_raise prototypes (git-fixes).\n- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)\n- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)\n- arm64: Filter out SVE hwcaps when FEAT_SVE isn\u0027t implemented (git-fixes)\n- arm64: Force position-independent veneers (git-fixes).\n- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245)\n- arm64: dts: imx8mp: correct sdhc ipg clk (git-fixes).\n- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)\n- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).\n- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)\n- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).\n- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)\n- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)\n- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)\n- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).\n- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).\n- batman-adv: Do not let TT changes list grows indefinitely (git-fixes).\n- batman-adv: Do not send uninitialized TT changes (git-fixes).\n- batman-adv: Remove uninitialized data in full table TT response (git-fixes).\n- blk-cgroup: Fix UAF in blkcg_unpin_online() (bsc#1234726).\n- blk-core: use pr_warn_ratelimited() in bio_check_ro() (bsc#1234139).\n- blk-iocost: Fix an UBSAN shift-out-of-bounds warning (bsc#1234144).\n- blk-iocost: do not WARN if iocg was already offlined (bsc#1234147).\n- blk-throttle: fix lockdep warning of \"cgroup_mutex or RCU read lock required!\" (bsc#1234140).\n- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() (bsc#1234149).\n- block, bfq: do not break merge chain in bfq_split_bfqq() (bsc#1234150).\n- block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234160).\n- block, bfq: fix procress reference leakage for bfqq in merge chain (bsc#1234280).\n- block, bfq: fix uaf for accessing waker_bfqq after splitting (bsc#1234279).\n- block/mq-deadline: Fix the tag reservation code (bsc#1234148).\n- block: Call .limit_depth() after .hctx has been set (bsc#1234148).\n- block: Fix where bio IO priority gets set (bsc#1234145).\n- block: prevent an integer overflow in bvec_try_merge_hw_page (bsc#1234142).\n- block: update the stable_writes flag in bdev_add (bsc#1234141).\n- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)\n- bnxt_en: Fix receive ring space parameters when XDP is active (git-fixes).\n- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (git-fixes).\n- bnxt_en: Set backplane link modes correctly for ethtool (git-fixes).\n- bpf, x86: Fix PROBE_MEM runtime load check (git-fixes).\n- bpf: verifier: prevent userspace memory access (git-fixes).\n- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235128)\n- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).\n- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).\n- can: gs_usb: add VID/PID for Xylanta SAINT3 product family (stable-fixes).\n- can: j1939: fix error in J1939 documentation (stable-fixes).\n- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).\n- checkpatch: always parse orig_commit in fixes tag (git-fixes).\n- checkpatch: check for missing Fixes tags (stable-fixes).\n- cleanup: Add conditional guard support (stable-fixes).\n- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).\n- cleanup: Remove address space of returned pointer (git-fixes).\n- clocksource/drivers/timer-ti-dm: Fix child node refcount handling (git-fixes).\n- clocksource/drivers:sp804: Make user selectable (git-fixes).\n- counter: stm32-timer-cnt: Add check for clk_enable() (git-fixes).\n- counter: ti-ecap-capture: Add check for clk_enable() (git-fixes).\n- cpufreq: ACPI: Fix max-frequency computation (git-fixes).\n- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).\n- cpufreq: amd-pstate: remove global header file (git-fixes).\n- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).\n- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).\n- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).\n- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).\n- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).\n- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).\n- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).\n- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).\n- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).\n- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).\n- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).\n- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).\n- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).\n- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).\n- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).\n- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).\n- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).\n- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).\n- cpupower: fix TSC MHz calculation (git-fixes).\n- crypto: caam - use JobR\u0027s space to access page 0 regs (git-fixes).\n- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).\n- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).\n- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).\n- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).\n- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).\n- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to \u0027async\u0027 (git-fixes).\n- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).\n- crypto: qat - disable IOV in adf_dev_stop() (git-fixes).\n- crypto: qce - fix goto jump in error path (git-fixes).\n- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).\n- crypto: qce - unregister previously registered algos in error path (git-fixes).\n- crypto: x86/sha256 - Add parentheses around macros\u0027 single arguments (stable-fixes).\n- cyrpto/b128ops: Remove struct u128 (bsc#1220773).\n- devcoredump: cleanup some comments (git-fixes).\n- devlink: Fix length of eswitch inline-mode (git-fixes).\n- dlm: fix possible lkb_resource null dereference (git-fixes).\n- dma-buf: fix dma_fence_array_signaled v4 (stable-fixes).\n- dma-debug: fix a possible deadlock on radix_lock (stable-fixes).\n- dmaengine: apple-admac: Avoid accessing registers in probe (git-fixes).\n- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (git-fixes).\n- dmaengine: dw: Select only supported masters for ACPI devices (git-fixes).\n- dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).\n- dmaengine: mv_xor: fix child node refcount handling in early exit (git-fixes).\n- dmaengine: tegra: Return correct DMA status when paused (git-fixes).\n- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).\n- docs: media: update location of the media patches (stable-fixes).\n- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).\n- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (stable-fixes).\n- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).\n- driver core: fw_devlink: Improve logs for cycle detection (stable-fixes).\n- driver core: fw_devlink: Stop trying to optimize cycle detection logic (git-fixes).\n- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).\n- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path (git-fixes).\n- drm/amd/display: Add HDR workaround for specific eDP (stable-fixes).\n- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw (stable-fixes).\n- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).\n- drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` (stable-fixes).\n- drm/amd/display: Avoid overflow assignment in link_dp_cts (stable-fixes).\n- drm/amd/display: Fix DSC-re-computing (stable-fixes).\n- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination (stable-fixes).\n- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).\n- drm/amd/display: Revert Avoid overflow assignment (stable-fixes).\n- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).\n- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces (stable-fixes).\n- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).\n- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).\n- drm/amd/pm: fix the high voltage issue after unload (stable-fixes).\n- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu v13.0.7 (stable-fixes).\n- drm/amdgpu/gfx10: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx11: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/gfx9: properly handle error ints on all pipes (stable-fixes).\n- drm/amdgpu/gfx9: use rlc safe mode for soft recovery (stable-fixes).\n- drm/amdgpu/hdp5.2: do a posting read when flushing HDP (stable-fixes).\n- drm/amdgpu/pm: Remove gpu_od if it\u0027s an empty directory (stable-fixes).\n- drm/amdgpu/umsch: do not execute umsch test when GPU is in reset/suspend (stable-fixes).\n- drm/amdgpu/umsch: reinitialize write pointer in hw init (stable-fixes).\n- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).\n- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3 (stable-fixes).\n- drm/amdgpu: Block MMR_READ IOCTL in reset (stable-fixes).\n- drm/amdgpu: Dereference the ATCS ACPI buffer (stable-fixes).\n- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).\n- drm/amdgpu: add raven1 gfxoff quirk (stable-fixes).\n- drm/amdgpu: add smu 14.0.1 discovery support (stable-fixes).\n- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).\n- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (stable-fixes).\n- drm/amdgpu: differentiate external rev id for gfx 11.5.0 (stable-fixes).\n- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit (stable-fixes).\n- drm/amdgpu: do not access invalid sched (git-fixes).\n- drm/amdgpu: enable gfxoff quirk on HP 705G4 (stable-fixes).\n- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx (stable-fixes).\n- drm/amdgpu: fix usage slab after free (stable-fixes).\n- drm/amdgpu: prevent BO_HANDLES error from being overwritten (git-fixes).\n- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (stable-fixes).\n- drm/amdgpu: set the right AMDGPU sg segment limitation (stable-fixes).\n- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).\n- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (stable-fixes).\n- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).\n- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).\n- drm/amdkfd: Fix resource leak in criu restore queue (stable-fixes).\n- drm/amdkfd: Use device based logging for errors (stable-fixes).\n- drm/amdkfd: Use the correct wptr size (stable-fixes).\n- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).\n- drm/amdkfd: pause autosuspend when creating pdd (stable-fixes).\n- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (git-fixes).\n- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).\n- drm/bridge: it6505: Enable module autoloading (stable-fixes).\n- drm/bridge: it6505: Fix inverted reset polarity (git-fixes).\n- drm/bridge: it6505: update usleep_range for RC circuit charge time (stable-fixes).\n- drm/display: Fix building with GCC 15 (stable-fixes).\n- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (stable-fixes).\n- drm/dp_mst: Fix MST sideband message body length check (stable-fixes).\n- drm/dp_mst: Fix resetting msg rx state after topology removal (git-fixes).\n- drm/dp_mst: Verify request type in the corresponding down message reply (stable-fixes).\n- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).\n- drm/etnaviv: flush shader L1 cache after user commandstream (stable-fixes).\n- drm/i915/dg1: Fix power gate sequence (git-fixes).\n- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).\n- drm/i915: Fix NULL pointer dereference in capture_engine (git-fixes).\n- drm/i915: Fix memory leak by correcting cache object name in error handler (git-fixes).\n- drm/mcde: Enable module autoloading (stable-fixes).\n- drm/mediatek: Add return value check when reading DPCD (git-fixes).\n- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).\n- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).\n- drm/mediatek: Fix mode valid issue for dp (git-fixes).\n- drm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err (git-fixes).\n- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).\n- drm/mediatek: stop selecting foreign drivers (git-fixes).\n- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (stable-fixes).\n- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).\n- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).\n- drm/msm: Check return value of of_dma_configure() (git-fixes).\n- drm/msm: do not clean up priv-\u003ekms prematurely (git-fixes).\n- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3 (stable-fixes).\n- drm/panel: novatek-nt35950: fix return value check in nt35950_probe() (git-fixes).\n- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (stable-fixes).\n- drm/printer: Allow NULL data in devcoredump printer (stable-fixes).\n- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() (stable-fixes).\n- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (stable-fixes).\n- drm/radeon: Fix spurious unplug event on radeon HDMI (git-fixes).\n- drm/radeon: add helper rdev_to_drm(rdev) (stable-fixes).\n- drm/radeon: change rdev-\u003eddev to rdev_to_drm(rdev) (stable-fixes).\n- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).\n- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).\n- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).\n- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).\n- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).\n- drm/sched: memset() \u0027job\u0027 in drm_sched_job_init() (stable-fixes).\n- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).\n- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).\n- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).\n- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).\n- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).\n- drm/vc4: hdmi: Avoid log spam for audio start failure (stable-fixes).\n- drm/vc4: hvs: Set AXI panic modes for the HVS (stable-fixes).\n- drm/vmwgfx: Add new keep_resv BO param (git-fixes).\n- drm: adv7511: Drop dsi single lane support (git-fixes).\n- drm: adv7511: Fix use-after-free in adv7533_attach_dsi() (git-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition (stable-fixes).\n- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK (stable-fixes).\n- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).\n- erofs: avoid debugging output for (de)compressed data (git-fixes).\n- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).\n- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).\n- exfat: fix the infinite loop in exfat_readdir() (git-fixes).\n- exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).\n- ext4: add a new helper to check if es must be kept (bsc#1234170).\n- ext4: add correct group descriptors and reserved GDT blocks to system zone (bsc#1234164).\n- ext4: add missed brelse in update_backups (bsc#1234171).\n- ext4: allow for the last group to be marked as trimmed (bsc#1234278).\n- ext4: avoid buffer_head leak in ext4_mark_inode_used() (bsc#1234191).\n- ext4: avoid excessive credit estimate in ext4_tmpfile() (bsc#1234180).\n- ext4: avoid negative min_clusters in find_group_orlov() (bsc#1234193).\n- ext4: avoid overlapping preallocations due to overflow (bsc#1234162).\n- ext4: avoid potential buffer_head leak in __ext4_new_inode() (bsc#1234192).\n- ext4: avoid writing unitialized memory to disk in EA inodes (bsc#1234187).\n- ext4: check the extent status again before inserting delalloc block (bsc#1234186).\n- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard (bsc#1234190).\n- ext4: convert to exclusive lock while inserting delalloc extents (bsc#1234178).\n- ext4: correct best extent lstart adjustment logic (bsc#1234179).\n- ext4: correct grp validation in ext4_mb_good_group (bsc#1234163).\n- ext4: correct return value of ext4_convert_meta_bg (bsc#1234172).\n- ext4: correct the hole length returned by ext4_map_blocks() (bsc#1234178).\n- ext4: correct the start block of counting reserved clusters (bsc#1234169).\n- ext4: do not let fstrim block system suspend (bsc#1234166).\n- ext4: do not trim the group with corrupted block bitmap (bsc#1234177).\n- ext4: factor out __es_alloc_extent() and __es_free_extent() (bsc#1234170).\n- ext4: factor out a common helper to query extent map (bsc#1234186).\n- ext4: fix inconsistent between segment fstrim and full fstrim (bsc#1234176).\n- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() (bsc#1234188).\n- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() (bsc#1234188).\n- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() (bsc#1234188).\n- ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954).\n- ext4: fix potential unnitialized variable (bsc#1234183).\n- ext4: fix race between writepages and remount (bsc#1234168).\n- ext4: fix rec_len verify error (bsc#1234167).\n- ext4: fix slab-use-after-free in ext4_es_insert_extent() (bsc#1234170).\n- ext4: fix uninitialized variable in ext4_inlinedir_to_tree (bsc#1234185).\n- ext4: forbid commit inconsistent quota data when errors=remount-ro (bsc#1234178).\n- ext4: make ext4_es_insert_delayed_block() return void (bsc#1234170).\n- ext4: make ext4_es_insert_extent() return void (bsc#1234170).\n- ext4: make ext4_es_remove_extent() return void (bsc#1234170).\n- ext4: make ext4_zeroout_es() return void (bsc#1234170).\n- ext4: make sure allocate pending entry not fail (bsc#1234170).\n- ext4: mark buffer new if it is unwritten to avoid stale data exposure (bsc#1234175).\n- ext4: move \u0027ix\u0027 sanity check to corrent position (bsc#1234174).\n- ext4: move setting of trimmed bit into ext4_try_to_trim_range() (bsc#1234165).\n- ext4: nested locking for xattr inode (bsc#1234189).\n- ext4: propagate errors from ext4_find_extent() in ext4_insert_range() (bsc#1234194).\n- ext4: refactor ext4_da_map_blocks() (bsc#1234178).\n- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (bsc#1234173).\n- ext4: remove the redundant folio_wait_stable() (bsc#1234184).\n- ext4: set the type of max_zeroout to unsigned int to avoid overflow (bsc#1234182).\n- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (bsc#1234181).\n- ext4: use pre-allocated es in __es_insert_extent() (bsc#1234170).\n- ext4: use pre-allocated es in __es_remove_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_delayed_block() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_insert_extent() (bsc#1234170).\n- ext4: using nofail preallocation in ext4_es_remove_extent() (bsc#1234170).\n- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).\n- filemap: Fix bounds checking in filemap_read() (bsc#1234209).\n- filemap: add a per-mapping stable writes flag (bsc#1234141).\n- firmware: arm_scmi: Reject clear channel request on A2P (stable-fixes).\n- fs-writeback: do not requeue a clean inode having skipped pages (bsc#1234200).\n- fs/writeback: bail out if there is no more inodes for IO and queued once (bsc#1234207).\n- fsnotify: fix sending inotify event with unexpected filename (bsc#1234198).\n- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (git-fixes).\n- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity (git-fixes).\n- genirq/irqdesc: Honor caller provided affinity in alloc_desc() (git-fixes).\n- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).\n- genksyms: fix memory leak when the same symbol is added from source (git-fixes).\n- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).\n- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).\n- gpio: grgpio: Add NULL check in grgpio_probe (git-fixes).\n- gpio: grgpio: use a helper variable to store the address of ofdev-\u003edev (stable-fixes).\n- gpio: mxc: remove dead code after switch to DT-only (git-fixes).\n- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).\n- hfsplus: do not query the device logical block size multiple times (git-fixes).\n- hvc/xen: fix console unplug (git-fixes).\n- hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (git-fixes).\n- hvc/xen: fix event channel handling for secondary consoles (git-fixes).\n- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).\n- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).\n- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list (stable-fixes).\n- hwmon: (pmbus/core) clear faults after setting smbalert mask (git-fixes).\n- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK (stable-fixes).\n- hwmon: (tmp513) Do not use \"proxy\" headers (stable-fixes).\n- hwmon: (tmp513) Fix Current Register value interpretation (git-fixes).\n- hwmon: (tmp513) Fix division of negative numbers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (git-fixes).\n- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (git-fixes).\n- hwmon: (tmp513) Simplify with dev_err_probe() (stable-fixes).\n- hwmon: (tmp513) Use SI constants from units.h (stable-fixes).\n- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).\n- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).\n- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).\n- i2c: i801: Add support for Intel Panther Lake (stable-fixes).\n- i2c: imx: add imx7d compatible string for applying erratum ERR007805 (git-fixes).\n- i2c: microchip-core: actually use repeated sends (git-fixes).\n- i2c: microchip-core: fix \"ghost\" detections (git-fixes).\n- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).\n- i2c: pnx: Fix timeout in wait functions (git-fixes).\n- i2c: rcar: fix NACK handling when being a target (git-fixes).\n- i2c: riic: Always round-up when calculating bus period (git-fixes).\n- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).\n- i40e: Fix handling changed priv flags (git-fixes).\n- i915/guc: Accumulate active runtime on gt reset (git-fixes).\n- i915/guc: Ensure busyness counter increases motonically (git-fixes).\n- i915/guc: Reset engine utilization buffer before registration (git-fixes).\n- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).\n- ice: Unbind the workqueue (bsc#1234989)\n- ice: change q_index variable type to s16 to store -1 value (git-fixes).\n- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (git-fixes).\n- ice: fix PHY Clock Recovery availability check (git-fixes).\n- idpf: add support for SW triggered interrupts (bsc#1235507).\n- idpf: enable WB_ON_ITR (bsc#1235507).\n- idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).\n- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).\n- igb: Fix potential invalid memory access in igb_init_module() (git-fixes).\n- iio: adc: ad7124: Disable all channels at probe time (git-fixes).\n- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).\n- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).\n- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).\n- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).\n- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).\n- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).\n- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).\n- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).\n- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).\n- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).\n- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).\n- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).\n- iio: magnetometer: yas530: use signed integer type for clamp limits (git-fixes).\n- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).\n- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).\n- instrumentation: Wire up cmpxchg128() (bsc#1220773).\n- intel_th: core: fix kernel-doc warnings (git-fixes).\n- io_uring/rw: avoid punting to io-wq directly (git-fixes).\n- io_uring/tctx: work around xa_store() allocation error issue (git-fixes).\n- io_uring: Fix registered ring file refcount leak (git-fixes).\n- io_uring: always lock __io_cqring_overflow_flush (git-fixes).\n- io_uring: check if iowq is killed before queuing (git-fixes).\n- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (git-fixes).\n- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).\n- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).\n- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).\n- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).\n- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument (git-fixes).\n- isofs: handle CDs with bad root inode but good Joliet root directory (bsc#1234199).\n- ixgbe: downgrade logging of unsupported VF API version to debug (git-fixes).\n- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5 (git-fixes).\n- jffs2: Fix rtime decompressor (git-fixes).\n- jffs2: Prevent rtime decompress memory corruption (git-fixes).\n- jffs2: fix use of uninitialized variable (git-fixes).\n- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).\n- jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).\n- jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).\n- jfs: fix shift-out-of-bounds in dbSplit (git-fixes).\n- jfs: xattr: check invalid xattr size more strictly (git-fixes).\n- kABI workaround for struct auto_pin_cfg_item change (git-fixes).\n- kABI workaround for struct drm_dp_mst_topology_mgr (git-fixes).\n- kabi/severities: make vcap_find_actionfield PASS (bsc#1220773)\n- kasan: make report_lock a raw spinlock (git-fixes).\n- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).\n- kdb: Fix buffer overflow during tab-complete (bsc#1234652).\n- kdb: Fix console handling when editing and tab-completing commands (bsc#1234655).\n- kdb: Merge identical case statements in kdb_read() (bsc#1234657).\n- kdb: Use format-specifiers rather than memset() for padding in kdb_read() (bsc#1234658).\n- kdb: Use format-strings rather than \u0027\\0\u0027 injection in kdb_read() (bsc#1234654).\n- kdb: Use the passed prompt in kdb_position_cursor() (bsc#1234654).\n- kdb: address -Wformat-security warnings (bsc#1234659).\n- kgdb: Flush console before entering kgdb on panic (bsc#1234651).\n- kheaders: Ignore silly-rename files (stable-fixes).\n- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).\n- ktest.pl: Check kernelrelease return in get_version (git-fixes).\n- ktest.pl: Fix typo \"accesing\" (git-fixes).\n- ktest.pl: Fix typo in comment (git-fixes).\n- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).\n- ktest: force $buildonly = 1 for \u0027make_warnings_file\u0027 test type (stable-fixes).\n- landlock: Handle weird files (git-fixes).\n- latencytop: use correct kernel-doc format for func params (git-fixes).\n- leds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex (stable-fixes).\n- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).\n- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).\n- lib/inflate.c: remove dead code (git-fixes).\n- lib/stackdepot: print disabled message only if truly disabled (git-fixes).\n- linux/dmaengine.h: fix a few kernel-doc warnings (git-fixes).\n- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128() (bsc#1220773 git-fix).\n- loop: fix the the direct I/O support check when used on top of block devices (bsc#1234143).\n- mac80211: fix user-power when emulating chanctx (stable-fixes).\n- mac802154: check local interfaces before deleting sdata list (stable-fixes).\n- mailbox: pcc: Add support for platform notification handling (stable-fixes).\n- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).\n- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).\n- maple_tree: simplify split calculation (git-fixes).\n- media: camif-core: Add check for clk_enable() (git-fixes).\n- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).\n- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).\n- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).\n- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (stable-fixes).\n- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (git-fixes).\n- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).\n- media: i2c: imx412: Add missing newline to prints (git-fixes).\n- media: i2c: ov9282: Correct the exposure offset (git-fixes).\n- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).\n- media: imx296: Add standby delay during probe (git-fixes).\n- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).\n- media: marvell: Add check for clk_enable() (git-fixes).\n- media: mc: fix endpoint iteration (git-fixes).\n- media: mipi-csis: Add check for clk_enable() (git-fixes).\n- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).\n- media: ov5640: fix get_light_freq on auto (git-fixes).\n- media: rc: iguanair: handle timeouts (git-fixes).\n- media: rkisp1: Fix unused value issue (git-fixes).\n- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (stable-fixes).\n- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).\n- media: uvcvideo: Fix double free in error path (git-fixes).\n- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).\n- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).\n- media: uvcvideo: Only save async fh if success (git-fixes).\n- media: uvcvideo: Propagate buf-\u003eerror to userspace (git-fixes).\n- media: uvcvideo: RealSense D421 Depth module metadata (stable-fixes).\n- media: uvcvideo: Remove dangling pointers (git-fixes).\n- media: uvcvideo: Remove redundant NULL assignment (git-fixes).\n- media: uvcvideo: Support partial control reads (git-fixes).\n- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).\n- memory-failure: use a folio in me_huge_page() (git-fixes).\n- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).\n- mfd: da9052-spi: Change read-mask to write-mask (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (git-fixes).\n- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (git-fixes).\n- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).\n- misc: fastrpc: Fix copy buffer page size (git-fixes).\n- misc: fastrpc: Fix registered buffer page address (git-fixes).\n- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).\n- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).\n- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).\n- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).\n- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).\n- mm/filemap: avoid buffered read/write race to read inconsistent data (bsc#1234204).\n- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).\n- mm/memory-failure: check the mapcount of the precise page (git-fixes).\n- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).\n- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).\n- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).\n- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).\n- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).\n- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).\n- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).\n- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).\n- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).\n- mm/migrate: putback split folios when numa hint migration fails (git-fixes).\n- mm/migrate: split source folio if it is on deferred split list (git-fixes).\n- mm/page_owner: remove free_ts from page_owner output (git-fixes).\n- mm/readahead: do not allow order-1 folio (bsc#1234205).\n- mm/readahead: limit page cache size in page_cache_ra_order() (bsc#1234208).\n- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).\n- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).\n- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).\n- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).\n- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).\n- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).\n- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).\n- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).\n- mmc: core: Add SD card quirk for broken poweroff notification (stable-fixes).\n- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting (git-fixes).\n- mmc: mtk-sd: fix devm_clk_get_optional usage (stable-fixes).\n- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED (stable-fixes).\n- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (stable-fixes).\n- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (git-fixes).\n- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).\n- mtd: diskonchip: Cast an operand to prevent potential overflow (git-fixes).\n- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE (git-fixes).\n- mtd: hyperbus: rpc-if: Convert to platform remove callback returning void (stable-fixes).\n- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).\n- mtd: rawnand: arasan: Fix double assertion of chip-select (git-fixes).\n- mtd: rawnand: arasan: Fix missing de-registration of NAND (git-fixes).\n- mtd: rawnand: fix double free in atmel_pmecc_create_user() (git-fixes).\n- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).\n- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT (git-fixes).\n- net/ipv6: release expired exception dst cached in socket (bsc#1216813).\n- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (git-fixes).\n- net/mlx5e: Remove workaround to avoid syndrome for internal port (git-fixes).\n- net/mlx5e: clear xdp features on non-uplink representors (git-fixes).\n- net/qed: allow old cards not supporting \"num_images\" to work (git-fixes).\n- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).\n- net: Return error from sk_stream_wait_connect() if sk_wait_event() fails (git-fixes).\n- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).\n- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).\n- net: rose: fix timer races against user threads (git-fixes).\n- net: usb: qmi_wwan: add Quectel RG650V (stable-fixes).\n- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).\n- net: usb: rtl8150: enable basic endpoint checking (git-fixes).\n- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).\n- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).\n- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).\n- nfs: ignore SB_RDONLY when mounting nfs (git-fixes).\n- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (git-fixes).\n- nfsd: make sure exp active before svc_export_show (git-fixes).\n- nfsd: release svc_expkey/svc_export with rcu_work (git-fixes).\n- nfsd: restore callback functionality for NFSv4.0 (git-fixes).\n- nilfs2: fix buffer head leaks in calls to truncate_inode_pages() (git-fixes).\n- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).\n- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).\n- nilfs2: prevent use of deleted inode (git-fixes).\n- nvme-pci: 512 byte aligned dma pool segment quirk (git-fixes).\n- nvme-rdma: unquiesce admin_q before destroy it (git-fixes).\n- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).\n- nvme-tcp: fix the memleak while create new ctrl failed (git-fixes).\n- nvme/multipath: Fix RCU list traversal to use SRCU primitive (git-fixes).\n- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).\n- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).\n- nvme: apple: fix device reference counting (git-fixes).\n- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).\n- nvme: fix metadata handling in nvme-passthrough (git-fixes).\n- nvmet-loop: avoid using mutex in IO hotpath (git-fixes).\n- nvmet: propagate npwg topology (git-fixes).\n- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (git-fixes).\n- ocfs2: free inode when ocfs2_get_init_inode() fails (git-fixes).\n- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (git-fixes).\n- of: Fix error path in of_parse_phandle_with_args_map() (git-fixes).\n- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (git-fixes).\n- of: address: Report error on resource bounds overflow (stable-fixes).\n- padata: add pd get/put refcnt helper (git-fixes).\n- padata: avoid UAF for reorder_work (git-fixes).\n- padata: fix UAF in padata_reorder (git-fixes).\n- parisc: Raise minimal GCC version (bsc#1220773).\n- parisc: Raise minimal GCC version to 12.0.0 (bsc#1220773 git-fix).\n- percpu: Add {raw,this}_cpu_try_cmpxchg() (bsc#1220773).\n- percpu: Fix self-assignment of __old in raw_cpu_generic_try_cmpxchg() (bsc#1220773 git-fix).\n- percpu: Wire up cmpxchg128 (bsc#1220773).\n- phy: core: Fix an OF node refcount leakage in _of_phy_get() (git-fixes).\n- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (git-fixes).\n- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (git-fixes).\n- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (git-fixes).\n- phy: core: Fix that API devm_phy_put() fails to release the phy (git-fixes).\n- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP (git-fixes).\n- phy: rockchip: naneng-combphy: fix phy reset (git-fixes).\n- phy: usb: Toggle the PHY power during init (git-fixes).\n- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).\n- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (git-fixes).\n- pinctrl: qcom-pmic-gpio: add support for PM8937 (stable-fixes).\n- pinctrl: qcom: spmi-mpp: Add PM8937 compatible (stable-fixes).\n- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).\n- pinmux: Use sequential access to access desc-\u003epinmux data (stable-fixes).\n- platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes).\n- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).\n- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).\n- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).\n- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (stable-fixes).\n- platform/x86: dell-smbios-base: Extends support to Alienware products (stable-fixes).\n- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (stable-fixes).\n- platform/x86: thinkpad_acpi: Fix for ThinkPad\u0027s with ECFW showing incorrect fan speed (stable-fixes).\n- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).\n- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).\n- power: supply: gpio-charger: Fix set charge current limits (git-fixes).\n- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active (bsc#1235108).\n- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).\n- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).\n- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).\n- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).\n- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).\n- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).\n- pps: add an error check in parport_attach (git-fixes).\n- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).\n- printk: Add is_printk_legacy_deferred() (bsc#1236733).\n- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).\n- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).\n- pwm: stm32-lp: Add check for clk_enable() (git-fixes).\n- pwm: stm32: Add check for clk_enable() (git-fixes).\n- quota: Fix rcu annotations of inode dquot pointers (bsc#1234197).\n- quota: explicitly forbid quota files from being encrypted (bsc#1234196).\n- quota: flush quota_release_work upon quota writeback (bsc#1234195).\n- quota: simplify drop_dquot_ref() (bsc#1234197).\n- rcu-tasks: Pull sampling of -\u003epercpu_dequeue_lim out of loop (git-fixes)\n- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)\n- rcu: Dump memory object info if callback function is invalid (git-fixes)\n- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)\n- rcuscale: Move rcu_scale_writer() (git-fixes)\n- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)\n- readahead: use ilog2 instead of a while loop in page_cache_ra_order() (bsc#1234208).\n- regmap: Use correct format specifier for logging range errors (stable-fixes).\n- regulator: core: Add missing newline character (git-fixes).\n- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).\n- regulator: rk808: Add apply_bit for BUCK3 on RK809 (stable-fixes).\n- remoteproc: core: Fix ida_free call while not allocated (git-fixes).\n- rtc: cmos: avoid taking rtc_lock for extended period of time (stable-fixes).\n- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).\n- rtc: zynqmp: Fix optional clock name property (git-fixes).\n- s390/cio: Do not unregister the subchannel based on DNV (git-fixes).\n- s390/cpum_sf: Convert to cmpxchg128() (bsc#1220773).\n- s390/cpum_sf: Handle CPU hotplug remove during sampling (git-fixes).\n- s390/cpum_sf: Remove WARN_ON_ONCE statements (git-fixes).\n- s390/facility: Disable compile time optimization for decompressor code (git-fixes).\n- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (git-fixes).\n- s390/pageattr: Implement missing kernel_page_present() (git-fixes).\n- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)\n- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).\n- scatterlist: fix incorrect func name in kernel-doc (git-fixes).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).\n- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).\n- sched/numa: fix memory leak due to the overwritten vma-\u003enumab_state (git fixes (sched/numa)).\n- scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (bsc#1235409).\n- scsi: lpfc: Add support for large fw object application layer reads (bsc#1235409).\n- scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (bsc#1235409).\n- scsi: lpfc: Copyright updates for 14.4.0.7 patches (bsc#1235409).\n- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (bsc#1235409).\n- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (bsc#1235409).\n- scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (bsc#1235409).\n- scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (bsc#1235409).\n- scsi: lpfc: Update definition of firmware configuration mbox cmds (bsc#1235409).\n- scsi: lpfc: Update lpfc version to 14.4.0.7 (bsc#1235409).\n- scsi: qla2xxx: Fix NVMe and NPIV connect issue (bsc#1235406).\n- scsi: qla2xxx: Fix abort in bsg timeout (bsc#1235406).\n- scsi: qla2xxx: Fix use after free on unload (bsc#1235406).\n- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (bsc#1235406).\n- scsi: qla2xxx: Remove the unused \u0027del_list_entry\u0027 field in struct fc_port (bsc#1235406).\n- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (bsc#1235406).\n- scsi: qla2xxx: Update version to 10.02.09.400-k (bsc#1235406).\n- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).\n- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).\n- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).\n- selftest: media_tests: fix trivial UAF typo (git-fixes).\n- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).\n- selftests/bpf: Test PROBE_MEM of VSYSCALL_ADDR on x86-64 (git-fixes).\n- selftests/landlock: Fix error message (git-fixes).\n- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).\n- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).\n- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).\n- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).\n- selftests: tc-testing: reduce rshift value (stable-fixes).\n- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).\n- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).\n- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).\n- serial: 8250_dw: Add Sophgo SG2044 quirk (stable-fixes).\n- serial: 8250_dw: Do not use struct dw8250_data outside of 8250_dw (git-fixes).\n- serial: 8250_dw: Replace ACPI device check by a quirk (git-fixes).\n- serial: 8250_fintek: Add support for F81216E (stable-fixes).\n- serial: Do not hold the port lock when setting rx-during-tx GPIO (git-fixes).\n- serial: amba-pl011: Fix RX stall when DMA is used (git-fixes).\n- serial: amba-pl011: Use port lock wrappers (stable-fixes).\n- serial: amba-pl011: fix build regression (git-fixes).\n- serial: do not use uninitialized value in uart_poll_init() (git-fixes).\n- serial: imx: only set receiver level if it is zero (git-fixes).\n- serial: imx: set receiver level before starting uart (git-fixes).\n- serial: qcom-geni: Do not cancel/abort if we can\u0027t get the port lock (git-fixes).\n- serial: qcom-geni: disable interrupts during console writes (git-fixes).\n- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit() (git-fixes).\n- serial: qcom-geni: fix console corruption (git-fixes).\n- serial: qcom-geni: fix dma rx cancellation (git-fixes).\n- serial: qcom-geni: fix false console tx restart (git-fixes).\n- serial: qcom-geni: fix fifo polling timeout (git-fixes).\n- serial: qcom-geni: fix hard lockup on buffer flush (git-fixes).\n- serial: qcom-geni: fix polled console corruption (git-fixes).\n- serial: qcom-geni: fix polled console initialisation (git-fixes).\n- serial: qcom-geni: fix receiver enable (git-fixes).\n- serial: qcom-geni: fix shutdown race (git-fixes).\n- serial: qcom-geni: fix soft lockup on sw flow control and suspend (git-fixes).\n- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield() (git-fixes).\n- serial: qcom-geni: revert broken hibernation support (git-fixes).\n- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).\n- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).\n- serial: stm32: Return IRQ_NONE in the ISR if no handling happend (git-fixes).\n- serial: stm32: do not always set SER_RS485_RX_DURING_TX if RS485 is enabled (git-fixes).\n- slub: Replace cmpxchg_double() (bsc#1220773).\n- slub: Replace cmpxchg_double() - KABI fix (bsc#1220773).\n- smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: fix issue described in bsc#1233642]\n- soc/fsl: cpm: qmc: Convert to platform remove callback returning void (stable-fixes).\n- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).\n- soc: fsl: cpm1: qmc: Fix blank line and spaces (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version (stable-fixes).\n- soc: fsl: cpm1: qmc: Re-order probe() operations (stable-fixes).\n- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure (git-fixes).\n- soc: imx8m: Probe the SoC driver as platform driver (stable-fixes).\n- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).\n- soc: qcom: Add check devm_kasprintf() returned value (stable-fixes).\n- soc: qcom: geni-se: Add M_TX_FIFO_NOT_EMPTY bit definition (git-fixes).\n- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers (git-fixes).\n- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).\n- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).\n- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (git-fixes).\n- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).\n- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).\n- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() (git-fixes).\n- spi: zynq-qspi: Add check for clk_enable() (git-fixes).\n- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)\n- srcu: Only accelerate on enqueue time (git-fixes)\n- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).\n- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).\n- staging: iio: ad9832: Correct phase range check (git-fixes).\n- staging: iio: ad9834: Correct phase range check (git-fixes).\n- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).\n- staging: media: max96712: fix kernel oops when removing module (git-fixes).\n- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (git-fixes).\n- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (git-fixes).\n- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (git-fixes).\n- supported.conf: Add support for v4l2-dv-timings (jsc#PED-8645)\n- svcrdma: Address an integer overflow (git-fixes).\n- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).\n- swiotlb: Enforce page alignment in swiotlb_alloc() (git-fixes).\n- swiotlb: Reinstate page-alignment for mappings \u003e= PAGE_SIZE (git-fixes).\n- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens (stable-fixes).\n- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).\n- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).\n- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).\n- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).\n- tools: Sync if_xdp.h uapi tooling header (git-fixes).\n- tools: hv: change permissions of NetworkManager configuration file (git-fixes).\n- tpm/eventlog: Limit memory allocations for event logs with excessive size (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).\n- tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)\n- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).\n- tty: serial: kgdboc: Fix 8250_* kgdb over serial (git-fixes).\n- types: Introduce [us]128 (bsc#1220773).\n- ubifs: Correct the total block count by deducting journal reservation (git-fixes).\n- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).\n- ubifs: skip dumping tnc tree when zroot is null (git-fixes).\n- udf: Fix lock ordering in udf_evict_inode() (bsc#1234238).\n- udf: fix uninit-value use in udf_get_fileshortad (bsc#1234243).\n- udf: prevent integer overflow in udf_bitmap_free_blocks() (bsc#1234239).\n- udf: refactor inode_bmap() to handle error (bsc#1234242).\n- udf: refactor udf_current_aext() to handle error (bsc#1234240).\n- udf: refactor udf_next_aext() to handle error (bsc#1234241).\n- udf: udftime: prevent overflow in udf_disk_stamp_to_time() (bsc#1234237).\n- uio: Fix return value of poll (git-fixes).\n- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).\n- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).\n- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (stable-fixes).\n- usb: cdns3-ti: Add workaround for Errata i2409 (stable-fixes).\n- usb: cdns3: Add quirk flag to enable suspend residency (stable-fixes).\n- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).\n- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (stable-fixes).\n- usb: dwc2: Fix HCD port connection race (git-fixes).\n- usb: dwc2: Fix HCD resume (git-fixes).\n- usb: dwc2: gadget: Do not write invalid mapped sg entries into dma_desc with iommu enabled (stable-fixes).\n- usb: dwc2: hcd: Fix GetPortStatus \u0026 SetPortFeature (git-fixes).\n- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).\n- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).\n- usb: dwc3: ep0: Do not clear ep0 DWC3_EP_TRANSFER_STARTED (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (git-fixes).\n- usb: dwc3: ep0: Do not reset resource alloc flag (including ep0) (git-fixes).\n- usb: dwc3: gadget: Rewrite endpoint allocation flow (stable-fixes).\n- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).\n- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode (git-fixes).\n- usb: ehci-hcd: fix call balance of clocks handling routines (git-fixes).\n- usb: fix reference leak in usb_new_device() (git-fixes).\n- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).\n- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).\n- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).\n- usb: gadget: f_tcm: Do not free command immediately (git-fixes).\n- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).\n- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).\n- usb: gadget: f_tcm: Translate error to sense (git-fixes).\n- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).\n- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).\n- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).\n- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (git-fixes).\n- usb: host: max3421-hcd: Correctly abort a USB request (git-fixes).\n- usb: host: xhci-plat: Assign shared_hcd-\u003ersrc_start (git-fixes).\n- usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() (git-fixes).\n- usb: typec: anx7411: fix fwnode_handle reference leak (git-fixes).\n- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)\n- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).\n- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).\n- usb: typec: use cleanup facility for \u0027altmodes_node\u0027 (stable-fixes).\n- usbnet: ipheth: break up NCM header size computation (git-fixes).\n- usbnet: ipheth: check that DPE points past NCM header (git-fixes).\n- usbnet: ipheth: fix DPE OoB read (git-fixes).\n- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).\n- usbnet: ipheth: refactor NCM datagram loop (git-fixes).\n- usbnet: ipheth: use static NDP16 location in URB (git-fixes).\n- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (git-fixes).\n- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (git-fixes).\n- vdpa/mlx5: Fix suboptimal range on iotlb iteration (git-fixes).\n- vdpa: solidrun: Fix UB bug with devres (git-fixes).\n- vfs: fix readahead(2) on block devices (bsc#1234201).\n- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).\n- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).\n- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).\n- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).\n- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).\n- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).\n- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).\n- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).\n- wifi: ath5k: add PCI ID for Arcadyan devices (git-fixes).\n- wifi: ath5k: add PCI ID for SX76X (git-fixes).\n- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (stable-fixes).\n- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).\n- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).\n- wifi: cfg80211: sme: init n_channels before channels[] access (git-fixes).\n- wifi: cw1200: Fix potential NULL dereference (git-fixes).\n- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (stable-fixes).\n- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).\n- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (stable-fixes).\n- wifi: mac80211: Add non-atomic station iterator (stable-fixes).\n- wifi: mac80211: Fix common size calculation for ML element (git-fixes).\n- wifi: mac80211: clean up \u0027ret\u0027 in sta_link_apply_parameters() (stable-fixes).\n- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).\n- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).\n- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).\n- wifi: mac80211: fix station NSS capability initialization order (git-fixes).\n- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).\n- wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (git-fixes).\n- wifi: mac80211: prohibit deactivating all links (git-fixes).\n- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).\n- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).\n- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).\n- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).\n- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).\n- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7915: fix register mapping (git-fixes).\n- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).\n- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).\n- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).\n- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).\n- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).\n- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).\n- wifi: mt76: mt7996: fix ldpc setting (git-fixes).\n- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).\n- wifi: mt76: mt7996: fix register mapping (git-fixes).\n- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).\n- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).\n- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (git-fixes).\n- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (stable-fixes).\n- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).\n- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).\n- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).\n- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).\n- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).\n- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).\n- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).\n- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).\n- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).\n- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).\n- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).\n- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (stable-fixes).\n- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).\n- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).\n- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).\n- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).\n- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (bsc#1235416).\n- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (bsc#1234203).\n- x86,amd_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86,intel_iommu: Replace cmpxchg_double() (bsc#1220773).\n- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (git-fixes).\n- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).\n- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).\n- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).\n- xfs: do not allocate COW extents when unsharing a hole (git-fixes).\n- xfs: fix sb_spino_align checks for large fsblock sizes (git-fixes).\n- xfs: remove unknown compat feature check in superblock write validation (git-fixes).\n- xfs: return from xfs_symlink_verify early on V4 filesystems (git-fixes).\n- xfs: sb_spino_align is not verified (git-fixes).\n- xhci: Add usb cold attach (CAS) as a reason to resume root hub (git-fixes).\n- xhci: Allow RPM on the USB controller (1022:43f7) by default (stable-fixes).\n- xhci: fix possible null pointer deref during xhci urb enqueue (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-kernel-3",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20165-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2025:20165-1",
"url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520165-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2025:20165-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2025-June/039787.html"
},
{
"category": "self",
"summary": "SUSE Bug 1012628",
"url": "https://bugzilla.suse.com/1012628"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1214954",
"url": "https://bugzilla.suse.com/1214954"
},
{
"category": "self",
"summary": "SUSE Bug 1215199",
"url": "https://bugzilla.suse.com/1215199"
},
{
"category": "self",
"summary": "SUSE Bug 1216813",
"url": "https://bugzilla.suse.com/1216813"
},
{
"category": "self",
"summary": "SUSE Bug 1218470",
"url": "https://bugzilla.suse.com/1218470"
},
{
"category": "self",
"summary": "SUSE Bug 1220711",
"url": "https://bugzilla.suse.com/1220711"
},
{
"category": "self",
"summary": "SUSE Bug 1220773",
"url": "https://bugzilla.suse.com/1220773"
},
{
"category": "self",
"summary": "SUSE Bug 1224095",
"url": "https://bugzilla.suse.com/1224095"
},
{
"category": "self",
"summary": "SUSE Bug 1224726",
"url": "https://bugzilla.suse.com/1224726"
},
{
"category": "self",
"summary": "SUSE Bug 1225743",
"url": "https://bugzilla.suse.com/1225743"
},
{
"category": "self",
"summary": "SUSE Bug 1225820",
"url": "https://bugzilla.suse.com/1225820"
},
{
"category": "self",
"summary": "SUSE Bug 1225897",
"url": "https://bugzilla.suse.com/1225897"
},
{
"category": "self",
"summary": "SUSE Bug 1226980",
"url": "https://bugzilla.suse.com/1226980"
},
{
"category": "self",
"summary": "SUSE Bug 1227445",
"url": "https://bugzilla.suse.com/1227445"
},
{
"category": "self",
"summary": "SUSE Bug 1228526",
"url": "https://bugzilla.suse.com/1228526"
},
{
"category": "self",
"summary": "SUSE Bug 1228592",
"url": "https://bugzilla.suse.com/1228592"
},
{
"category": "self",
"summary": "SUSE Bug 1229809",
"url": "https://bugzilla.suse.com/1229809"
},
{
"category": "self",
"summary": "SUSE Bug 1229833",
"url": "https://bugzilla.suse.com/1229833"
},
{
"category": "self",
"summary": "SUSE Bug 1230205",
"url": "https://bugzilla.suse.com/1230205"
},
{
"category": "self",
"summary": "SUSE Bug 1230413",
"url": "https://bugzilla.suse.com/1230413"
},
{
"category": "self",
"summary": "SUSE Bug 1230697",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "self",
"summary": "SUSE Bug 1231016",
"url": "https://bugzilla.suse.com/1231016"
},
{
"category": "self",
"summary": "SUSE Bug 1231854",
"url": "https://bugzilla.suse.com/1231854"
},
{
"category": "self",
"summary": "SUSE Bug 1231909",
"url": "https://bugzilla.suse.com/1231909"
},
{
"category": "self",
"summary": "SUSE Bug 1231963",
"url": "https://bugzilla.suse.com/1231963"
},
{
"category": "self",
"summary": "SUSE Bug 1232087",
"url": "https://bugzilla.suse.com/1232087"
},
{
"category": "self",
"summary": "SUSE Bug 1232101",
"url": "https://bugzilla.suse.com/1232101"
},
{
"category": "self",
"summary": "SUSE Bug 1232158",
"url": "https://bugzilla.suse.com/1232158"
},
{
"category": "self",
"summary": "SUSE Bug 1232161",
"url": "https://bugzilla.suse.com/1232161"
},
{
"category": "self",
"summary": "SUSE Bug 1232193",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "self",
"summary": "SUSE Bug 1232198",
"url": "https://bugzilla.suse.com/1232198"
},
{
"category": "self",
"summary": "SUSE Bug 1232201",
"url": "https://bugzilla.suse.com/1232201"
},
{
"category": "self",
"summary": "SUSE Bug 1232418",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "self",
"summary": "SUSE Bug 1232419",
"url": "https://bugzilla.suse.com/1232419"
},
{
"category": "self",
"summary": "SUSE Bug 1232420",
"url": "https://bugzilla.suse.com/1232420"
},
{
"category": "self",
"summary": "SUSE Bug 1232421",
"url": "https://bugzilla.suse.com/1232421"
},
{
"category": "self",
"summary": "SUSE Bug 1232436",
"url": "https://bugzilla.suse.com/1232436"
},
{
"category": "self",
"summary": "SUSE Bug 1232882",
"url": "https://bugzilla.suse.com/1232882"
},
{
"category": "self",
"summary": "SUSE Bug 1233038",
"url": "https://bugzilla.suse.com/1233038"
},
{
"category": "self",
"summary": "SUSE Bug 1233055",
"url": "https://bugzilla.suse.com/1233055"
},
{
"category": "self",
"summary": "SUSE Bug 1233070",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "self",
"summary": "SUSE Bug 1233096",
"url": "https://bugzilla.suse.com/1233096"
},
{
"category": "self",
"summary": "SUSE Bug 1233112",
"url": "https://bugzilla.suse.com/1233112"
},
{
"category": "self",
"summary": "SUSE Bug 1233200",
"url": "https://bugzilla.suse.com/1233200"
},
{
"category": "self",
"summary": "SUSE Bug 1233204",
"url": "https://bugzilla.suse.com/1233204"
},
{
"category": "self",
"summary": "SUSE Bug 1233239",
"url": "https://bugzilla.suse.com/1233239"
},
{
"category": "self",
"summary": "SUSE Bug 1233259",
"url": "https://bugzilla.suse.com/1233259"
},
{
"category": "self",
"summary": "SUSE Bug 1233260",
"url": "https://bugzilla.suse.com/1233260"
},
{
"category": "self",
"summary": "SUSE Bug 1233324",
"url": "https://bugzilla.suse.com/1233324"
},
{
"category": "self",
"summary": "SUSE Bug 1233328",
"url": "https://bugzilla.suse.com/1233328"
},
{
"category": "self",
"summary": "SUSE Bug 1233461",
"url": "https://bugzilla.suse.com/1233461"
},
{
"category": "self",
"summary": "SUSE Bug 1233467",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "self",
"summary": "SUSE Bug 1233469",
"url": "https://bugzilla.suse.com/1233469"
},
{
"category": "self",
"summary": "SUSE Bug 1233488",
"url": "https://bugzilla.suse.com/1233488"
},
{
"category": "self",
"summary": "SUSE Bug 1233546",
"url": "https://bugzilla.suse.com/1233546"
},
{
"category": "self",
"summary": "SUSE Bug 1233558",
"url": "https://bugzilla.suse.com/1233558"
},
{
"category": "self",
"summary": "SUSE Bug 1233637",
"url": "https://bugzilla.suse.com/1233637"
},
{
"category": "self",
"summary": "SUSE Bug 1233638",
"url": "https://bugzilla.suse.com/1233638"
},
{
"category": "self",
"summary": "SUSE Bug 1233642",
"url": "https://bugzilla.suse.com/1233642"
},
{
"category": "self",
"summary": "SUSE Bug 1233772",
"url": "https://bugzilla.suse.com/1233772"
},
{
"category": "self",
"summary": "SUSE Bug 1233778",
"url": "https://bugzilla.suse.com/1233778"
},
{
"category": "self",
"summary": "SUSE Bug 1233837",
"url": "https://bugzilla.suse.com/1233837"
},
{
"category": "self",
"summary": "SUSE Bug 1234024",
"url": "https://bugzilla.suse.com/1234024"
},
{
"category": "self",
"summary": "SUSE Bug 1234069",
"url": "https://bugzilla.suse.com/1234069"
},
{
"category": "self",
"summary": "SUSE Bug 1234071",
"url": "https://bugzilla.suse.com/1234071"
},
{
"category": "self",
"summary": "SUSE Bug 1234073",
"url": "https://bugzilla.suse.com/1234073"
},
{
"category": "self",
"summary": "SUSE Bug 1234075",
"url": "https://bugzilla.suse.com/1234075"
},
{
"category": "self",
"summary": "SUSE Bug 1234076",
"url": "https://bugzilla.suse.com/1234076"
},
{
"category": "self",
"summary": "SUSE Bug 1234077",
"url": "https://bugzilla.suse.com/1234077"
},
{
"category": "self",
"summary": "SUSE Bug 1234079",
"url": "https://bugzilla.suse.com/1234079"
},
{
"category": "self",
"summary": "SUSE Bug 1234086",
"url": "https://bugzilla.suse.com/1234086"
},
{
"category": "self",
"summary": "SUSE Bug 1234139",
"url": "https://bugzilla.suse.com/1234139"
},
{
"category": "self",
"summary": "SUSE Bug 1234140",
"url": "https://bugzilla.suse.com/1234140"
},
{
"category": "self",
"summary": "SUSE Bug 1234141",
"url": "https://bugzilla.suse.com/1234141"
},
{
"category": "self",
"summary": "SUSE Bug 1234142",
"url": "https://bugzilla.suse.com/1234142"
},
{
"category": "self",
"summary": "SUSE Bug 1234143",
"url": "https://bugzilla.suse.com/1234143"
},
{
"category": "self",
"summary": "SUSE Bug 1234144",
"url": "https://bugzilla.suse.com/1234144"
},
{
"category": "self",
"summary": "SUSE Bug 1234145",
"url": "https://bugzilla.suse.com/1234145"
},
{
"category": "self",
"summary": "SUSE Bug 1234146",
"url": "https://bugzilla.suse.com/1234146"
},
{
"category": "self",
"summary": "SUSE Bug 1234147",
"url": "https://bugzilla.suse.com/1234147"
},
{
"category": "self",
"summary": "SUSE Bug 1234148",
"url": "https://bugzilla.suse.com/1234148"
},
{
"category": "self",
"summary": "SUSE Bug 1234149",
"url": "https://bugzilla.suse.com/1234149"
},
{
"category": "self",
"summary": "SUSE Bug 1234150",
"url": "https://bugzilla.suse.com/1234150"
},
{
"category": "self",
"summary": "SUSE Bug 1234153",
"url": "https://bugzilla.suse.com/1234153"
},
{
"category": "self",
"summary": "SUSE Bug 1234155",
"url": "https://bugzilla.suse.com/1234155"
},
{
"category": "self",
"summary": "SUSE Bug 1234156",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "self",
"summary": "SUSE Bug 1234158",
"url": "https://bugzilla.suse.com/1234158"
},
{
"category": "self",
"summary": "SUSE Bug 1234159",
"url": "https://bugzilla.suse.com/1234159"
},
{
"category": "self",
"summary": "SUSE Bug 1234160",
"url": "https://bugzilla.suse.com/1234160"
},
{
"category": "self",
"summary": "SUSE Bug 1234161",
"url": "https://bugzilla.suse.com/1234161"
},
{
"category": "self",
"summary": "SUSE Bug 1234162",
"url": "https://bugzilla.suse.com/1234162"
},
{
"category": "self",
"summary": "SUSE Bug 1234163",
"url": "https://bugzilla.suse.com/1234163"
},
{
"category": "self",
"summary": "SUSE Bug 1234164",
"url": "https://bugzilla.suse.com/1234164"
},
{
"category": "self",
"summary": "SUSE Bug 1234165",
"url": "https://bugzilla.suse.com/1234165"
},
{
"category": "self",
"summary": "SUSE Bug 1234166",
"url": "https://bugzilla.suse.com/1234166"
},
{
"category": "self",
"summary": "SUSE Bug 1234167",
"url": "https://bugzilla.suse.com/1234167"
},
{
"category": "self",
"summary": "SUSE Bug 1234168",
"url": "https://bugzilla.suse.com/1234168"
},
{
"category": "self",
"summary": "SUSE Bug 1234169",
"url": "https://bugzilla.suse.com/1234169"
},
{
"category": "self",
"summary": "SUSE Bug 1234170",
"url": "https://bugzilla.suse.com/1234170"
},
{
"category": "self",
"summary": "SUSE Bug 1234171",
"url": "https://bugzilla.suse.com/1234171"
},
{
"category": "self",
"summary": "SUSE Bug 1234172",
"url": "https://bugzilla.suse.com/1234172"
},
{
"category": "self",
"summary": "SUSE Bug 1234173",
"url": "https://bugzilla.suse.com/1234173"
},
{
"category": "self",
"summary": "SUSE Bug 1234174",
"url": "https://bugzilla.suse.com/1234174"
},
{
"category": "self",
"summary": "SUSE Bug 1234175",
"url": "https://bugzilla.suse.com/1234175"
},
{
"category": "self",
"summary": "SUSE Bug 1234176",
"url": "https://bugzilla.suse.com/1234176"
},
{
"category": "self",
"summary": "SUSE Bug 1234177",
"url": "https://bugzilla.suse.com/1234177"
},
{
"category": "self",
"summary": "SUSE Bug 1234178",
"url": "https://bugzilla.suse.com/1234178"
},
{
"category": "self",
"summary": "SUSE Bug 1234179",
"url": "https://bugzilla.suse.com/1234179"
},
{
"category": "self",
"summary": "SUSE Bug 1234180",
"url": "https://bugzilla.suse.com/1234180"
},
{
"category": "self",
"summary": "SUSE Bug 1234181",
"url": "https://bugzilla.suse.com/1234181"
},
{
"category": "self",
"summary": "SUSE Bug 1234182",
"url": "https://bugzilla.suse.com/1234182"
},
{
"category": "self",
"summary": "SUSE Bug 1234183",
"url": "https://bugzilla.suse.com/1234183"
},
{
"category": "self",
"summary": "SUSE Bug 1234184",
"url": "https://bugzilla.suse.com/1234184"
},
{
"category": "self",
"summary": "SUSE Bug 1234185",
"url": "https://bugzilla.suse.com/1234185"
},
{
"category": "self",
"summary": "SUSE Bug 1234186",
"url": "https://bugzilla.suse.com/1234186"
},
{
"category": "self",
"summary": "SUSE Bug 1234187",
"url": "https://bugzilla.suse.com/1234187"
},
{
"category": "self",
"summary": "SUSE Bug 1234188",
"url": "https://bugzilla.suse.com/1234188"
},
{
"category": "self",
"summary": "SUSE Bug 1234189",
"url": "https://bugzilla.suse.com/1234189"
},
{
"category": "self",
"summary": "SUSE Bug 1234190",
"url": "https://bugzilla.suse.com/1234190"
},
{
"category": "self",
"summary": "SUSE Bug 1234191",
"url": "https://bugzilla.suse.com/1234191"
},
{
"category": "self",
"summary": "SUSE Bug 1234192",
"url": "https://bugzilla.suse.com/1234192"
},
{
"category": "self",
"summary": "SUSE Bug 1234193",
"url": "https://bugzilla.suse.com/1234193"
},
{
"category": "self",
"summary": "SUSE Bug 1234194",
"url": "https://bugzilla.suse.com/1234194"
},
{
"category": "self",
"summary": "SUSE Bug 1234195",
"url": "https://bugzilla.suse.com/1234195"
},
{
"category": "self",
"summary": "SUSE Bug 1234196",
"url": "https://bugzilla.suse.com/1234196"
},
{
"category": "self",
"summary": "SUSE Bug 1234197",
"url": "https://bugzilla.suse.com/1234197"
},
{
"category": "self",
"summary": "SUSE Bug 1234198",
"url": "https://bugzilla.suse.com/1234198"
},
{
"category": "self",
"summary": "SUSE Bug 1234199",
"url": "https://bugzilla.suse.com/1234199"
},
{
"category": "self",
"summary": "SUSE Bug 1234200",
"url": "https://bugzilla.suse.com/1234200"
},
{
"category": "self",
"summary": "SUSE Bug 1234201",
"url": "https://bugzilla.suse.com/1234201"
},
{
"category": "self",
"summary": "SUSE Bug 1234203",
"url": "https://bugzilla.suse.com/1234203"
},
{
"category": "self",
"summary": "SUSE Bug 1234204",
"url": "https://bugzilla.suse.com/1234204"
},
{
"category": "self",
"summary": "SUSE Bug 1234205",
"url": "https://bugzilla.suse.com/1234205"
},
{
"category": "self",
"summary": "SUSE Bug 1234207",
"url": "https://bugzilla.suse.com/1234207"
},
{
"category": "self",
"summary": "SUSE Bug 1234208",
"url": "https://bugzilla.suse.com/1234208"
},
{
"category": "self",
"summary": "SUSE Bug 1234209",
"url": "https://bugzilla.suse.com/1234209"
},
{
"category": "self",
"summary": "SUSE Bug 1234219",
"url": "https://bugzilla.suse.com/1234219"
},
{
"category": "self",
"summary": "SUSE Bug 1234220",
"url": "https://bugzilla.suse.com/1234220"
},
{
"category": "self",
"summary": "SUSE Bug 1234221",
"url": "https://bugzilla.suse.com/1234221"
},
{
"category": "self",
"summary": "SUSE Bug 1234237",
"url": "https://bugzilla.suse.com/1234237"
},
{
"category": "self",
"summary": "SUSE Bug 1234238",
"url": "https://bugzilla.suse.com/1234238"
},
{
"category": "self",
"summary": "SUSE Bug 1234239",
"url": "https://bugzilla.suse.com/1234239"
},
{
"category": "self",
"summary": "SUSE Bug 1234240",
"url": "https://bugzilla.suse.com/1234240"
},
{
"category": "self",
"summary": "SUSE Bug 1234241",
"url": "https://bugzilla.suse.com/1234241"
},
{
"category": "self",
"summary": "SUSE Bug 1234242",
"url": "https://bugzilla.suse.com/1234242"
},
{
"category": "self",
"summary": "SUSE Bug 1234243",
"url": "https://bugzilla.suse.com/1234243"
},
{
"category": "self",
"summary": "SUSE Bug 1234278",
"url": "https://bugzilla.suse.com/1234278"
},
{
"category": "self",
"summary": "SUSE Bug 1234279",
"url": "https://bugzilla.suse.com/1234279"
},
{
"category": "self",
"summary": "SUSE Bug 1234280",
"url": "https://bugzilla.suse.com/1234280"
},
{
"category": "self",
"summary": "SUSE Bug 1234281",
"url": "https://bugzilla.suse.com/1234281"
},
{
"category": "self",
"summary": "SUSE Bug 1234282",
"url": "https://bugzilla.suse.com/1234282"
},
{
"category": "self",
"summary": "SUSE Bug 1234294",
"url": "https://bugzilla.suse.com/1234294"
},
{
"category": "self",
"summary": "SUSE Bug 1234338",
"url": "https://bugzilla.suse.com/1234338"
},
{
"category": "self",
"summary": "SUSE Bug 1234357",
"url": "https://bugzilla.suse.com/1234357"
},
{
"category": "self",
"summary": "SUSE Bug 1234381",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "self",
"summary": "SUSE Bug 1234454",
"url": "https://bugzilla.suse.com/1234454"
},
{
"category": "self",
"summary": "SUSE Bug 1234464",
"url": "https://bugzilla.suse.com/1234464"
},
{
"category": "self",
"summary": "SUSE Bug 1234605",
"url": "https://bugzilla.suse.com/1234605"
},
{
"category": "self",
"summary": "SUSE Bug 1234619",
"url": "https://bugzilla.suse.com/1234619"
},
{
"category": "self",
"summary": "SUSE Bug 1234635",
"url": "https://bugzilla.suse.com/1234635"
},
{
"category": "self",
"summary": "SUSE Bug 1234651",
"url": "https://bugzilla.suse.com/1234651"
},
{
"category": "self",
"summary": "SUSE Bug 1234652",
"url": "https://bugzilla.suse.com/1234652"
},
{
"category": "self",
"summary": "SUSE Bug 1234654",
"url": "https://bugzilla.suse.com/1234654"
},
{
"category": "self",
"summary": "SUSE Bug 1234655",
"url": "https://bugzilla.suse.com/1234655"
},
{
"category": "self",
"summary": "SUSE Bug 1234657",
"url": "https://bugzilla.suse.com/1234657"
},
{
"category": "self",
"summary": "SUSE Bug 1234658",
"url": "https://bugzilla.suse.com/1234658"
},
{
"category": "self",
"summary": "SUSE Bug 1234659",
"url": "https://bugzilla.suse.com/1234659"
},
{
"category": "self",
"summary": "SUSE Bug 1234668",
"url": "https://bugzilla.suse.com/1234668"
},
{
"category": "self",
"summary": "SUSE Bug 1234683",
"url": "https://bugzilla.suse.com/1234683"
},
{
"category": "self",
"summary": "SUSE Bug 1234690",
"url": "https://bugzilla.suse.com/1234690"
},
{
"category": "self",
"summary": "SUSE Bug 1234693",
"url": "https://bugzilla.suse.com/1234693"
},
{
"category": "self",
"summary": "SUSE Bug 1234725",
"url": "https://bugzilla.suse.com/1234725"
},
{
"category": "self",
"summary": "SUSE Bug 1234726",
"url": "https://bugzilla.suse.com/1234726"
},
{
"category": "self",
"summary": "SUSE Bug 1234810",
"url": "https://bugzilla.suse.com/1234810"
},
{
"category": "self",
"summary": "SUSE Bug 1234811",
"url": "https://bugzilla.suse.com/1234811"
},
{
"category": "self",
"summary": "SUSE Bug 1234825",
"url": "https://bugzilla.suse.com/1234825"
},
{
"category": "self",
"summary": "SUSE Bug 1234826",
"url": "https://bugzilla.suse.com/1234826"
},
{
"category": "self",
"summary": "SUSE Bug 1234827",
"url": "https://bugzilla.suse.com/1234827"
},
{
"category": "self",
"summary": "SUSE Bug 1234829",
"url": "https://bugzilla.suse.com/1234829"
},
{
"category": "self",
"summary": "SUSE Bug 1234832",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "self",
"summary": "SUSE Bug 1234834",
"url": "https://bugzilla.suse.com/1234834"
},
{
"category": "self",
"summary": "SUSE Bug 1234843",
"url": "https://bugzilla.suse.com/1234843"
},
{
"category": "self",
"summary": "SUSE Bug 1234846",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "self",
"summary": "SUSE Bug 1234848",
"url": "https://bugzilla.suse.com/1234848"
},
{
"category": "self",
"summary": "SUSE Bug 1234853",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "self",
"summary": "SUSE Bug 1234855",
"url": "https://bugzilla.suse.com/1234855"
},
{
"category": "self",
"summary": "SUSE Bug 1234856",
"url": "https://bugzilla.suse.com/1234856"
},
{
"category": "self",
"summary": "SUSE Bug 1234863",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "self",
"summary": "SUSE Bug 1234884",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "self",
"summary": "SUSE Bug 1234887",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "self",
"summary": "SUSE Bug 1234888",
"url": "https://bugzilla.suse.com/1234888"
},
{
"category": "self",
"summary": "SUSE Bug 1234889",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "self",
"summary": "SUSE Bug 1234891",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "self",
"summary": "SUSE Bug 1234893",
"url": "https://bugzilla.suse.com/1234893"
},
{
"category": "self",
"summary": "SUSE Bug 1234898",
"url": "https://bugzilla.suse.com/1234898"
},
{
"category": "self",
"summary": "SUSE Bug 1234899",
"url": "https://bugzilla.suse.com/1234899"
},
{
"category": "self",
"summary": "SUSE Bug 1234900",
"url": "https://bugzilla.suse.com/1234900"
},
{
"category": "self",
"summary": "SUSE Bug 1234901",
"url": "https://bugzilla.suse.com/1234901"
},
{
"category": "self",
"summary": "SUSE Bug 1234905",
"url": "https://bugzilla.suse.com/1234905"
},
{
"category": "self",
"summary": "SUSE Bug 1234906",
"url": "https://bugzilla.suse.com/1234906"
},
{
"category": "self",
"summary": "SUSE Bug 1234907",
"url": "https://bugzilla.suse.com/1234907"
},
{
"category": "self",
"summary": "SUSE Bug 1234909",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "self",
"summary": "SUSE Bug 1234911",
"url": "https://bugzilla.suse.com/1234911"
},
{
"category": "self",
"summary": "SUSE Bug 1234912",
"url": "https://bugzilla.suse.com/1234912"
},
{
"category": "self",
"summary": "SUSE Bug 1234916",
"url": "https://bugzilla.suse.com/1234916"
},
{
"category": "self",
"summary": "SUSE Bug 1234918",
"url": "https://bugzilla.suse.com/1234918"
},
{
"category": "self",
"summary": "SUSE Bug 1234920",
"url": "https://bugzilla.suse.com/1234920"
},
{
"category": "self",
"summary": "SUSE Bug 1234921",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "self",
"summary": "SUSE Bug 1234922",
"url": "https://bugzilla.suse.com/1234922"
},
{
"category": "self",
"summary": "SUSE Bug 1234923",
"url": "https://bugzilla.suse.com/1234923"
},
{
"category": "self",
"summary": "SUSE Bug 1234929",
"url": "https://bugzilla.suse.com/1234929"
},
{
"category": "self",
"summary": "SUSE Bug 1234930",
"url": "https://bugzilla.suse.com/1234930"
},
{
"category": "self",
"summary": "SUSE Bug 1234931",
"url": "https://bugzilla.suse.com/1234931"
},
{
"category": "self",
"summary": "SUSE Bug 1234934",
"url": "https://bugzilla.suse.com/1234934"
},
{
"category": "self",
"summary": "SUSE Bug 1234937",
"url": "https://bugzilla.suse.com/1234937"
},
{
"category": "self",
"summary": "SUSE Bug 1234947",
"url": "https://bugzilla.suse.com/1234947"
},
{
"category": "self",
"summary": "SUSE Bug 1234948",
"url": "https://bugzilla.suse.com/1234948"
},
{
"category": "self",
"summary": "SUSE Bug 1234950",
"url": "https://bugzilla.suse.com/1234950"
},
{
"category": "self",
"summary": "SUSE Bug 1234952",
"url": "https://bugzilla.suse.com/1234952"
},
{
"category": "self",
"summary": "SUSE Bug 1234957",
"url": "https://bugzilla.suse.com/1234957"
},
{
"category": "self",
"summary": "SUSE Bug 1234960",
"url": "https://bugzilla.suse.com/1234960"
},
{
"category": "self",
"summary": "SUSE Bug 1234962",
"url": "https://bugzilla.suse.com/1234962"
},
{
"category": "self",
"summary": "SUSE Bug 1234963",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "self",
"summary": "SUSE Bug 1234968",
"url": "https://bugzilla.suse.com/1234968"
},
{
"category": "self",
"summary": "SUSE Bug 1234969",
"url": "https://bugzilla.suse.com/1234969"
},
{
"category": "self",
"summary": "SUSE Bug 1234970",
"url": "https://bugzilla.suse.com/1234970"
},
{
"category": "self",
"summary": "SUSE Bug 1234971",
"url": "https://bugzilla.suse.com/1234971"
},
{
"category": "self",
"summary": "SUSE Bug 1234973",
"url": "https://bugzilla.suse.com/1234973"
},
{
"category": "self",
"summary": "SUSE Bug 1234974",
"url": "https://bugzilla.suse.com/1234974"
},
{
"category": "self",
"summary": "SUSE Bug 1234989",
"url": "https://bugzilla.suse.com/1234989"
},
{
"category": "self",
"summary": "SUSE Bug 1234999",
"url": "https://bugzilla.suse.com/1234999"
},
{
"category": "self",
"summary": "SUSE Bug 1235000",
"url": "https://bugzilla.suse.com/1235000"
},
{
"category": "self",
"summary": "SUSE Bug 1235001",
"url": "https://bugzilla.suse.com/1235001"
},
{
"category": "self",
"summary": "SUSE Bug 1235002",
"url": "https://bugzilla.suse.com/1235002"
},
{
"category": "self",
"summary": "SUSE Bug 1235003",
"url": "https://bugzilla.suse.com/1235003"
},
{
"category": "self",
"summary": "SUSE Bug 1235004",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "self",
"summary": "SUSE Bug 1235007",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "self",
"summary": "SUSE Bug 1235009",
"url": "https://bugzilla.suse.com/1235009"
},
{
"category": "self",
"summary": "SUSE Bug 1235011",
"url": "https://bugzilla.suse.com/1235011"
},
{
"category": "self",
"summary": "SUSE Bug 1235016",
"url": "https://bugzilla.suse.com/1235016"
},
{
"category": "self",
"summary": "SUSE Bug 1235019",
"url": "https://bugzilla.suse.com/1235019"
},
{
"category": "self",
"summary": "SUSE Bug 1235031",
"url": "https://bugzilla.suse.com/1235031"
},
{
"category": "self",
"summary": "SUSE Bug 1235032",
"url": "https://bugzilla.suse.com/1235032"
},
{
"category": "self",
"summary": "SUSE Bug 1235033",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "self",
"summary": "SUSE Bug 1235035",
"url": "https://bugzilla.suse.com/1235035"
},
{
"category": "self",
"summary": "SUSE Bug 1235037",
"url": "https://bugzilla.suse.com/1235037"
},
{
"category": "self",
"summary": "SUSE Bug 1235038",
"url": "https://bugzilla.suse.com/1235038"
},
{
"category": "self",
"summary": "SUSE Bug 1235039",
"url": "https://bugzilla.suse.com/1235039"
},
{
"category": "self",
"summary": "SUSE Bug 1235040",
"url": "https://bugzilla.suse.com/1235040"
},
{
"category": "self",
"summary": "SUSE Bug 1235042",
"url": "https://bugzilla.suse.com/1235042"
},
{
"category": "self",
"summary": "SUSE Bug 1235043",
"url": "https://bugzilla.suse.com/1235043"
},
{
"category": "self",
"summary": "SUSE Bug 1235045",
"url": "https://bugzilla.suse.com/1235045"
},
{
"category": "self",
"summary": "SUSE Bug 1235046",
"url": "https://bugzilla.suse.com/1235046"
},
{
"category": "self",
"summary": "SUSE Bug 1235050",
"url": "https://bugzilla.suse.com/1235050"
},
{
"category": "self",
"summary": "SUSE Bug 1235051",
"url": "https://bugzilla.suse.com/1235051"
},
{
"category": "self",
"summary": "SUSE Bug 1235053",
"url": "https://bugzilla.suse.com/1235053"
},
{
"category": "self",
"summary": "SUSE Bug 1235054",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "self",
"summary": "SUSE Bug 1235056",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "self",
"summary": "SUSE Bug 1235057",
"url": "https://bugzilla.suse.com/1235057"
},
{
"category": "self",
"summary": "SUSE Bug 1235059",
"url": "https://bugzilla.suse.com/1235059"
},
{
"category": "self",
"summary": "SUSE Bug 1235061",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "self",
"summary": "SUSE Bug 1235065",
"url": "https://bugzilla.suse.com/1235065"
},
{
"category": "self",
"summary": "SUSE Bug 1235070",
"url": "https://bugzilla.suse.com/1235070"
},
{
"category": "self",
"summary": "SUSE Bug 1235073",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "self",
"summary": "SUSE Bug 1235075",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "self",
"summary": "SUSE Bug 1235100",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "self",
"summary": "SUSE Bug 1235108",
"url": "https://bugzilla.suse.com/1235108"
},
{
"category": "self",
"summary": "SUSE Bug 1235112",
"url": "https://bugzilla.suse.com/1235112"
},
{
"category": "self",
"summary": "SUSE Bug 1235115",
"url": "https://bugzilla.suse.com/1235115"
},
{
"category": "self",
"summary": "SUSE Bug 1235117",
"url": "https://bugzilla.suse.com/1235117"
},
{
"category": "self",
"summary": "SUSE Bug 1235122",
"url": "https://bugzilla.suse.com/1235122"
},
{
"category": "self",
"summary": "SUSE Bug 1235123",
"url": "https://bugzilla.suse.com/1235123"
},
{
"category": "self",
"summary": "SUSE Bug 1235125",
"url": "https://bugzilla.suse.com/1235125"
},
{
"category": "self",
"summary": "SUSE Bug 1235128",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "self",
"summary": "SUSE Bug 1235132",
"url": "https://bugzilla.suse.com/1235132"
},
{
"category": "self",
"summary": "SUSE Bug 1235133",
"url": "https://bugzilla.suse.com/1235133"
},
{
"category": "self",
"summary": "SUSE Bug 1235134",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "self",
"summary": "SUSE Bug 1235138",
"url": "https://bugzilla.suse.com/1235138"
},
{
"category": "self",
"summary": "SUSE Bug 1235155",
"url": "https://bugzilla.suse.com/1235155"
},
{
"category": "self",
"summary": "SUSE Bug 1235160",
"url": "https://bugzilla.suse.com/1235160"
},
{
"category": "self",
"summary": "SUSE Bug 1235217",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "self",
"summary": "SUSE Bug 1235219",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "self",
"summary": "SUSE Bug 1235220",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "self",
"summary": "SUSE Bug 1235222",
"url": "https://bugzilla.suse.com/1235222"
},
{
"category": "self",
"summary": "SUSE Bug 1235223",
"url": "https://bugzilla.suse.com/1235223"
},
{
"category": "self",
"summary": "SUSE Bug 1235224",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "self",
"summary": "SUSE Bug 1235227",
"url": "https://bugzilla.suse.com/1235227"
},
{
"category": "self",
"summary": "SUSE Bug 1235230",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "self",
"summary": "SUSE Bug 1235241",
"url": "https://bugzilla.suse.com/1235241"
},
{
"category": "self",
"summary": "SUSE Bug 1235246",
"url": "https://bugzilla.suse.com/1235246"
},
{
"category": "self",
"summary": "SUSE Bug 1235249",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "self",
"summary": "SUSE Bug 1235251",
"url": "https://bugzilla.suse.com/1235251"
},
{
"category": "self",
"summary": "SUSE Bug 1235252",
"url": "https://bugzilla.suse.com/1235252"
},
{
"category": "self",
"summary": "SUSE Bug 1235389",
"url": "https://bugzilla.suse.com/1235389"
},
{
"category": "self",
"summary": "SUSE Bug 1235390",
"url": "https://bugzilla.suse.com/1235390"
},
{
"category": "self",
"summary": "SUSE Bug 1235391",
"url": "https://bugzilla.suse.com/1235391"
},
{
"category": "self",
"summary": "SUSE Bug 1235406",
"url": "https://bugzilla.suse.com/1235406"
},
{
"category": "self",
"summary": "SUSE Bug 1235409",
"url": "https://bugzilla.suse.com/1235409"
},
{
"category": "self",
"summary": "SUSE Bug 1235410",
"url": "https://bugzilla.suse.com/1235410"
},
{
"category": "self",
"summary": "SUSE Bug 1235412",
"url": "https://bugzilla.suse.com/1235412"
},
{
"category": "self",
"summary": "SUSE Bug 1235413",
"url": "https://bugzilla.suse.com/1235413"
},
{
"category": "self",
"summary": "SUSE Bug 1235415",
"url": "https://bugzilla.suse.com/1235415"
},
{
"category": "self",
"summary": "SUSE Bug 1235416",
"url": "https://bugzilla.suse.com/1235416"
},
{
"category": "self",
"summary": "SUSE Bug 1235417",
"url": "https://bugzilla.suse.com/1235417"
},
{
"category": "self",
"summary": "SUSE Bug 1235418",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "self",
"summary": "SUSE Bug 1235423",
"url": "https://bugzilla.suse.com/1235423"
},
{
"category": "self",
"summary": "SUSE Bug 1235424",
"url": "https://bugzilla.suse.com/1235424"
},
{
"category": "self",
"summary": "SUSE Bug 1235425",
"url": "https://bugzilla.suse.com/1235425"
},
{
"category": "self",
"summary": "SUSE Bug 1235426",
"url": "https://bugzilla.suse.com/1235426"
},
{
"category": "self",
"summary": "SUSE Bug 1235427",
"url": "https://bugzilla.suse.com/1235427"
},
{
"category": "self",
"summary": "SUSE Bug 1235428",
"url": "https://bugzilla.suse.com/1235428"
},
{
"category": "self",
"summary": "SUSE Bug 1235429",
"url": "https://bugzilla.suse.com/1235429"
},
{
"category": "self",
"summary": "SUSE Bug 1235430",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "self",
"summary": "SUSE Bug 1235433",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "self",
"summary": "SUSE Bug 1235437",
"url": "https://bugzilla.suse.com/1235437"
},
{
"category": "self",
"summary": "SUSE Bug 1235439",
"url": "https://bugzilla.suse.com/1235439"
},
{
"category": "self",
"summary": "SUSE Bug 1235444",
"url": "https://bugzilla.suse.com/1235444"
},
{
"category": "self",
"summary": "SUSE Bug 1235445",
"url": "https://bugzilla.suse.com/1235445"
},
{
"category": "self",
"summary": "SUSE Bug 1235449",
"url": "https://bugzilla.suse.com/1235449"
},
{
"category": "self",
"summary": "SUSE Bug 1235451",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "self",
"summary": "SUSE Bug 1235454",
"url": "https://bugzilla.suse.com/1235454"
},
{
"category": "self",
"summary": "SUSE Bug 1235458",
"url": "https://bugzilla.suse.com/1235458"
},
{
"category": "self",
"summary": "SUSE Bug 1235459",
"url": "https://bugzilla.suse.com/1235459"
},
{
"category": "self",
"summary": "SUSE Bug 1235464",
"url": "https://bugzilla.suse.com/1235464"
},
{
"category": "self",
"summary": "SUSE Bug 1235466",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "self",
"summary": "SUSE Bug 1235473",
"url": "https://bugzilla.suse.com/1235473"
},
{
"category": "self",
"summary": "SUSE Bug 1235479",
"url": "https://bugzilla.suse.com/1235479"
},
{
"category": "self",
"summary": "SUSE Bug 1235480",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "self",
"summary": "SUSE Bug 1235483",
"url": "https://bugzilla.suse.com/1235483"
},
{
"category": "self",
"summary": "SUSE Bug 1235486",
"url": "https://bugzilla.suse.com/1235486"
},
{
"category": "self",
"summary": "SUSE Bug 1235487",
"url": "https://bugzilla.suse.com/1235487"
},
{
"category": "self",
"summary": "SUSE Bug 1235488",
"url": "https://bugzilla.suse.com/1235488"
},
{
"category": "self",
"summary": "SUSE Bug 1235489",
"url": "https://bugzilla.suse.com/1235489"
},
{
"category": "self",
"summary": "SUSE Bug 1235491",
"url": "https://bugzilla.suse.com/1235491"
},
{
"category": "self",
"summary": "SUSE Bug 1235494",
"url": "https://bugzilla.suse.com/1235494"
},
{
"category": "self",
"summary": "SUSE Bug 1235495",
"url": "https://bugzilla.suse.com/1235495"
},
{
"category": "self",
"summary": "SUSE Bug 1235496",
"url": "https://bugzilla.suse.com/1235496"
},
{
"category": "self",
"summary": "SUSE Bug 1235497",
"url": "https://bugzilla.suse.com/1235497"
},
{
"category": "self",
"summary": "SUSE Bug 1235498",
"url": "https://bugzilla.suse.com/1235498"
},
{
"category": "self",
"summary": "SUSE Bug 1235500",
"url": "https://bugzilla.suse.com/1235500"
},
{
"category": "self",
"summary": "SUSE Bug 1235502",
"url": "https://bugzilla.suse.com/1235502"
},
{
"category": "self",
"summary": "SUSE Bug 1235503",
"url": "https://bugzilla.suse.com/1235503"
},
{
"category": "self",
"summary": "SUSE Bug 1235507",
"url": "https://bugzilla.suse.com/1235507"
},
{
"category": "self",
"summary": "SUSE Bug 1235519",
"url": "https://bugzilla.suse.com/1235519"
},
{
"category": "self",
"summary": "SUSE Bug 1235520",
"url": "https://bugzilla.suse.com/1235520"
},
{
"category": "self",
"summary": "SUSE Bug 1235521",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "self",
"summary": "SUSE Bug 1235523",
"url": "https://bugzilla.suse.com/1235523"
},
{
"category": "self",
"summary": "SUSE Bug 1235526",
"url": "https://bugzilla.suse.com/1235526"
},
{
"category": "self",
"summary": "SUSE Bug 1235528",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "self",
"summary": "SUSE Bug 1235532",
"url": "https://bugzilla.suse.com/1235532"
},
{
"category": "self",
"summary": "SUSE Bug 1235533",
"url": "https://bugzilla.suse.com/1235533"
},
{
"category": "self",
"summary": "SUSE Bug 1235534",
"url": "https://bugzilla.suse.com/1235534"
},
{
"category": "self",
"summary": "SUSE Bug 1235537",
"url": "https://bugzilla.suse.com/1235537"
},
{
"category": "self",
"summary": "SUSE Bug 1235538",
"url": "https://bugzilla.suse.com/1235538"
},
{
"category": "self",
"summary": "SUSE Bug 1235545",
"url": "https://bugzilla.suse.com/1235545"
},
{
"category": "self",
"summary": "SUSE Bug 1235550",
"url": "https://bugzilla.suse.com/1235550"
},
{
"category": "self",
"summary": "SUSE Bug 1235552",
"url": "https://bugzilla.suse.com/1235552"
},
{
"category": "self",
"summary": "SUSE Bug 1235555",
"url": "https://bugzilla.suse.com/1235555"
},
{
"category": "self",
"summary": "SUSE Bug 1235557",
"url": "https://bugzilla.suse.com/1235557"
},
{
"category": "self",
"summary": "SUSE Bug 1235563",
"url": "https://bugzilla.suse.com/1235563"
},
{
"category": "self",
"summary": "SUSE Bug 1235564",
"url": "https://bugzilla.suse.com/1235564"
},
{
"category": "self",
"summary": "SUSE Bug 1235565",
"url": "https://bugzilla.suse.com/1235565"
},
{
"category": "self",
"summary": "SUSE Bug 1235568",
"url": "https://bugzilla.suse.com/1235568"
},
{
"category": "self",
"summary": "SUSE Bug 1235570",
"url": "https://bugzilla.suse.com/1235570"
},
{
"category": "self",
"summary": "SUSE Bug 1235571",
"url": "https://bugzilla.suse.com/1235571"
},
{
"category": "self",
"summary": "SUSE Bug 1235577",
"url": "https://bugzilla.suse.com/1235577"
},
{
"category": "self",
"summary": "SUSE Bug 1235578",
"url": "https://bugzilla.suse.com/1235578"
},
{
"category": "self",
"summary": "SUSE Bug 1235582",
"url": "https://bugzilla.suse.com/1235582"
},
{
"category": "self",
"summary": "SUSE Bug 1235583",
"url": "https://bugzilla.suse.com/1235583"
},
{
"category": "self",
"summary": "SUSE Bug 1235584",
"url": "https://bugzilla.suse.com/1235584"
},
{
"category": "self",
"summary": "SUSE Bug 1235587",
"url": "https://bugzilla.suse.com/1235587"
},
{
"category": "self",
"summary": "SUSE Bug 1235611",
"url": "https://bugzilla.suse.com/1235611"
},
{
"category": "self",
"summary": "SUSE Bug 1235612",
"url": "https://bugzilla.suse.com/1235612"
},
{
"category": "self",
"summary": "SUSE Bug 1235616",
"url": "https://bugzilla.suse.com/1235616"
},
{
"category": "self",
"summary": "SUSE Bug 1235622",
"url": "https://bugzilla.suse.com/1235622"
},
{
"category": "self",
"summary": "SUSE Bug 1235627",
"url": "https://bugzilla.suse.com/1235627"
},
{
"category": "self",
"summary": "SUSE Bug 1235632",
"url": "https://bugzilla.suse.com/1235632"
},
{
"category": "self",
"summary": "SUSE Bug 1235635",
"url": "https://bugzilla.suse.com/1235635"
},
{
"category": "self",
"summary": "SUSE Bug 1235638",
"url": "https://bugzilla.suse.com/1235638"
},
{
"category": "self",
"summary": "SUSE Bug 1235641",
"url": "https://bugzilla.suse.com/1235641"
},
{
"category": "self",
"summary": "SUSE Bug 1235643",
"url": "https://bugzilla.suse.com/1235643"
},
{
"category": "self",
"summary": "SUSE Bug 1235645",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "self",
"summary": "SUSE Bug 1235646",
"url": "https://bugzilla.suse.com/1235646"
},
{
"category": "self",
"summary": "SUSE Bug 1235647",
"url": "https://bugzilla.suse.com/1235647"
},
{
"category": "self",
"summary": "SUSE Bug 1235650",
"url": "https://bugzilla.suse.com/1235650"
},
{
"category": "self",
"summary": "SUSE Bug 1235653",
"url": "https://bugzilla.suse.com/1235653"
},
{
"category": "self",
"summary": "SUSE Bug 1235656",
"url": "https://bugzilla.suse.com/1235656"
},
{
"category": "self",
"summary": "SUSE Bug 1235657",
"url": "https://bugzilla.suse.com/1235657"
},
{
"category": "self",
"summary": "SUSE Bug 1235663",
"url": "https://bugzilla.suse.com/1235663"
},
{
"category": "self",
"summary": "SUSE Bug 1235686",
"url": "https://bugzilla.suse.com/1235686"
},
{
"category": "self",
"summary": "SUSE Bug 1235700",
"url": "https://bugzilla.suse.com/1235700"
},
{
"category": "self",
"summary": "SUSE Bug 1235705",
"url": "https://bugzilla.suse.com/1235705"
},
{
"category": "self",
"summary": "SUSE Bug 1235707",
"url": "https://bugzilla.suse.com/1235707"
},
{
"category": "self",
"summary": "SUSE Bug 1235708",
"url": "https://bugzilla.suse.com/1235708"
},
{
"category": "self",
"summary": "SUSE Bug 1235710",
"url": "https://bugzilla.suse.com/1235710"
},
{
"category": "self",
"summary": "SUSE Bug 1235714",
"url": "https://bugzilla.suse.com/1235714"
},
{
"category": "self",
"summary": "SUSE Bug 1235716",
"url": "https://bugzilla.suse.com/1235716"
},
{
"category": "self",
"summary": "SUSE Bug 1235720",
"url": "https://bugzilla.suse.com/1235720"
},
{
"category": "self",
"summary": "SUSE Bug 1235723",
"url": "https://bugzilla.suse.com/1235723"
},
{
"category": "self",
"summary": "SUSE Bug 1235727",
"url": "https://bugzilla.suse.com/1235727"
},
{
"category": "self",
"summary": "SUSE Bug 1235730",
"url": "https://bugzilla.suse.com/1235730"
},
{
"category": "self",
"summary": "SUSE Bug 1235737",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "self",
"summary": "SUSE Bug 1235739",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "self",
"summary": "SUSE Bug 1235745",
"url": "https://bugzilla.suse.com/1235745"
},
{
"category": "self",
"summary": "SUSE Bug 1235747",
"url": "https://bugzilla.suse.com/1235747"
},
{
"category": "self",
"summary": "SUSE Bug 1235750",
"url": "https://bugzilla.suse.com/1235750"
},
{
"category": "self",
"summary": "SUSE Bug 1235753",
"url": "https://bugzilla.suse.com/1235753"
},
{
"category": "self",
"summary": "SUSE Bug 1235759",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "self",
"summary": "SUSE Bug 1235764",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "self",
"summary": "SUSE Bug 1235768",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "self",
"summary": "SUSE Bug 1235776",
"url": "https://bugzilla.suse.com/1235776"
},
{
"category": "self",
"summary": "SUSE Bug 1235777",
"url": "https://bugzilla.suse.com/1235777"
},
{
"category": "self",
"summary": "SUSE Bug 1235778",
"url": "https://bugzilla.suse.com/1235778"
},
{
"category": "self",
"summary": "SUSE Bug 1235779",
"url": "https://bugzilla.suse.com/1235779"
},
{
"category": "self",
"summary": "SUSE Bug 1235793",
"url": "https://bugzilla.suse.com/1235793"
},
{
"category": "self",
"summary": "SUSE Bug 1235798",
"url": "https://bugzilla.suse.com/1235798"
},
{
"category": "self",
"summary": "SUSE Bug 1235806",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "self",
"summary": "SUSE Bug 1235808",
"url": "https://bugzilla.suse.com/1235808"
},
{
"category": "self",
"summary": "SUSE Bug 1235812",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "self",
"summary": "SUSE Bug 1235814",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "self",
"summary": "SUSE Bug 1235818",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "self",
"summary": "SUSE Bug 1235842",
"url": "https://bugzilla.suse.com/1235842"
},
{
"category": "self",
"summary": "SUSE Bug 1235865",
"url": "https://bugzilla.suse.com/1235865"
},
{
"category": "self",
"summary": "SUSE Bug 1235894",
"url": "https://bugzilla.suse.com/1235894"
},
{
"category": "self",
"summary": "SUSE Bug 1235902",
"url": "https://bugzilla.suse.com/1235902"
},
{
"category": "self",
"summary": "SUSE Bug 1235903",
"url": "https://bugzilla.suse.com/1235903"
},
{
"category": "self",
"summary": "SUSE Bug 1235906",
"url": "https://bugzilla.suse.com/1235906"
},
{
"category": "self",
"summary": "SUSE Bug 1235918",
"url": "https://bugzilla.suse.com/1235918"
},
{
"category": "self",
"summary": "SUSE Bug 1235919",
"url": "https://bugzilla.suse.com/1235919"
},
{
"category": "self",
"summary": "SUSE Bug 1235920",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "self",
"summary": "SUSE Bug 1235924",
"url": "https://bugzilla.suse.com/1235924"
},
{
"category": "self",
"summary": "SUSE Bug 1235940",
"url": "https://bugzilla.suse.com/1235940"
},
{
"category": "self",
"summary": "SUSE Bug 1235941",
"url": "https://bugzilla.suse.com/1235941"
},
{
"category": "self",
"summary": "SUSE Bug 1235946",
"url": "https://bugzilla.suse.com/1235946"
},
{
"category": "self",
"summary": "SUSE Bug 1235948",
"url": "https://bugzilla.suse.com/1235948"
},
{
"category": "self",
"summary": "SUSE Bug 1235952",
"url": "https://bugzilla.suse.com/1235952"
},
{
"category": "self",
"summary": "SUSE Bug 1235964",
"url": "https://bugzilla.suse.com/1235964"
},
{
"category": "self",
"summary": "SUSE Bug 1235965",
"url": "https://bugzilla.suse.com/1235965"
},
{
"category": "self",
"summary": "SUSE Bug 1235967",
"url": "https://bugzilla.suse.com/1235967"
},
{
"category": "self",
"summary": "SUSE Bug 1235969",
"url": "https://bugzilla.suse.com/1235969"
},
{
"category": "self",
"summary": "SUSE Bug 1235976",
"url": "https://bugzilla.suse.com/1235976"
},
{
"category": "self",
"summary": "SUSE Bug 1235977",
"url": "https://bugzilla.suse.com/1235977"
},
{
"category": "self",
"summary": "SUSE Bug 1236078",
"url": "https://bugzilla.suse.com/1236078"
},
{
"category": "self",
"summary": "SUSE Bug 1236080",
"url": "https://bugzilla.suse.com/1236080"
},
{
"category": "self",
"summary": "SUSE Bug 1236082",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "self",
"summary": "SUSE Bug 1236088",
"url": "https://bugzilla.suse.com/1236088"
},
{
"category": "self",
"summary": "SUSE Bug 1236090",
"url": "https://bugzilla.suse.com/1236090"
},
{
"category": "self",
"summary": "SUSE Bug 1236091",
"url": "https://bugzilla.suse.com/1236091"
},
{
"category": "self",
"summary": "SUSE Bug 1236096",
"url": "https://bugzilla.suse.com/1236096"
},
{
"category": "self",
"summary": "SUSE Bug 1236097",
"url": "https://bugzilla.suse.com/1236097"
},
{
"category": "self",
"summary": "SUSE Bug 1236098",
"url": "https://bugzilla.suse.com/1236098"
},
{
"category": "self",
"summary": "SUSE Bug 1236101",
"url": "https://bugzilla.suse.com/1236101"
},
{
"category": "self",
"summary": "SUSE Bug 1236102",
"url": "https://bugzilla.suse.com/1236102"
},
{
"category": "self",
"summary": "SUSE Bug 1236104",
"url": "https://bugzilla.suse.com/1236104"
},
{
"category": "self",
"summary": "SUSE Bug 1236106",
"url": "https://bugzilla.suse.com/1236106"
},
{
"category": "self",
"summary": "SUSE Bug 1236120",
"url": "https://bugzilla.suse.com/1236120"
},
{
"category": "self",
"summary": "SUSE Bug 1236125",
"url": "https://bugzilla.suse.com/1236125"
},
{
"category": "self",
"summary": "SUSE Bug 1236127",
"url": "https://bugzilla.suse.com/1236127"
},
{
"category": "self",
"summary": "SUSE Bug 1236131",
"url": "https://bugzilla.suse.com/1236131"
},
{
"category": "self",
"summary": "SUSE Bug 1236138",
"url": "https://bugzilla.suse.com/1236138"
},
{
"category": "self",
"summary": "SUSE Bug 1236143",
"url": "https://bugzilla.suse.com/1236143"
},
{
"category": "self",
"summary": "SUSE Bug 1236144",
"url": "https://bugzilla.suse.com/1236144"
},
{
"category": "self",
"summary": "SUSE Bug 1236145",
"url": "https://bugzilla.suse.com/1236145"
},
{
"category": "self",
"summary": "SUSE Bug 1236160",
"url": "https://bugzilla.suse.com/1236160"
},
{
"category": "self",
"summary": "SUSE Bug 1236161",
"url": "https://bugzilla.suse.com/1236161"
},
{
"category": "self",
"summary": "SUSE Bug 1236163",
"url": "https://bugzilla.suse.com/1236163"
},
{
"category": "self",
"summary": "SUSE Bug 1236168",
"url": "https://bugzilla.suse.com/1236168"
},
{
"category": "self",
"summary": "SUSE Bug 1236178",
"url": "https://bugzilla.suse.com/1236178"
},
{
"category": "self",
"summary": "SUSE Bug 1236180",
"url": "https://bugzilla.suse.com/1236180"
},
{
"category": "self",
"summary": "SUSE Bug 1236181",
"url": "https://bugzilla.suse.com/1236181"
},
{
"category": "self",
"summary": "SUSE Bug 1236182",
"url": "https://bugzilla.suse.com/1236182"
},
{
"category": "self",
"summary": "SUSE Bug 1236190",
"url": "https://bugzilla.suse.com/1236190"
},
{
"category": "self",
"summary": "SUSE Bug 1236192",
"url": "https://bugzilla.suse.com/1236192"
},
{
"category": "self",
"summary": "SUSE Bug 1236198",
"url": "https://bugzilla.suse.com/1236198"
},
{
"category": "self",
"summary": "SUSE Bug 1236227",
"url": "https://bugzilla.suse.com/1236227"
},
{
"category": "self",
"summary": "SUSE Bug 1236245",
"url": "https://bugzilla.suse.com/1236245"
},
{
"category": "self",
"summary": "SUSE Bug 1236247",
"url": "https://bugzilla.suse.com/1236247"
},
{
"category": "self",
"summary": "SUSE Bug 1236248",
"url": "https://bugzilla.suse.com/1236248"
},
{
"category": "self",
"summary": "SUSE Bug 1236260",
"url": "https://bugzilla.suse.com/1236260"
},
{
"category": "self",
"summary": "SUSE Bug 1236262",
"url": "https://bugzilla.suse.com/1236262"
},
{
"category": "self",
"summary": "SUSE Bug 1236628",
"url": "https://bugzilla.suse.com/1236628"
},
{
"category": "self",
"summary": "SUSE Bug 1236688",
"url": "https://bugzilla.suse.com/1236688"
},
{
"category": "self",
"summary": "SUSE Bug 1236696",
"url": "https://bugzilla.suse.com/1236696"
},
{
"category": "self",
"summary": "SUSE Bug 1236703",
"url": "https://bugzilla.suse.com/1236703"
},
{
"category": "self",
"summary": "SUSE Bug 1236732",
"url": "https://bugzilla.suse.com/1236732"
},
{
"category": "self",
"summary": "SUSE Bug 1236733",
"url": "https://bugzilla.suse.com/1236733"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-52923 page",
"url": "https://www.suse.com/security/cve/CVE-2023-52923/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-26924 page",
"url": "https://www.suse.com/security/cve/CVE-2024-26924/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-27397 page",
"url": "https://www.suse.com/security/cve/CVE-2024-27397/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-35839 page",
"url": "https://www.suse.com/security/cve/CVE-2024-35839/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36476 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36476/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-36908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-36908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39282 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39282/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-39480 page",
"url": "https://www.suse.com/security/cve/CVE-2024-39480/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41042 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-43913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-43913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44934 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-44996 page",
"url": "https://www.suse.com/security/cve/CVE-2024-44996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-45828 page",
"url": "https://www.suse.com/security/cve/CVE-2024-45828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-46896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-46896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-47809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-47809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48873 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48873/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-48881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-48881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49854 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49854/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49948 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49948/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49951 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49951/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49978 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-49998 page",
"url": "https://www.suse.com/security/cve/CVE-2024-49998/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50016 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50016/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50018 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50018/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50039 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50039/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50047 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50047/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50051 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50106 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50106/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50143 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50143/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50199 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50211 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50228 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50256 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50256/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50262 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50272 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50272/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50278 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50280 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50280/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-50299 page",
"url": "https://www.suse.com/security/cve/CVE-2024-50299/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-52332 page",
"url": "https://www.suse.com/security/cve/CVE-2024-52332/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53050 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53064 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53064/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53090 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53090/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53091 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53091/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53095 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53095/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53099 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53099/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53103 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53105 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53105/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53111 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53111/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53113 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53113/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53117 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53117/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53118 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53118/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53119 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53119/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53120 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53120/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53122 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53122/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53125 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53126 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53126/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53127 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53127/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53129 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53129/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53130 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53130/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53131 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53133 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53134 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53136 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53141 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53141/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53142 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53142/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53144 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53144/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53146 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53146/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53148 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53148/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53150 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53151 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53154 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53154/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53155 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53155/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53156 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53156/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53157 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53158 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53158/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53159 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53159/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53160 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53160/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53161 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53161/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53162 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53162/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53164 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53164/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53166 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53168 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53168/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53169 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53169/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53170 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53171 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53171/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53172 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53172/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53173 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53173/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53174 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53175 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53175/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53179 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53179/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53180 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53185 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53185/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53187 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53188 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53188/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53190 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53191 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53191/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53194 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53195 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53196 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53197 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53198 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53200 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53201 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53202 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53203 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53206 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53206/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53207 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53208 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53209 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53210 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53213 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53214 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53215 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53215/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53216 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53216/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53217 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53217/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53222 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53224 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53227 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53229 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53230 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53231 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53232 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53233 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53234 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53236 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53236/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53237 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53237/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53239 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53240 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53240/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53241 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53241/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53685 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53685/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-53690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-53690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-54680 page",
"url": "https://www.suse.com/security/cve/CVE-2024-54680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55639 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55639/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55881 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-55916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-55916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56369 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56372 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56372/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56531 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56531/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56532 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56532/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56533 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56536 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56536/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56538 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56539 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56543 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56546 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56548 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56548/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56549 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56551 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56551/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56557 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56557/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56558 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56562 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56566 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56567 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56568 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56569 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56570 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56571 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56572 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56573 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56574 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56575 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56576 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56577 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56578 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56582 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56584 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56587 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56587/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56588 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56589 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56590 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56593 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56594 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56595 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56596 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56597 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56598 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56598/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56599 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56599/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56600 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56600/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56601 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56601/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56602 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56602/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56603 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56603/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56604 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56604/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56605 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56605/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56606 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56606/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56607 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56607/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56608 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56608/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56609 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56609/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56610 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56611 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56611/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56614 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56614/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56615 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56616 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56616/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56617 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56619 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56620 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56620/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56622 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56622/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56623 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56623/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56625 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56625/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56629 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56629/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56630 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56630/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56631 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56631/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56632 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56634 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56634/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56635 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56635/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56636 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56636/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56637 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56641 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56641/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56642 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56642/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56643 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56643/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56644 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56644/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56645 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56648 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56649 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56650 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56651 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56654 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56654/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56656 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56659 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56660 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56660/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56661 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56662 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56663 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56664 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56665 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56667 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56667/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56670 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56670/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56672 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56672/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56675 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56675/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56677 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56677/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56678 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56678/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56679 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56679/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56681 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56683 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56683/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56687 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56687/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56688 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56688/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56690 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56691 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56691/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56693 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56693/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56694 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56694/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56698 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56698/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56700 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56700/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56701 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56704 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56704/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56705 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56705/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56707 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56707/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56708 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56708/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56709 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56709/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56712 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56715 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56716 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56722 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56722/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56723 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56723/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56724 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56724/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56725 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56725/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56726 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56726/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56727 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56727/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56728 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56729 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56739 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56739/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56741 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56741/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56745 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56746 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56746/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56747 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56747/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56748 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56748/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56752 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56754 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56754/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56755 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56755/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56756 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56756/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56759 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56760 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56763 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56765 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56766 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56767 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56769 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56774 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56775 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56775/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56776 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56776/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56777 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56777/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56778 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56778/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56779 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56780 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56780/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-56787 page",
"url": "https://www.suse.com/security/cve/CVE-2024-56787/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57791 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57791/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57792 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57792/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57793 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57793/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57795 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57795/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57798 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57798/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57801 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57802 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57802/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57804 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57804/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57809 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57809/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57838 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57838/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57849 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57849/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57850 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57857 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57874 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57874/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57876 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57876/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57884 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57887 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57887/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57888 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57888/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57890 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57892 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57892/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57893 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57893/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57896 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57896/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57897 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57897/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57899 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57899/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57903 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57903/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57904 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57904/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57906 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57906/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57907 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57907/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57908 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57908/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57910 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57910/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57911 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57912 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57912/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57913 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57915 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57915/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57916 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57916/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57917 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57917/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57922 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57926 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57926/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57929 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57929/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57931 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57932 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57932/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57933 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57935 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57936 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57936/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57938 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57938/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57940 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57946 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57946/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-8805 page",
"url": "https://www.suse.com/security/cve/CVE-2024-8805/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21632 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21632/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21645 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21645/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21646 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21646/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21649 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21649/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21650 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21650/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21651 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21651/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21652 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21652/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21653 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21653/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21655 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21655/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21656 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21656/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21662 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21662/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21663 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21664 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21674 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21674/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21676 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21676/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21682 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21682/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2025-03-27T15:23:42Z",
"generator": {
"date": "2025-03-27T15:23:42Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2025:20165-1",
"initial_release_date": "2025-03-27T15:23:42Z",
"revision_history": [
{
"date": "2025-03-27T15:23:42Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-6.4.0-25.1.aarch64",
"product": {
"name": "kernel-default-6.4.0-25.1.aarch64",
"product_id": "kernel-default-6.4.0-25.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-6.4.0-24.1.21.4.aarch64",
"product": {
"name": "kernel-default-base-6.4.0-24.1.21.4.aarch64",
"product_id": "kernel-default-base-6.4.0-24.1.21.4.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-6.4.0-25.1.noarch",
"product": {
"name": "kernel-devel-6.4.0-25.1.noarch",
"product_id": "kernel-devel-6.4.0-25.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-macros-6.4.0-25.1.noarch",
"product": {
"name": "kernel-macros-6.4.0-25.1.noarch",
"product_id": "kernel-macros-6.4.0-25.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-6.4.0-25.1.noarch",
"product": {
"name": "kernel-source-6.4.0-25.1.noarch",
"product_id": "kernel-source-6.4.0-25.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-6.4.0-25.1.s390x",
"product": {
"name": "kernel-default-6.4.0-25.1.s390x",
"product_id": "kernel-default-6.4.0-25.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-6.4.0-25.1.s390x",
"product": {
"name": "kernel-default-livepatch-6.4.0-25.1.s390x",
"product_id": "kernel-default-livepatch-6.4.0-25.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"product": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"product_id": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-default-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-default-6.4.0-25.1.x86_64",
"product_id": "kernel-default-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-6.4.0-24.1.21.4.x86_64",
"product": {
"name": "kernel-default-base-6.4.0-24.1.21.4.x86_64",
"product_id": "kernel-default-base-6.4.0-24.1.21.4.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-default-livepatch-6.4.0-25.1.x86_64",
"product_id": "kernel-default-livepatch-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-6.4.0-25.1.x86_64",
"product": {
"name": "kernel-kvmsmall-6.4.0-25.1.x86_64",
"product_id": "kernel-kvmsmall-6.4.0-25.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"product": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"product_id": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-6.4.0-25.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64"
},
"product_reference": "kernel-default-6.4.0-25.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-6.4.0-25.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x"
},
"product_reference": "kernel-default-6.4.0-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-default-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-6.4.0-24.1.21.4.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64"
},
"product_reference": "kernel-default-base-6.4.0-24.1.21.4.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-6.4.0-24.1.21.4.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64"
},
"product_reference": "kernel-default-base-6.4.0-24.1.21.4.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-6.4.0-25.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x"
},
"product_reference": "kernel-default-livepatch-6.4.0-25.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-default-livepatch-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch"
},
"product_reference": "kernel-devel-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kvmsmall-6.4.0-25.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64"
},
"product_reference": "kernel-kvmsmall-6.4.0-25.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x"
},
"product_reference": "kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64"
},
"product_reference": "kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch"
},
"product_reference": "kernel-macros-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-6.4.0-25.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
},
"product_reference": "kernel-source-6.4.0-25.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-52923",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-52923"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: adapt set backend to use GC transaction API\n\nUse the GC transaction API to replace the old and buggy gc API and the\nbusy mark approach.\n\nNo set elements are removed from async garbage collection anymore,\ninstead the _DEAD bit is set on so the set element is not visible from\nlookup path anymore. Async GC enqueues transaction work that might be\naborted and retried later.\n\nrbtree and pipapo set backends does not set on the _DEAD bit from the\nsync GC path since this runs in control plane path where mutex is held.\nIn this case, set elements are deactivated, removed and then released\nvia RCU callback, sync GC never fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-52923",
"url": "https://www.suse.com/security/cve/CVE-2023-52923"
},
{
"category": "external",
"summary": "SUSE Bug 1236104 for CVE-2023-52923",
"url": "https://bugzilla.suse.com/1236104"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2023-52923"
},
{
"cve": "CVE-2024-26924",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-26924"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_pipapo: do not free live element\n\nPablo reports a crash with large batches of elements with a\nback-to-back add/remove pattern. Quoting Pablo:\n\n add_elem(\"00000000\") timeout 100 ms\n ...\n add_elem(\"0000000X\") timeout 100 ms\n del_elem(\"0000000X\") \u003c---------------- delete one that was just added\n ...\n add_elem(\"00005000\") timeout 100 ms\n\n 1) nft_pipapo_remove() removes element 0000000X\n Then, KASAN shows a splat.\n\nLooking at the remove function there is a chance that we will drop a\nrule that maps to a non-deactivated element.\n\nRemoval happens in two steps, first we do a lookup for key k and return the\nto-be-removed element and mark it as inactive in the next generation.\nThen, in a second step, the element gets removed from the set/map.\n\nThe _remove function does not work correctly if we have more than one\nelement that share the same key.\n\nThis can happen if we insert an element into a set when the set already\nholds an element with same key, but the element mapping to the existing\nkey has timed out or is not active in the next generation.\n\nIn such case its possible that removal will unmap the wrong element.\nIf this happens, we will leak the non-deactivated element, it becomes\nunreachable.\n\nThe element that got deactivated (and will be freed later) will\nremain reachable in the set data structure, this can result in\na crash when such an element is retrieved during lookup (stale\npointer).\n\nAdd a check that the fully matching key does in fact map to the element\nthat we have marked as inactive in the deactivation step.\nIf not, we need to continue searching.\n\nAdd a bug/warn trap at the end of the function as well, the remove\nfunction must not ever be called with an invisible/unreachable/non-existent\nelement.\n\nv2: avoid uneeded temporary variable (Stefano)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-26924",
"url": "https://www.suse.com/security/cve/CVE-2024-26924"
},
{
"category": "external",
"summary": "SUSE Bug 1223387 for CVE-2024-26924",
"url": "https://bugzilla.suse.com/1223387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-26924"
},
{
"cve": "CVE-2024-27397",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-27397"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: use timestamp to check for set element timeout\n\nAdd a timestamp field at the beginning of the transaction, store it\nin the nftables per-netns area.\n\nUpdate set backend .insert, .deactivate and sync gc path to use the\ntimestamp, this avoids that an element expires while control plane\ntransaction is still unfinished.\n\n.lookup and .update, which are used from packet path, still use the\ncurrent time to check if the element has expired. And .get path and dump\nalso since this runs lockless under rcu read size lock. Then, there is\nasync gc which also needs to check the current time since it runs\nasynchronously from a workqueue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-27397",
"url": "https://www.suse.com/security/cve/CVE-2024-27397"
},
{
"category": "external",
"summary": "SUSE Bug 1224095 for CVE-2024-27397",
"url": "https://bugzilla.suse.com/1224095"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-27397"
},
{
"cve": "CVE-2024-35839",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-35839"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: bridge: replace physindev with physinif in nf_bridge_info\n\nAn skb can be added to a neigh-\u003earp_queue while waiting for an arp\nreply. Where original skb\u0027s skb-\u003edev can be different to neigh\u0027s\nneigh-\u003edev. For instance in case of bridging dnated skb from one veth to\nanother, the skb would be added to a neigh-\u003earp_queue of the bridge.\n\nAs skb-\u003edev can be reset back to nf_bridge-\u003ephysindev and used, and as\nthere is no explicit mechanism that prevents this physindev from been\nfreed under us (for instance neigh_flush_dev doesn\u0027t cleanup skbs from\ndifferent device\u0027s neigh queue) we can crash on e.g. this stack:\n\narp_process\n neigh_update\n skb = __skb_dequeue(\u0026neigh-\u003earp_queue)\n neigh_resolve_output(..., skb)\n ...\n br_nf_dev_xmit\n br_nf_pre_routing_finish_bridge_slow\n skb-\u003edev = nf_bridge-\u003ephysindev\n br_handle_frame_finish\n\nLet\u0027s use plain ifindex instead of net_device link. To peek into the\noriginal net_device we will use dev_get_by_index_rcu(). Thus either we\nget device and are safe to use it or we don\u0027t get it and drop skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-35839",
"url": "https://www.suse.com/security/cve/CVE-2024-35839"
},
{
"category": "external",
"summary": "SUSE Bug 1224726 for CVE-2024-35839",
"url": "https://bugzilla.suse.com/1224726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-35839"
},
{
"cve": "CVE-2024-36476",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36476"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rtrs: Ensure \u0027ib_sge list\u0027 is accessible\n\nMove the declaration of the \u0027ib_sge list\u0027 variable outside the\n\u0027always_invalidate\u0027 block to ensure it remains accessible for use\nthroughout the function.\n\nPreviously, \u0027ib_sge list\u0027 was declared within the \u0027always_invalidate\u0027\nblock, limiting its accessibility, then caused a\n\u0027BUG: kernel NULL pointer dereference\u0027[1].\n ? __die_body.cold+0x19/0x27\n ? page_fault_oops+0x15a/0x2d0\n ? search_module_extables+0x19/0x60\n ? search_bpf_extables+0x5f/0x80\n ? exc_page_fault+0x7e/0x180\n ? asm_exc_page_fault+0x26/0x30\n ? memcpy_orig+0xd5/0x140\n rxe_mr_copy+0x1c3/0x200 [rdma_rxe]\n ? rxe_pool_get_index+0x4b/0x80 [rdma_rxe]\n copy_data+0xa5/0x230 [rdma_rxe]\n rxe_requester+0xd9b/0xf70 [rdma_rxe]\n ? finish_task_switch.isra.0+0x99/0x2e0\n rxe_sender+0x13/0x40 [rdma_rxe]\n do_task+0x68/0x1e0 [rdma_rxe]\n process_one_work+0x177/0x330\n worker_thread+0x252/0x390\n ? __pfx_worker_thread+0x10/0x10\n\nThis change ensures the variable is available for subsequent operations\nthat require it.\n\n[1] https://lore.kernel.org/linux-rdma/6a1f3e8f-deb0-49f9-bc69-a9b03ecfcda7@fujitsu.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36476",
"url": "https://www.suse.com/security/cve/CVE-2024-36476"
},
{
"category": "external",
"summary": "SUSE Bug 1235902 for CVE-2024-36476",
"url": "https://bugzilla.suse.com/1235902"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-36476"
},
{
"cve": "CVE-2024-36908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-36908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-iocost: do not WARN if iocg was already offlined\n\nIn iocg_pay_debt(), warn is triggered if \u0027active_list\u0027 is empty, which\nis intended to confirm iocg is active when it has debt. However, warn\ncan be triggered during a blkcg or disk removal, if iocg_waitq_timer_fn()\nis run at that time:\n\n WARNING: CPU: 0 PID: 2344971 at block/blk-iocost.c:1402 iocg_pay_debt+0x14c/0x190\n Call trace:\n iocg_pay_debt+0x14c/0x190\n iocg_kick_waitq+0x438/0x4c0\n iocg_waitq_timer_fn+0xd8/0x130\n __run_hrtimer+0x144/0x45c\n __hrtimer_run_queues+0x16c/0x244\n hrtimer_interrupt+0x2cc/0x7b0\n\nThe warn in this situation is meaningless. Since this iocg is being\nremoved, the state of the \u0027active_list\u0027 is irrelevant, and \u0027waitq_timer\u0027\nis canceled after removing \u0027active_list\u0027 in ioc_pd_free(), which ensures\niocg is freed after iocg_waitq_timer_fn() returns.\n\nTherefore, add the check if iocg was already offlined to avoid warn\nwhen removing a blkcg or disk.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-36908",
"url": "https://www.suse.com/security/cve/CVE-2024-36908"
},
{
"category": "external",
"summary": "SUSE Bug 1225743 for CVE-2024-36908",
"url": "https://bugzilla.suse.com/1225743"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-36908"
},
{
"cve": "CVE-2024-39282",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39282"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: wwan: t7xx: Fix FSM command timeout issue\n\nWhen driver processes the internal state change command, it use an\nasynchronous thread to process the command operation. If the main\nthread detects that the task has timed out, the asynchronous thread\nwill panic when executing the completion notification because the\nmain thread completion object has been released.\n\nBUG: unable to handle page fault for address: fffffffffffffff8\nPGD 1f283a067 P4D 1f283a067 PUD 1f283c067 PMD 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nRIP: 0010:complete_all+0x3e/0xa0\n[...]\nCall Trace:\n \u003cTASK\u003e\n ? __die_body+0x68/0xb0\n ? page_fault_oops+0x379/0x3e0\n ? exc_page_fault+0x69/0xa0\n ? asm_exc_page_fault+0x22/0x30\n ? complete_all+0x3e/0xa0\n fsm_main_thread+0xa3/0x9c0 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_autoremove_wake_function+0x10/0x10\n kthread+0xd8/0x110\n ? __pfx_fsm_main_thread+0x10/0x10 [mtk_t7xx (HASH:1400 5)]\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x38/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n[...]\nCR2: fffffffffffffff8\n---[ end trace 0000000000000000 ]---\n\nUse the reference counter to ensure safe release as Sergey suggests:\nhttps://lore.kernel.org/all/da90f64c-260a-4329-87bf-1f9ff20a5951@gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39282",
"url": "https://www.suse.com/security/cve/CVE-2024-39282"
},
{
"category": "external",
"summary": "SUSE Bug 1235903 for CVE-2024-39282",
"url": "https://bugzilla.suse.com/1235903"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-39282"
},
{
"cve": "CVE-2024-39480",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-39480"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkdb: Fix buffer overflow during tab-complete\n\nCurrently, when the user attempts symbol completion with the Tab key, kdb\nwill use strncpy() to insert the completed symbol into the command buffer.\nUnfortunately it passes the size of the source buffer rather than the\ndestination to strncpy() with predictably horrible results. Most obviously\nif the command buffer is already full but cp, the cursor position, is in\nthe middle of the buffer, then we will write past the end of the supplied\nbuffer.\n\nFix this by replacing the dubious strncpy() calls with memmove()/memcpy()\ncalls plus explicit boundary checks to make sure we have enough space\nbefore we start moving characters around.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-39480",
"url": "https://www.suse.com/security/cve/CVE-2024-39480"
},
{
"category": "external",
"summary": "SUSE Bug 1227445 for CVE-2024-39480",
"url": "https://bugzilla.suse.com/1227445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-39480"
},
{
"cve": "CVE-2024-41042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41042"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: prefer nft_chain_validate\n\nnft_chain_validate already performs loop detection because a cycle will\nresult in a call stack overflow (ctx-\u003elevel \u003e= NFT_JUMP_STACK_SIZE).\n\nIt also follows maps via -\u003evalidate callback in nft_lookup, so there\nappears no reason to iterate the maps again.\n\nnf_tables_check_loops() and all its helper functions can be removed.\nThis improves ruleset load time significantly, from 23s down to 12s.\n\nThis also fixes a crash bug. Old loop detection code can result in\nunbounded recursion:\n\nBUG: TASK stack guard page was hit at ....\nOops: stack guard page: 0000 [#1] PREEMPT SMP KASAN\nCPU: 4 PID: 1539 Comm: nft Not tainted 6.10.0-rc5+ #1\n[..]\n\nwith a suitable ruleset during validation of register stores.\n\nI can\u0027t see any actual reason to attempt to check for this from\nnft_validate_register_store(), at this point the transaction is still in\nprogress, so we don\u0027t have a full picture of the rule graph.\n\nFor nf-next it might make sense to either remove it or make this depend\non table-\u003evalidate_state in case we could catch an error earlier\n(for improved error reporting to userspace).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41042",
"url": "https://www.suse.com/security/cve/CVE-2024-41042"
},
{
"category": "external",
"summary": "SUSE Bug 1228526 for CVE-2024-41042",
"url": "https://bugzilla.suse.com/1228526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-41042"
},
{
"cve": "CVE-2024-43913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-43913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: apple: fix device reference counting\n\nDrivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl.\nSplit the allocation side out to make the error handling boundary easier\nto navigate. The apple driver had been doing this wrong, leaking the\ncontroller device memory on a tagset failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-43913",
"url": "https://www.suse.com/security/cve/CVE-2024-43913"
},
{
"category": "external",
"summary": "SUSE Bug 1229833 for CVE-2024-43913",
"url": "https://bugzilla.suse.com/1229833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-43913"
},
{
"cve": "CVE-2024-44934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44934"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: wait for previous gc cycles when removing port\n\nsyzbot hit a use-after-free[1] which is caused because the bridge doesn\u0027t\nmake sure that all previous garbage has been collected when removing a\nport. What happens is:\n CPU 1 CPU 2\n start gc cycle remove port\n acquire gc lock first\n wait for lock\n call br_multicasg_gc() directly\n acquire lock now but free port\n the port can be freed\n while grp timers still\n running\n\nMake sure all previous gc cycles have finished by using flush_work before\nfreeing the port.\n\n[1]\n BUG: KASAN: slab-use-after-free in br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n Read of size 8 at addr ffff888071d6d000 by task syz.5.1232/9699\n\n CPU: 1 PID: 9699 Comm: syz.5.1232 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024\n Call Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:114\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0xc3/0x620 mm/kasan/report.c:488\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n br_multicast_port_group_expired+0x4c0/0x550 net/bridge/br_multicast.c:861\n call_timer_fn+0x1a3/0x610 kernel/time/timer.c:1792\n expire_timers kernel/time/timer.c:1843 [inline]\n __run_timers+0x74b/0xaf0 kernel/time/timer.c:2417\n __run_timer_base kernel/time/timer.c:2428 [inline]\n __run_timer_base kernel/time/timer.c:2421 [inline]\n run_timer_base+0x111/0x190 kernel/time/timer.c:2437",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44934",
"url": "https://www.suse.com/security/cve/CVE-2024-44934"
},
{
"category": "external",
"summary": "SUSE Bug 1229809 for CVE-2024-44934",
"url": "https://bugzilla.suse.com/1229809"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-44934"
},
{
"cve": "CVE-2024-44996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-44996"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: fix recursive -\u003erecvmsg calls\n\nAfter a vsock socket has been added to a BPF sockmap, its prot-\u003erecvmsg\nhas been replaced with vsock_bpf_recvmsg(). Thus the following\nrecursiion could happen:\n\nvsock_bpf_recvmsg()\n -\u003e __vsock_recvmsg()\n -\u003e vsock_connectible_recvmsg()\n -\u003e prot-\u003erecvmsg()\n -\u003e vsock_bpf_recvmsg() again\n\nWe need to fix it by calling the original -\u003erecvmsg() without any BPF\nsockmap logic in __vsock_recvmsg().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-44996",
"url": "https://www.suse.com/security/cve/CVE-2024-44996"
},
{
"category": "external",
"summary": "SUSE Bug 1230205 for CVE-2024-44996",
"url": "https://bugzilla.suse.com/1230205"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-44996"
},
{
"cve": "CVE-2024-45828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-45828"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: mipi-i3c-hci: Mask ring interrupts before ring stop request\n\nBus cleanup path in DMA mode may trigger a RING_OP_STAT interrupt when\nthe ring is being stopped. Depending on timing between ring stop request\ncompletion, interrupt handler removal and code execution this may lead\nto a NULL pointer dereference in hci_dma_irq_handler() if it gets to run\nafter the io_data pointer is set to NULL in hci_dma_cleanup().\n\nPrevent this my masking the ring interrupts before ring stop request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-45828",
"url": "https://www.suse.com/security/cve/CVE-2024-45828"
},
{
"category": "external",
"summary": "SUSE Bug 1235705 for CVE-2024-45828",
"url": "https://bugzilla.suse.com/1235705"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-45828"
},
{
"cve": "CVE-2024-46896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-46896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: don\u0027t access invalid sched\n\nSince 2320c9e6a768 (\"drm/sched: memset() \u0027job\u0027 in drm_sched_job_init()\")\naccessing job-\u003ebase.sched can produce unexpected results as the initialisation\nof (*job)-\u003ebase.sched done in amdgpu_job_alloc is overwritten by the\nmemset.\n\nThis commit fixes an issue when a CS would fail validation and would\nbe rejected after job-\u003enum_ibs is incremented. In this case,\namdgpu_ib_free(ring-\u003eadev, ...) will be called, which would crash the\nmachine because the ring value is bogus.\n\nTo fix this, pass a NULL pointer to amdgpu_ib_free(): we can do this\nbecause the device is actually not used in this function.\n\nThe next commit will remove the ring argument completely.\n\n(cherry picked from commit 2ae520cb12831d264ceb97c61f72c59d33c0dbd7)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-46896",
"url": "https://www.suse.com/security/cve/CVE-2024-46896"
},
{
"category": "external",
"summary": "SUSE Bug 1235707 for CVE-2024-46896",
"url": "https://bugzilla.suse.com/1235707"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-46896"
},
{
"cve": "CVE-2024-47141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npinmux: Use sequential access to access desc-\u003epinmux data\n\nWhen two client of the same gpio call pinctrl_select_state() for the\nsame functionality, we are seeing NULL pointer issue while accessing\ndesc-\u003emux_owner.\n\nLet\u0027s say two processes A, B executing in pin_request() for the same pin\nand process A updates the desc-\u003emux_usecount but not yet updated the\ndesc-\u003emux_owner while process B see the desc-\u003emux_usecount which got\nupdated by A path and further executes strcmp and while accessing\ndesc-\u003emux_owner it crashes with NULL pointer.\n\nSerialize the access to mux related setting with a mutex lock.\n\n\tcpu0 (process A)\t\t\tcpu1(process B)\n\npinctrl_select_state() {\t\t pinctrl_select_state() {\n pin_request() {\t\t\t\tpin_request() {\n ...\n\t\t\t\t\t\t ....\n } else {\n desc-\u003emux_usecount++;\n \t\t\t\t\t\tdesc-\u003emux_usecount \u0026\u0026 strcmp(desc-\u003emux_owner, owner)) {\n\n if (desc-\u003emux_usecount \u003e 1)\n return 0;\n desc-\u003emux_owner = owner;\n\n }\t\t\t\t\t\t}",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47141",
"url": "https://www.suse.com/security/cve/CVE-2024-47141"
},
{
"category": "external",
"summary": "SUSE Bug 1235708 for CVE-2024-47141",
"url": "https://bugzilla.suse.com/1235708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47141"
},
{
"cve": "CVE-2024-47143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-debug: fix a possible deadlock on radix_lock\n\nradix_lock() shouldn\u0027t be held while holding dma_hash_entry[idx].lock\notherwise, there\u0027s a possible deadlock scenario when\ndma debug API is called holding rq_lock():\n\nCPU0 CPU1 CPU2\ndma_free_attrs()\ncheck_unmap() add_dma_entry() __schedule() //out\n (A) rq_lock()\nget_hash_bucket()\n(A) dma_entry_hash\n check_sync()\n (A) radix_lock() (W) dma_entry_hash\ndma_entry_free()\n(W) radix_lock()\n // CPU2\u0027s one\n (W) rq_lock()\n\nCPU1 situation can happen when it extending radix tree and\nit tries to wake up kswapd via wake_all_kswapd().\n\nCPU2 situation can happen while perf_event_task_sched_out()\n(i.e. dma sync operation is called while deleting perf_event using\n etm and etr tmc which are Arm Coresight hwtracing driver backends).\n\nTo remove this possible situation, call dma_entry_free() after\nput_hash_bucket() in check_unmap().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47143",
"url": "https://www.suse.com/security/cve/CVE-2024-47143"
},
{
"category": "external",
"summary": "SUSE Bug 1235710 for CVE-2024-47143",
"url": "https://bugzilla.suse.com/1235710"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47143"
},
{
"cve": "CVE-2024-47678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nicmp: change the order of rate limits\n\nICMP messages are ratelimited :\n\nAfter the blamed commits, the two rate limiters are applied in this order:\n\n1) host wide ratelimit (icmp_global_allow())\n\n2) Per destination ratelimit (inetpeer based)\n\nIn order to avoid side-channels attacks, we need to apply\nthe per destination check first.\n\nThis patch makes the following change :\n\n1) icmp_global_allow() checks if the host wide limit is reached.\n But credits are not yet consumed. This is deferred to 3)\n\n2) The per destination limit is checked/updated.\n This might add a new node in inetpeer tree.\n\n3) icmp_global_consume() consumes tokens if prior operations succeeded.\n\nThis means that host wide ratelimit is still effective\nin keeping inetpeer tree small even under DDOS.\n\nAs a bonus, I removed icmp_global.lock as the fast path\ncan use a lock-free operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47678",
"url": "https://www.suse.com/security/cve/CVE-2024-47678"
},
{
"category": "external",
"summary": "SUSE Bug 1231854 for CVE-2024-47678",
"url": "https://bugzilla.suse.com/1231854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47678"
},
{
"cve": "CVE-2024-47809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-47809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndlm: fix possible lkb_resource null dereference\n\nThis patch fixes a possible null pointer dereference when this function is\ncalled from request_lock() as lkb-\u003elkb_resource is not assigned yet,\nonly after validate_lock_args() by calling attach_lkb(). Another issue\nis that a resource name could be a non printable bytearray and we cannot\nassume to be ASCII coded.\n\nThe log functionality is probably never being hit when DLM is used in\nnormal way and no debug logging is enabled. The null pointer dereference\ncan only occur on a new created lkb that does not have the resource\nassigned yet, it probably never hits the null pointer dereference but we\nshould be sure that other changes might not change this behaviour and we\nactually can hit the mentioned null pointer dereference.\n\nIn this patch we just drop the printout of the resource name, the lkb id\nis enough to make a possible connection to a resource name if this\nexists.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-47809",
"url": "https://www.suse.com/security/cve/CVE-2024-47809"
},
{
"category": "external",
"summary": "SUSE Bug 1235714 for CVE-2024-47809",
"url": "https://bugzilla.suse.com/1235714"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-47809"
},
{
"cve": "CVE-2024-48873",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48873"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: check return value of ieee80211_probereq_get() for RNR\n\nThe return value of ieee80211_probereq_get() might be NULL, so check it\nbefore using to avoid NULL pointer access.\n\nAddresses-Coverity-ID: 1529805 (\"Dereference null return value\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48873",
"url": "https://www.suse.com/security/cve/CVE-2024-48873"
},
{
"category": "external",
"summary": "SUSE Bug 1235716 for CVE-2024-48873",
"url": "https://bugzilla.suse.com/1235716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-48873"
},
{
"cve": "CVE-2024-48881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-48881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721 if (!IS_ERR_OR_NULL(c-\u003eroot))\n1722 list_add(\u0026c-\u003eroot-\u003elist, \u0026c-\u003ebtree_cache);\n\n\u003eFrom the above code in cache_set_flush(), if previous registration code\nfails before allocating c-\u003eroot, it is possible c-\u003eroot is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc-\u003eroot is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-48881",
"url": "https://www.suse.com/security/cve/CVE-2024-48881"
},
{
"category": "external",
"summary": "SUSE Bug 1235727 for CVE-2024-48881",
"url": "https://bugzilla.suse.com/1235727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-48881"
},
{
"cve": "CVE-2024-49569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-rdma: unquiesce admin_q before destroy it\n\nKernel will hang on destroy admin_q while we create ctrl failed, such\nas following calltrace:\n\nPID: 23644 TASK: ff2d52b40f439fc0 CPU: 2 COMMAND: \"nvme\"\n #0 [ff61d23de260fb78] __schedule at ffffffff8323bc15\n #1 [ff61d23de260fc08] schedule at ffffffff8323c014\n #2 [ff61d23de260fc28] blk_mq_freeze_queue_wait at ffffffff82a3dba1\n #3 [ff61d23de260fc78] blk_freeze_queue at ffffffff82a4113a\n #4 [ff61d23de260fc90] blk_cleanup_queue at ffffffff82a33006\n #5 [ff61d23de260fcb0] nvme_rdma_destroy_admin_queue at ffffffffc12686ce\n #6 [ff61d23de260fcc8] nvme_rdma_setup_ctrl at ffffffffc1268ced\n #7 [ff61d23de260fd28] nvme_rdma_create_ctrl at ffffffffc126919b\n #8 [ff61d23de260fd68] nvmf_dev_write at ffffffffc024f362\n #9 [ff61d23de260fe38] vfs_write at ffffffff827d5f25\n RIP: 00007fda7891d574 RSP: 00007ffe2ef06958 RFLAGS: 00000202\n RAX: ffffffffffffffda RBX: 000055e8122a4d90 RCX: 00007fda7891d574\n RDX: 000000000000012b RSI: 000055e8122a4d90 RDI: 0000000000000004\n RBP: 00007ffe2ef079c0 R8: 000000000000012b R9: 000055e8122a4d90\n R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004\n R13: 000055e8122923c0 R14: 000000000000012b R15: 00007fda78a54500\n ORIG_RAX: 0000000000000001 CS: 0033 SS: 002b\n\nThis due to we have quiesced admi_q before cancel requests, but forgot\nto unquiesce before destroy it, as a result we fail to drain the\npending requests, and hang on blk_mq_freeze_queue_wait() forever. Here\ntry to reuse nvme_rdma_teardown_admin_queue() to fix this issue and\nsimplify the code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49569",
"url": "https://www.suse.com/security/cve/CVE-2024-49569"
},
{
"category": "external",
"summary": "SUSE Bug 1235730 for CVE-2024-49569",
"url": "https://bugzilla.suse.com/1235730"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49569"
},
{
"cve": "CVE-2024-49854",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49854"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix uaf for accessing waker_bfqq after splitting\n\nAfter commit 42c306ed7233 (\"block, bfq: don\u0027t break merge chain in\nbfq_split_bfqq()\"), if the current procress is the last holder of bfqq,\nthe bfqq can be freed after bfq_split_bfqq(). Hence recored the bfqq and\nthen access bfqq-\u003ewaker_bfqq may trigger UAF. What\u0027s more, the waker_bfqq\nmay in the merge chain of bfqq, hence just recored waker_bfqq is still\nnot safe.\n\nFix the problem by adding a helper bfq_waker_bfqq() to check if\nbfqq-\u003ewaker_bfqq is in the merge chain, and current procress is the only\nholder.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49854",
"url": "https://www.suse.com/security/cve/CVE-2024-49854"
},
{
"category": "external",
"summary": "SUSE Bug 1232193 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1232193"
},
{
"category": "external",
"summary": "SUSE Bug 1236571 for CVE-2024-49854",
"url": "https://bugzilla.suse.com/1236571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-49854"
},
{
"cve": "CVE-2024-49884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix slab-use-after-free in ext4_split_extent_at()\n\nWe hit the following use-after-free:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_split_extent_at+0xba8/0xcc0\nRead of size 2 at addr ffff88810548ed08 by task kworker/u20:0/40\nCPU: 0 PID: 40 Comm: kworker/u20:0 Not tainted 6.9.0-dirty #724\nCall Trace:\n \u003cTASK\u003e\n kasan_report+0x93/0xc0\n ext4_split_extent_at+0xba8/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nAllocated by task 40:\n __kmalloc_noprof+0x1ac/0x480\n ext4_find_extent+0xf3b/0x1e70\n ext4_ext_map_blocks+0x188/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n\nFreed by task 40:\n kfree+0xf1/0x2b0\n ext4_find_extent+0xa71/0x1e70\n ext4_ext_insert_extent+0xa22/0x3260\n ext4_split_extent_at+0x3ef/0xcc0\n ext4_split_extent.isra.0+0x18f/0x500\n ext4_split_convert_extents+0x275/0x750\n ext4_ext_handle_unwritten_extents+0x73e/0x1580\n ext4_ext_map_blocks+0xe20/0x2dc0\n ext4_map_blocks+0x724/0x1700\n ext4_do_writepages+0x12d6/0x2a70\n[...]\n==================================================================\n\nThe flow of issue triggering is as follows:\n\next4_split_extent_at\n path = *ppath\n ext4_ext_insert_extent(ppath)\n ext4_ext_create_new_leaf(ppath)\n ext4_find_extent(orig_path)\n path = *orig_path\n read_extent_tree_block\n // return -ENOMEM or -EIO\n ext4_free_ext_path(path)\n kfree(path)\n *orig_path = NULL\n a. If err is -ENOMEM:\n ext4_ext_dirty(path + path-\u003ep_depth)\n // path use-after-free !!!\n b. If err is -EIO and we have EXT_DEBUG defined:\n ext4_ext_show_leaf(path)\n eh = path[depth].p_hdr\n // path also use-after-free !!!\n\nSo when trying to zeroout or fix the extent length, call ext4_find_extent()\nto update the path.\n\nIn addition we use *ppath directly as an ext4_ext_show_leaf() input to\navoid possible use-after-free when EXT_DEBUG is defined, and to avoid\nunnecessary path updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49884",
"url": "https://www.suse.com/security/cve/CVE-2024-49884"
},
{
"category": "external",
"summary": "SUSE Bug 1225742 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1225742"
},
{
"category": "external",
"summary": "SUSE Bug 1232198 for CVE-2024-49884",
"url": "https://bugzilla.suse.com/1232198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49884"
},
{
"cve": "CVE-2024-49915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49915"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn32_init_hw` function. The issue could occur when `dc-\u003eclk_mgr` is\nnull.\n\nThe fix adds a check to ensure `dc-\u003eclk_mgr` is not null before\naccessing its functions. This prevents a potential null pointer\ndereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn32/dcn32_hwseq.c:961 dcn32_init_hw() error: we previously assumed \u0027dc-\u003eclk_mgr\u0027 could be null (see line 782)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49915",
"url": "https://www.suse.com/security/cve/CVE-2024-49915"
},
{
"category": "external",
"summary": "SUSE Bug 1231963 for CVE-2024-49915",
"url": "https://bugzilla.suse.com/1231963"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49915"
},
{
"cve": "CVE-2024-49948",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49948"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: add more sanity checks to qdisc_pkt_len_init()\n\nOne path takes care of SKB_GSO_DODGY, assuming\nskb-\u003elen is bigger than hdr_len.\n\nvirtio_net_hdr_to_skb() does not fully dissect TCP headers,\nit only make sure it is at least 20 bytes.\n\nIt is possible for an user to provide a malicious \u0027GSO\u0027 packet,\ntotal length of 80 bytes.\n\n- 20 bytes of IPv4 header\n- 60 bytes TCP header\n- a small gso_size like 8\n\nvirtio_net_hdr_to_skb() would declare this packet as a normal\nGSO packet, because it would see 40 bytes of payload,\nbigger than gso_size.\n\nWe need to make detect this case to not underflow\nqdisc_skb_cb(skb)-\u003epkt_len.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49948",
"url": "https://www.suse.com/security/cve/CVE-2024-49948"
},
{
"category": "external",
"summary": "SUSE Bug 1232161 for CVE-2024-49948",
"url": "https://bugzilla.suse.com/1232161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49948"
},
{
"cve": "CVE-2024-49951",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49951"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible crash on mgmt_index_removed\n\nIf mgmt_index_removed is called while there are commands queued on\ncmd_sync it could lead to crashes like the bellow trace:\n\n0x0000053D: __list_del_entry_valid_or_report+0x98/0xdc\n0x0000053D: mgmt_pending_remove+0x18/0x58 [bluetooth]\n0x0000053E: mgmt_remove_adv_monitor_complete+0x80/0x108 [bluetooth]\n0x0000053E: hci_cmd_sync_work+0xbc/0x164 [bluetooth]\n\nSo while handling mgmt_index_removed this attempts to dequeue\ncommands passed as user_data to cmd_sync.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49951",
"url": "https://www.suse.com/security/cve/CVE-2024-49951"
},
{
"category": "external",
"summary": "SUSE Bug 1232158 for CVE-2024-49951",
"url": "https://bugzilla.suse.com/1232158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49951"
},
{
"cve": "CVE-2024-49978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49978"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngso: fix udp gso fraglist segmentation after pull from frag_list\n\nDetect gso fraglist skbs with corrupted geometry (see below) and\npass these to skb_segment instead of skb_segment_list, as the first\ncan segment them correctly.\n\nValid SKB_GSO_FRAGLIST skbs\n- consist of two or more segments\n- the head_skb holds the protocol headers plus first gso_size\n- one or more frag_list skbs hold exactly one segment\n- all but the last must be gso_size\n\nOptional datapath hooks such as NAT and BPF (bpf_skb_pull_data) can\nmodify these skbs, breaking these invariants.\n\nIn extreme cases they pull all data into skb linear. For UDP, this\ncauses a NULL ptr deref in __udpv4_gso_segment_list_csum at\nudp_hdr(seg-\u003enext)-\u003edest.\n\nDetect invalid geometry due to pull, by checking head_skb size.\nDon\u0027t just drop, as this may blackhole a destination. Convert to be\nable to pass to regular skb_segment.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49978",
"url": "https://www.suse.com/security/cve/CVE-2024-49978"
},
{
"category": "external",
"summary": "SUSE Bug 1232101 for CVE-2024-49978",
"url": "https://bugzilla.suse.com/1232101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49978"
},
{
"cve": "CVE-2024-49998",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-49998"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: improve shutdown sequence\n\nAlexander Sverdlin presents 2 problems during shutdown with the\nlan9303 driver. One is specific to lan9303 and the other just happens\nto reproduce there.\n\nThe first problem is that lan9303 is unique among DSA drivers in that it\ncalls dev_get_drvdata() at \"arbitrary runtime\" (not probe, not shutdown,\nnot remove):\n\nphy_state_machine()\n-\u003e ...\n -\u003e dsa_user_phy_read()\n -\u003e ds-\u003eops-\u003ephy_read()\n -\u003e lan9303_phy_read()\n -\u003e chip-\u003eops-\u003ephy_read()\n -\u003e lan9303_mdio_phy_read()\n -\u003e dev_get_drvdata()\n\nBut we never stop the phy_state_machine(), so it may continue to run\nafter dsa_switch_shutdown(). Our common pattern in all DSA drivers is\nto set drvdata to NULL to suppress the remove() method that may come\nafterwards. But in this case it will result in an NPD.\n\nThe second problem is that the way in which we set\ndp-\u003econduit-\u003edsa_ptr = NULL; is concurrent with receive packet\nprocessing. dsa_switch_rcv() checks once whether dev-\u003edsa_ptr is NULL,\nbut afterwards, rather than continuing to use that non-NULL value,\ndev-\u003edsa_ptr is dereferenced again and again without NULL checks:\ndsa_conduit_find_user() and many other places. In between dereferences,\nthere is no locking to ensure that what was valid once continues to be\nvalid.\n\nBoth problems have the common aspect that closing the conduit interface\nsolves them.\n\nIn the first case, dev_close(conduit) triggers the NETDEV_GOING_DOWN\nevent in dsa_user_netdevice_event() which closes user ports as well.\ndsa_port_disable_rt() calls phylink_stop(), which synchronously stops\nthe phylink state machine, and ds-\u003eops-\u003ephy_read() will thus no longer\ncall into the driver after this point.\n\nIn the second case, dev_close(conduit) should do this, as per\nDocumentation/networking/driver.rst:\n\n| Quiescence\n| ----------\n|\n| After the ndo_stop routine has been called, the hardware must\n| not receive or transmit any data. All in flight packets must\n| be aborted. If necessary, poll or wait for completion of\n| any reset commands.\n\nSo it should be sufficient to ensure that later, when we zeroize\nconduit-\u003edsa_ptr, there will be no concurrent dsa_switch_rcv() call\non this conduit.\n\nThe addition of the netif_device_detach() function is to ensure that\nioctls, rtnetlinks and ethtool requests on the user ports no longer\npropagate down to the driver - we\u0027re no longer prepared to handle them.\n\nThe race condition actually did not exist when commit 0650bf52b31f\n(\"net: dsa: be compatible with masters which unregister on shutdown\")\nfirst introduced dsa_switch_shutdown(). It was created later, when we\nstopped unregistering the user interfaces from a bad spot, and we just\nreplaced that sequence with a racy zeroization of conduit-\u003edsa_ptr\n(one which doesn\u0027t ensure that the interfaces aren\u0027t up).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-49998",
"url": "https://www.suse.com/security/cve/CVE-2024-49998"
},
{
"category": "external",
"summary": "SUSE Bug 1232087 for CVE-2024-49998",
"url": "https://bugzilla.suse.com/1232087"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-49998"
},
{
"cve": "CVE-2024-50016",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50016"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50016",
"url": "https://www.suse.com/security/cve/CVE-2024-50016"
},
{
"category": "external",
"summary": "SUSE Bug 1232420 for CVE-2024-50016",
"url": "https://bugzilla.suse.com/1232420"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50016"
},
{
"cve": "CVE-2024-50018",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50018"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50018",
"url": "https://www.suse.com/security/cve/CVE-2024-50018"
},
{
"category": "external",
"summary": "SUSE Bug 1232419 for CVE-2024-50018",
"url": "https://bugzilla.suse.com/1232419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50018"
},
{
"cve": "CVE-2024-50039",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50039"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: accept TCA_STAB only for root qdisc\n\nMost qdiscs maintain their backlog using qdisc_pkt_len(skb)\non the assumption it is invariant between the enqueue()\nand dequeue() handlers.\n\nUnfortunately syzbot can crash a host rather easily using\na TBF + SFQ combination, with an STAB on SFQ [1]\n\nWe can\u0027t support TCA_STAB on arbitrary level, this would\nrequire to maintain per-qdisc storage.\n\n[1]\n[ 88.796496] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[ 88.798611] #PF: supervisor read access in kernel mode\n[ 88.799014] #PF: error_code(0x0000) - not-present page\n[ 88.799506] PGD 0 P4D 0\n[ 88.799829] Oops: Oops: 0000 [#1] SMP NOPTI\n[ 88.800569] CPU: 14 UID: 0 PID: 2053 Comm: b371744477 Not tainted 6.12.0-rc1-virtme #1117\n[ 88.801107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 88.801779] RIP: 0010:sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.802544] Code: 0f b7 50 12 48 8d 04 d5 00 00 00 00 48 89 d6 48 29 d0 48 8b 91 c0 01 00 00 48 c1 e0 03 48 01 c2 66 83 7a 1a 00 7e c0 48 8b 3a \u003c4c\u003e 8b 07 4c 89 02 49 89 50 08 48 c7 47 08 00 00 00 00 48 c7 07 00\nAll code\n========\n 0:\t0f b7 50 12 \tmovzwl 0x12(%rax),%edx\n 4:\t48 8d 04 d5 00 00 00 \tlea 0x0(,%rdx,8),%rax\n b:\t00\n c:\t48 89 d6 \tmov %rdx,%rsi\n f:\t48 29 d0 \tsub %rdx,%rax\n 12:\t48 8b 91 c0 01 00 00 \tmov 0x1c0(%rcx),%rdx\n 19:\t48 c1 e0 03 \tshl $0x3,%rax\n 1d:\t48 01 c2 \tadd %rax,%rdx\n 20:\t66 83 7a 1a 00 \tcmpw $0x0,0x1a(%rdx)\n 25:\t7e c0 \tjle 0xffffffffffffffe7\n 27:\t48 8b 3a \tmov (%rdx),%rdi\n 2a:*\t4c 8b 07 \tmov (%rdi),%r8\t\t\u003c-- trapping instruction\n 2d:\t4c 89 02 \tmov %r8,(%rdx)\n 30:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n 34:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 3b:\t00\n 3c:\t48 \trex.W\n 3d:\tc7 \t.byte 0xc7\n 3e:\t07 \t(bad)\n\t...\n\nCode starting with the faulting instruction\n===========================================\n 0:\t4c 8b 07 \tmov (%rdi),%r8\n 3:\t4c 89 02 \tmov %r8,(%rdx)\n 6:\t49 89 50 08 \tmov %rdx,0x8(%r8)\n a:\t48 c7 47 08 00 00 00 \tmovq $0x0,0x8(%rdi)\n 11:\t00\n 12:\t48 \trex.W\n 13:\tc7 \t.byte 0xc7\n 14:\t07 \t(bad)\n\t...\n[ 88.803721] RSP: 0018:ffff9a1f892b7d58 EFLAGS: 00000206\n[ 88.804032] RAX: 0000000000000000 RBX: ffff9a1f8420c800 RCX: ffff9a1f8420c800\n[ 88.804560] RDX: ffff9a1f81bc1440 RSI: 0000000000000000 RDI: 0000000000000000\n[ 88.805056] RBP: ffffffffc04bb0e0 R08: 0000000000000001 R09: 00000000ff7f9a1f\n[ 88.805473] R10: 000000000001001b R11: 0000000000009a1f R12: 0000000000000140\n[ 88.806194] R13: 0000000000000001 R14: ffff9a1f886df400 R15: ffff9a1f886df4ac\n[ 88.806734] FS: 00007f445601a740(0000) GS:ffff9a2e7fd80000(0000) knlGS:0000000000000000\n[ 88.807225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 88.807672] CR2: 0000000000000000 CR3: 000000050cc46000 CR4: 00000000000006f0\n[ 88.808165] Call Trace:\n[ 88.808459] \u003cTASK\u003e\n[ 88.808710] ? __die (arch/x86/kernel/dumpstack.c:421 arch/x86/kernel/dumpstack.c:434)\n[ 88.809261] ? page_fault_oops (arch/x86/mm/fault.c:715)\n[ 88.809561] ? exc_page_fault (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 arch/x86/mm/fault.c:1489 arch/x86/mm/fault.c:1539)\n[ 88.809806] ? asm_exc_page_fault (./arch/x86/include/asm/idtentry.h:623)\n[ 88.810074] ? sfq_dequeue (net/sched/sch_sfq.c:272 net/sched/sch_sfq.c:499) sch_sfq\n[ 88.810411] sfq_reset (net/sched/sch_sfq.c:525) sch_sfq\n[ 88.810671] qdisc_reset (./include/linux/skbuff.h:2135 ./include/linux/skbuff.h:2441 ./include/linux/skbuff.h:3304 ./include/linux/skbuff.h:3310 net/sched/sch_g\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50039",
"url": "https://www.suse.com/security/cve/CVE-2024-50039"
},
{
"category": "external",
"summary": "SUSE Bug 1231909 for CVE-2024-50039",
"url": "https://bugzilla.suse.com/1231909"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50039"
},
{
"cve": "CVE-2024-50047",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50047"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix UAF in async decryption\n\nDoing an async decryption (large read) crashes with a\nslab-use-after-free way down in the crypto API.\n\nReproducer:\n # mount.cifs -o ...,seal,esize=1 //srv/share /mnt\n # dd if=/mnt/largefile of=/dev/null\n ...\n [ 194.196391] ==================================================================\n [ 194.196844] BUG: KASAN: slab-use-after-free in gf128mul_4k_lle+0xc1/0x110\n [ 194.197269] Read of size 8 at addr ffff888112bd0448 by task kworker/u77:2/899\n [ 194.197707]\n [ 194.197818] CPU: 12 UID: 0 PID: 899 Comm: kworker/u77:2 Not tainted 6.11.0-lku-00028-gfca3ca14a17a-dirty #43\n [ 194.198400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014\n [ 194.199046] Workqueue: smb3decryptd smb2_decrypt_offload [cifs]\n [ 194.200032] Call Trace:\n [ 194.200191] \u003cTASK\u003e\n [ 194.200327] dump_stack_lvl+0x4e/0x70\n [ 194.200558] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.200809] print_report+0x174/0x505\n [ 194.201040] ? __pfx__raw_spin_lock_irqsave+0x10/0x10\n [ 194.201352] ? srso_return_thunk+0x5/0x5f\n [ 194.201604] ? __virt_addr_valid+0xdf/0x1c0\n [ 194.201868] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202128] kasan_report+0xc8/0x150\n [ 194.202361] ? gf128mul_4k_lle+0xc1/0x110\n [ 194.202616] gf128mul_4k_lle+0xc1/0x110\n [ 194.202863] ghash_update+0x184/0x210\n [ 194.203103] shash_ahash_update+0x184/0x2a0\n [ 194.203377] ? __pfx_shash_ahash_update+0x10/0x10\n [ 194.203651] ? srso_return_thunk+0x5/0x5f\n [ 194.203877] ? crypto_gcm_init_common+0x1ba/0x340\n [ 194.204142] gcm_hash_assoc_remain_continue+0x10a/0x140\n [ 194.204434] crypt_message+0xec1/0x10a0 [cifs]\n [ 194.206489] ? __pfx_crypt_message+0x10/0x10 [cifs]\n [ 194.208507] ? srso_return_thunk+0x5/0x5f\n [ 194.209205] ? srso_return_thunk+0x5/0x5f\n [ 194.209925] ? srso_return_thunk+0x5/0x5f\n [ 194.210443] ? srso_return_thunk+0x5/0x5f\n [ 194.211037] decrypt_raw_data+0x15f/0x250 [cifs]\n [ 194.212906] ? __pfx_decrypt_raw_data+0x10/0x10 [cifs]\n [ 194.214670] ? srso_return_thunk+0x5/0x5f\n [ 194.215193] smb2_decrypt_offload+0x12a/0x6c0 [cifs]\n\nThis is because TFM is being used in parallel.\n\nFix this by allocating a new AEAD TFM for async decryption, but keep\nthe existing one for synchronous READ cases (similar to what is done\nin smb3_calc_signature()).\n\nAlso remove the calls to aead_request_set_callback() and\ncrypto_wait_req() since it\u0027s always going to be a synchronous operation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50047",
"url": "https://www.suse.com/security/cve/CVE-2024-50047"
},
{
"category": "external",
"summary": "SUSE Bug 1232418 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232418"
},
{
"category": "external",
"summary": "SUSE Bug 1232576 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232576"
},
{
"category": "external",
"summary": "SUSE Bug 1232638 for CVE-2024-50047",
"url": "https://bugzilla.suse.com/1232638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-50047"
},
{
"cve": "CVE-2024-50051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50051"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: Add cancel_work_sync before module remove\n\nIf we remove the module which will call mpc52xx_spi_remove\nit will free \u0027ms\u0027 through spi_unregister_controller.\nwhile the work ms-\u003ework will be used. The sequence of operations\nthat may lead to a UAF bug.\n\nFix it by ensuring that the work is canceled before proceeding with\nthe cleanup in mpc52xx_spi_remove.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50051",
"url": "https://www.suse.com/security/cve/CVE-2024-50051"
},
{
"category": "external",
"summary": "SUSE Bug 1235739 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1235739"
},
{
"category": "external",
"summary": "SUSE Bug 1239156 for CVE-2024-50051",
"url": "https://bugzilla.suse.com/1239156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-50051"
},
{
"cve": "CVE-2024-50106",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50106"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix race between laundromat and free_stateid\n\nThere is a race between laundromat handling of revoked delegations\nand a client sending free_stateid operation. Laundromat thread\nfinds that delegation has expired and needs to be revoked so it\nmarks the delegation stid revoked and it puts it on a reaper list\nbut then it unlock the state lock and the actual delegation revocation\nhappens without the lock. Once the stid is marked revoked a racing\nfree_stateid processing thread does the following (1) it calls\nlist_del_init() which removes it from the reaper list and (2) frees\nthe delegation stid structure. The laundromat thread ends up not\ncalling the revoke_delegation() function for this particular delegation\nbut that means it will no release the lock lease that exists on\nthe file.\n\nNow, a new open for this file comes in and ends up finding that\nlease list isn\u0027t empty and calls nfsd_breaker_owns_lease() which ends\nup trying to derefence a freed delegation stateid. Leading to the\nfollowint use-after-free KASAN warning:\n\nkernel: ==================================================================\nkernel: BUG: KASAN: slab-use-after-free in nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: Read of size 8 at addr ffff0000e73cd0c8 by task nfsd/6205\nkernel:\nkernel: CPU: 2 UID: 0 PID: 6205 Comm: nfsd Kdump: loaded Not tainted 6.11.0-rc7+ #9\nkernel: Hardware name: Apple Inc. Apple Virtualization Generic Platform, BIOS 2069.0.0.0.0 08/03/2024\nkernel: Call trace:\nkernel: dump_backtrace+0x98/0x120\nkernel: show_stack+0x1c/0x30\nkernel: dump_stack_lvl+0x80/0xe8\nkernel: print_address_description.constprop.0+0x84/0x390\nkernel: print_report+0xa4/0x268\nkernel: kasan_report+0xb4/0xf8\nkernel: __asan_report_load8_noabort+0x1c/0x28\nkernel: nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: nfsd_file_do_acquire+0xb3c/0x11d0 [nfsd]\nkernel: nfsd_file_acquire_opened+0x84/0x110 [nfsd]\nkernel: nfs4_get_vfs_file+0x634/0x958 [nfsd]\nkernel: nfsd4_process_open2+0xa40/0x1a40 [nfsd]\nkernel: nfsd4_open+0xa08/0xe80 [nfsd]\nkernel: nfsd4_proc_compound+0xb8c/0x2130 [nfsd]\nkernel: nfsd_dispatch+0x22c/0x718 [nfsd]\nkernel: svc_process_common+0x8e8/0x1960 [sunrpc]\nkernel: svc_process+0x3d4/0x7e0 [sunrpc]\nkernel: svc_handle_xprt+0x828/0xe10 [sunrpc]\nkernel: svc_recv+0x2cc/0x6a8 [sunrpc]\nkernel: nfsd+0x270/0x400 [nfsd]\nkernel: kthread+0x288/0x310\nkernel: ret_from_fork+0x10/0x20\n\nThis patch proposes a fixed that\u0027s based on adding 2 new additional\nstid\u0027s sc_status values that help coordinate between the laundromat\nand other operations (nfsd4_free_stateid() and nfsd4_delegreturn()).\n\nFirst to make sure, that once the stid is marked revoked, it is not\nremoved by the nfsd4_free_stateid(), the laundromat take a reference\non the stateid. Then, coordinating whether the stid has been put\non the cl_revoked list or we are processing FREE_STATEID and need to\nmake sure to remove it from the list, each check that state and act\naccordingly. If laundromat has added to the cl_revoke list before\nthe arrival of FREE_STATEID, then nfsd4_free_stateid() knows to remove\nit from the list. If nfsd4_free_stateid() finds that operations arrived\nbefore laundromat has placed it on cl_revoke list, it marks the state\nfreed and then laundromat will no longer add it to the list.\n\nAlso, for nfsd4_delegreturn() when looking for the specified stid,\nwe need to access stid that are marked removed or freeable, it means\nthe laundromat has started processing it but hasn\u0027t finished and this\ndelegreturn needs to return nfserr_deleg_revoked and not\nnfserr_bad_stateid. The latter will not trigger a FREE_STATEID and the\nlack of it will leave this stid on the cl_revoked list indefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50106",
"url": "https://www.suse.com/security/cve/CVE-2024-50106"
},
{
"category": "external",
"summary": "SUSE Bug 1232882 for CVE-2024-50106",
"url": "https://bugzilla.suse.com/1232882"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50106"
},
{
"cve": "CVE-2024-50143",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50143"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: fix uninit-value use in udf_get_fileshortad\n\nCheck for overflow when computing alen in udf_current_aext to mitigate\nlater uninit-value use in udf_get_fileshortad KMSAN bug[1].\nAfter applying the patch reproducer did not trigger any issue[2].\n\n[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df\n[2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50143",
"url": "https://www.suse.com/security/cve/CVE-2024-50143"
},
{
"category": "external",
"summary": "SUSE Bug 1233038 for CVE-2024-50143",
"url": "https://bugzilla.suse.com/1233038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50143"
},
{
"cve": "CVE-2024-50151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOBs when building SMB2_IOCTL request\n\nWhen using encryption, either enforced by the server or when using\n\u0027seal\u0027 mount option, the client will squash all compound request buffers\ndown for encryption into a single iov in smb2_set_next_command().\n\nSMB2_ioctl_init() allocates a small buffer (448 bytes) to hold the\nSMB2_IOCTL request in the first iov, and if the user passes an input\nbuffer that is greater than 328 bytes, smb2_set_next_command() will\nend up writing off the end of @rqst-\u003eiov[0].iov_base as shown below:\n\n mount.cifs //srv/share /mnt -o ...,seal\n ln -s $(perl -e \"print(\u0027a\u0027)for 1..1024\") /mnt/link\n\n BUG: KASAN: slab-out-of-bounds in\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n Write of size 4116 at addr ffff8881148fcab8 by task ln/859\n\n CPU: 1 UID: 0 PID: 859 Comm: ln Not tainted 6.12.0-rc3 #1\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n 1.16.3-2.fc40 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n print_report+0x156/0x4d9\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n ? __virt_addr_valid+0x145/0x310\n ? __phys_addr+0x46/0x90\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_report+0xda/0x110\n ? smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n kasan_check_range+0x10f/0x1f0\n __asan_memcpy+0x3c/0x60\n smb2_set_next_command.cold+0x1d6/0x24c [cifs]\n smb2_compound_op+0x238c/0x3840 [cifs]\n ? kasan_save_track+0x14/0x30\n ? kasan_save_free_info+0x3b/0x70\n ? vfs_symlink+0x1a1/0x2c0\n ? do_symlinkat+0x108/0x1c0\n ? __pfx_smb2_compound_op+0x10/0x10 [cifs]\n ? kmem_cache_free+0x118/0x3e0\n ? cifs_get_writable_path+0xeb/0x1a0 [cifs]\n smb2_get_reparse_inode+0x423/0x540 [cifs]\n ? __pfx_smb2_get_reparse_inode+0x10/0x10 [cifs]\n ? rcu_is_watching+0x20/0x50\n ? __kmalloc_noprof+0x37c/0x480\n ? smb2_create_reparse_symlink+0x257/0x490 [cifs]\n ? smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n smb2_create_reparse_symlink+0x38f/0x490 [cifs]\n ? __pfx_smb2_create_reparse_symlink+0x10/0x10 [cifs]\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? __build_path_from_dentry_optional_prefix+0x19d/0x2e0 [cifs]\n cifs_symlink+0x24f/0x960 [cifs]\n ? __pfx_make_vfsuid+0x10/0x10\n ? __pfx_cifs_symlink+0x10/0x10 [cifs]\n ? make_vfsgid+0x6b/0xc0\n ? generic_permission+0x96/0x2d0\n vfs_symlink+0x1a1/0x2c0\n do_symlinkat+0x108/0x1c0\n ? __pfx_do_symlinkat+0x10/0x10\n ? strncpy_from_user+0xaa/0x160\n __x64_sys_symlinkat+0xb9/0xf0\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n RIP: 0033:0x7f08d75c13bb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50151",
"url": "https://www.suse.com/security/cve/CVE-2024-50151"
},
{
"category": "external",
"summary": "SUSE Bug 1233055 for CVE-2024-50151",
"url": "https://bugzilla.suse.com/1233055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50151"
},
{
"cve": "CVE-2024-50154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp/dccp: Don\u0027t use timer_pending() in reqsk_queue_unlink().\n\nMartin KaFai Lau reported use-after-free [0] in reqsk_timer_handler().\n\n \"\"\"\n We are seeing a use-after-free from a bpf prog attached to\n trace_tcp_retransmit_synack. The program passes the req-\u003esk to the\n bpf_sk_storage_get_tracing kernel helper which does check for null\n before using it.\n \"\"\"\n\nThe commit 83fccfc3940c (\"inet: fix potential deadlock in\nreqsk_queue_unlink()\") added timer_pending() in reqsk_queue_unlink() not\nto call del_timer_sync() from reqsk_timer_handler(), but it introduced a\nsmall race window.\n\nBefore the timer is called, expire_timers() calls detach_timer(timer, true)\nto clear timer-\u003eentry.pprev and marks it as not pending.\n\nIf reqsk_queue_unlink() checks timer_pending() just after expire_timers()\ncalls detach_timer(), TCP will miss del_timer_sync(); the reqsk timer will\ncontinue running and send multiple SYN+ACKs until it expires.\n\nThe reported UAF could happen if req-\u003esk is close()d earlier than the timer\nexpiration, which is 63s by default.\n\nThe scenario would be\n\n 1. inet_csk_complete_hashdance() calls inet_csk_reqsk_queue_drop(),\n but del_timer_sync() is missed\n\n 2. reqsk timer is executed and scheduled again\n\n 3. req-\u003esk is accept()ed and reqsk_put() decrements rsk_refcnt, but\n reqsk timer still has another one, and inet_csk_accept() does not\n clear req-\u003esk for non-TFO sockets\n\n 4. sk is close()d\n\n 5. reqsk timer is executed again, and BPF touches req-\u003esk\n\nLet\u0027s not use timer_pending() by passing the caller context to\n__inet_csk_reqsk_queue_drop().\n\nNote that reqsk timer is pinned, so the issue does not happen in most\nuse cases. [1]\n\n[0]\nBUG: KFENCE: use-after-free read in bpf_sk_storage_get_tracing+0x2e/0x1b0\n\nUse-after-free read at 0x00000000a891fb3a (in kfence-#1):\nbpf_sk_storage_get_tracing+0x2e/0x1b0\nbpf_prog_5ea3e95db6da0438_tcp_retransmit_synack+0x1d20/0x1dda\nbpf_trace_run2+0x4c/0xc0\ntcp_rtx_synack+0xf9/0x100\nreqsk_timer_handler+0xda/0x3d0\nrun_timer_softirq+0x292/0x8a0\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\nintel_idle_irq+0x5a/0xa0\ncpuidle_enter_state+0x94/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nkfence-#1: 0x00000000a72cc7b6-0x00000000d97616d9, size=2376, cache=TCPv6\n\nallocated by task 0 on cpu 9 at 260507.901592s:\nsk_prot_alloc+0x35/0x140\nsk_clone_lock+0x1f/0x3f0\ninet_csk_clone_lock+0x15/0x160\ntcp_create_openreq_child+0x1f/0x410\ntcp_v6_syn_recv_sock+0x1da/0x700\ntcp_check_req+0x1fb/0x510\ntcp_v6_rcv+0x98b/0x1420\nipv6_list_rcv+0x2258/0x26e0\nnapi_complete_done+0x5b1/0x2990\nmlx5e_napi_poll+0x2ae/0x8d0\nnet_rx_action+0x13e/0x590\nirq_exit_rcu+0xf5/0x320\ncommon_interrupt+0x80/0x90\nasm_common_interrupt+0x22/0x40\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb\n\nfreed by task 0 on cpu 9 at 260507.927527s:\nrcu_core_si+0x4ff/0xf10\nirq_exit_rcu+0xf5/0x320\nsysvec_apic_timer_interrupt+0x6d/0x80\nasm_sysvec_apic_timer_interrupt+0x16/0x20\ncpuidle_enter_state+0xfb/0x273\ncpu_startup_entry+0x15e/0x260\nstart_secondary+0x8a/0x90\nsecondary_startup_64_no_verify+0xfa/0xfb",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50154",
"url": "https://www.suse.com/security/cve/CVE-2024-50154"
},
{
"category": "external",
"summary": "SUSE Bug 1233070 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233070"
},
{
"category": "external",
"summary": "SUSE Bug 1233072 for CVE-2024-50154",
"url": "https://bugzilla.suse.com/1233072"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-50154"
},
{
"cve": "CVE-2024-50199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50199"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/swapfile: skip HugeTLB pages for unuse_vma\n\nI got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The\nproblem can be reproduced by the following steps:\n\n 1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.\n 2. Swapout the above anonymous memory.\n 3. run swapoff and we will get a bad pud error in kernel message:\n\n mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)\n\nWe can tell that pud_clear_bad is called by pud_none_or_clear_bad in\nunuse_pud_range() by ftrace. And therefore the HugeTLB pages will never\nbe freed because we lost it from page table. We can skip HugeTLB pages\nfor unuse_vma to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50199",
"url": "https://www.suse.com/security/cve/CVE-2024-50199"
},
{
"category": "external",
"summary": "SUSE Bug 1233112 for CVE-2024-50199",
"url": "https://bugzilla.suse.com/1233112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50199"
},
{
"cve": "CVE-2024-50202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: propagate directory read errors from nilfs_find_entry()\n\nSyzbot reported that a task hang occurs in vcs_open() during a fuzzing\ntest for nilfs2.\n\nThe root cause of this problem is that in nilfs_find_entry(), which\nsearches for directory entries, ignores errors when loading a directory\npage/folio via nilfs_get_folio() fails.\n\nIf the filesystem images is corrupted, and the i_size of the directory\ninode is large, and the directory page/folio is successfully read but\nfails the sanity check, for example when it is zero-filled,\nnilfs_check_folio() may continue to spit out error messages in bursts.\n\nFix this issue by propagating the error to the callers when loading a\npage/folio fails in nilfs_find_entry().\n\nThe current interface of nilfs_find_entry() and its callers is outdated\nand cannot propagate error codes such as -EIO and -ENOMEM returned via\nnilfs_find_entry(), so fix it together.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50202",
"url": "https://www.suse.com/security/cve/CVE-2024-50202"
},
{
"category": "external",
"summary": "SUSE Bug 1233324 for CVE-2024-50202",
"url": "https://bugzilla.suse.com/1233324"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50202"
},
{
"cve": "CVE-2024-50203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, arm64: Fix address emission with tag-based KASAN enabled\n\nWhen BPF_TRAMP_F_CALL_ORIG is enabled, the address of a bpf_tramp_image\nstruct on the stack is passed during the size calculation pass and\nan address on the heap is passed during code generation. This may\ncause a heap buffer overflow if the heap address is tagged because\nemit_a64_mov_i64() will emit longer code than it did during the size\ncalculation pass. The same problem could occur without tag-based\nKASAN if one of the 16-bit words of the stack address happened to\nbe all-ones during the size calculation pass. Fix the problem by\nassuming the worst case (4 instructions) when calculating the size\nof the bpf_tramp_image address emission.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50203",
"url": "https://www.suse.com/security/cve/CVE-2024-50203"
},
{
"category": "external",
"summary": "SUSE Bug 1233328 for CVE-2024-50203",
"url": "https://bugzilla.suse.com/1233328"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50203"
},
{
"cve": "CVE-2024-50211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50211"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: refactor inode_bmap() to handle error\n\nRefactor inode_bmap() to handle error since udf_next_aext() can return\nerror now. On situations like ftruncate, udf_extend_file() can now\ndetect errors and bail out early without resorting to checking for\nparticular offsets and assuming internal behavior of these functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50211",
"url": "https://www.suse.com/security/cve/CVE-2024-50211"
},
{
"category": "external",
"summary": "SUSE Bug 1233096 for CVE-2024-50211",
"url": "https://bugzilla.suse.com/1233096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50211"
},
{
"cve": "CVE-2024-50228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50228"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50228",
"url": "https://www.suse.com/security/cve/CVE-2024-50228"
},
{
"category": "external",
"summary": "SUSE Bug 1233204 for CVE-2024-50228",
"url": "https://bugzilla.suse.com/1233204"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50228"
},
{
"cve": "CVE-2024-50256",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50256"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()\n\nI got a syzbot report without a repro [1] crashing in nf_send_reset6()\n\nI think the issue is that dev-\u003ehard_header_len is zero, and we attempt\nlater to push an Ethernet header.\n\nUse LL_MAX_HEADER, as other functions in net/ipv6/netfilter/nf_reject_ipv6.c.\n\n[1]\n\nskbuff: skb_under_panic: text:ffffffff89b1d008 len:74 put:14 head:ffff88803123aa00 data:ffff88803123a9f2 tail:0x3c end:0x140 dev:syz_tun\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 7373 Comm: syz.1.568 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 60 a6 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 ba 30 38 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc900045269b0 EFLAGS: 00010282\nRAX: 0000000000000088 RBX: dffffc0000000000 RCX: cd66dacdc5d8e800\nRDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000\nRBP: ffff88802d39a3d0 R08: ffffffff8174afec R09: 1ffff920008a4ccc\nR10: dffffc0000000000 R11: fffff520008a4ccd R12: 0000000000000140\nR13: ffff88803123aa00 R14: ffff88803123a9f2 R15: 000000000000003c\nFS: 00007fdbee5ff6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000005d322000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n eth_header+0x38/0x1f0 net/ethernet/eth.c:83\n dev_hard_header include/linux/netdevice.h:3208 [inline]\n nf_send_reset6+0xce6/0x1270 net/ipv6/netfilter/nf_reject_ipv6.c:358\n nft_reject_inet_eval+0x3b9/0x690 net/netfilter/nft_reject_inet.c:48\n expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline]\n nft_do_chain+0x4ad/0x1da0 net/netfilter/nf_tables_core.c:288\n nft_do_chain_inet+0x418/0x6b0 net/netfilter/nft_chain_filter.c:161\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_slow+0xc3/0x220 net/netfilter/core.c:626\n nf_hook include/linux/netfilter.h:269 [inline]\n NF_HOOK include/linux/netfilter.h:312 [inline]\n br_nf_pre_routing_ipv6+0x63e/0x770 net/bridge/br_netfilter_ipv6.c:184\n nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]\n nf_hook_bridge_pre net/bridge/br_input.c:277 [inline]\n br_handle_frame+0x9fd/0x1530 net/bridge/br_input.c:424\n __netif_receive_skb_core+0x13e8/0x4570 net/core/dev.c:5562\n __netif_receive_skb_one_core net/core/dev.c:5666 [inline]\n __netif_receive_skb+0x12f/0x650 net/core/dev.c:5781\n netif_receive_skb_internal net/core/dev.c:5867 [inline]\n netif_receive_skb+0x1e8/0x890 net/core/dev.c:5926\n tun_rx_batched+0x1b7/0x8f0 drivers/net/tun.c:1550\n tun_get_user+0x3056/0x47e0 drivers/net/tun.c:2007\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2053\n new_sync_write fs/read_write.c:590 [inline]\n vfs_write+0xa6d/0xc90 fs/read_write.c:683\n ksys_write+0x183/0x2b0 fs/read_write.c:736\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fdbeeb7d1ff\nCode: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48\nRSP: 002b:00007fdbee5ff000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 00007fdbeed36058 RCX: 00007fdbeeb7d1ff\nRDX: 000000000000008e RSI: 0000000020000040 RDI: 00000000000000c8\nRBP: 00007fdbeebf12be R08: 0000000\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50256",
"url": "https://www.suse.com/security/cve/CVE-2024-50256"
},
{
"category": "external",
"summary": "SUSE Bug 1233200 for CVE-2024-50256",
"url": "https://bugzilla.suse.com/1233200"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50256"
},
{
"cve": "CVE-2024-50262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50262"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix out-of-bounds write in trie_get_next_key()\n\ntrie_get_next_key() allocates a node stack with size trie-\u003emax_prefixlen,\nwhile it writes (trie-\u003emax_prefixlen + 1) nodes to the stack when it has\nfull paths from the root to leaves. For example, consider a trie with\nmax_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ...\n0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with\n.prefixlen = 8 make 9 nodes be written on the node stack with size 8.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50262",
"url": "https://www.suse.com/security/cve/CVE-2024-50262"
},
{
"category": "external",
"summary": "SUSE Bug 1233239 for CVE-2024-50262",
"url": "https://bugzilla.suse.com/1233239"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50262"
},
{
"cve": "CVE-2024-50272",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50272"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfilemap: Fix bounds checking in filemap_read()\n\nIf the caller supplies an iocb-\u003eki_pos value that is close to the\nfilesystem upper limit, and an iterator with a count that causes us to\noverflow that limit, then filemap_read() enters an infinite loop.\n\nThis behaviour was discovered when testing xfstests generic/525 with the\n\"localio\" optimisation for loopback NFS mounts.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50272",
"url": "https://www.suse.com/security/cve/CVE-2024-50272"
},
{
"category": "external",
"summary": "SUSE Bug 1233461 for CVE-2024-50272",
"url": "https://bugzilla.suse.com/1233461"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50272"
},
{
"cve": "CVE-2024-50278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50278"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix potential out-of-bounds access on the first resume\n\nOut-of-bounds access occurs if the fast device is expanded unexpectedly\nbefore the first-time resume of the cache table. This happens because\nexpanding the fast device requires reloading the cache table for\ncache_create to allocate new in-core data structures that fit the new\nsize, and the check in cache_preresume is not performed during the\nfirst resume, leading to the issue.\n\nReproduce steps:\n\n1. prepare component devices:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\n\n2. load a cache table of 512 cache blocks, and deliberately expand the\n fast device before resuming the cache, making the in-core data\n structures inadequate.\n\ndmsetup create cache --notable\ndmsetup reload cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\ndmsetup reload cdata --table \"0 131072 linear /dev/sdc 8192\"\ndmsetup resume cdata\ndmsetup resume cache\n\n3. suspend the cache to write out the in-core dirty bitset and hint\n array, leading to out-of-bounds access to the dirty bitset at offset\n 0x40:\n\ndmsetup suspend cache\n\nKASAN reports:\n\n BUG: KASAN: vmalloc-out-of-bounds in is_dirty_callback+0x2b/0x80\n Read of size 8 at addr ffffc90000085040 by task dmsetup/90\n\n (...snip...)\n The buggy address belongs to the virtual mapping at\n [ffffc90000085000, ffffc90000087000) created by:\n cache_ctr+0x176a/0x35f0\n\n (...snip...)\n Memory state around the buggy address:\n ffffc90000084f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000084f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n \u003effffc90000085000: 00 00 00 00 00 00 00 00 f8 f8 f8 f8 f8 f8 f8 f8\n ^\n ffffc90000085080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n ffffc90000085100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8\n\nFix by checking the size change on the first resume.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50278",
"url": "https://www.suse.com/security/cve/CVE-2024-50278"
},
{
"category": "external",
"summary": "SUSE Bug 1233467 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233467"
},
{
"category": "external",
"summary": "SUSE Bug 1233709 for CVE-2024-50278",
"url": "https://bugzilla.suse.com/1233709"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50278"
},
{
"cve": "CVE-2024-50280",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50280"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm cache: fix flushing uninitialized delayed_work on cache_ctr error\n\nAn unexpected WARN_ON from flush_work() may occur when cache creation\nfails, caused by destroying the uninitialized delayed_work waker in the\nerror path of cache_create(). For example, the warning appears on the\nsuperblock checksum error.\n\nReproduce steps:\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc 262144\"\ndd if=/dev/urandom of=/dev/mapper/cmeta bs=4k count=1 oflag=direct\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\nWARNING: CPU: 0 PID: 84 at kernel/workqueue.c:4178 __flush_work+0x5d4/0x890\n\nFix by pulling out the cancel_delayed_work_sync() from the constructor\u0027s\nerror path. This patch doesn\u0027t affect the use-after-free fix for\nconcurrent dm_resume and dm_destroy (commit 6a459d8edbdb (\"dm cache: Fix\nUAF in destroy()\")) as cache_dtr is not changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50280",
"url": "https://www.suse.com/security/cve/CVE-2024-50280"
},
{
"category": "external",
"summary": "SUSE Bug 1233469 for CVE-2024-50280",
"url": "https://bugzilla.suse.com/1233469"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50280"
},
{
"cve": "CVE-2024-50299",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-50299"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: properly validate chunk size in sctp_sf_ootb()\n\nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add\nsize validation when walking chunks\") is also required in sctp_sf_ootb()\nto address a crash reported by syzbot:\n\n BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166\n sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407\n sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88\n sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243\n sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159\n ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-50299",
"url": "https://www.suse.com/security/cve/CVE-2024-50299"
},
{
"category": "external",
"summary": "SUSE Bug 1233488 for CVE-2024-50299",
"url": "https://bugzilla.suse.com/1233488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-50299"
},
{
"cve": "CVE-2024-52332",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-52332"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nigb: Fix potential invalid memory access in igb_init_module()\n\nThe pci_register_driver() can fail and when this happened, the dca_notifier\nneeds to be unregistered, otherwise the dca_notifier can be called when\nigb fails to install, resulting to invalid memory access.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-52332",
"url": "https://www.suse.com/security/cve/CVE-2024-52332"
},
{
"category": "external",
"summary": "SUSE Bug 1235700 for CVE-2024-52332",
"url": "https://bugzilla.suse.com/1235700"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-52332"
},
{
"cve": "CVE-2024-53050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53050"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/hdcp: Add encoder check in hdcp2_get_capability\n\nAdd encoder check in intel_hdcp2_get_capability to avoid\nnull pointer error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53050",
"url": "https://www.suse.com/security/cve/CVE-2024-53050"
},
{
"category": "external",
"summary": "SUSE Bug 1233546 for CVE-2024-53050",
"url": "https://bugzilla.suse.com/1233546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53050"
},
{
"cve": "CVE-2024-53064",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53064"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nidpf: fix idpf_vc_core_init error path\n\nIn an event where the platform running the device control plane\nis rebooted, reset is detected on the driver. It releases\nall the resources and waits for the reset to complete. Once the\nreset is done, it tries to build the resources back. At this\ntime if the device control plane is not yet started, then\nthe driver timeouts on the virtchnl message and retries to\nestablish the mailbox again.\n\nIn the retry flow, mailbox is deinitialized but the mailbox\nworkqueue is still alive and polling for the mailbox message.\nThis results in accessing the released control queue leading to\nnull-ptr-deref. Fix it by unrolling the work queue cancellation\nand mailbox deinitialization in the reverse order which they got\ninitialized.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53064",
"url": "https://www.suse.com/security/cve/CVE-2024-53064"
},
{
"category": "external",
"summary": "SUSE Bug 1233558 for CVE-2024-53064",
"url": "https://bugzilla.suse.com/1233558"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53064"
},
{
"cve": "CVE-2024-53090",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53090"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix lock recursion\n\nafs_wake_up_async_call() can incur lock recursion. The problem is that it\nis called from AF_RXRPC whilst holding the -\u003enotify_lock, but it tries to\ntake a ref on the afs_call struct in order to pass it to a work queue - but\nif the afs_call is already queued, we then have an extraneous ref that must\nbe put... calling afs_put_call() may call back down into AF_RXRPC through\nrxrpc_kernel_shutdown_call(), however, which might try taking the\n-\u003enotify_lock again.\n\nThis case isn\u0027t very common, however, so defer it to a workqueue. The oops\nlooks something like:\n\n BUG: spinlock recursion on CPU#0, krxrpcio/7001/1646\n lock: 0xffff888141399b30, .magic: dead4ead, .owner: krxrpcio/7001/1646, .owner_cpu: 0\n CPU: 0 UID: 0 PID: 1646 Comm: krxrpcio/7001 Not tainted 6.12.0-rc2-build3+ #4351\n Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x70\n do_raw_spin_lock+0x3c/0x90\n rxrpc_kernel_shutdown_call+0x83/0xb0\n afs_put_call+0xd7/0x180\n rxrpc_notify_socket+0xa0/0x190\n rxrpc_input_split_jumbo+0x198/0x1d0\n rxrpc_input_data+0x14b/0x1e0\n ? rxrpc_input_call_packet+0xc2/0x1f0\n rxrpc_input_call_event+0xad/0x6b0\n rxrpc_input_packet_on_conn+0x1e1/0x210\n rxrpc_input_packet+0x3f2/0x4d0\n rxrpc_io_thread+0x243/0x410\n ? __pfx_rxrpc_io_thread+0x10/0x10\n kthread+0xcf/0xe0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x24/0x40\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53090",
"url": "https://www.suse.com/security/cve/CVE-2024-53090"
},
{
"category": "external",
"summary": "SUSE Bug 1233637 for CVE-2024-53090",
"url": "https://bugzilla.suse.com/1233637"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53090"
},
{
"cve": "CVE-2024-53091",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53091"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx\n\nAs the introduction of the support for vsock and unix sockets in sockmap,\ntls_sw_has_ctx_tx/rx cannot presume the socket passed in must be IS_ICSK.\nvsock and af_unix sockets have vsock_sock and unix_sock instead of\ninet_connection_sock. For these sockets, tls_get_ctx may return an invalid\npointer and cause page fault in function tls_sw_ctx_rx.\n\nBUG: unable to handle page fault for address: 0000000000040030\nWorkqueue: vsock-loopback vsock_loopback_work\nRIP: 0010:sk_psock_strp_data_ready+0x23/0x60\nCall Trace:\n ? __die+0x81/0xc3\n ? no_context+0x194/0x350\n ? do_page_fault+0x30/0x110\n ? async_page_fault+0x3e/0x50\n ? sk_psock_strp_data_ready+0x23/0x60\n virtio_transport_recv_pkt+0x750/0x800\n ? update_load_avg+0x7e/0x620\n vsock_loopback_work+0xd0/0x100\n process_one_work+0x1a7/0x360\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x112/0x130\n ? __kthread_cancel_work+0x40/0x40\n ret_from_fork+0x1f/0x40\n\nv2:\n - Add IS_ICSK check\nv3:\n - Update the commits in Fixes",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53091",
"url": "https://www.suse.com/security/cve/CVE-2024-53091"
},
{
"category": "external",
"summary": "SUSE Bug 1233638 for CVE-2024-53091",
"url": "https://bugzilla.suse.com/1233638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53091"
},
{
"cve": "CVE-2024-53095",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53095"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix use-after-free of network namespace.\n\nRecently, we got a customer report that CIFS triggers oops while\nreconnecting to a server. [0]\n\nThe workload runs on Kubernetes, and some pods mount CIFS servers\nin non-root network namespaces. The problem rarely happened, but\nit was always while the pod was dying.\n\nThe root cause is wrong reference counting for network namespace.\n\nCIFS uses kernel sockets, which do not hold refcnt of the netns that\nthe socket belongs to. That means CIFS must ensure the socket is\nalways freed before its netns; otherwise, use-after-free happens.\n\nThe repro steps are roughly:\n\n 1. mount CIFS in a non-root netns\n 2. drop packets from the netns\n 3. destroy the netns\n 4. unmount CIFS\n\nWe can reproduce the issue quickly with the script [1] below and see\nthe splat [2] if CONFIG_NET_NS_REFCNT_TRACKER is enabled.\n\nWhen the socket is TCP, it is hard to guarantee the netns lifetime\nwithout holding refcnt due to async timers.\n\nLet\u0027s hold netns refcnt for each socket as done for SMC in commit\n9744d2bf1976 (\"smc: Fix use-after-free in tcp_write_timer_handler().\").\n\nNote that we need to move put_net() from cifs_put_tcp_session() to\nclean_demultiplex_info(); otherwise, __sock_create() still could touch a\nfreed netns while cifsd tries to reconnect from cifs_demultiplex_thread().\n\nAlso, maybe_get_net() cannot be put just before __sock_create() because\nthe code is not under RCU and there is a small chance that the same\naddress happened to be reallocated to another netns.\n\n[0]:\nCIFS: VFS: \\\\XXXXXXXXXXX has not responded in 15 seconds. Reconnecting...\nCIFS: Serverclose failed 4 times, giving up\nUnable to handle kernel paging request at virtual address 14de99e461f84a07\nMem abort info:\n ESR = 0x0000000096000004\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x04: level 0 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000004\n CM = 0, WnR = 0\n[14de99e461f84a07] address between user and kernel address ranges\nInternal error: Oops: 0000000096000004 [#1] SMP\nModules linked in: cls_bpf sch_ingress nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver tcp_diag inet_diag veth xt_state xt_connmark nf_conntrack_netlink xt_nat xt_statistic xt_MASQUERADE xt_mark xt_addrtype ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nf_tables nfnetlink overlay nls_ascii nls_cp437 sunrpc vfat fat aes_ce_blk aes_ce_cipher ghash_ce sm4_ce_cipher sm4 sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 sha1_ce ena button sch_fq_codel loop fuse configfs dmi_sysfs sha2_ce sha256_arm64 dm_mirror dm_region_hash dm_log dm_mod dax efivarfs\nCPU: 5 PID: 2690970 Comm: cifsd Not tainted 6.1.103-109.184.amzn2023.aarch64 #1\nHardware name: Amazon EC2 r7g.4xlarge/, BIOS 1.0 11/1/2018\npstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : fib_rules_lookup+0x44/0x238\nlr : __fib_lookup+0x64/0xbc\nsp : ffff8000265db790\nx29: ffff8000265db790 x28: 0000000000000000 x27: 000000000000bd01\nx26: 0000000000000000 x25: ffff000b4baf8000 x24: ffff00047b5e4580\nx23: ffff8000265db7e0 x22: 0000000000000000 x21: ffff00047b5e4500\nx20: ffff0010e3f694f8 x19: 14de99e461f849f7 x18: 0000000000000000\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000000 x13: 0000000000000000 x12: 3f92800abd010002\nx11: 0000000000000001 x10: ffff0010e3f69420 x9 : ffff800008a6f294\nx8 : 0000000000000000 x7 : 0000000000000006 x6 : 0000000000000000\nx5 : 0000000000000001 x4 : ffff001924354280 x3 : ffff8000265db7e0\nx2 : 0000000000000000 x1 : ffff0010e3f694f8 x0 : ffff00047b5e4500\nCall trace:\n fib_rules_lookup+0x44/0x238\n __fib_lookup+0x64/0xbc\n ip_route_output_key_hash_rcu+0x2c4/0x398\n ip_route_output_key_hash+0x60/0x8c\n tcp_v4_connect+0x290/0x488\n __inet_stream_connect+0x108/0x3d0\n inet_stream_connect+0x50/0x78\n kernel_connect+0x6c/0xac\n generic_ip_conne\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53095",
"url": "https://www.suse.com/security/cve/CVE-2024-53095"
},
{
"category": "external",
"summary": "SUSE Bug 1233642 for CVE-2024-53095",
"url": "https://bugzilla.suse.com/1233642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53095"
},
{
"cve": "CVE-2024-53099",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53099"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check validity of link-\u003etype in bpf_link_show_fdinfo()\n\nIf a newly-added link type doesn\u0027t invoke BPF_LINK_TYPE(), accessing\nbpf_link_type_strs[link-\u003etype] may result in an out-of-bounds access.\n\nTo spot such missed invocations early in the future, checking the\nvalidity of link-\u003etype in bpf_link_show_fdinfo() and emitting a warning\nwhen such invocations are missed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53099",
"url": "https://www.suse.com/security/cve/CVE-2024-53099"
},
{
"category": "external",
"summary": "SUSE Bug 1233772 for CVE-2024-53099",
"url": "https://bugzilla.suse.com/1233772"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53099"
},
{
"cve": "CVE-2024-53103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53103"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer\n\nWhen hvs is released, there is a possibility that vsk-\u003etrans may not\nbe initialized to NULL, which could lead to a dangling pointer.\nThis issue is resolved by initializing vsk-\u003etrans to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53103",
"url": "https://www.suse.com/security/cve/CVE-2024-53103"
},
{
"category": "external",
"summary": "SUSE Bug 1234024 for CVE-2024-53103",
"url": "https://bugzilla.suse.com/1234024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53103"
},
{
"cve": "CVE-2024-53105",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53105"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: page_alloc: move mlocked flag clearance into free_pages_prepare()\n\nSyzbot reported a bad page state problem caused by a page being freed\nusing free_page() still having a mlocked flag at free_pages_prepare()\nstage:\n\n BUG: Bad page state in process syz.5.504 pfn:61f45\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61f45\n flags: 0xfff00000080204(referenced|workingset|mlocked|node=0|zone=1|lastcpupid=0x7ff)\n raw: 00fff00000080204 0000000000000000 dead000000000122 0000000000000000\n raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\n page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set\n page_owner tracks the page as allocated\n page last allocated via order 0, migratetype Unmovable, gfp_mask 0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), pid 8443, tgid 8442 (syz.5.504), ts 201884660643, free_ts 201499827394\n set_page_owner include/linux/page_owner.h:32 [inline]\n post_alloc_hook+0x1f3/0x230 mm/page_alloc.c:1537\n prep_new_page mm/page_alloc.c:1545 [inline]\n get_page_from_freelist+0x303f/0x3190 mm/page_alloc.c:3457\n __alloc_pages_noprof+0x292/0x710 mm/page_alloc.c:4733\n alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265\n kvm_coalesced_mmio_init+0x1f/0xf0 virt/kvm/coalesced_mmio.c:99\n kvm_create_vm virt/kvm/kvm_main.c:1235 [inline]\n kvm_dev_ioctl_create_vm virt/kvm/kvm_main.c:5488 [inline]\n kvm_dev_ioctl+0x12dc/0x2240 virt/kvm/kvm_main.c:5530\n __do_compat_sys_ioctl fs/ioctl.c:1007 [inline]\n __se_compat_sys_ioctl+0x510/0xc90 fs/ioctl.c:950\n do_syscall_32_irqs_on arch/x86/entry/common.c:165 [inline]\n __do_fast_syscall_32+0xb4/0x110 arch/x86/entry/common.c:386\n do_fast_syscall_32+0x34/0x80 arch/x86/entry/common.c:411\n entry_SYSENTER_compat_after_hwframe+0x84/0x8e\n page last free pid 8399 tgid 8399 stack trace:\n reset_page_owner include/linux/page_owner.h:25 [inline]\n free_pages_prepare mm/page_alloc.c:1108 [inline]\n free_unref_folios+0xf12/0x18d0 mm/page_alloc.c:2686\n folios_put_refs+0x76c/0x860 mm/swap.c:1007\n free_pages_and_swap_cache+0x5c8/0x690 mm/swap_state.c:335\n __tlb_batch_free_encoded_pages mm/mmu_gather.c:136 [inline]\n tlb_batch_pages_flush mm/mmu_gather.c:149 [inline]\n tlb_flush_mmu_free mm/mmu_gather.c:366 [inline]\n tlb_flush_mmu+0x3a3/0x680 mm/mmu_gather.c:373\n tlb_finish_mmu+0xd4/0x200 mm/mmu_gather.c:465\n exit_mmap+0x496/0xc40 mm/mmap.c:1926\n __mmput+0x115/0x390 kernel/fork.c:1348\n exit_mm+0x220/0x310 kernel/exit.c:571\n do_exit+0x9b2/0x28e0 kernel/exit.c:926\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [inline]\n __se_sys_exit_group kernel/exit.c:1097 [inline]\n __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1097\n x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n Modules linked in:\n CPU: 0 UID: 0 PID: 8442 Comm: syz.5.504 Not tainted 6.12.0-rc6-syzkaller #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n bad_page+0x176/0x1d0 mm/page_alloc.c:501\n free_page_is_bad mm/page_alloc.c:918 [inline]\n free_pages_prepare mm/page_alloc.c:1100 [inline]\n free_unref_page+0xed0/0xf20 mm/page_alloc.c:2638\n kvm_destroy_vm virt/kvm/kvm_main.c:1327 [inline]\n kvm_put_kvm+0xc75/0x1350 virt/kvm/kvm_main.c:1386\n kvm_vcpu_release+0x54/0x60 virt/kvm/kvm_main.c:4143\n __fput+0x23f/0x880 fs/file_table.c:431\n task_work_run+0x24f/0x310 kernel/task_work.c:239\n exit_task_work include/linux/task_work.h:43 [inline]\n do_exit+0xa2f/0x28e0 kernel/exit.c:939\n do_group_exit+0x207/0x2c0 kernel/exit.c:1088\n __do_sys_exit_group kernel/exit.c:1099 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53105",
"url": "https://www.suse.com/security/cve/CVE-2024-53105"
},
{
"category": "external",
"summary": "SUSE Bug 1234069 for CVE-2024-53105",
"url": "https://bugzilla.suse.com/1234069"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53105"
},
{
"cve": "CVE-2024-53111",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53111"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mremap: fix address wraparound in move_page_tables()\n\nOn 32-bit platforms, it is possible for the expression `len + old_addr \u003c\nold_end` to be false-positive if `len + old_addr` wraps around. \n`old_addr` is the cursor in the old range up to which page table entries\nhave been moved; so if the operation succeeded, `old_addr` is the *end* of\nthe old region, and adding `len` to it can wrap.\n\nThe overflow causes mremap() to mistakenly believe that PTEs have been\ncopied; the consequence is that mremap() bails out, but doesn\u0027t move the\nPTEs back before the new VMA is unmapped, causing anonymous pages in the\nregion to be lost. So basically if userspace tries to mremap() a\nprivate-anon region and hits this bug, mremap() will return an error and\nthe private-anon region\u0027s contents appear to have been zeroed.\n\nThe idea of this check is that `old_end - len` is the original start\naddress, and writing the check that way also makes it easier to read; so\nfix the check by rearranging the comparison accordingly.\n\n(An alternate fix would be to refactor this function by introducing an\n\"orig_old_start\" variable or such.)\n\n\nTested in a VM with a 32-bit X86 kernel; without the patch:\n\n```\nuser@horn:~/big_mremap$ cat test.c\n#define _GNU_SOURCE\n#include \u003cstdlib.h\u003e\n#include \u003cstdio.h\u003e\n#include \u003cerr.h\u003e\n#include \u003csys/mman.h\u003e\n\n#define ADDR1 ((void*)0x60000000)\n#define ADDR2 ((void*)0x10000000)\n#define SIZE 0x50000000uL\n\nint main(void) {\n unsigned char *p1 = mmap(ADDR1, SIZE, PROT_READ|PROT_WRITE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p1 == MAP_FAILED)\n err(1, \"mmap 1\");\n unsigned char *p2 = mmap(ADDR2, SIZE, PROT_NONE,\n MAP_ANONYMOUS|MAP_PRIVATE|MAP_FIXED_NOREPLACE, -1, 0);\n if (p2 == MAP_FAILED)\n err(1, \"mmap 2\");\n *p1 = 0x41;\n printf(\"first char is 0x%02hhx\\n\", *p1);\n unsigned char *p3 = mremap(p1, SIZE, SIZE,\n MREMAP_MAYMOVE|MREMAP_FIXED, p2);\n if (p3 == MAP_FAILED) {\n printf(\"mremap() failed; first char is 0x%02hhx\\n\", *p1);\n } else {\n printf(\"mremap() succeeded; first char is 0x%02hhx\\n\", *p3);\n }\n}\nuser@horn:~/big_mremap$ gcc -static -o test test.c\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() failed; first char is 0x00\n```\n\nWith the patch:\n\n```\nuser@horn:~/big_mremap$ setarch -R ./test\nfirst char is 0x41\nmremap() succeeded; first char is 0x41\n```",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53111",
"url": "https://www.suse.com/security/cve/CVE-2024-53111"
},
{
"category": "external",
"summary": "SUSE Bug 1234086 for CVE-2024-53111",
"url": "https://bugzilla.suse.com/1234086"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53111"
},
{
"cve": "CVE-2024-53113",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53113"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix NULL pointer dereference in alloc_pages_bulk_noprof\n\nWe triggered a NULL pointer dereference for ac.preferred_zoneref-\u003ezone in\nalloc_pages_bulk_noprof() when the task is migrated between cpusets.\n\nWhen cpuset is enabled, in prepare_alloc_pages(), ac-\u003enodemask may be\n\u0026current-\u003emems_allowed. when first_zones_zonelist() is called to find\npreferred_zoneref, the ac-\u003enodemask may be modified concurrently if the\ntask is migrated between different cpusets. Assuming we have 2 NUMA Node,\nwhen traversing Node1 in ac-\u003ezonelist, the nodemask is 2, and when\ntraversing Node2 in ac-\u003ezonelist, the nodemask is 1. As a result, the\nac-\u003epreferred_zoneref points to NULL zone.\n\nIn alloc_pages_bulk_noprof(), for_each_zone_zonelist_nodemask() finds a\nallowable zone and calls zonelist_node_idx(ac.preferred_zoneref), leading\nto NULL pointer dereference.\n\n__alloc_pages_noprof() fixes this issue by checking NULL pointer in commit\nea57485af8f4 (\"mm, page_alloc: fix check for NULL preferred_zone\") and\ncommit df76cee6bbeb (\"mm, page_alloc: remove redundant checks from alloc\nfastpath\").\n\nTo fix it, check NULL pointer for preferred_zoneref-\u003ezone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53113",
"url": "https://www.suse.com/security/cve/CVE-2024-53113"
},
{
"category": "external",
"summary": "SUSE Bug 1234077 for CVE-2024-53113",
"url": "https://bugzilla.suse.com/1234077"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53113"
},
{
"cve": "CVE-2024-53117",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53117"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Improve MSG_ZEROCOPY error handling\n\nAdd a missing kfree_skb() to prevent memory leaks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53117",
"url": "https://www.suse.com/security/cve/CVE-2024-53117"
},
{
"category": "external",
"summary": "SUSE Bug 1234079 for CVE-2024-53117",
"url": "https://bugzilla.suse.com/1234079"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53117"
},
{
"cve": "CVE-2024-53118",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53118"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Fix sk_error_queue memory leak\n\nKernel queues MSG_ZEROCOPY completion notifications on the error queue.\nWhere they remain, until explicitly recv()ed. To prevent memory leaks,\nclean up the queue when the socket is destroyed.\n\nunreferenced object 0xffff8881028beb00 (size 224):\n comm \"vsock_test\", pid 1218, jiffies 4294694897\n hex dump (first 32 bytes):\n 90 b0 21 17 81 88 ff ff 90 b0 21 17 81 88 ff ff ..!.......!.....\n 00 00 00 00 00 00 00 00 00 b0 21 17 81 88 ff ff ..........!.....\n backtrace (crc 6c7031ca):\n [\u003cffffffff81418ef7\u003e] kmem_cache_alloc_node_noprof+0x2f7/0x370\n [\u003cffffffff81d35882\u003e] __alloc_skb+0x132/0x180\n [\u003cffffffff81d2d32b\u003e] sock_omalloc+0x4b/0x80\n [\u003cffffffff81d3a8ae\u003e] msg_zerocopy_realloc+0x9e/0x240\n [\u003cffffffff81fe5cb2\u003e] virtio_transport_send_pkt_info+0x412/0x4c0\n [\u003cffffffff81fe6183\u003e] virtio_transport_stream_enqueue+0x43/0x50\n [\u003cffffffff81fe0813\u003e] vsock_connectible_sendmsg+0x373/0x450\n [\u003cffffffff81d233d5\u003e] ____sys_sendmsg+0x365/0x3a0\n [\u003cffffffff81d246f4\u003e] ___sys_sendmsg+0x84/0xd0\n [\u003cffffffff81d26f47\u003e] __sys_sendmsg+0x47/0x80\n [\u003cffffffff820d3df3\u003e] do_syscall_64+0x93/0x180\n [\u003cffffffff8220012b\u003e] entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53118",
"url": "https://www.suse.com/security/cve/CVE-2024-53118"
},
{
"category": "external",
"summary": "SUSE Bug 1234071 for CVE-2024-53118",
"url": "https://bugzilla.suse.com/1234071"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53118"
},
{
"cve": "CVE-2024-53119",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53119"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio/vsock: Fix accept_queue memory leak\n\nAs the final stages of socket destruction may be delayed, it is possible\nthat virtio_transport_recv_listen() will be called after the accept_queue\nhas been flushed, but before the SOCK_DONE flag has been set. As a result,\nsockets enqueued after the flush would remain unremoved, leading to a\nmemory leak.\n\nvsock_release\n __vsock_release\n lock\n virtio_transport_release\n virtio_transport_close\n schedule_delayed_work(close_work)\n sk_shutdown = SHUTDOWN_MASK\n(!) flush accept_queue\n release\n virtio_transport_recv_pkt\n vsock_find_bound_socket\n lock\n if flag(SOCK_DONE) return\n virtio_transport_recv_listen\n child = vsock_create_connected\n (!) vsock_enqueue_accept(child)\n release\nclose_work\n lock\n virtio_transport_do_close\n set_flag(SOCK_DONE)\n virtio_transport_remove_sock\n vsock_remove_sock\n vsock_remove_bound\n release\n\nIntroduce a sk_shutdown check to disallow vsock_enqueue_accept() during\nsocket destruction.\n\nunreferenced object 0xffff888109e3f800 (size 2040):\n comm \"kworker/5:2\", pid 371, jiffies 4294940105\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................\n 28 00 0b 40 00 00 00 00 00 00 00 00 00 00 00 00 (..@............\n backtrace (crc 9e5f4e84):\n [\u003cffffffff81418ff1\u003e] kmem_cache_alloc_noprof+0x2c1/0x360\n [\u003cffffffff81d27aa0\u003e] sk_prot_alloc+0x30/0x120\n [\u003cffffffff81d2b54c\u003e] sk_alloc+0x2c/0x4b0\n [\u003cffffffff81fe049a\u003e] __vsock_create.constprop.0+0x2a/0x310\n [\u003cffffffff81fe6d6c\u003e] virtio_transport_recv_pkt+0x4dc/0x9a0\n [\u003cffffffff81fe745d\u003e] vsock_loopback_work+0xfd/0x140\n [\u003cffffffff810fc6ac\u003e] process_one_work+0x20c/0x570\n [\u003cffffffff810fce3f\u003e] worker_thread+0x1bf/0x3a0\n [\u003cffffffff811070dd\u003e] kthread+0xdd/0x110\n [\u003cffffffff81044fdd\u003e] ret_from_fork+0x2d/0x50\n [\u003cffffffff8100785a\u003e] ret_from_fork_asm+0x1a/0x30",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53119",
"url": "https://www.suse.com/security/cve/CVE-2024-53119"
},
{
"category": "external",
"summary": "SUSE Bug 1234073 for CVE-2024-53119",
"url": "https://bugzilla.suse.com/1234073"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53119"
},
{
"cve": "CVE-2024-53120",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53120"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: CT: Fix null-ptr-deref in add rule err flow\n\nIn error flow of mlx5_tc_ct_entry_add_rule(), in case ct_rule_add()\ncallback returns error, zone_rule-\u003eattr is used uninitiated. Fix it to\nuse attr which has the needed pointer value.\n\nKernel log:\n BUG: kernel NULL pointer dereference, address: 0000000000000110\n RIP: 0010:mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n\u2026\n Call Trace:\n \u003cTASK\u003e\n ? __die+0x20/0x70\n ? page_fault_oops+0x150/0x3e0\n ? exc_page_fault+0x74/0x140\n ? asm_exc_page_fault+0x22/0x30\n ? mlx5_tc_ct_entry_add_rule+0x2b1/0x2f0 [mlx5_core]\n ? mlx5_tc_ct_entry_add_rule+0x1d5/0x2f0 [mlx5_core]\n mlx5_tc_ct_block_flow_offload+0xc6a/0xf90 [mlx5_core]\n ? nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n nf_flow_offload_tuple+0xd8/0x190 [nf_flow_table]\n flow_offload_work_handler+0x142/0x320 [nf_flow_table]\n ? finish_task_switch.isra.0+0x15b/0x2b0\n process_one_work+0x16c/0x320\n worker_thread+0x28c/0x3a0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xb8/0xf0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2d/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53120",
"url": "https://www.suse.com/security/cve/CVE-2024-53120"
},
{
"category": "external",
"summary": "SUSE Bug 1234075 for CVE-2024-53120",
"url": "https://bugzilla.suse.com/1234075"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53120"
},
{
"cve": "CVE-2024-53122",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53122"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: cope racing subflow creation in mptcp_rcv_space_adjust\n\nAdditional active subflows - i.e. created by the in kernel path\nmanager - are included into the subflow list before starting the\n3whs.\n\nA racing recvmsg() spooling data received on an already established\nsubflow would unconditionally call tcp_cleanup_rbuf() on all the\ncurrent subflows, potentially hitting a divide by zero error on\nthe newly created ones.\n\nExplicitly check that the subflow is in a suitable state before\ninvoking tcp_cleanup_rbuf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53122",
"url": "https://www.suse.com/security/cve/CVE-2024-53122"
},
{
"category": "external",
"summary": "SUSE Bug 1234076 for CVE-2024-53122",
"url": "https://bugzilla.suse.com/1234076"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53122"
},
{
"cve": "CVE-2024-53125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53125"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: sync_linked_regs() must preserve subreg_def\n\nRange propagation must not affect subreg_def marks, otherwise the\nfollowing example is rewritten by verifier incorrectly when\nBPF_F_TEST_RND_HI32 flag is set:\n\n 0: call bpf_ktime_get_ns call bpf_ktime_get_ns\n 1: r0 \u0026= 0x7fffffff after verifier r0 \u0026= 0x7fffffff\n 2: w1 = w0 rewrites w1 = w0\n 3: if w0 \u003c 10 goto +0 --------------\u003e r11 = 0x2f5674a6 (r)\n 4: r1 \u003e\u003e= 32 r11 \u003c\u003c= 32 (r)\n 5: r0 = r1 r1 |= r11 (r)\n 6: exit; if w0 \u003c 0xa goto pc+0\n r1 \u003e\u003e= 32\n r0 = r1\n exit\n\n(or zero extension of w1 at (2) is missing for architectures that\n require zero extension for upper register half).\n\nThe following happens w/o this patch:\n- r0 is marked as not a subreg at (0);\n- w1 is marked as subreg at (2);\n- w1 subreg_def is overridden at (3) by copy_register_state();\n- w1 is read at (5) but mark_insn_zext() does not mark (2)\n for zero extension, because w1 subreg_def is not set;\n- because of BPF_F_TEST_RND_HI32 flag verifier inserts random\n value for hi32 bits of (2) (marked (r));\n- this random value is read at (5).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53125",
"url": "https://www.suse.com/security/cve/CVE-2024-53125"
},
{
"category": "external",
"summary": "SUSE Bug 1234156 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1234156"
},
{
"category": "external",
"summary": "SUSE Bug 1245804 for CVE-2024-53125",
"url": "https://bugzilla.suse.com/1245804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53125"
},
{
"cve": "CVE-2024-53126",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53126"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: solidrun: Fix UB bug with devres\n\nIn psnet_open_pf_bar() and snet_open_vf_bar() a string later passed to\npcim_iomap_regions() is placed on the stack. Neither\npcim_iomap_regions() nor the functions it calls copy that string.\n\nShould the string later ever be used, this, consequently, causes\nundefined behavior since the stack frame will by then have disappeared.\n\nFix the bug by allocating the strings on the heap through\ndevm_kasprintf().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53126",
"url": "https://www.suse.com/security/cve/CVE-2024-53126"
},
{
"category": "external",
"summary": "SUSE Bug 1234158 for CVE-2024-53126",
"url": "https://bugzilla.suse.com/1234158"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53126"
},
{
"cve": "CVE-2024-53127",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53127"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K\"\n\nThe commit 8396c793ffdf (\"mmc: dw_mmc: Fix IDMAC operation with pages\nbigger than 4K\") increased the max_req_size, even for 4K pages, causing\nvarious issues:\n- Panic booting the kernel/rootfs from an SD card on Rockchip RK3566\n- Panic booting the kernel/rootfs from an SD card on StarFive JH7100\n- \"swiotlb buffer is full\" and data corruption on StarFive JH7110\n\nAt this stage no fix have been found, so it\u0027s probably better to just\nrevert the change.\n\nThis reverts commit 8396c793ffdf28bb8aee7cfe0891080f8cab7890.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53127",
"url": "https://www.suse.com/security/cve/CVE-2024-53127"
},
{
"category": "external",
"summary": "SUSE Bug 1234153 for CVE-2024-53127",
"url": "https://bugzilla.suse.com/1234153"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53127"
},
{
"cve": "CVE-2024-53129",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53129"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/rockchip: vop: Fix a dereferenced before check warning\n\nThe \u0027state\u0027 can\u0027t be NULL, we should check crtc_state.\n\nFix warning:\ndrivers/gpu/drm/rockchip/rockchip_drm_vop.c:1096\nvop_plane_atomic_async_check() warn: variable dereferenced before check\n\u0027state\u0027 (see line 1077)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53129",
"url": "https://www.suse.com/security/cve/CVE-2024-53129"
},
{
"category": "external",
"summary": "SUSE Bug 1234155 for CVE-2024-53129",
"url": "https://bugzilla.suse.com/1234155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53129"
},
{
"cve": "CVE-2024-53130",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53130"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint\n\nWhen using the \"block:block_dirty_buffer\" tracepoint, mark_buffer_dirty()\nmay cause a NULL pointer dereference, or a general protection fault when\nKASAN is enabled.\n\nThis happens because, since the tracepoint was added in\nmark_buffer_dirty(), it references the dev_t member bh-\u003eb_bdev-\u003ebd_dev\nregardless of whether the buffer head has a pointer to a block_device\nstructure.\n\nIn the current implementation, nilfs_grab_buffer(), which grabs a buffer\nto read (or create) a block of metadata, including b-tree node blocks,\ndoes not set the block device, but instead does so only if the buffer is\nnot in the \"uptodate\" state for each of its caller block reading\nfunctions. However, if the uptodate flag is set on a folio/page, and the\nbuffer heads are detached from it by try_to_free_buffers(), and new buffer\nheads are then attached by create_empty_buffers(), the uptodate flag may\nbe restored to each buffer without the block device being set to\nbh-\u003eb_bdev, and mark_buffer_dirty() may be called later in that state,\nresulting in the bug mentioned above.\n\nFix this issue by making nilfs_grab_buffer() always set the block device\nof the super block structure to the buffer head, regardless of the state\nof the buffer\u0027s uptodate flag.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53130",
"url": "https://www.suse.com/security/cve/CVE-2024-53130"
},
{
"category": "external",
"summary": "SUSE Bug 1234219 for CVE-2024-53130",
"url": "https://bugzilla.suse.com/1234219"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53130"
},
{
"cve": "CVE-2024-53131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53131"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix null-ptr-deref in block_touch_buffer tracepoint\n\nPatch series \"nilfs2: fix null-ptr-deref bugs on block tracepoints\".\n\nThis series fixes null pointer dereference bugs that occur when using\nnilfs2 and two block-related tracepoints.\n\n\nThis patch (of 2):\n\nIt has been reported that when using \"block:block_touch_buffer\"\ntracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a\nNULL pointer dereference, or a general protection fault when KASAN is\nenabled.\n\nThis happens because since the tracepoint was added in touch_buffer(), it\nreferences the dev_t member bh-\u003eb_bdev-\u003ebd_dev regardless of whether the\nbuffer head has a pointer to a block_device structure. In the current\nimplementation, the block_device structure is set after the function\nreturns to the caller.\n\nHere, touch_buffer() is used to mark the folio/page that owns the buffer\nhead as accessed, but the common search helper for folio/page used by the\ncaller function was optimized to mark the folio/page as accessed when it\nwas reimplemented a long time ago, eliminating the need to call\ntouch_buffer() here in the first place.\n\nSo this solves the issue by eliminating the touch_buffer() call itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53131",
"url": "https://www.suse.com/security/cve/CVE-2024-53131"
},
{
"category": "external",
"summary": "SUSE Bug 1234220 for CVE-2024-53131",
"url": "https://bugzilla.suse.com/1234220"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53131"
},
{
"cve": "CVE-2024-53133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53133"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Handle dml allocation failure to avoid crash\n\n[Why]\nIn the case where a dml allocation fails for any reason, the\ncurrent state\u0027s dml contexts would no longer be valid. Then\nsubsequent calls dc_state_copy_internal would shallow copy\ninvalid memory and if the new state was released, a double\nfree would occur.\n\n[How]\nReset dml pointers in new_state to NULL and avoid invalid\npointer\n\n(cherry picked from commit bcafdc61529a48f6f06355d78eb41b3aeda5296c)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53133",
"url": "https://www.suse.com/security/cve/CVE-2024-53133"
},
{
"category": "external",
"summary": "SUSE Bug 1234221 for CVE-2024-53133",
"url": "https://bugzilla.suse.com/1234221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53133"
},
{
"cve": "CVE-2024-53134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53134"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx93-blk-ctrl: correct remove path\n\nThe check condition should be \u0027i \u003c bc-\u003eonecell_data.num_domains\u0027, not\n\u0027bc-\u003eonecell_data.num_domains\u0027 which will make the look never finish\nand cause kernel panic.\n\nAlso disable runtime to address\n\"imx93-blk-ctrl 4ac10000.system-controller: Unbalanced pm_runtime_enable!\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53134",
"url": "https://www.suse.com/security/cve/CVE-2024-53134"
},
{
"category": "external",
"summary": "SUSE Bug 1234159 for CVE-2024-53134",
"url": "https://bugzilla.suse.com/1234159"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53134"
},
{
"cve": "CVE-2024-53136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53136"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: revert \"mm: shmem: fix data-race in shmem_getattr()\"\n\nRevert d949d1d14fa2 (\"mm: shmem: fix data-race in shmem_getattr()\") as\nsuggested by Chuck [1]. It is causing deadlocks when accessing tmpfs over\nNFS.\n\nAs Hugh commented, \"added just to silence a syzbot sanitizer splat: added\nwhere there has never been any practical problem\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53136",
"url": "https://www.suse.com/security/cve/CVE-2024-53136"
},
{
"category": "external",
"summary": "SUSE Bug 1234161 for CVE-2024-53136",
"url": "https://bugzilla.suse.com/1234161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53136"
},
{
"cve": "CVE-2024-53141",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53141"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: add missing range check in bitmap_ip_uadt\n\nWhen tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,\nthe values of ip and ip_to are slightly swapped. Therefore, the range check\nfor ip should be done later, but this part is missing and it seems that the\nvulnerability occurs.\n\nSo we should add missing range checks and remove unnecessary range checks.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53141",
"url": "https://www.suse.com/security/cve/CVE-2024-53141"
},
{
"category": "external",
"summary": "SUSE Bug 1234381 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1234381"
},
{
"category": "external",
"summary": "SUSE Bug 1245778 for CVE-2024-53141",
"url": "https://bugzilla.suse.com/1245778"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53141"
},
{
"cve": "CVE-2024-53142",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53142"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ninitramfs: avoid filename buffer overrun\n\nThe initramfs filename field is defined in\nDocumentation/driver-api/early-userspace/buffer-format.rst as:\n\n 37 cpio_file := ALGN(4) + cpio_header + filename + \"\\0\" + ALGN(4) + data\n...\n 55 ============= ================== =========================\n 56 Field name Field size Meaning\n 57 ============= ================== =========================\n...\n 70 c_namesize 8 bytes Length of filename, including final \\0\n\nWhen extracting an initramfs cpio archive, the kernel\u0027s do_name() path\nhandler assumes a zero-terminated path at @collected, passing it\ndirectly to filp_open() / init_mkdir() / init_mknod().\n\nIf a specially crafted cpio entry carries a non-zero-terminated filename\nand is followed by uninitialized memory, then a file may be created with\ntrailing characters that represent the uninitialized memory. The ability\nto create an initramfs entry would imply already having full control of\nthe system, so the buffer overrun shouldn\u0027t be considered a security\nvulnerability.\n\nAppend the output of the following bash script to an existing initramfs\nand observe any created /initramfs_test_fname_overrunAA* path. E.g.\n ./reproducer.sh | gzip \u003e\u003e /myinitramfs\n\nIt\u0027s easiest to observe non-zero uninitialized memory when the output is\ngzipped, as it\u0027ll overflow the heap allocated @out_buf in __gunzip(),\nrather than the initrd_start+initrd_size block.\n\n---- reproducer.sh ----\nnilchar=\"A\"\t# change to \"\\0\" to properly zero terminate / pad\nmagic=\"070701\"\nino=1\nmode=$(( 0100777 ))\nuid=0\ngid=0\nnlink=1\nmtime=1\nfilesize=0\ndevmajor=0\ndevminor=1\nrdevmajor=0\nrdevminor=0\ncsum=0\nfname=\"initramfs_test_fname_overrun\"\nnamelen=$(( ${#fname} + 1 ))\t# plus one to account for terminator\n\nprintf \"%s%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%s\" \\\n\t$magic $ino $mode $uid $gid $nlink $mtime $filesize \\\n\t$devmajor $devminor $rdevmajor $rdevminor $namelen $csum $fname\n\ntermpadlen=$(( 1 + ((4 - ((110 + $namelen) \u0026 3)) % 4) ))\nprintf \"%.s${nilchar}\" $(seq 1 $termpadlen)\n---- reproducer.sh ----\n\nSymlink filename fields handled in do_symlink() won\u0027t overrun past the\ndata segment, due to the explicit zero-termination of the symlink\ntarget.\n\nFix filename buffer overrun by aborting the initramfs FSM if any cpio\nentry doesn\u0027t carry a zero-terminator at the expected (name_len - 1)\noffset.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53142",
"url": "https://www.suse.com/security/cve/CVE-2024-53142"
},
{
"category": "external",
"summary": "SUSE Bug 1232436 for CVE-2024-53142",
"url": "https://bugzilla.suse.com/1232436"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53142"
},
{
"cve": "CVE-2024-53144",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53144"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE\n\nThis aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4\n(\"Bluetooth: Always request for user confirmation for Just Works\")\nalways request user confirmation with confirm_hint set since the\nlikes of bluetoothd have dedicated policy around JUST_WORKS method\n(e.g. main.conf:JustWorksRepairing).\n\nCVE: CVE-2024-8805",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53144",
"url": "https://www.suse.com/security/cve/CVE-2024-53144"
},
{
"category": "external",
"summary": "SUSE Bug 1234690 for CVE-2024-53144",
"url": "https://bugzilla.suse.com/1234690"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53144"
},
{
"cve": "CVE-2024-53146",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53146"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent a potential integer overflow\n\nIf the tag length is \u003e= U32_MAX - 3 then the \"length + 4\" addition\ncan result in an integer overflow. Address this by splitting the\ndecoding into several steps so that decode_cb_compound4res() does\nnot have to perform arithmetic on the unsafe length value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53146",
"url": "https://www.suse.com/security/cve/CVE-2024-53146"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234854 for CVE-2024-53146",
"url": "https://bugzilla.suse.com/1234854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53146"
},
{
"cve": "CVE-2024-53148",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53148"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Flush partial mappings in error case\n\nIf some remap_pfn_range() calls succeeded before one failed, we still have\nbuffer pages mapped into the userspace page tables when we drop the buffer\nreference with comedi_buf_map_put(bm). The userspace mappings are only\ncleaned up later in the mmap error path.\n\nFix it by explicitly flushing all mappings in our VMA on the error path.\n\nSee commit 79a61cc3fc04 (\"mm: avoid leaving partial pfn mappings around in\nerror case\").",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53148",
"url": "https://www.suse.com/security/cve/CVE-2024-53148"
},
{
"category": "external",
"summary": "SUSE Bug 1234832 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234832"
},
{
"category": "external",
"summary": "SUSE Bug 1234833 for CVE-2024-53148",
"url": "https://bugzilla.suse.com/1234833"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53148"
},
{
"cve": "CVE-2024-53150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix out of bounds reads when finding clock sources\n\nThe current USB-audio driver code doesn\u0027t check bLength of each\ndescriptor at traversing for clock descriptors. That is, when a\ndevice provides a bogus descriptor with a shorter bLength, the driver\nmight hit out-of-bounds reads.\n\nFor addressing it, this patch adds sanity checks to the validator\nfunctions for the clock descriptor traversal. When the descriptor\nlength is shorter than expected, it\u0027s skipped in the loop.\n\nFor the clock source and clock multiplier descriptors, we can just\ncheck bLength against the sizeof() of each descriptor type.\nOTOH, the clock selector descriptor of UAC2 and UAC3 has an array\nof bNrInPins elements and two more fields at its tail, hence those\nhave to be checked in addition to the sizeof() check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53150",
"url": "https://www.suse.com/security/cve/CVE-2024-53150"
},
{
"category": "external",
"summary": "SUSE Bug 1234834 for CVE-2024-53150",
"url": "https://bugzilla.suse.com/1234834"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53150"
},
{
"cve": "CVE-2024-53151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53151"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Address an integer overflow\n\nDan Carpenter reports:\n\u003e Commit 78147ca8b4a9 (\"svcrdma: Add a \"parsed chunk list\" data\n\u003e structure\") from Jun 22, 2020 (linux-next), leads to the following\n\u003e Smatch static checker warning:\n\u003e\n\u003e\tnet/sunrpc/xprtrdma/svc_rdma_recvfrom.c:498 xdr_check_write_chunk()\n\u003e\twarn: potential user controlled sizeof overflow \u0027segcount * 4 * 4\u0027\n\u003e\n\u003e net/sunrpc/xprtrdma/svc_rdma_recvfrom.c\n\u003e 488 static bool xdr_check_write_chunk(struct svc_rdma_recv_ctxt *rctxt)\n\u003e 489 {\n\u003e 490 u32 segcount;\n\u003e 491 __be32 *p;\n\u003e 492\n\u003e 493 if (xdr_stream_decode_u32(\u0026rctxt-\u003erc_stream, \u0026segcount))\n\u003e ^^^^^^^^\n\u003e\n\u003e 494 return false;\n\u003e 495\n\u003e 496 /* A bogus segcount causes this buffer overflow check to fail. */\n\u003e 497 p = xdr_inline_decode(\u0026rctxt-\u003erc_stream,\n\u003e --\u003e 498 segcount * rpcrdma_segment_maxsz * sizeof(*p));\n\u003e\n\u003e\n\u003e segcount is an untrusted u32. On 32bit systems anything \u003e= SIZE_MAX / 16 will\n\u003e have an integer overflow and some those values will be accepted by\n\u003e xdr_inline_decode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53151",
"url": "https://www.suse.com/security/cve/CVE-2024-53151"
},
{
"category": "external",
"summary": "SUSE Bug 1234829 for CVE-2024-53151",
"url": "https://bugzilla.suse.com/1234829"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53151"
},
{
"cve": "CVE-2024-53154",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53154"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: clk-apple-nco: Add NULL check in applnco_probe\n\nAdd NULL check in applnco_probe, to handle kernel NULL pointer\ndereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53154",
"url": "https://www.suse.com/security/cve/CVE-2024-53154"
},
{
"category": "external",
"summary": "SUSE Bug 1234826 for CVE-2024-53154",
"url": "https://bugzilla.suse.com/1234826"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53154"
},
{
"cve": "CVE-2024-53155",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53155"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix uninitialized value in ocfs2_file_read_iter()\n\nSyzbot has reported the following KMSAN splat:\n\nBUG: KMSAN: uninit-value in ocfs2_file_read_iter+0x9a4/0xf80\n ocfs2_file_read_iter+0x9a4/0xf80\n __io_read+0x8d4/0x20f0\n io_read+0x3e/0xf0\n io_issue_sqe+0x42b/0x22c0\n io_wq_submit_work+0xaf9/0xdc0\n io_worker_handle_work+0xd13/0x2110\n io_wq_worker+0x447/0x1410\n ret_from_fork+0x6f/0x90\n ret_from_fork_asm+0x1a/0x30\n\nUninit was created at:\n __alloc_pages_noprof+0x9a7/0xe00\n alloc_pages_mpol_noprof+0x299/0x990\n alloc_pages_noprof+0x1bf/0x1e0\n allocate_slab+0x33a/0x1250\n ___slab_alloc+0x12ef/0x35e0\n kmem_cache_alloc_bulk_noprof+0x486/0x1330\n __io_alloc_req_refill+0x84/0x560\n io_submit_sqes+0x172f/0x2f30\n __se_sys_io_uring_enter+0x406/0x41c0\n __x64_sys_io_uring_enter+0x11f/0x1a0\n x64_sys_call+0x2b54/0x3ba0\n do_syscall_64+0xcd/0x1e0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nSince an instance of \u0027struct kiocb\u0027 may be passed from the block layer\nwith \u0027private\u0027 field uninitialized, introduce \u0027ocfs2_iocb_init_rw_locked()\u0027\nand use it from where \u0027ocfs2_dio_end_io()\u0027 might take care, i.e. in\n\u0027ocfs2_file_read_iter()\u0027 and \u0027ocfs2_file_write_iter()\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53155",
"url": "https://www.suse.com/security/cve/CVE-2024-53155"
},
{
"category": "external",
"summary": "SUSE Bug 1234855 for CVE-2024-53155",
"url": "https://bugzilla.suse.com/1234855"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53155"
},
{
"cve": "CVE-2024-53156",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53156"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()\n\nI found the following bug in my fuzzer:\n\n UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51\n index 255 is out of range for type \u0027htc_endpoint [22]\u0027\n CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-dirty #14\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n Workqueue: events request_firmware_work_func\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x180/0x1b0\n __ubsan_handle_out_of_bounds+0xd4/0x130\n htc_issue_send.constprop.0+0x20c/0x230\n ? _raw_spin_unlock_irqrestore+0x3c/0x70\n ath9k_wmi_cmd+0x41d/0x610\n ? mark_held_locks+0x9f/0xe0\n ...\n\nSince this bug has been confirmed to be caused by insufficient verification\nof conn_rsp_epid, I think it would be appropriate to add a range check for\nconn_rsp_epid to htc_connect_service() to prevent the bug from occurring.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53156",
"url": "https://www.suse.com/security/cve/CVE-2024-53156"
},
{
"category": "external",
"summary": "SUSE Bug 1234846 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234846"
},
{
"category": "external",
"summary": "SUSE Bug 1234847 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234847"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53156",
"url": "https://bugzilla.suse.com/1234853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53156"
},
{
"cve": "CVE-2024-53157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53157"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scpi: Check the DVFS OPP count returned by the firmware\n\nFix a kernel crash with the below call trace when the SCPI firmware\nreturns OPP count of zero.\n\ndvfs_info.opp_count may be zero on some platforms during the reboot\ntest, and the kernel will crash after dereferencing the pointer to\nkcalloc(info-\u003ecount, sizeof(*opp), GFP_KERNEL).\n\n | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028\n | Mem abort info:\n | ESR = 0x96000004\n | Exception class = DABT (current EL), IL = 32 bits\n | SET = 0, FnV = 0\n | EA = 0, S1PTW = 0\n | Data abort info:\n | ISV = 0, ISS = 0x00000004\n | CM = 0, WnR = 0\n | user pgtable: 4k pages, 48-bit VAs, pgdp = 00000000faefa08c\n | [0000000000000028] pgd=0000000000000000\n | Internal error: Oops: 96000004 [#1] SMP\n | scpi-hwmon: probe of PHYT000D:00 failed with error -110\n | Process systemd-udevd (pid: 1701, stack limit = 0x00000000aaede86c)\n | CPU: 2 PID: 1701 Comm: systemd-udevd Not tainted 4.19.90+ #1\n | Hardware name: PHYTIUM LTD Phytium FT2000/4/Phytium FT2000/4, BIOS\n | pstate: 60000005 (nZCv daif -PAN -UAO)\n | pc : scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | lr : clk_register+0x438/0x720\n | Call trace:\n | scpi_dvfs_recalc_rate+0x40/0x58 [clk_scpi]\n | devm_clk_hw_register+0x50/0xa0\n | scpi_clk_ops_init.isra.2+0xa0/0x138 [clk_scpi]\n | scpi_clocks_probe+0x528/0x70c [clk_scpi]\n | platform_drv_probe+0x58/0xa8\n | really_probe+0x260/0x3d0\n | driver_probe_device+0x12c/0x148\n | device_driver_attach+0x74/0x98\n | __driver_attach+0xb4/0xe8\n | bus_for_each_dev+0x88/0xe0\n | driver_attach+0x30/0x40\n | bus_add_driver+0x178/0x2b0\n | driver_register+0x64/0x118\n | __platform_driver_register+0x54/0x60\n | scpi_clocks_driver_init+0x24/0x1000 [clk_scpi]\n | do_one_initcall+0x54/0x220\n | do_init_module+0x54/0x1c8\n | load_module+0x14a4/0x1668\n | __se_sys_finit_module+0xf8/0x110\n | __arm64_sys_finit_module+0x24/0x30\n | el0_svc_common+0x78/0x170\n | el0_svc_handler+0x38/0x78\n | el0_svc+0x8/0x340\n | Code: 937d7c00 a94153f3 a8c27bfd f9400421 (b8606820)\n | ---[ end trace 06feb22469d89fa8 ]---\n | Kernel panic - not syncing: Fatal exception\n | SMP: stopping secondary CPUs\n | Kernel Offset: disabled\n | CPU features: 0x10,a0002008\n | Memory Limit: none",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53157",
"url": "https://www.suse.com/security/cve/CVE-2024-53157"
},
{
"category": "external",
"summary": "SUSE Bug 1234827 for CVE-2024-53157",
"url": "https://bugzilla.suse.com/1234827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53157"
},
{
"cve": "CVE-2024-53158",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53158"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()\n\nThis loop is supposed to break if the frequency returned from\nclk_round_rate() is the same as on the previous iteration. However,\nthat check doesn\u0027t make sense on the first iteration through the loop.\nIt leads to reading before the start of these-\u003eclk_perf_tbl[] array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53158",
"url": "https://www.suse.com/security/cve/CVE-2024-53158"
},
{
"category": "external",
"summary": "SUSE Bug 1234811 for CVE-2024-53158",
"url": "https://bugzilla.suse.com/1234811"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53158"
},
{
"cve": "CVE-2024-53159",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53159"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53159",
"url": "https://www.suse.com/security/cve/CVE-2024-53159"
},
{
"category": "external",
"summary": "SUSE Bug 1234848 for CVE-2024-53159",
"url": "https://bugzilla.suse.com/1234848"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53159"
},
{
"cve": "CVE-2024-53160",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53160"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu\n\nKCSAN reports a data race when access the krcp-\u003emonitor_work.timer.expires\nvariable in the schedule_delayed_monitor_work() function:\n\n\u003csnip\u003e\nBUG: KCSAN: data-race in __mod_timer / kvfree_call_rcu\n\nread to 0xffff888237d1cce8 of 8 bytes by task 10149 on cpu 1:\n schedule_delayed_monitor_work kernel/rcu/tree.c:3520 [inline]\n kvfree_call_rcu+0x3b8/0x510 kernel/rcu/tree.c:3839\n trie_update_elem+0x47c/0x620 kernel/bpf/lpm_trie.c:441\n bpf_map_update_value+0x324/0x350 kernel/bpf/syscall.c:203\n generic_map_update_batch+0x401/0x520 kernel/bpf/syscall.c:1849\n bpf_map_do_batch+0x28c/0x3f0 kernel/bpf/syscall.c:5143\n __sys_bpf+0x2e5/0x7a0\n __do_sys_bpf kernel/bpf/syscall.c:5741 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5739 [inline]\n __x64_sys_bpf+0x43/0x50 kernel/bpf/syscall.c:5739\n x64_sys_call+0x2625/0x2d60 arch/x86/include/generated/asm/syscalls_64.h:322\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xc9/0x1c0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nwrite to 0xffff888237d1cce8 of 8 bytes by task 56 on cpu 0:\n __mod_timer+0x578/0x7f0 kernel/time/timer.c:1173\n add_timer_global+0x51/0x70 kernel/time/timer.c:1330\n __queue_delayed_work+0x127/0x1a0 kernel/workqueue.c:2523\n queue_delayed_work_on+0xdf/0x190 kernel/workqueue.c:2552\n queue_delayed_work include/linux/workqueue.h:677 [inline]\n schedule_delayed_monitor_work kernel/rcu/tree.c:3525 [inline]\n kfree_rcu_monitor+0x5e8/0x660 kernel/rcu/tree.c:3643\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0x483/0x9a0 kernel/workqueue.c:3310\n worker_thread+0x51d/0x6f0 kernel/workqueue.c:3391\n kthread+0x1d1/0x210 kernel/kthread.c:389\n ret_from_fork+0x4b/0x60 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted 6.12.0-rc2-syzkaller-00050-g5b7c893ed5ed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events_unbound kfree_rcu_monitor\n\u003csnip\u003e\n\nkfree_rcu_monitor() rearms the work if a \"krcp\" has to be still\noffloaded and this is done without holding krcp-\u003elock, whereas\nthe kvfree_call_rcu() holds it.\n\nFix it by acquiring the \"krcp-\u003elock\" for kfree_rcu_monitor() so\nboth functions do not race anymore.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53160",
"url": "https://www.suse.com/security/cve/CVE-2024-53160"
},
{
"category": "external",
"summary": "SUSE Bug 1234810 for CVE-2024-53160",
"url": "https://bugzilla.suse.com/1234810"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53160"
},
{
"cve": "CVE-2024-53161",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53161"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/bluefield: Fix potential integer overflow\n\nThe 64-bit argument for the \"get DIMM info\" SMC call consists of mem_ctrl_idx\nleft-shifted 16 bits and OR-ed with DIMM index. With mem_ctrl_idx defined as\n32-bits wide the left-shift operation truncates the upper 16 bits of\ninformation during the calculation of the SMC argument.\n\nThe mem_ctrl_idx stack variable must be defined as 64-bits wide to prevent any\npotential integer overflow, i.e. loss of data from upper 16 bits.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53161",
"url": "https://www.suse.com/security/cve/CVE-2024-53161"
},
{
"category": "external",
"summary": "SUSE Bug 1234856 for CVE-2024-53161",
"url": "https://bugzilla.suse.com/1234856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53161"
},
{
"cve": "CVE-2024-53162",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53162"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat/qat_4xxx - fix off by one in uof_get_name()\n\nThe fw_objs[] array has \"num_objs\" elements so the \u003e needs to be \u003e= to\nprevent an out of bounds read.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53162",
"url": "https://www.suse.com/security/cve/CVE-2024-53162"
},
{
"category": "external",
"summary": "SUSE Bug 1234843 for CVE-2024-53162",
"url": "https://bugzilla.suse.com/1234843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53162"
},
{
"cve": "CVE-2024-53164",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53164"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: fix ordering of qlen adjustment\n\nChanges to sch-\u003eq.qlen around qdisc_tree_reduce_backlog() need to happen\n_before_ a call to said function because otherwise it may fail to notify\nparent qdiscs when the child is about to become empty.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53164",
"url": "https://www.suse.com/security/cve/CVE-2024-53164"
},
{
"category": "external",
"summary": "SUSE Bug 1234863 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1234863"
},
{
"category": "external",
"summary": "SUSE Bug 1246019 for CVE-2024-53164",
"url": "https://bugzilla.suse.com/1246019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53164"
},
{
"cve": "CVE-2024-53166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53166"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix bfqq uaf in bfq_limit_depth()\n\nSet new allocated bfqq to bic or remove freed bfqq from bic are both\nprotected by bfqd-\u003elock, however bfq_limit_depth() is deferencing bfqq\nfrom bic without the lock, this can lead to UAF if the io_context is\nshared by multiple tasks.\n\nFor example, test bfq with io_uring can trigger following UAF in v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in bfqq_group+0x15/0x50\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x47/0x80\n print_address_description.constprop.0+0x66/0x300\n print_report+0x3e/0x70\n kasan_report+0xb4/0xf0\n bfqq_group+0x15/0x50\n bfqq_request_over_limit+0x130/0x9a0\n bfq_limit_depth+0x1b5/0x480\n __blk_mq_alloc_requests+0x2b5/0xa00\n blk_mq_get_new_requests+0x11d/0x1d0\n blk_mq_submit_bio+0x286/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __block_write_full_folio+0x3d0/0x640\n writepage_cb+0x3b/0xc0\n write_cache_pages+0x254/0x6c0\n write_cache_pages+0x254/0x6c0\n do_writepages+0x192/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n\nAllocated by task 808602:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n __kasan_slab_alloc+0x83/0x90\n kmem_cache_alloc_node+0x1b1/0x6d0\n bfq_get_queue+0x138/0xfa0\n bfq_get_bfqq_handle_split+0xe3/0x2c0\n bfq_init_rq+0x196/0xbb0\n bfq_insert_request.isra.0+0xb5/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_insert_request+0x15d/0x440\n blk_mq_submit_bio+0x8a4/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __blkdev_direct_IO_async+0x2dd/0x330\n blkdev_write_iter+0x39a/0x450\n io_write+0x22a/0x840\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFreed by task 808589:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x27/0x40\n __kasan_slab_free+0x126/0x1b0\n kmem_cache_free+0x10c/0x750\n bfq_put_queue+0x2dd/0x770\n __bfq_insert_request.isra.0+0x155/0x7a0\n bfq_insert_request.isra.0+0x122/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_dispatch_plug_list+0x528/0x7e0\n blk_mq_flush_plug_list.part.0+0xe5/0x590\n __blk_flush_plug+0x3b/0x90\n blk_finish_plug+0x40/0x60\n do_writepages+0x19d/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFix the problem by protecting bic_to_bfqq() with bfqd-\u003elock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53166",
"url": "https://www.suse.com/security/cve/CVE-2024-53166"
},
{
"category": "external",
"summary": "SUSE Bug 1234884 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234884"
},
{
"category": "external",
"summary": "SUSE Bug 1234885 for CVE-2024-53166",
"url": "https://bugzilla.suse.com/1234885"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53166"
},
{
"cve": "CVE-2024-53168",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53168"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \u003cIRQ\u003e\n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 \u003cfa\u003e c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \u003c/TASK\u003e\n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp\u0027s timer handler function causes problems.\n\nTo fix this problem, let\u0027s hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53168",
"url": "https://www.suse.com/security/cve/CVE-2024-53168"
},
{
"category": "external",
"summary": "SUSE Bug 1234887 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1234887"
},
{
"category": "external",
"summary": "SUSE Bug 1243650 for CVE-2024-53168",
"url": "https://bugzilla.suse.com/1243650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53168"
},
{
"cve": "CVE-2024-53169",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53169"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-fabrics: fix kernel crash while shutting down controller\n\nThe nvme keep-alive operation, which executes at a periodic interval,\ncould potentially sneak in while shutting down a fabric controller.\nThis may lead to a race between the fabric controller admin queue\ndestroy code path (invoked while shutting down controller) and hw/hctx\nqueue dispatcher called from the nvme keep-alive async request queuing\noperation. This race could lead to the kernel crash shown below:\n\nCall Trace:\n autoremove_wake_function+0x0/0xbc (unreliable)\n __blk_mq_sched_dispatch_requests+0x114/0x24c\n blk_mq_sched_dispatch_requests+0x44/0x84\n blk_mq_run_hw_queue+0x140/0x220\n nvme_keep_alive_work+0xc8/0x19c [nvme_core]\n process_one_work+0x200/0x4e0\n worker_thread+0x340/0x504\n kthread+0x138/0x140\n start_kernel_thread+0x14/0x18\n\nWhile shutting down fabric controller, if nvme keep-alive request sneaks\nin then it would be flushed off. The nvme_keep_alive_end_io function is\nthen invoked to handle the end of the keep-alive operation which\ndecrements the admin-\u003eq_usage_counter and assuming this is the last/only\nrequest in the admin queue then the admin-\u003eq_usage_counter becomes zero.\nIf that happens then blk-mq destroy queue operation (blk_mq_destroy_\nqueue()) which could be potentially running simultaneously on another\ncpu (as this is the controller shutdown code path) would forward\nprogress and deletes the admin queue. So, now from this point onward\nwe are not supposed to access the admin queue resources. However the\nissue here\u0027s that the nvme keep-alive thread running hw/hctx queue\ndispatch operation hasn\u0027t yet finished its work and so it could still\npotentially access the admin queue resource while the admin queue had\nbeen already deleted and that causes the above crash.\n\nThe above kernel crash is regression caused due to changes implemented\nin commit a54a93d0e359 (\"nvme: move stopping keep-alive into\nnvme_uninit_ctrl()\"). Ideally we should stop keep-alive before destroyin\ng the admin queue and freeing the admin tagset so that it wouldn\u0027t sneak\nin during the shutdown operation. However we removed the keep alive stop\noperation from the beginning of the controller shutdown code path in commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\")\nand added it under nvme_uninit_ctrl() which executes very late in the\nshutdown code path after the admin queue is destroyed and its tagset is\nremoved. So this change created the possibility of keep-alive sneaking in\nand interfering with the shutdown operation and causing observed kernel\ncrash.\n\nTo fix the observed crash, we decided to move nvme_stop_keep_alive() from\nnvme_uninit_ctrl() to nvme_remove_admin_tag_set(). This change would ensure\nthat we don\u0027t forward progress and delete the admin queue until the keep-\nalive operation is finished (if it\u0027s in-flight) or cancelled and that would\nhelp contain the race condition explained above and hence avoid the crash.\n\nMoving nvme_stop_keep_alive() to nvme_remove_admin_tag_set() instead of\nadding nvme_stop_keep_alive() to the beginning of the controller shutdown\ncode path in nvme_stop_ctrl(), as was the case earlier before commit\na54a93d0e359 (\"nvme: move stopping keep-alive into nvme_uninit_ctrl()\"),\nwould help save one callsite of nvme_stop_keep_alive().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53169",
"url": "https://www.suse.com/security/cve/CVE-2024-53169"
},
{
"category": "external",
"summary": "SUSE Bug 1234900 for CVE-2024-53169",
"url": "https://bugzilla.suse.com/1234900"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53169"
},
{
"cve": "CVE-2024-53170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53170"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: fix uaf for flush rq while iterating tags\n\nblk_mq_clear_flush_rq_mapping() is not called during scsi probe, by\nchecking blk_queue_init_done(). However, QUEUE_FLAG_INIT_DONE is cleared\nin del_gendisk by commit aec89dc5d421 (\"block: keep q_usage_counter in\natomic mode after del_gendisk\"), hence for disk like scsi, following\nblk_mq_destroy_queue() will not clear flush rq from tags-\u003erqs[] as well,\ncause following uaf that is found by our syzkaller for v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in blk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nRead of size 4 at addr ffff88811c969c20 by task kworker/1:2H/224909\n\nCPU: 1 PID: 224909 Comm: kworker/1:2H Not tainted 6.6.0-ga836a5060850 #32\nWorkqueue: kblockd blk_mq_timeout_work\nCall Trace:\n\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0x91/0xf0 lib/dump_stack.c:106\nprint_address_description.constprop.0+0x66/0x300 mm/kasan/report.c:364\nprint_report+0x3e/0x70 mm/kasan/report.c:475\nkasan_report+0xb8/0xf0 mm/kasan/report.c:588\nblk_mq_find_and_get_req+0x16e/0x1a0 block/blk-mq-tag.c:261\nbt_iter block/blk-mq-tag.c:288 [inline]\n__sbitmap_for_each_set include/linux/sbitmap.h:295 [inline]\nsbitmap_for_each_set include/linux/sbitmap.h:316 [inline]\nbt_for_each+0x455/0x790 block/blk-mq-tag.c:325\nblk_mq_queue_tag_busy_iter+0x320/0x740 block/blk-mq-tag.c:534\nblk_mq_timeout_work+0x1a3/0x7b0 block/blk-mq.c:1673\nprocess_one_work+0x7c4/0x1450 kernel/workqueue.c:2631\nprocess_scheduled_works kernel/workqueue.c:2704 [inline]\nworker_thread+0x804/0xe40 kernel/workqueue.c:2785\nkthread+0x346/0x450 kernel/kthread.c:388\nret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1b/0x30 arch/x86/entry/entry_64.S:293\n\nAllocated by task 942:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\n____kasan_kmalloc mm/kasan/common.c:374 [inline]\n__kasan_kmalloc mm/kasan/common.c:383 [inline]\n__kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:380\nkasan_kmalloc include/linux/kasan.h:198 [inline]\n__do_kmalloc_node mm/slab_common.c:1007 [inline]\n__kmalloc_node+0x69/0x170 mm/slab_common.c:1014\nkmalloc_node include/linux/slab.h:620 [inline]\nkzalloc_node include/linux/slab.h:732 [inline]\nblk_alloc_flush_queue+0x144/0x2f0 block/blk-flush.c:499\nblk_mq_alloc_hctx+0x601/0x940 block/blk-mq.c:3788\nblk_mq_alloc_and_init_hctx+0x27f/0x330 block/blk-mq.c:4261\nblk_mq_realloc_hw_ctxs+0x488/0x5e0 block/blk-mq.c:4294\nblk_mq_init_allocated_queue+0x188/0x860 block/blk-mq.c:4350\nblk_mq_init_queue_data block/blk-mq.c:4166 [inline]\nblk_mq_init_queue+0x8d/0x100 block/blk-mq.c:4176\nscsi_alloc_sdev+0x843/0xd50 drivers/scsi/scsi_scan.c:335\nscsi_probe_and_add_lun+0x77c/0xde0 drivers/scsi/scsi_scan.c:1189\n__scsi_scan_target+0x1fc/0x5a0 drivers/scsi/scsi_scan.c:1727\nscsi_scan_channel drivers/scsi/scsi_scan.c:1815 [inline]\nscsi_scan_channel+0x14b/0x1e0 drivers/scsi/scsi_scan.c:1791\nscsi_scan_host_selected+0x2fe/0x400 drivers/scsi/scsi_scan.c:1844\nscsi_scan+0x3a0/0x3f0 drivers/scsi/scsi_sysfs.c:151\nstore_scan+0x2a/0x60 drivers/scsi/scsi_sysfs.c:191\ndev_attr_store+0x5c/0x90 drivers/base/core.c:2388\nsysfs_kf_write+0x11c/0x170 fs/sysfs/file.c:136\nkernfs_fop_write_iter+0x3fc/0x610 fs/kernfs/file.c:338\ncall_write_iter include/linux/fs.h:2083 [inline]\nnew_sync_write+0x1b4/0x2d0 fs/read_write.c:493\nvfs_write+0x76c/0xb00 fs/read_write.c:586\nksys_write+0x127/0x250 fs/read_write.c:639\ndo_syscall_x64 arch/x86/entry/common.c:51 [inline]\ndo_syscall_64+0x70/0x120 arch/x86/entry/common.c:81\nentry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nFreed by task 244687:\nkasan_save_stack+0x22/0x50 mm/kasan/common.c:45\nkasan_set_track+0x25/0x30 mm/kasan/common.c:52\nkasan_save_free_info+0x2b/0x50 mm/kasan/generic.c:522\n____kasan_slab_free mm/kasan/common.c:236 [inline]\n__kasan_slab_free+0x12a/0x1b0 mm/kasan/common.c:244\nkasan_slab_free include/linux/kasan.h:164 [in\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53170",
"url": "https://www.suse.com/security/cve/CVE-2024-53170"
},
{
"category": "external",
"summary": "SUSE Bug 1234888 for CVE-2024-53170",
"url": "https://bugzilla.suse.com/1234888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53170"
},
{
"cve": "CVE-2024-53171",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53171"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit\n\nAfter an insertion in TNC, the tree might split and cause a node to\nchange its `znode-\u003eparent`. A further deletion of other nodes in the\ntree (which also could free the nodes), the aforementioned node\u0027s\n`znode-\u003ecparent` could still point to a freed node. This\n`znode-\u003ecparent` may not be updated when getting nodes to commit in\n`ubifs_tnc_start_commit()`. This could then trigger a use-after-free\nwhen accessing the `znode-\u003ecparent` in `write_index()` in\n`ubifs_tnc_end_commit()`.\n\nThis can be triggered by running\n\n rm -f /etc/test-file.bin\n dd if=/dev/urandom of=/etc/test-file.bin bs=1M count=60 conv=fsync\n\nin a loop, and with `CONFIG_UBIFS_FS_AUTHENTICATION`. KASAN then\nreports:\n\n BUG: KASAN: use-after-free in ubifs_tnc_end_commit+0xa5c/0x1950\n Write of size 32 at addr ffffff800a3af86c by task ubifs_bgt0_20/153\n\n Call trace:\n dump_backtrace+0x0/0x340\n show_stack+0x18/0x24\n dump_stack_lvl+0x9c/0xbc\n print_address_description.constprop.0+0x74/0x2b0\n kasan_report+0x1d8/0x1f0\n kasan_check_range+0xf8/0x1a0\n memcpy+0x84/0xf4\n ubifs_tnc_end_commit+0xa5c/0x1950\n do_commit+0x4e0/0x1340\n ubifs_bg_thread+0x234/0x2e0\n kthread+0x36c/0x410\n ret_from_fork+0x10/0x20\n\n Allocated by task 401:\n kasan_save_stack+0x38/0x70\n __kasan_kmalloc+0x8c/0xd0\n __kmalloc+0x34c/0x5bc\n tnc_insert+0x140/0x16a4\n ubifs_tnc_add+0x370/0x52c\n ubifs_jnl_write_data+0x5d8/0x870\n do_writepage+0x36c/0x510\n ubifs_writepage+0x190/0x4dc\n __writepage+0x58/0x154\n write_cache_pages+0x394/0x830\n do_writepages+0x1f0/0x5b0\n filemap_fdatawrite_wbc+0x170/0x25c\n file_write_and_wait_range+0x140/0x190\n ubifs_fsync+0xe8/0x290\n vfs_fsync_range+0xc0/0x1e4\n do_fsync+0x40/0x90\n __arm64_sys_fsync+0x34/0x50\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\n Freed by task 403:\n kasan_save_stack+0x38/0x70\n kasan_set_track+0x28/0x40\n kasan_set_free_info+0x28/0x4c\n __kasan_slab_free+0xd4/0x13c\n kfree+0xc4/0x3a0\n tnc_delete+0x3f4/0xe40\n ubifs_tnc_remove_range+0x368/0x73c\n ubifs_tnc_remove_ino+0x29c/0x2e0\n ubifs_jnl_delete_inode+0x150/0x260\n ubifs_evict_inode+0x1d4/0x2e4\n evict+0x1c8/0x450\n iput+0x2a0/0x3c4\n do_unlinkat+0x2cc/0x490\n __arm64_sys_unlinkat+0x90/0x100\n invoke_syscall.constprop.0+0xa8/0x260\n do_el0_svc+0xc8/0x1f0\n el0_svc+0x34/0x70\n el0t_64_sync_handler+0x108/0x114\n el0t_64_sync+0x1a4/0x1a8\n\nThe offending `memcpy()` in `ubifs_copy_hash()` has a use-after-free\nwhen a node becomes root in TNC but still has a `cparent` to an already\nfreed node. More specifically, consider the following TNC:\n\n zroot\n /\n /\n zp1\n /\n /\n zn\n\nInserting a new node `zn_new` with a key smaller then `zn` will trigger\na split in `tnc_insert()` if `zp1` is full:\n\n zroot\n / \\\n / \\\n zp1 zp2\n / \\\n / \\\n zn_new zn\n\n`zn-\u003eparent` has now been moved to `zp2`, *but* `zn-\u003ecparent` still\npoints to `zp1`.\n\nNow, consider a removal of all the nodes _except_ `zn`. Just when\n`tnc_delete()` is about to delete `zroot` and `zp2`:\n\n zroot\n \\\n \\\n zp2\n \\\n \\\n zn\n\n`zroot` and `zp2` get freed and the tree collapses:\n\n zn\n\n`zn` now becomes the new `zroot`.\n\n`get_znodes_to_commit()` will now only find `zn`, the new `zroot`, and\n`write_index()` will check its `znode-\u003ecparent` that wrongly points to\nthe already freed `zp1`. `ubifs_copy_hash()` thus gets wrongly called\nwith `znode-\u003ecparent-\u003ezbranch[znode-\u003eiip].hash` that triggers the\nuse-after-free!\n\nFix this by explicitly setting `znode-\u003ecparent` to `NULL` in\n`get_znodes_to_commit()` for the root node. The search for the dirty\nnodes\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53171",
"url": "https://www.suse.com/security/cve/CVE-2024-53171"
},
{
"category": "external",
"summary": "SUSE Bug 1234889 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1234889"
},
{
"category": "external",
"summary": "SUSE Bug 1236234 for CVE-2024-53171",
"url": "https://bugzilla.suse.com/1236234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53171"
},
{
"cve": "CVE-2024-53172",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53172"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: fastmap: Fix duplicate slab cache names while attaching\n\nSince commit 4c39529663b9 (\"slab: Warn on duplicate cache names when\nDEBUG_VM=y\"), the duplicate slab cache names can be detected and a\nkernel WARNING is thrown out.\nIn UBI fast attaching process, alloc_ai() could be invoked twice\nwith the same slab cache name \u0027ubi_aeb_slab_cache\u0027, which will trigger\nfollowing warning messages:\n kmem_cache of name \u0027ubi_aeb_slab_cache\u0027 already exists\n WARNING: CPU: 0 PID: 7519 at mm/slab_common.c:107\n __kmem_cache_create_args+0x100/0x5f0\n Modules linked in: ubi(+) nandsim [last unloaded: nandsim]\n CPU: 0 UID: 0 PID: 7519 Comm: modprobe Tainted: G 6.12.0-rc2\n RIP: 0010:__kmem_cache_create_args+0x100/0x5f0\n Call Trace:\n __kmem_cache_create_args+0x100/0x5f0\n alloc_ai+0x295/0x3f0 [ubi]\n ubi_attach+0x3c3/0xcc0 [ubi]\n ubi_attach_mtd_dev+0x17cf/0x3fa0 [ubi]\n ubi_init+0x3fb/0x800 [ubi]\n do_init_module+0x265/0x7d0\n __x64_sys_finit_module+0x7a/0xc0\n\nThe problem could be easily reproduced by loading UBI device by fastmap\nwith CONFIG_DEBUG_VM=y.\nFix it by using different slab names for alloc_ai() callers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53172",
"url": "https://www.suse.com/security/cve/CVE-2024-53172"
},
{
"category": "external",
"summary": "SUSE Bug 1234898 for CVE-2024-53172",
"url": "https://bugzilla.suse.com/1234898"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53172"
},
{
"cve": "CVE-2024-53173",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53173"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4.0: Fix a use-after-free problem in the asynchronous open()\n\nYang Erkun reports that when two threads are opening files at the same\ntime, and are forced to abort before a reply is seen, then the call to\nnfs_release_seqid() in nfs4_opendata_free() can result in a\nuse-after-free of the pointer to the defunct rpc task of the other\nthread.\nThe fix is to ensure that if the RPC call is aborted before the call to\nnfs_wait_on_sequence() is complete, then we must call nfs_release_seqid()\nin nfs4_open_release() before the rpc_task is freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53173",
"url": "https://www.suse.com/security/cve/CVE-2024-53173"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234891 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234891"
},
{
"category": "external",
"summary": "SUSE Bug 1234892 for CVE-2024-53173",
"url": "https://bugzilla.suse.com/1234892"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53173"
},
{
"cve": "CVE-2024-53174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53174"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: make sure cache entry active before cache_show\n\nThe function `c_show` was called with protection from RCU. This only\nensures that `cp` will not be freed. Therefore, the reference count for\n`cp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `cache_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `cp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 7 PID: 822 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n\nCall Trace:\n \u003cTASK\u003e\n c_show+0x2fc/0x380 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53174",
"url": "https://www.suse.com/security/cve/CVE-2024-53174"
},
{
"category": "external",
"summary": "SUSE Bug 1234899 for CVE-2024-53174",
"url": "https://bugzilla.suse.com/1234899"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53174"
},
{
"cve": "CVE-2024-53175",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53175"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: fix memleak if msg_init_ns failed in create_ipc_ns\n\nPercpu memory allocation may failed during create_ipc_ns however this\nfail is not handled properly since ipc sysctls and mq sysctls is not\nreleased properly. Fix this by release these two resource when failure.\n\nHere is the kmemleak stack when percpu failed:\n\nunreferenced object 0xffff88819de2a600 (size 512):\n comm \"shmem_2nstest\", pid 120711, jiffies 4300542254\n hex dump (first 32 bytes):\n 60 aa 9d 84 ff ff ff ff fc 18 48 b2 84 88 ff ff `.........H.....\n 04 00 00 00 a4 01 00 00 20 e4 56 81 ff ff ff ff ........ .V.....\n backtrace (crc be7cba35):\n [\u003cffffffff81b43f83\u003e] __kmalloc_node_track_caller_noprof+0x333/0x420\n [\u003cffffffff81a52e56\u003e] kmemdup_noprof+0x26/0x50\n [\u003cffffffff821b2f37\u003e] setup_mq_sysctls+0x57/0x1d0\n [\u003cffffffff821b29cc\u003e] copy_ipcs+0x29c/0x3b0\n [\u003cffffffff815d6a10\u003e] create_new_namespaces+0x1d0/0x920\n [\u003cffffffff815d7449\u003e] copy_namespaces+0x2e9/0x3e0\n [\u003cffffffff815458f3\u003e] copy_process+0x29f3/0x7ff0\n [\u003cffffffff8154b080\u003e] kernel_clone+0xc0/0x650\n [\u003cffffffff8154b6b1\u003e] __do_sys_clone+0xa1/0xe0\n [\u003cffffffff843df8ff\u003e] do_syscall_64+0xbf/0x1c0\n [\u003cffffffff846000b0\u003e] entry_SYSCALL_64_after_hwframe+0x4b/0x53",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53175",
"url": "https://www.suse.com/security/cve/CVE-2024-53175"
},
{
"category": "external",
"summary": "SUSE Bug 1234893 for CVE-2024-53175",
"url": "https://bugzilla.suse.com/1234893"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53175"
},
{
"cve": "CVE-2024-53179",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53179"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix use-after-free of signing key\n\nCustomers have reported use-after-free in @ses-\u003eauth_key.response with\nSMB2.1 + sign mounts which occurs due to following race:\n\ntask A task B\ncifs_mount()\n dfs_mount_share()\n get_session()\n cifs_mount_get_session() cifs_send_recv()\n cifs_get_smb_ses() compound_send_recv()\n cifs_setup_session() smb2_setup_request()\n kfree_sensitive() smb2_calc_signature()\n crypto_shash_setkey() *UAF*\n\nFix this by ensuring that we have a valid @ses-\u003eauth_key.response by\nchecking whether @ses-\u003eses_status is SES_GOOD or SES_EXITING with\n@ses-\u003eses_lock held. After commit 24a9799aa8ef (\"smb: client: fix UAF\nin smb2_reconnect_server()\"), we made sure to call -\u003elogoff() only\nwhen @ses was known to be good (e.g. valid -\u003eauth_key.response), so\nit\u0027s safe to access signing key when @ses-\u003eses_status == SES_EXITING.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53179",
"url": "https://www.suse.com/security/cve/CVE-2024-53179"
},
{
"category": "external",
"summary": "SUSE Bug 1234921 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234921"
},
{
"category": "external",
"summary": "SUSE Bug 1234927 for CVE-2024-53179",
"url": "https://bugzilla.suse.com/1234927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53179"
},
{
"cve": "CVE-2024-53180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53180"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Add sanity NULL check for the default mmap fault handler\n\nA driver might allow the mmap access before initializing its\nruntime-\u003edma_area properly. Add a proper NULL check before passing to\nvirt_to_page() for avoiding a panic.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53180",
"url": "https://www.suse.com/security/cve/CVE-2024-53180"
},
{
"category": "external",
"summary": "SUSE Bug 1234929 for CVE-2024-53180",
"url": "https://bugzilla.suse.com/1234929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53180"
},
{
"cve": "CVE-2024-53185",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53185"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix NULL ptr deref in crypto_aead_setkey()\n\nNeither SMB3.0 or SMB3.02 supports encryption negotiate context, so\nwhen SMB2_GLOBAL_CAP_ENCRYPTION flag is set in the negotiate response,\nthe client uses AES-128-CCM as the default cipher. See MS-SMB2\n3.3.5.4.\n\nCommit b0abcd65ec54 (\"smb: client: fix UAF in async decryption\") added\na @server-\u003ecipher_type check to conditionally call\nsmb3_crypto_aead_allocate(), but that check would always be false as\n@server-\u003ecipher_type is unset for SMB3.02.\n\nFix the following KASAN splat by setting @server-\u003ecipher_type for\nSMB3.02 as well.\n\nmount.cifs //srv/share /mnt -o vers=3.02,seal,...\n\nBUG: KASAN: null-ptr-deref in crypto_aead_setkey+0x2c/0x130\nRead of size 8 at addr 0000000000000020 by task mount.cifs/1095\nCPU: 1 UID: 0 PID: 1095 Comm: mount.cifs Not tainted 6.12.0 #1\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-3.fc41\n04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x5d/0x80\n ? crypto_aead_setkey+0x2c/0x130\n kasan_report+0xda/0x110\n ? crypto_aead_setkey+0x2c/0x130\n crypto_aead_setkey+0x2c/0x130\n crypt_message+0x258/0xec0 [cifs]\n ? __asan_memset+0x23/0x50\n ? __pfx_crypt_message+0x10/0x10 [cifs]\n ? mark_lock+0xb0/0x6a0\n ? hlock_class+0x32/0xb0\n ? mark_lock+0xb0/0x6a0\n smb3_init_transform_rq+0x352/0x3f0 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n smb_send_rqst+0x144/0x230 [cifs]\n ? __pfx_smb_send_rqst+0x10/0x10 [cifs]\n ? hlock_class+0x32/0xb0\n ? smb2_setup_request+0x225/0x3a0 [cifs]\n ? __pfx_cifs_compound_last_callback+0x10/0x10 [cifs]\n compound_send_recv+0x59b/0x1140 [cifs]\n ? __pfx_compound_send_recv+0x10/0x10 [cifs]\n ? __create_object+0x5e/0x90\n ? hlock_class+0x32/0xb0\n ? do_raw_spin_unlock+0x9a/0xf0\n cifs_send_recv+0x23/0x30 [cifs]\n SMB2_tcon+0x3ec/0xb30 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? __pfx_lock_release+0x10/0x10\n ? do_raw_spin_trylock+0xc6/0x120\n ? lock_acquire+0x3f/0x90\n ? _get_xid+0x16/0xd0 [cifs]\n ? __pfx_SMB2_tcon+0x10/0x10 [cifs]\n ? cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n cifs_get_smb_ses+0xcdd/0x10a0 [cifs]\n ? __pfx_cifs_get_smb_ses+0x10/0x10 [cifs]\n ? cifs_get_tcp_session+0xaa0/0xca0 [cifs]\n cifs_mount_get_session+0x8a/0x210 [cifs]\n dfs_mount_share+0x1b0/0x11d0 [cifs]\n ? __pfx___lock_acquire+0x10/0x10\n ? __pfx_dfs_mount_share+0x10/0x10 [cifs]\n ? lock_acquire.part.0+0xf4/0x2a0\n ? find_held_lock+0x8a/0xa0\n ? hlock_class+0x32/0xb0\n ? lock_release+0x203/0x5d0\n cifs_mount+0xb3/0x3d0 [cifs]\n ? do_raw_spin_trylock+0xc6/0x120\n ? __pfx_cifs_mount+0x10/0x10 [cifs]\n ? lock_acquire+0x3f/0x90\n ? find_nls+0x16/0xa0\n ? smb3_update_mnt_flags+0x372/0x3b0 [cifs]\n cifs_smb3_do_mount+0x1e2/0xc80 [cifs]\n ? __pfx_vfs_parse_fs_string+0x10/0x10\n ? __pfx_cifs_smb3_do_mount+0x10/0x10 [cifs]\n smb3_get_tree+0x1bf/0x330 [cifs]\n vfs_get_tree+0x4a/0x160\n path_mount+0x3c1/0xfb0\n ? kasan_quarantine_put+0xc7/0x1d0\n ? __pfx_path_mount+0x10/0x10\n ? kmem_cache_free+0x118/0x3e0\n ? user_path_at+0x74/0xa0\n __x64_sys_mount+0x1a6/0x1e0\n ? __pfx___x64_sys_mount+0x10/0x10\n ? mark_held_locks+0x1a/0x90\n do_syscall_64+0xbb/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53185",
"url": "https://www.suse.com/security/cve/CVE-2024-53185"
},
{
"category": "external",
"summary": "SUSE Bug 1234901 for CVE-2024-53185",
"url": "https://bugzilla.suse.com/1234901"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53185"
},
{
"cve": "CVE-2024-53187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53187"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check for overflows in io_pin_pages\n\nWARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 io_uring/memmap.c:144\nCPU: 0 UID: 0 PID: 5834 Comm: syz-executor825 Not tainted 6.12.0-next-20241118-syzkaller #0\nCall Trace:\n \u003cTASK\u003e\n __io_uaddr_map+0xfb/0x2d0 io_uring/memmap.c:183\n io_rings_map io_uring/io_uring.c:2611 [inline]\n io_allocate_scq_urings+0x1c0/0x650 io_uring/io_uring.c:3470\n io_uring_create+0x5b5/0xc00 io_uring/io_uring.c:3692\n io_uring_setup io_uring/io_uring.c:3781 [inline]\n ...\n \u003c/TASK\u003e\n\nio_pin_pages()\u0027s uaddr parameter came directly from the user and can be\ngarbage. Don\u0027t just add size to it as it can overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53187",
"url": "https://www.suse.com/security/cve/CVE-2024-53187"
},
{
"category": "external",
"summary": "SUSE Bug 1234947 for CVE-2024-53187",
"url": "https://bugzilla.suse.com/1234947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53187"
},
{
"cve": "CVE-2024-53188",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53188"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix crash when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe function ath12k_dp_cc_cleanup is called to release resources.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nBUG: kernel NULL pointer dereference, address: 0000000000000020\nat RIP: 0010:ath12k_dp_cc_cleanup.part.0+0xb6/0x500 [ath12k]\nCall Trace:\nath12k_dp_cc_cleanup\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set to NULL the released structure in\nath12k_dp_cc_cleanup at the end.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53188",
"url": "https://www.suse.com/security/cve/CVE-2024-53188"
},
{
"category": "external",
"summary": "SUSE Bug 1234948 for CVE-2024-53188",
"url": "https://bugzilla.suse.com/1234948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53188"
},
{
"cve": "CVE-2024-53190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53190"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures\n\nSyzkaller reported a hung task with uevent_show() on stack trace. That\nspecific issue was addressed by another commit [0], but even with that\nfix applied (for example, running v6.12-rc5) we face another type of hung\ntask that comes from the same reproducer [1]. By investigating that, we\ncould narrow it to the following path:\n\n(a) Syzkaller emulates a Realtek USB WiFi adapter using raw-gadget and\ndummy_hcd infrastructure.\n\n(b) During the probe of rtl8192cu, the driver ends-up performing an efuse\nread procedure (which is related to EEPROM load IIUC), and here lies the\nissue: the function read_efuse() calls read_efuse_byte() many times, as\nloop iterations depending on the efuse size (in our example, 512 in total).\n\nThis procedure for reading efuse bytes relies in a loop that performs an\nI/O read up to *10k* times in case of failures. We measured the time of\nthe loop inside read_efuse_byte() alone, and in this reproducer (which\ninvolves the dummy_hcd emulation layer), it takes 15 seconds each. As a\nconsequence, we have the driver stuck in its probe routine for big time,\nexposing a stack trace like below if we attempt to reboot the system, for\nexample:\n\ntask:kworker/0:3 state:D stack:0 pid:662 tgid:662 ppid:2 flags:0x00004000\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n __schedule+0xe22/0xeb6\n schedule_timeout+0xe7/0x132\n __wait_for_common+0xb5/0x12e\n usb_start_wait_urb+0xc5/0x1ef\n ? usb_alloc_urb+0x95/0xa4\n usb_control_msg+0xff/0x184\n _usbctrl_vendorreq_sync+0xa0/0x161\n _usb_read_sync+0xb3/0xc5\n read_efuse_byte+0x13c/0x146\n read_efuse+0x351/0x5f0\n efuse_read_all_map+0x42/0x52\n rtl_efuse_shadow_map_update+0x60/0xef\n rtl_get_hwinfo+0x5d/0x1c2\n rtl92cu_read_eeprom_info+0x10a/0x8d5\n ? rtl92c_read_chip_version+0x14f/0x17e\n rtl_usb_probe+0x323/0x851\n usb_probe_interface+0x278/0x34b\n really_probe+0x202/0x4a4\n __driver_probe_device+0x166/0x1b2\n driver_probe_device+0x2f/0xd8\n [...]\n\nWe propose hereby to drastically reduce the attempts of doing the I/O\nreads in case of failures, restricted to USB devices (given that\nthey\u0027re inherently slower than PCIe ones). By retrying up to 10 times\n(instead of 10000), we got reponsiveness in the reproducer, while seems\nreasonable to believe that there\u0027s no sane USB device implementation in\nthe field requiring this amount of retries at every I/O read in order\nto properly work. Based on that assumption, it\u0027d be good to have it\nbackported to stable but maybe not since driver implementation (the 10k\nnumber comes from day 0), perhaps up to 6.x series makes sense.\n\n[0] Commit 15fffc6a5624 (\"driver core: Fix uevent_show() vs driver detach race\")\n\n[1] A note about that: this syzkaller report presents multiple reproducers\nthat differs by the type of emulated USB device. For this specific case,\ncheck the entry from 2024/08/08 06:23 in the list of crashes; the C repro\nis available at https://syzkaller.appspot.com/text?tag=ReproC\u0026x=1521fc83980000.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53190",
"url": "https://www.suse.com/security/cve/CVE-2024-53190"
},
{
"category": "external",
"summary": "SUSE Bug 1234950 for CVE-2024-53190",
"url": "https://bugzilla.suse.com/1234950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-53190"
},
{
"cve": "CVE-2024-53191",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53191"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix warning when unbinding\n\nIf there is an error during some initialization related to firmware,\nthe buffers dp-\u003etx_ring[i].tx_status are released.\nHowever this is released again when the device is unbinded (ath12k_pci),\nand we get:\nWARNING: CPU: 0 PID: 2098 at mm/slub.c:4689 free_large_kmalloc+0x4d/0x80\nCall Trace:\nfree_large_kmalloc\nath12k_dp_free\nath12k_core_deinit\nath12k_pci_remove\n...\n\nThe issue is always reproducible from a VM because the MSI addressing\ninitialization is failing.\n\nIn order to fix the issue, just set the buffers to NULL after releasing in\norder to avoid the double free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53191",
"url": "https://www.suse.com/security/cve/CVE-2024-53191"
},
{
"category": "external",
"summary": "SUSE Bug 1234952 for CVE-2024-53191",
"url": "https://bugzilla.suse.com/1234952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53191"
},
{
"cve": "CVE-2024-53194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53194"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix use-after-free of slot-\u003ebus on hot remove\n\nDennis reports a boot crash on recent Lenovo laptops with a USB4 dock.\n\nSince commit 0fc70886569c (\"thunderbolt: Reset USB4 v2 host router\") and\ncommit 59a54c5f3dbd (\"thunderbolt: Reset topology created by the boot\nfirmware\"), USB4 v2 and v1 Host Routers are reset on probe of the\nthunderbolt driver.\n\nThe reset clears the Presence Detect State and Data Link Layer Link Active\nbits at the USB4 Host Router\u0027s Root Port and thus causes hot removal of the\ndock.\n\nThe crash occurs when pciehp is unbound from one of the dock\u0027s Downstream\nPorts: pciehp creates a pci_slot on bind and destroys it on unbind. The\npci_slot contains a pointer to the pci_bus below the Downstream Port, but\na reference on that pci_bus is never acquired. The pci_bus is destroyed\nbefore the pci_slot, so a use-after-free ensues when pci_slot_release()\naccesses slot-\u003ebus.\n\nIn principle this should not happen because pci_stop_bus_device() unbinds\npciehp (and therefore destroys the pci_slot) before the pci_bus is\ndestroyed by pci_remove_bus_device().\n\nHowever the stacktrace provided by Dennis shows that pciehp is unbound from\npci_remove_bus_device() instead of pci_stop_bus_device(). To understand\nthe significance of this, one needs to know that the PCI core uses a two\nstep process to remove a portion of the hierarchy: It first unbinds all\ndrivers in the sub-hierarchy in pci_stop_bus_device() and then actually\nremoves the devices in pci_remove_bus_device(). There is no precaution to\nprevent driver binding in-between pci_stop_bus_device() and\npci_remove_bus_device().\n\nIn Dennis\u0027 case, it seems removal of the hierarchy by pciehp races with\ndriver binding by pci_bus_add_devices(). pciehp is bound to the\nDownstream Port after pci_stop_bus_device() has run, so it is unbound by\npci_remove_bus_device() instead of pci_stop_bus_device(). Because the\npci_bus has already been destroyed at that point, accesses to it result in\na use-after-free.\n\nOne might conclude that driver binding needs to be prevented after\npci_stop_bus_device() has run. However it seems risky that pci_slot points\nto pci_bus without holding a reference. Solely relying on correct ordering\nof driver unbind versus pci_bus destruction is certainly not defensive\nprogramming.\n\nIf pci_slot has a need to access data in pci_bus, it ought to acquire a\nreference. Amend pci_create_slot() accordingly. Dennis reports that the\ncrash is not reproducible with this change.\n\nAbridged stacktrace:\n\n pcieport 0000:00:07.0: PME: Signaling with IRQ 156\n pcieport 0000:00:07.0: pciehp: Slot #12 AttnBtn- PwrCtrl- MRL- AttnInd- PwrInd- HotPlug+ Surprise+ Interlock- NoCompl+ IbPresDis- LLActRep+\n pci_bus 0000:20: dev 00, created physical slot 12\n pcieport 0000:00:07.0: pciehp: Slot(12): Card not present\n ...\n pcieport 0000:21:02.0: pciehp: pcie_disable_notification: SLOTCTRL d8 write cmd 0\n Oops: general protection fault, probably for non-canonical address 0x6b6b6b6b6b6b6b6b: 0000 [#1] PREEMPT SMP NOPTI\n CPU: 13 UID: 0 PID: 134 Comm: irq/156-pciehp Not tainted 6.11.0-devel+ #1\n RIP: 0010:dev_driver_string+0x12/0x40\n pci_destroy_slot\n pciehp_remove\n pcie_port_remove_service\n device_release_driver_internal\n bus_remove_device\n device_del\n device_unregister\n remove_iter\n device_for_each_child\n pcie_portdrv_remove\n pci_device_remove\n device_release_driver_internal\n bus_remove_device\n device_del\n pci_remove_bus_device (recursive invocation)\n pci_remove_bus_device\n pciehp_unconfigure_device\n pciehp_disable_slot\n pciehp_handle_presence_or_link_change\n pciehp_ist",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53194",
"url": "https://www.suse.com/security/cve/CVE-2024-53194"
},
{
"category": "external",
"summary": "SUSE Bug 1235459 for CVE-2024-53194",
"url": "https://bugzilla.suse.com/1235459"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53194"
},
{
"cve": "CVE-2024-53195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53195"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Get rid of userspace_irqchip_in_use\n\nImproper use of userspace_irqchip_in_use led to syzbot hitting the\nfollowing WARN_ON() in kvm_timer_update_irq():\n\nWARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arch_timer.c:459\nkvm_timer_update_irq+0x21c/0x394\nCall trace:\n kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459\n kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968\n kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264\n kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline]\n kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline]\n kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695\n kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x78/0x1b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0xe8/0x1b0 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x40/0x50 arch/arm64/kernel/syscall.c:151\n el0_svc+0x54/0x14c arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe following sequence led to the scenario:\n - Userspace creates a VM and a vCPU.\n - The vCPU is initialized with KVM_ARM_VCPU_PMU_V3 during\n KVM_ARM_VCPU_INIT.\n - Without any other setup, such as vGIC or vPMU, userspace issues\n KVM_RUN on the vCPU. Since the vPMU is requested, but not setup,\n kvm_arm_pmu_v3_enable() fails in kvm_arch_vcpu_run_pid_change().\n As a result, KVM_RUN returns after enabling the timer, but before\n incrementing \u0027userspace_irqchip_in_use\u0027:\n kvm_arch_vcpu_run_pid_change()\n ret = kvm_arm_pmu_v3_enable()\n if (!vcpu-\u003earch.pmu.created)\n return -EINVAL;\n if (ret)\n return ret;\n [...]\n if (!irqchip_in_kernel(kvm))\n static_branch_inc(\u0026userspace_irqchip_in_use);\n - Userspace ignores the error and issues KVM_ARM_VCPU_INIT again.\n Since the timer is already enabled, control moves through the\n following flow, ultimately hitting the WARN_ON():\n kvm_timer_vcpu_reset()\n if (timer-\u003eenabled)\n kvm_timer_update_irq()\n if (!userspace_irqchip())\n ret = kvm_vgic_inject_irq()\n ret = vgic_lazy_init()\n if (unlikely(!vgic_initialized(kvm)))\n if (kvm-\u003earch.vgic.vgic_model !=\n KVM_DEV_TYPE_ARM_VGIC_V2)\n return -EBUSY;\n WARN_ON(ret);\n\nTheoretically, since userspace_irqchip_in_use\u0027s functionality can be\nsimply replaced by \u0027!irqchip_in_kernel()\u0027, get rid of the static key\nto avoid the mismanagement, which also helps with the syzbot issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53195",
"url": "https://www.suse.com/security/cve/CVE-2024-53195"
},
{
"category": "external",
"summary": "SUSE Bug 1234957 for CVE-2024-53195",
"url": "https://bugzilla.suse.com/1234957"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53195"
},
{
"cve": "CVE-2024-53196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53196"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Don\u0027t retire aborted MMIO instruction\n\nReturning an abort to the guest for an unsupported MMIO access is a\ndocumented feature of the KVM UAPI. Nevertheless, it\u0027s clear that this\nplumbing has seen limited testing, since userspace can trivially cause a\nWARN in the MMIO return:\n\n WARNING: CPU: 0 PID: 30558 at arch/arm64/include/asm/kvm_emulate.h:536 kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n Call trace:\n kvm_handle_mmio_return+0x46c/0x5c4 arch/arm64/include/asm/kvm_emulate.h:536\n kvm_arch_vcpu_ioctl_run+0x98/0x15b4 arch/arm64/kvm/arm.c:1133\n kvm_vcpu_ioctl+0x75c/0xa78 virt/kvm/kvm_main.c:4487\n __do_sys_ioctl fs/ioctl.c:51 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __arm64_sys_ioctl+0x14c/0x1c8 fs/ioctl.c:893\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x1e0/0x23c arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151\n el0_svc+0x38/0x68 arch/arm64/kernel/entry-common.c:712\n el0t_64_sync_handler+0x90/0xfc arch/arm64/kernel/entry-common.c:730\n el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598\n\nThe splat is complaining that KVM is advancing PC while an exception is\npending, i.e. that KVM is retiring the MMIO instruction despite a\npending synchronous external abort. Womp womp.\n\nFix the glaring UAPI bug by skipping over all the MMIO emulation in\ncase there is a pending synchronous exception. Note that while userspace\nis capable of pending an asynchronous exception (SError, IRQ, or FIQ),\nit is still safe to retire the MMIO instruction in this case as (1) they\nare by definition asynchronous, and (2) KVM relies on hardware support\nfor pending/delivering these exceptions instead of the software state\nmachine for advancing PC.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53196",
"url": "https://www.suse.com/security/cve/CVE-2024-53196"
},
{
"category": "external",
"summary": "SUSE Bug 1234906 for CVE-2024-53196",
"url": "https://bugzilla.suse.com/1234906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53196"
},
{
"cve": "CVE-2024-53197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53197"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices\n\nA bogus device can provide a bNumConfigurations value that exceeds the\ninitial value used in usb_get_configuration for allocating dev-\u003econfig.\n\nThis can lead to out-of-bounds accesses later, e.g. in\nusb_destroy_configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53197",
"url": "https://www.suse.com/security/cve/CVE-2024-53197"
},
{
"category": "external",
"summary": "SUSE Bug 1235464 for CVE-2024-53197",
"url": "https://bugzilla.suse.com/1235464"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53197"
},
{
"cve": "CVE-2024-53198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53198"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen: Fix the issue of resource not being properly released in xenbus_dev_probe()\n\nThis patch fixes an issue in the function xenbus_dev_probe(). In the\nxenbus_dev_probe() function, within the if (err) branch at line 313, the\nprogram incorrectly returns err directly without releasing the resources\nallocated by err = drv-\u003eprobe(dev, id). As the return value is non-zero,\nthe upper layers assume the processing logic has failed. However, the probe\noperation was performed earlier without a corresponding remove operation.\nSince the probe actually allocates resources, failing to perform the remove\noperation could lead to problems.\n\nTo fix this issue, we followed the resource release logic of the\nxenbus_dev_remove() function by adding a new block fail_remove before the\nfail_put block. After entering the branch if (err) at line 313, the\nfunction will use a goto statement to jump to the fail_remove block,\nensuring that the previously acquired resources are correctly released,\nthus preventing the reference count leak.\n\nThis bug was identified by an experimental static analysis tool developed\nby our team. The tool specializes in analyzing reference count operations\nand detecting potential issues where resources are not properly managed.\nIn this case, the tool flagged the missing release operation as a\npotential problem, which led to the development of this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53198",
"url": "https://www.suse.com/security/cve/CVE-2024-53198"
},
{
"category": "external",
"summary": "SUSE Bug 1234923 for CVE-2024-53198",
"url": "https://bugzilla.suse.com/1234923"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53198"
},
{
"cve": "CVE-2024-53200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53200"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in hwss_setup_dpp\n\nThis commit addresses a null pointer dereference issue in\nhwss_setup_dpp(). The issue could occur when pipe_ctx-\u003eplane_state is\nnull. The fix adds a check to ensure `pipe_ctx-\u003eplane_state` is not null\nbefore accessing. This prevents a null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53200",
"url": "https://www.suse.com/security/cve/CVE-2024-53200"
},
{
"category": "external",
"summary": "SUSE Bug 1234968 for CVE-2024-53200",
"url": "https://bugzilla.suse.com/1234968"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53200"
},
{
"cve": "CVE-2024-53201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53201"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\n\nThis commit addresses a null pointer dereference issue in\ndcn20_program_pipe(). Previously, commit 8e4ed3cf1642 (\"drm/amd/display:\nAdd null check for pipe_ctx-\u003eplane_state in dcn20_program_pipe\")\npartially fixed the null pointer dereference issue. However, in\ndcn20_update_dchubp_dpp(), the variable pipe_ctx is passed in, and\nplane_state is accessed again through pipe_ctx. Multiple if statements\ndirectly call attributes of plane_state, leading to potential null\npointer dereference issues. This patch adds necessary null checks to\nensure stability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53201",
"url": "https://www.suse.com/security/cve/CVE-2024-53201"
},
{
"category": "external",
"summary": "SUSE Bug 1234969 for CVE-2024-53201",
"url": "https://bugzilla.suse.com/1234969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53201"
},
{
"cve": "CVE-2024-53202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53202"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware_loader: Fix possible resource leak in fw_log_firmware_info()\n\nThe alg instance should be released under the exception path, otherwise\nthere may be resource leak here.\n\nTo mitigate this, free the alg instance with crypto_free_shash when kmalloc\nfails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53202",
"url": "https://www.suse.com/security/cve/CVE-2024-53202"
},
{
"category": "external",
"summary": "SUSE Bug 1234970 for CVE-2024-53202",
"url": "https://bugzilla.suse.com/1234970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53202"
},
{
"cve": "CVE-2024-53203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53203"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: fix potential array underflow in ucsi_ccg_sync_control()\n\nThe \"command\" variable can be controlled by the user via debugfs. The\nworry is that if con_index is zero then \"\u0026uc-\u003eucsi-\u003econnector[con_index\n- 1]\" would be an array underflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53203",
"url": "https://www.suse.com/security/cve/CVE-2024-53203"
},
{
"category": "external",
"summary": "SUSE Bug 1235001 for CVE-2024-53203",
"url": "https://bugzilla.suse.com/1235001"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53203"
},
{
"cve": "CVE-2024-53206",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53206"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Fix use-after-free of nreq in reqsk_timer_handler().\n\nThe cited commit replaced inet_csk_reqsk_queue_drop_and_put() with\n__inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().\n\nThen, oreq should be passed to reqsk_put() instead of req; otherwise\nuse-after-free of nreq could happen when reqsk is migrated but the\nretry attempt failed (e.g. due to timeout).\n\nLet\u0027s pass oreq to reqsk_put().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53206",
"url": "https://www.suse.com/security/cve/CVE-2024-53206"
},
{
"category": "external",
"summary": "SUSE Bug 1234960 for CVE-2024-53206",
"url": "https://bugzilla.suse.com/1234960"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53206"
},
{
"cve": "CVE-2024-53207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53207"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix possible deadlocks\n\nThis fixes possible deadlocks like the following caused by\nhci_cmd_sync_dequeue causing the destroy function to run:\n\n INFO: task kworker/u19:0:143 blocked for more than 120 seconds.\n Tainted: G W O 6.8.0-2024-03-19-intel-next-iLS-24ww14 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:kworker/u19:0 state:D stack:0 pid:143 tgid:143 ppid:2 flags:0x00004000\n Workqueue: hci0 hci_cmd_sync_work [bluetooth]\n Call Trace:\n \u003cTASK\u003e\n __schedule+0x374/0xaf0\n schedule+0x3c/0xf0\n schedule_preempt_disabled+0x1c/0x30\n __mutex_lock.constprop.0+0x3ef/0x7a0\n __mutex_lock_slowpath+0x13/0x20\n mutex_lock+0x3c/0x50\n mgmt_set_connectable_complete+0xa4/0x150 [bluetooth]\n ? kfree+0x211/0x2a0\n hci_cmd_sync_dequeue+0xae/0x130 [bluetooth]\n ? __pfx_cmd_complete_rsp+0x10/0x10 [bluetooth]\n cmd_complete_rsp+0x26/0x80 [bluetooth]\n mgmt_pending_foreach+0x4d/0x70 [bluetooth]\n __mgmt_power_off+0x8d/0x180 [bluetooth]\n ? _raw_spin_unlock_irq+0x23/0x40\n hci_dev_close_sync+0x445/0x5b0 [bluetooth]\n hci_set_powered_sync+0x149/0x250 [bluetooth]\n set_powered_sync+0x24/0x60 [bluetooth]\n hci_cmd_sync_work+0x90/0x150 [bluetooth]\n process_one_work+0x13e/0x300\n worker_thread+0x2f7/0x420\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x107/0x140\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x3d/0x60\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53207",
"url": "https://www.suse.com/security/cve/CVE-2024-53207"
},
{
"category": "external",
"summary": "SUSE Bug 1234907 for CVE-2024-53207",
"url": "https://bugzilla.suse.com/1234907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53207"
},
{
"cve": "CVE-2024-53208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53208"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync\n\nThis fixes the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\nRead of size 8 at addr ffff888029b4dd18 by task kworker/u9:0/54\n\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.11.0-rc6-syzkaller-01155-gf723224742fc #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:93 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\nq kasan_report+0x143/0x180 mm/kasan/report.c:601\n set_powered_sync+0x3a/0xc0 net/bluetooth/mgmt.c:1353\n hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:328\n process_one_work kernel/workqueue.c:3231 [inline]\n process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312\n worker_thread+0x86d/0xd10 kernel/workqueue.c:3389\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\nAllocated by task 5247:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:370 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387\n kasan_kmalloc include/linux/kasan.h:211 [inline]\n __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4193\n kmalloc_noprof include/linux/slab.h:681 [inline]\n kzalloc_noprof include/linux/slab.h:807 [inline]\n mgmt_pending_new+0x65/0x250 net/bluetooth/mgmt_util.c:269\n mgmt_pending_add+0x36/0x120 net/bluetooth/mgmt_util.c:296\n set_powered+0x3cd/0x5e0 net/bluetooth/mgmt.c:1394\n hci_mgmt_cmd+0xc47/0x11d0 net/bluetooth/hci_sock.c:1712\n hci_sock_sendmsg+0x7b8/0x11c0 net/bluetooth/hci_sock.c:1832\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:745\n sock_write_iter+0x2dd/0x400 net/socket.c:1160\n new_sync_write fs/read_write.c:497 [inline]\n vfs_write+0xa72/0xc90 fs/read_write.c:590\n ksys_write+0x1a0/0x2c0 fs/read_write.c:643\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 5246:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579\n poison_slab_object+0xe0/0x150 mm/kasan/common.c:240\n __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256\n kasan_slab_free include/linux/kasan.h:184 [inline]\n slab_free_hook mm/slub.c:2256 [inline]\n slab_free mm/slub.c:4477 [inline]\n kfree+0x149/0x360 mm/slub.c:4598\n settings_rsp+0x2bc/0x390 net/bluetooth/mgmt.c:1443\n mgmt_pending_foreach+0xd1/0x130 net/bluetooth/mgmt_util.c:259\n __mgmt_power_off+0x112/0x420 net/bluetooth/mgmt.c:9455\n hci_dev_close_sync+0x665/0x11a0 net/bluetooth/hci_sync.c:5191\n hci_dev_do_close net/bluetooth/hci_core.c:483 [inline]\n hci_dev_close+0x112/0x210 net/bluetooth/hci_core.c:508\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83gv\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53208",
"url": "https://www.suse.com/security/cve/CVE-2024-53208"
},
{
"category": "external",
"summary": "SUSE Bug 1234909 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1234909"
},
{
"category": "external",
"summary": "SUSE Bug 1236244 for CVE-2024-53208",
"url": "https://bugzilla.suse.com/1236244"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53208"
},
{
"cve": "CVE-2024-53209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53209"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix receive ring space parameters when XDP is active\n\nThe MTU setting at the time an XDP multi-buffer is attached\ndetermines whether the aggregation ring will be used and the\nrx_skb_func handler. This is done in bnxt_set_rx_skb_mode().\n\nIf the MTU is later changed, the aggregation ring setting may need\nto be changed and it may become out-of-sync with the settings\ninitially done in bnxt_set_rx_skb_mode(). This may result in\nrandom memory corruption and crashes as the HW may DMA data larger\nthan the allocated buffer size, such as:\n\nBUG: kernel NULL pointer dereference, address: 00000000000003c0\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 17 PID: 0 Comm: swapper/17 Kdump: loaded Tainted: G S OE 6.1.0-226bf9805506 #1\nHardware name: Wiwynn Delta Lake PVT BZA.02601.0150/Delta Lake-Class1, BIOS F0E_3A12 08/26/2021\nRIP: 0010:bnxt_rx_pkt+0xe97/0x1ae0 [bnxt_en]\nCode: 8b 95 70 ff ff ff 4c 8b 9d 48 ff ff ff 66 41 89 87 b4 00 00 00 e9 0b f7 ff ff 0f b7 43 0a 49 8b 95 a8 04 00 00 25 ff 0f 00 00 \u003c0f\u003e b7 14 42 48 c1 e2 06 49 03 95 a0 04 00 00 0f b6 42 33f\nRSP: 0018:ffffa19f40cc0d18 EFLAGS: 00010202\nRAX: 00000000000001e0 RBX: ffff8e2c805c6100 RCX: 00000000000007ff\nRDX: 0000000000000000 RSI: ffff8e2c271ab990 RDI: ffff8e2c84f12380\nRBP: ffffa19f40cc0e48 R08: 000000000001000d R09: 974ea2fcddfa4cbf\nR10: 0000000000000000 R11: ffffa19f40cc0ff8 R12: ffff8e2c94b58980\nR13: ffff8e2c952d6600 R14: 0000000000000016 R15: ffff8e2c271ab990\nFS: 0000000000000000(0000) GS:ffff8e3b3f840000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00000000000003c0 CR3: 0000000e8580a004 CR4: 00000000007706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n __bnxt_poll_work+0x1c2/0x3e0 [bnxt_en]\n\nTo address the issue, we now call bnxt_set_rx_skb_mode() within\nbnxt_change_mtu() to properly set the AGG rings configuration and\nupdate rx_skb_func based on the new MTU value.\nAdditionally, BNXT_FLAG_NO_AGG_RINGS is cleared at the beginning of\nbnxt_set_rx_skb_mode() to make sure it gets set or cleared based on\nthe current MTU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53209",
"url": "https://www.suse.com/security/cve/CVE-2024-53209"
},
{
"category": "external",
"summary": "SUSE Bug 1235002 for CVE-2024-53209",
"url": "https://bugzilla.suse.com/1235002"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53209"
},
{
"cve": "CVE-2024-53210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53210"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()\n\nPassing MSG_PEEK flag to skb_recv_datagram() increments skb refcount\n(skb-\u003eusers) and iucv_sock_recvmsg() does not decrement skb refcount\nat exit.\nThis results in skb memory leak in skb_queue_purge() and WARN_ON in\niucv_sock_destruct() during socket close. To fix this decrease\nskb refcount by one if MSG_PEEK is set in order to prevent memory\nleak and WARN_ON.\n\nWARNING: CPU: 2 PID: 6292 at net/iucv/af_iucv.c:286 iucv_sock_destruct+0x144/0x1a0 [af_iucv]\nCPU: 2 PID: 6292 Comm: afiucv_test_msg Kdump: loaded Tainted: G W 6.10.0-rc7 #1\nHardware name: IBM 3931 A01 704 (z/VM 7.3.0)\nCall Trace:\n [\u003c001587c682c4aa98\u003e] iucv_sock_destruct+0x148/0x1a0 [af_iucv]\n [\u003c001587c682c4a9d0\u003e] iucv_sock_destruct+0x80/0x1a0 [af_iucv]\n [\u003c001587c704117a32\u003e] __sk_destruct+0x52/0x550\n [\u003c001587c704104a54\u003e] __sock_release+0xa4/0x230\n [\u003c001587c704104c0c\u003e] sock_close+0x2c/0x40\n [\u003c001587c702c5f5a8\u003e] __fput+0x2e8/0x970\n [\u003c001587c7024148c4\u003e] task_work_run+0x1c4/0x2c0\n [\u003c001587c7023b0716\u003e] do_exit+0x996/0x1050\n [\u003c001587c7023b13aa\u003e] do_group_exit+0x13a/0x360\n [\u003c001587c7023b1626\u003e] __s390x_sys_exit_group+0x56/0x60\n [\u003c001587c7022bccca\u003e] do_syscall+0x27a/0x380\n [\u003c001587c7049a6a0c\u003e] __do_syscall+0x9c/0x160\n [\u003c001587c7049ce8a8\u003e] system_call+0x70/0x98\n Last Breaking-Event-Address:\n [\u003c001587c682c4a9d4\u003e] iucv_sock_destruct+0x84/0x1a0 [af_iucv]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53210",
"url": "https://www.suse.com/security/cve/CVE-2024-53210"
},
{
"category": "external",
"summary": "SUSE Bug 1234971 for CVE-2024-53210",
"url": "https://bugzilla.suse.com/1234971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53210"
},
{
"cve": "CVE-2024-53213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53213"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: lan78xx: Fix double free issue with interrupt buffer allocation\n\nIn lan78xx_probe(), the buffer `buf` was being freed twice: once\nimplicitly through `usb_free_urb(dev-\u003eurb_intr)` with the\n`URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused\na double free issue.\n\nTo resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to\nsimplify the initialization sequence and removed the redundant\n`kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring\nit is correctly managed by `usb_fill_int_urb()` and freed by\n`usb_free_urb()` as intended.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53213",
"url": "https://www.suse.com/security/cve/CVE-2024-53213"
},
{
"category": "external",
"summary": "SUSE Bug 1234973 for CVE-2024-53213",
"url": "https://bugzilla.suse.com/1234973"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53213"
},
{
"cve": "CVE-2024-53214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53214"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: Properly hide first-in-list PCIe extended capability\n\nThere are cases where a PCIe extended capability should be hidden from\nthe user. For example, an unknown capability (i.e., capability with ID\ngreater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally\nchosen to be hidden from the user.\n\nHiding a capability is done by virtualizing and modifying the \u0027Next\nCapability Offset\u0027 field of the previous capability so it points to the\ncapability after the one that should be hidden.\n\nThe special case where the first capability in the list should be hidden\nis handled differently because there is no previous capability that can\nbe modified. In this case, the capability ID and version are zeroed\nwhile leaving the next pointer intact. This hides the capability and\nleaves an anchor for the rest of the capability list.\n\nHowever, today, hiding the first capability in the list is not done\nproperly if the capability is unknown, as struct\nvfio_pci_core_device-\u003epci_config_map is set to the capability ID during\ninitialization but the capability ID is not properly checked later when\nused in vfio_config_do_rw(). This leads to the following warning [1] and\nto an out-of-bounds access to ecap_perms array.\n\nFix it by checking cap_id in vfio_config_do_rw(), and if it is greater\nthan PCI_EXT_CAP_ID_MAX, use an alternative struct perm_bits for direct\nread only access instead of the ecap_perms array.\n\nNote that this is safe since the above is the only case where cap_id can\nexceed PCI_EXT_CAP_ID_MAX (except for the special capabilities, which\nare already checked before).\n\n[1]\n\nWARNING: CPU: 118 PID: 5329 at drivers/vfio/pci/vfio_pci_config.c:1900 vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\nCPU: 118 UID: 0 PID: 5329 Comm: simx-qemu-syste Not tainted 6.12.0+ #1\n(snip)\nCall Trace:\n \u003cTASK\u003e\n ? show_regs+0x69/0x80\n ? __warn+0x8d/0x140\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? report_bug+0x18f/0x1a0\n ? handle_bug+0x63/0xa0\n ? exc_invalid_op+0x19/0x70\n ? asm_exc_invalid_op+0x1b/0x20\n ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core]\n ? vfio_pci_config_rw+0x244/0x430 [vfio_pci_core]\n vfio_pci_rw+0x101/0x1b0 [vfio_pci_core]\n vfio_pci_core_read+0x1d/0x30 [vfio_pci_core]\n vfio_device_fops_read+0x27/0x40 [vfio]\n vfs_read+0xbd/0x340\n ? vfio_device_fops_unl_ioctl+0xbb/0x740 [vfio]\n ? __rseq_handle_notify_resume+0xa4/0x4b0\n __x64_sys_pread64+0x96/0xc0\n x64_sys_call+0x1c3d/0x20d0\n do_syscall_64+0x4d/0x120\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53214",
"url": "https://www.suse.com/security/cve/CVE-2024-53214"
},
{
"category": "external",
"summary": "SUSE Bug 1235004 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235004"
},
{
"category": "external",
"summary": "SUSE Bug 1235005 for CVE-2024-53214",
"url": "https://bugzilla.suse.com/1235005"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53214"
},
{
"cve": "CVE-2024-53215",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53215"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()\n\nThere\u0027s issue as follows:\nRPC: Registered rdma transport module.\nRPC: Registered rdma backchannel transport module.\nRPC: Unregistered rdma transport module.\nRPC: Unregistered rdma backchannel transport module.\nBUG: unable to handle page fault for address: fffffbfff80c609a\nPGD 123fee067 P4D 123fee067 PUD 123fea067 PMD 10c624067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nRIP: 0010:percpu_counter_destroy_many+0xf7/0x2a0\nCall Trace:\n \u003cTASK\u003e\n __die+0x1f/0x70\n page_fault_oops+0x2cd/0x860\n spurious_kernel_fault+0x36/0x450\n do_kern_addr_fault+0xca/0x100\n exc_page_fault+0x128/0x150\n asm_exc_page_fault+0x26/0x30\n percpu_counter_destroy_many+0xf7/0x2a0\n mmdrop+0x209/0x350\n finish_task_switch.isra.0+0x481/0x840\n schedule_tail+0xe/0xd0\n ret_from_fork+0x23/0x80\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nIf register_sysctl() return NULL, then svc_rdma_proc_cleanup() will not\ndestroy the percpu counters which init in svc_rdma_proc_init().\nIf CONFIG_HOTPLUG_CPU is enabled, residual nodes may be in the\n\u0027percpu_counters\u0027 list. The above issue may occur once the module is\nremoved. If the CONFIG_HOTPLUG_CPU configuration is not enabled, memory\nleakage occurs.\nTo solve above issue just destroy all percpu counters when\nregister_sysctl() return NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53215",
"url": "https://www.suse.com/security/cve/CVE-2024-53215"
},
{
"category": "external",
"summary": "SUSE Bug 1234962 for CVE-2024-53215",
"url": "https://bugzilla.suse.com/1234962"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53215"
},
{
"cve": "CVE-2024-53216",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53216"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: release svc_expkey/svc_export with rcu_work\n\nThe last reference for `cache_head` can be reduced to zero in `c_show`\nand `e_show`(using `rcu_read_lock` and `rcu_read_unlock`). Consequently,\n`svc_export_put` and `expkey_put` will be invoked, leading to two\nissues:\n\n1. The `svc_export_put` will directly free ex_uuid. However,\n `e_show`/`c_show` will access `ex_uuid` after `cache_put`, which can\n trigger a use-after-free issue, shown below.\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in svc_export_show+0x362/0x430 [nfsd]\n Read of size 1 at addr ff11000010fdc120 by task cat/870\n\n CPU: 1 UID: 0 PID: 870 Comm: cat Not tainted 6.12.0-rc3+ #1\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n 1.16.1-2.fc37 04/01/2014\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x53/0x70\n print_address_description.constprop.0+0x2c/0x3a0\n print_report+0xb9/0x280\n kasan_report+0xae/0xe0\n svc_export_show+0x362/0x430 [nfsd]\n c_show+0x161/0x390 [sunrpc]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n proc_reg_read+0xe1/0x140\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Allocated by task 830:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x8f/0xa0\n __kmalloc_node_track_caller_noprof+0x1bc/0x400\n kmemdup_noprof+0x22/0x50\n svc_export_parse+0x8a9/0xb80 [nfsd]\n cache_do_downcall+0x71/0xa0 [sunrpc]\n cache_write_procfs+0x8e/0xd0 [sunrpc]\n proc_reg_write+0xe1/0x140\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 868:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x37/0x50\n kfree+0xf3/0x3e0\n svc_export_put+0x87/0xb0 [nfsd]\n cache_purge+0x17f/0x1f0 [sunrpc]\n nfsd_destroy_serv+0x226/0x2d0 [nfsd]\n nfsd_svc+0x125/0x1e0 [nfsd]\n write_threads+0x16a/0x2a0 [nfsd]\n nfsctl_transaction_write+0x74/0xa0 [nfsd]\n vfs_write+0x1a5/0x6d0\n ksys_write+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n2. We cannot sleep while using `rcu_read_lock`/`rcu_read_unlock`.\n However, `svc_export_put`/`expkey_put` will call path_put, which\n subsequently triggers a sleeping operation due to the following\n `dput`.\n\n =============================\n WARNING: suspicious RCU usage\n 5.10.0-dirty #141 Not tainted\n -----------------------------\n ...\n Call Trace:\n dump_stack+0x9a/0xd0\n ___might_sleep+0x231/0x240\n dput+0x39/0x600\n path_put+0x1b/0x30\n svc_export_put+0x17/0x80\n e_show+0x1c9/0x200\n seq_read_iter+0x63f/0x7c0\n seq_read+0x226/0x2d0\n vfs_read+0x113/0x2c0\n ksys_read+0xc9/0x170\n do_syscall_64+0x33/0x40\n entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nFix these issues by using `rcu_work` to help release\n`svc_expkey`/`svc_export`. This approach allows for an asynchronous\ncontext to invoke `path_put` and also facilitates the freeing of\n`uuid/exp/key` after an RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53216",
"url": "https://www.suse.com/security/cve/CVE-2024-53216"
},
{
"category": "external",
"summary": "SUSE Bug 1235003 for CVE-2024-53216",
"url": "https://bugzilla.suse.com/1235003"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53216"
},
{
"cve": "CVE-2024-53217",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53217"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent NULL dereference in nfsd4_process_cb_update()\n\n@ses is initialized to NULL. If __nfsd4_find_backchannel() finds no\navailable backchannel session, setup_callback_client() will try to\ndereference @ses and segfault.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53217",
"url": "https://www.suse.com/security/cve/CVE-2024-53217"
},
{
"category": "external",
"summary": "SUSE Bug 1234999 for CVE-2024-53217",
"url": "https://bugzilla.suse.com/1234999"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53217"
},
{
"cve": "CVE-2024-53222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53222"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nzram: fix NULL pointer in comp_algorithm_show()\n\nLTP reported a NULL pointer dereference as followed:\n\n CPU: 7 UID: 0 PID: 5995 Comm: cat Kdump: loaded Not tainted 6.12.0-rc6+ #3\n Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : __pi_strcmp+0x24/0x140\n lr : zcomp_available_show+0x60/0x100 [zram]\n sp : ffff800088b93b90\n x29: ffff800088b93b90 x28: 0000000000000001 x27: 0000000000400cc0\n x26: 0000000000000ffe x25: ffff80007b3e2388 x24: 0000000000000000\n x23: ffff80007b3e2390 x22: ffff0004041a9000 x21: ffff80007b3e2900\n x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000\n x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\n x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000\n x11: 0000000000000000 x10: ffff80007b3e2900 x9 : ffff80007b3cb280\n x8 : 0101010101010101 x7 : 0000000000000000 x6 : 0000000000000000\n x5 : 0000000000000040 x4 : 0000000000000000 x3 : 00656c722d6f7a6c\n x2 : 0000000000000000 x1 : ffff80007b3e2900 x0 : 0000000000000000\n Call trace:\n __pi_strcmp+0x24/0x140\n comp_algorithm_show+0x40/0x70 [zram]\n dev_attr_show+0x28/0x80\n sysfs_kf_seq_show+0x90/0x140\n kernfs_seq_show+0x34/0x48\n seq_read_iter+0x1d4/0x4e8\n kernfs_fop_read_iter+0x40/0x58\n new_sync_read+0x9c/0x168\n vfs_read+0x1a8/0x1f8\n ksys_read+0x74/0x108\n __arm64_sys_read+0x24/0x38\n invoke_syscall+0x50/0x120\n el0_svc_common.constprop.0+0xc8/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x38/0x138\n el0t_64_sync_handler+0xc0/0xc8\n el0t_64_sync+0x188/0x190\n\nThe zram-\u003ecomp_algs[ZRAM_PRIMARY_COMP] can be NULL in zram_add() if\ncomp_algorithm_set() has not been called. User can access the zram device\nby sysfs after device_add_disk(), so there is a time window to trigger the\nNULL pointer dereference. Move it ahead device_add_disk() to make sure\nwhen user can access the zram device, it is ready. comp_algorithm_set()\nis protected by zram-\u003einit_lock in other places and no such problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53222",
"url": "https://www.suse.com/security/cve/CVE-2024-53222"
},
{
"category": "external",
"summary": "SUSE Bug 1234974 for CVE-2024-53222",
"url": "https://bugzilla.suse.com/1234974"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53222"
},
{
"cve": "CVE-2024-53224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53224"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Move events notifier registration to be after device registration\n\nMove pkey change work initialization and cleanup from device resources\nstage to notifier stage, since this is the stage which handles this work\nevents.\n\nFix a race between the device deregistration and pkey change work by moving\nMLX5_IB_STAGE_DEVICE_NOTIFIER to be after MLX5_IB_STAGE_IB_REG in order to\nensure that the notifier is deregistered before the device during cleanup.\nWhich ensures there are no works that are being executed after the\ndevice has already unregistered which can cause the panic below.\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nPGD 0 P4D 0\nOops: 0000 [#1] PREEMPT SMP PTI\nCPU: 1 PID: 630071 Comm: kworker/1:2 Kdump: loaded Tainted: G W OE --------- --- 5.14.0-162.6.1.el9_1.x86_64 #1\nHardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS 090008 02/27/2023\nWorkqueue: events pkey_change_handler [mlx5_ib]\nRIP: 0010:setup_qp+0x38/0x1f0 [mlx5_ib]\nCode: ee 41 54 45 31 e4 55 89 f5 53 48 89 fb 48 83 ec 20 8b 77 08 65 48 8b 04 25 28 00 00 00 48 89 44 24 18 48 8b 07 48 8d 4c 24 16 \u003c4c\u003e 8b 38 49 8b 87 80 0b 00 00 4c 89 ff 48 8b 80 08 05 00 00 8b 40\nRSP: 0018:ffffbcc54068be20 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffff954054494128 RCX: ffffbcc54068be36\nRDX: ffff954004934000 RSI: 0000000000000001 RDI: ffff954054494128\nRBP: 0000000000000023 R08: ffff954001be2c20 R09: 0000000000000001\nR10: ffff954001be2c20 R11: ffff9540260133c0 R12: 0000000000000000\nR13: 0000000000000023 R14: 0000000000000000 R15: ffff9540ffcb0905\nFS: 0000000000000000(0000) GS:ffff9540ffc80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 000000010625c001 CR4: 00000000003706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\nmlx5_ib_gsi_pkey_change+0x20/0x40 [mlx5_ib]\nprocess_one_work+0x1e8/0x3c0\nworker_thread+0x50/0x3b0\n? rescuer_thread+0x380/0x380\nkthread+0x149/0x170\n? set_kthread_struct+0x50/0x50\nret_from_fork+0x22/0x30\nModules linked in: rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) mlx5_fwctl(OE) fwctl(OE) ib_uverbs(OE) mlx5_core(OE) mlxdevm(OE) ib_core(OE) mlx_compat(OE) psample mlxfw(OE) tls knem(OE) netconsole nfsv3 nfs_acl nfs lockd grace fscache netfs qrtr rfkill sunrpc intel_rapl_msr intel_rapl_common rapl hv_balloon hv_utils i2c_piix4 pcspkr joydev fuse ext4 mbcache jbd2 sr_mod sd_mod cdrom t10_pi sg ata_generic pci_hyperv pci_hyperv_intf hyperv_drm drm_shmem_helper drm_kms_helper hv_storvsc syscopyarea hv_netvsc sysfillrect sysimgblt hid_hyperv fb_sys_fops scsi_transport_fc hyperv_keyboard drm ata_piix crct10dif_pclmul crc32_pclmul crc32c_intel libata ghash_clmulni_intel hv_vmbus serio_raw [last unloaded: ib_core]\nCR2: 0000000000000000\n---[ end trace f6f8be4eae12f7bc ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53224",
"url": "https://www.suse.com/security/cve/CVE-2024-53224"
},
{
"category": "external",
"summary": "SUSE Bug 1235009 for CVE-2024-53224",
"url": "https://bugzilla.suse.com/1235009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53224"
},
{
"cve": "CVE-2024-53227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53227"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: bfa: Fix use-after-free in bfad_im_module_exit()\n\nBUG: KASAN: slab-use-after-free in __lock_acquire+0x2aca/0x3a20\nRead of size 8 at addr ffff8881082d80c8 by task modprobe/25303\n\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x95/0xe0\n print_report+0xcb/0x620\n kasan_report+0xbd/0xf0\n __lock_acquire+0x2aca/0x3a20\n lock_acquire+0x19b/0x520\n _raw_spin_lock+0x2b/0x40\n attribute_container_unregister+0x30/0x160\n fc_release_transport+0x19/0x90 [scsi_transport_fc]\n bfad_im_module_exit+0x23/0x60 [bfa]\n bfad_init+0xdb/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nAllocated by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0x7f/0x90\n fc_attach_transport+0x4f/0x4740 [scsi_transport_fc]\n bfad_im_module_init+0x17/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 25303:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x38/0x50\n kfree+0x212/0x480\n bfad_im_module_init+0x7e/0x80 [bfa]\n bfad_init+0x23/0xff0 [bfa]\n do_one_initcall+0xdc/0x550\n do_init_module+0x22d/0x6b0\n load_module+0x4e96/0x5ff0\n init_module_from_file+0xcd/0x130\n idempotent_init_module+0x330/0x620\n __x64_sys_finit_module+0xb3/0x110\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAbove issue happens as follows:\n\nbfad_init\n error = bfad_im_module_init()\n fc_release_transport(bfad_im_scsi_transport_template);\n if (error)\n goto ext;\n\next:\n bfad_im_module_exit();\n fc_release_transport(bfad_im_scsi_transport_template);\n --\u003e Trigger double release\n\nDon\u0027t call bfad_im_module_exit() if bfad_im_module_init() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53227",
"url": "https://www.suse.com/security/cve/CVE-2024-53227"
},
{
"category": "external",
"summary": "SUSE Bug 1235011 for CVE-2024-53227",
"url": "https://bugzilla.suse.com/1235011"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53227"
},
{
"cve": "CVE-2024-53229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53229"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix the qp flush warnings in req\n\nWhen the qp is in error state, the status of WQEs in the queue should be\nset to error. Or else the following will appear.\n\n[ 920.617269] WARNING: CPU: 1 PID: 21 at drivers/infiniband/sw/rxe/rxe_comp.c:756 rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.617744] Modules linked in: rnbd_client(O) rtrs_client(O) rtrs_core(O) rdma_ucm rdma_cm iw_cm ib_cm crc32_generic rdma_rxe ip6_udp_tunnel udp_tunnel ib_uverbs ib_core loop brd null_blk ipv6\n[ 920.618516] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G O 6.1.113-storage+ #65\n[ 920.618986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 920.619396] RIP: 0010:rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.619658] Code: 0f b6 84 24 3a 02 00 00 41 89 84 24 44 04 00 00 e9 2a f7 ff ff 39 ca bb 03 00 00 00 b8 0e 00 00 00 48 0f 45 d8 e9 15 f7 ff ff \u003c0f\u003e 0b e9 cb f8 ff ff 41 bf f5 ff ff ff e9 08 f8 ff ff 49 8d bc 24\n[ 920.620482] RSP: 0018:ffff97b7c00bbc38 EFLAGS: 00010246\n[ 920.620817] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000008\n[ 920.621183] RDX: ffff960dc396ebc0 RSI: 0000000000005400 RDI: ffff960dc4e2fbac\n[ 920.621548] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffffac406450\n[ 920.621884] R10: ffffffffac4060c0 R11: 0000000000000001 R12: ffff960dc4e2f800\n[ 920.622254] R13: ffff960dc4e2f928 R14: ffff97b7c029c580 R15: 0000000000000000\n[ 920.622609] FS: 0000000000000000(0000) GS:ffff960ef7d00000(0000) knlGS:0000000000000000\n[ 920.622979] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 920.623245] CR2: 00007fa056965e90 CR3: 00000001107f1000 CR4: 00000000000006e0\n[ 920.623680] Call Trace:\n[ 920.623815] \u003cTASK\u003e\n[ 920.623933] ? __warn+0x79/0xc0\n[ 920.624116] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.624356] ? report_bug+0xfb/0x150\n[ 920.624594] ? handle_bug+0x3c/0x60\n[ 920.624796] ? exc_invalid_op+0x14/0x70\n[ 920.624976] ? asm_exc_invalid_op+0x16/0x20\n[ 920.625203] ? rxe_completer+0x989/0xcc0 [rdma_rxe]\n[ 920.625474] ? rxe_completer+0x329/0xcc0 [rdma_rxe]\n[ 920.625749] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.626037] rxe_requester+0x625/0xde0 [rdma_rxe]\n[ 920.626310] ? rxe_cq_post+0xe2/0x180 [rdma_rxe]\n[ 920.626583] ? do_complete+0x18d/0x220 [rdma_rxe]\n[ 920.626812] ? rxe_completer+0x1a3/0xcc0 [rdma_rxe]\n[ 920.627050] rxe_do_task+0x80/0x110 [rdma_rxe]\n[ 920.627285] tasklet_action_common.constprop.0+0xa4/0x120\n[ 920.627522] handle_softirqs+0xc2/0x250\n[ 920.627728] ? sort_range+0x20/0x20\n[ 920.627942] run_ksoftirqd+0x1f/0x30\n[ 920.628158] smpboot_thread_fn+0xc7/0x1b0\n[ 920.628334] kthread+0xd6/0x100\n[ 920.628504] ? kthread_complete_and_exit+0x20/0x20\n[ 920.628709] ret_from_fork+0x1f/0x30\n[ 920.628892] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53229",
"url": "https://www.suse.com/security/cve/CVE-2024-53229"
},
{
"category": "external",
"summary": "SUSE Bug 1234905 for CVE-2024-53229",
"url": "https://bugzilla.suse.com/1234905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53229"
},
{
"cve": "CVE-2024-53230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53230"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference,\nso check NULL for cppc_get_cpu_cost().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53230",
"url": "https://www.suse.com/security/cve/CVE-2024-53230"
},
{
"category": "external",
"summary": "SUSE Bug 1235976 for CVE-2024-53230",
"url": "https://bugzilla.suse.com/1235976"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53230"
},
{
"cve": "CVE-2024-53231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53231"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()\n\ncpufreq_cpu_get_raw() may return NULL if the cpu is not in\npolicy-\u003ecpus cpu mask and it will cause null pointer dereference.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53231",
"url": "https://www.suse.com/security/cve/CVE-2024-53231"
},
{
"category": "external",
"summary": "SUSE Bug 1235977 for CVE-2024-53231",
"url": "https://bugzilla.suse.com/1235977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53231"
},
{
"cve": "CVE-2024-53232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53232"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Implement blocking domain\n\nThis fixes a crash when surprise hot-unplugging a PCI device. This crash\nhappens because during hot-unplug __iommu_group_set_domain_nofail()\nattaching the default domain fails when the platform no longer\nrecognizes the device as it has already been removed and we end up with\na NULL domain pointer and UAF. This is exactly the case referred to in\nthe second comment in __iommu_device_set_domain() and just as stated\nthere if we can instead attach the blocking domain the UAF is prevented\nas this can handle the already removed device. Implement the blocking\ndomain to use this handling. With this change, the crash is fixed but\nwe still hit a warning attempting to change DMA ownership on a blocked\ndevice.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53232",
"url": "https://www.suse.com/security/cve/CVE-2024-53232"
},
{
"category": "external",
"summary": "SUSE Bug 1235050 for CVE-2024-53232",
"url": "https://bugzilla.suse.com/1235050"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53232"
},
{
"cve": "CVE-2024-53233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53233"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nunicode: Fix utf8_load() error path\n\nutf8_load() requests the symbol \"utf8_data_table\" and then checks if the\nrequested UTF-8 version is supported. If it\u0027s unsupported, it tries to\nput the data table using symbol_put(). If an unsupported version is\nrequested, symbol_put() fails like this:\n\n kernel BUG at kernel/module/main.c:786!\n RIP: 0010:__symbol_put+0x93/0xb0\n Call Trace:\n \u003cTASK\u003e\n ? __die_body.cold+0x19/0x27\n ? die+0x2e/0x50\n ? do_trap+0xca/0x110\n ? do_error_trap+0x65/0x80\n ? __symbol_put+0x93/0xb0\n ? exc_invalid_op+0x51/0x70\n ? __symbol_put+0x93/0xb0\n ? asm_exc_invalid_op+0x1a/0x20\n ? __pfx_cmp_name+0x10/0x10\n ? __symbol_put+0x93/0xb0\n ? __symbol_put+0x62/0xb0\n utf8_load+0xf8/0x150\n\nThat happens because symbol_put() expects the unique string that\nidentify the symbol, instead of a pointer to the loaded symbol. Fix that\nby using such string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53233",
"url": "https://www.suse.com/security/cve/CVE-2024-53233"
},
{
"category": "external",
"summary": "SUSE Bug 1235046 for CVE-2024-53233",
"url": "https://bugzilla.suse.com/1235046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53233"
},
{
"cve": "CVE-2024-53234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53234"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: handle NONHEAD !delta[1] lclusters gracefully\n\nsyzbot reported a WARNING in iomap_iter_done:\n iomap_fiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80\n ioctl_fiemap fs/ioctl.c:220 [inline]\n\nGenerally, NONHEAD lclusters won\u0027t have delta[1]==0, except for crafted\nimages and filesystems created by pre-1.0 mkfs versions.\n\nPreviously, it would immediately bail out if delta[1]==0, which led to\ninadequate decompressed lengths (thus FIEMAP is impacted). Treat it as\ndelta[1]=1 to work around these legacy mkfs versions.\n\n`lclusterbits \u003e 14` is illegal for compact indexes, error out too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53234",
"url": "https://www.suse.com/security/cve/CVE-2024-53234"
},
{
"category": "external",
"summary": "SUSE Bug 1235045 for CVE-2024-53234",
"url": "https://bugzilla.suse.com/1235045"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53234"
},
{
"cve": "CVE-2024-53236",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53236"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: Free skb when TX metadata options are invalid\n\nWhen a new skb is allocated for transmitting an xsk descriptor, i.e., for\nevery non-multibuf descriptor or the first frag of a multibuf descriptor,\nbut the descriptor is later found to have invalid options set for the TX\nmetadata, the new skb is never freed. This can leak skbs until the send\nbuffer is full which makes sending more packets impossible.\n\nFix this by freeing the skb in the error path if we are currently dealing\nwith the first frag, i.e., an skb allocated in this iteration of\nxsk_build_skb.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53236",
"url": "https://www.suse.com/security/cve/CVE-2024-53236"
},
{
"category": "external",
"summary": "SUSE Bug 1235000 for CVE-2024-53236",
"url": "https://bugzilla.suse.com/1235000"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53236"
},
{
"cve": "CVE-2024-53237",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53237"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: fix use-after-free in device_for_each_child()\n\nSyzbot has reported the following KASAN splat:\n\nBUG: KASAN: slab-use-after-free in device_for_each_child+0x18f/0x1a0\nRead of size 8 at addr ffff88801f605308 by task kbnepd bnep0/4980\n\nCPU: 0 UID: 0 PID: 4980 Comm: kbnepd bnep0 Not tainted 6.12.0-rc4-00161-gae90f6a6170d #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x100/0x190\n ? device_for_each_child+0x18f/0x1a0\n print_report+0x13a/0x4cb\n ? __virt_addr_valid+0x5e/0x590\n ? __phys_addr+0xc6/0x150\n ? device_for_each_child+0x18f/0x1a0\n kasan_report+0xda/0x110\n ? device_for_each_child+0x18f/0x1a0\n ? __pfx_dev_memalloc_noio+0x10/0x10\n device_for_each_child+0x18f/0x1a0\n ? __pfx_device_for_each_child+0x10/0x10\n pm_runtime_set_memalloc_noio+0xf2/0x180\n netdev_unregister_kobject+0x1ed/0x270\n unregister_netdevice_many_notify+0x123c/0x1d80\n ? __mutex_trylock_common+0xde/0x250\n ? __pfx_unregister_netdevice_many_notify+0x10/0x10\n ? trace_contention_end+0xe6/0x140\n ? __mutex_lock+0x4e7/0x8f0\n ? __pfx_lock_acquire.part.0+0x10/0x10\n ? rcu_is_watching+0x12/0xc0\n ? unregister_netdev+0x12/0x30\n unregister_netdevice_queue+0x30d/0x3f0\n ? __pfx_unregister_netdevice_queue+0x10/0x10\n ? __pfx_down_write+0x10/0x10\n unregister_netdev+0x1c/0x30\n bnep_session+0x1fb3/0x2ab0\n ? __pfx_bnep_session+0x10/0x10\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_woken_wake_function+0x10/0x10\n ? __kthread_parkme+0x132/0x200\n ? __pfx_bnep_session+0x10/0x10\n ? kthread+0x13a/0x370\n ? __pfx_bnep_session+0x10/0x10\n kthread+0x2b7/0x370\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x48/0x80\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 4974:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n __kmalloc_noprof+0x1d1/0x440\n hci_alloc_dev_priv+0x1d/0x2820\n __vhci_create_device+0xef/0x7d0\n vhci_write+0x2c7/0x480\n vfs_write+0x6a0/0xfc0\n ksys_write+0x12f/0x260\n do_syscall_64+0xc7/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 4979:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x4f/0x70\n kfree+0x141/0x490\n hci_release_dev+0x4d9/0x600\n bt_host_release+0x6a/0xb0\n device_release+0xa4/0x240\n kobject_put+0x1ec/0x5a0\n put_device+0x1f/0x30\n vhci_release+0x81/0xf0\n __fput+0x3f6/0xb30\n task_work_run+0x151/0x250\n do_exit+0xa79/0x2c30\n do_group_exit+0xd5/0x2a0\n get_signal+0x1fcd/0x2210\n arch_do_signal_or_restart+0x93/0x780\n syscall_exit_to_user_mode+0x140/0x290\n do_syscall_64+0xd4/0x250\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nIn \u0027hci_conn_del_sysfs()\u0027, \u0027device_unregister()\u0027 may be called when\nan underlying (kobject) reference counter is greater than 1. This\nmeans that reparenting (happened when the device is actually freed)\nis delayed and, during that delay, parent controller device (hciX)\nmay be deleted. Since the latter may create a dangling pointer to\nfreed parent, avoid that scenario by reparenting to NULL explicitly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53237",
"url": "https://www.suse.com/security/cve/CVE-2024-53237"
},
{
"category": "external",
"summary": "SUSE Bug 1235007 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235007"
},
{
"category": "external",
"summary": "SUSE Bug 1235008 for CVE-2024-53237",
"url": "https://bugzilla.suse.com/1235008"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53237"
},
{
"cve": "CVE-2024-53239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53239"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: 6fire: Release resources at card release\n\nThe current 6fire code tries to release the resources right after the\ncall of usb6fire_chip_abort(). But at this moment, the card object\nmight be still in use (as we\u0027re calling snd_card_free_when_closed()).\n\nFor avoid potential UAFs, move the release of resources to the card\u0027s\nprivate_free instead of the manual call of usb6fire_chip_destroy() at\nthe USB disconnect callback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53239",
"url": "https://www.suse.com/security/cve/CVE-2024-53239"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235054 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235054"
},
{
"category": "external",
"summary": "SUSE Bug 1235055 for CVE-2024-53239",
"url": "https://bugzilla.suse.com/1235055"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-53239"
},
{
"cve": "CVE-2024-53240",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53240"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen/netfront: fix crash when removing device\n\nWhen removing a netfront device directly after a suspend/resume cycle\nit might happen that the queues have not been setup again, causing a\ncrash during the attempt to stop the queues another time.\n\nFix that by checking the queues are existing before trying to stop\nthem.\n\nThis is XSA-465 / CVE-2024-53240.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53240",
"url": "https://www.suse.com/security/cve/CVE-2024-53240"
},
{
"category": "external",
"summary": "SUSE Bug 1234281 for CVE-2024-53240",
"url": "https://bugzilla.suse.com/1234281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53240"
},
{
"cve": "CVE-2024-53241",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53241"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/xen: don\u0027t do PV iret hypercall through hypercall page\n\nInstead of jumping to the Xen hypercall page for doing the iret\nhypercall, directly code the required sequence in xen-asm.S.\n\nThis is done in preparation of no longer using hypercall page at all,\nas it has shown to cause problems with speculation mitigations.\n\nThis is part of XSA-466 / CVE-2024-53241.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53241",
"url": "https://www.suse.com/security/cve/CVE-2024-53241"
},
{
"category": "external",
"summary": "SUSE Bug 1234282 for CVE-2024-53241",
"url": "https://bugzilla.suse.com/1234282"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53241"
},
{
"cve": "CVE-2024-53685",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53685"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: give up on paths longer than PATH_MAX\n\nIf the full path to be built by ceph_mdsc_build_path() happens to be\nlonger than PATH_MAX, then this function will enter an endless (retry)\nloop, effectively blocking the whole task. Most of the machine\nbecomes unusable, making this a very simple and effective DoS\nvulnerability.\n\nI cannot imagine why this retry was ever implemented, but it seems\nrather useless and harmful to me. Let\u0027s remove it and fail with\nENAMETOOLONG instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53685",
"url": "https://www.suse.com/security/cve/CVE-2024-53685"
},
{
"category": "external",
"summary": "SUSE Bug 1235720 for CVE-2024-53685",
"url": "https://bugzilla.suse.com/1235720"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53685"
},
{
"cve": "CVE-2024-53690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-53690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: prevent use of deleted inode\n\nsyzbot reported a WARNING in nilfs_rmdir. [1]\n\nBecause the inode bitmap is corrupted, an inode with an inode number that\nshould exist as a \".nilfs\" file was reassigned by nilfs_mkdir for \"file0\",\ncausing an inode duplication during execution. And this causes an\nunderflow of i_nlink in rmdir operations.\n\nThe inode is used twice by the same task to unmount and remove directories\n\".nilfs\" and \"file0\", it trigger warning in nilfs_rmdir.\n\nAvoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means\nthat this inode has been deleted, and iput is executed to reclaim it.\n\n[1]\nWARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407\n...\nCall Trace:\n \u003cTASK\u003e\n nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342\n vfs_rmdir+0x3a3/0x510 fs/namei.c:4394\n do_rmdir+0x3b5/0x580 fs/namei.c:4453\n __do_sys_rmdir fs/namei.c:4472 [inline]\n __se_sys_rmdir fs/namei.c:4470 [inline]\n __x64_sys_rmdir+0x47/0x50 fs/namei.c:4470\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-53690",
"url": "https://www.suse.com/security/cve/CVE-2024-53690"
},
{
"category": "external",
"summary": "SUSE Bug 1235842 for CVE-2024-53690",
"url": "https://bugzilla.suse.com/1235842"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-53690"
},
{
"cve": "CVE-2024-54680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-54680"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-54680",
"url": "https://www.suse.com/security/cve/CVE-2024-54680"
},
{
"category": "external",
"summary": "SUSE Bug 1235723 for CVE-2024-54680",
"url": "https://bugzilla.suse.com/1235723"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-54680"
},
{
"cve": "CVE-2024-55639",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55639"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: renesas: rswitch: avoid use-after-put for a device tree node\n\nThe device tree node saved in the rswitch_device structure is used at\nseveral driver locations. So passing this node to of_node_put() after\nthe first use is wrong.\n\nMove of_node_put() for this node to exit paths.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55639",
"url": "https://www.suse.com/security/cve/CVE-2024-55639"
},
{
"category": "external",
"summary": "SUSE Bug 1235737 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235737"
},
{
"category": "external",
"summary": "SUSE Bug 1235738 for CVE-2024-55639",
"url": "https://bugzilla.suse.com/1235738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-55639"
},
{
"cve": "CVE-2024-55881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55881"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Play nice with protected guests in complete_hypercall_exit()\n\nUse is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit\nhypercall when completing said hypercall. For guests with protected state,\ne.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit\nmode as the vCPU state needed to detect 64-bit mode is unavailable.\n\nHacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE\nhypercall via VMGEXIT trips the WARN:\n\n ------------[ cut here ]------------\n WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm]\n Modules linked in: kvm_amd kvm ... [last unloaded: kvm]\n CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat #470\n Hardware name: Google Astoria/astoria, BIOS 0.20240617.0-0 06/17/2024\n RIP: 0010:complete_hypercall_exit+0x44/0xe0 [kvm]\n Call Trace:\n \u003cTASK\u003e\n kvm_arch_vcpu_ioctl_run+0x2400/0x2720 [kvm]\n kvm_vcpu_ioctl+0x54f/0x630 [kvm]\n __se_sys_ioctl+0x6b/0xc0\n do_syscall_64+0x83/0x160\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55881",
"url": "https://www.suse.com/security/cve/CVE-2024-55881"
},
{
"category": "external",
"summary": "SUSE Bug 1235745 for CVE-2024-55881",
"url": "https://bugzilla.suse.com/1235745"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-55881"
},
{
"cve": "CVE-2024-55916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-55916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nDrivers: hv: util: Avoid accessing a ringbuffer not initialized yet\n\nIf the KVP (or VSS) daemon starts before the VMBus channel\u0027s ringbuffer is\nfully initialized, we can hit the panic below:\n\nhv_utils: Registering HyperV Utility Driver\nhv_vmbus: registering driver hv_utils\n...\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nCPU: 44 UID: 0 PID: 2552 Comm: hv_kvp_daemon Tainted: G E 6.11.0-rc3+ #1\nRIP: 0010:hv_pkt_iter_first+0x12/0xd0\nCall Trace:\n...\n vmbus_recvpacket\n hv_kvp_onchannelcallback\n vmbus_on_event\n tasklet_action_common\n tasklet_action\n handle_softirqs\n irq_exit_rcu\n sysvec_hyperv_stimer0\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_hyperv_stimer0\n...\n kvp_register_done\n hvt_op_read\n vfs_read\n ksys_read\n __x64_sys_read\n\nThis can happen because the KVP/VSS channel callback can be invoked\neven before the channel is fully opened:\n1) as soon as hv_kvp_init() -\u003e hvutil_transport_init() creates\n/dev/vmbus/hv_kvp, the kvp daemon can open the device file immediately and\nregister itself to the driver by writing a message KVP_OP_REGISTER1 to the\nfile (which is handled by kvp_on_msg() -\u003ekvp_handle_handshake()) and\nreading the file for the driver\u0027s response, which is handled by\nhvt_op_read(), which calls hvt-\u003eon_read(), i.e. kvp_register_done().\n\n2) the problem with kvp_register_done() is that it can cause the\nchannel callback to be called even before the channel is fully opened,\nand when the channel callback is starting to run, util_probe()-\u003e\nvmbus_open() may have not initialized the ringbuffer yet, so the\ncallback can hit the panic of NULL pointer dereference.\n\nTo reproduce the panic consistently, we can add a \"ssleep(10)\" for KVP in\n__vmbus_open(), just before the first hv_ringbuffer_init(), and then we\nunload and reload the driver hv_utils, and run the daemon manually within\nthe 10 seconds.\n\nFix the panic by reordering the steps in util_probe() so the char dev\nentry used by the KVP or VSS daemon is not created until after\nvmbus_open() has completed. This reordering prevents the race condition\nfrom happening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-55916",
"url": "https://www.suse.com/security/cve/CVE-2024-55916"
},
{
"category": "external",
"summary": "SUSE Bug 1235747 for CVE-2024-55916",
"url": "https://bugzilla.suse.com/1235747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-55916"
},
{
"cve": "CVE-2024-56369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/modes: Avoid divide by zero harder in drm_mode_vrefresh()\n\ndrm_mode_vrefresh() is trying to avoid divide by zero\nby checking whether htotal or vtotal are zero. But we may\nstill end up with a div-by-zero of vtotal*htotal*...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56369",
"url": "https://www.suse.com/security/cve/CVE-2024-56369"
},
{
"category": "external",
"summary": "SUSE Bug 1235750 for CVE-2024-56369",
"url": "https://bugzilla.suse.com/1235750"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56369"
},
{
"cve": "CVE-2024-56372",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56372"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: fix tun_napi_alloc_frags()\n\nsyzbot reported the following crash [1]\n\nIssue came with the blamed commit. Instead of going through\nall the iov components, we keep using the first one\nand end up with a malformed skb.\n\n[1]\n\nkernel BUG at net/core/skbuff.c:2849 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 0 UID: 0 PID: 6230 Comm: syz-executor132 Not tainted 6.13.0-rc1-syzkaller-00407-g96b6fcc0ee41 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024\n RIP: 0010:__pskb_pull_tail+0x1568/0x1570 net/core/skbuff.c:2848\nCode: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 92 96 74 f8 e9 25 f1 ff ff e8 e8 ae 09 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 d9 ae 09 f8 90 \u003c0f\u003e 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90\nRSP: 0018:ffffc90004cbef30 EFLAGS: 00010293\nRAX: ffffffff8995c347 RBX: 00000000fffffff2 RCX: ffff88802cf45a00\nRDX: 0000000000000000 RSI: 00000000fffffff2 RDI: 0000000000000000\nRBP: ffff88807df0c06a R08: ffffffff8995b084 R09: 1ffff1100fbe185c\nR10: dffffc0000000000 R11: ffffed100fbe185d R12: ffff888076e85d50\nR13: ffff888076e85c80 R14: ffff888076e85cf4 R15: ffff888076e85c80\nFS: 00007f0dca6ea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f0dca6ead58 CR3: 00000000119da000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_cow_data+0x2da/0xcb0 net/core/skbuff.c:5284\n tipc_aead_decrypt net/tipc/crypto.c:894 [inline]\n tipc_crypto_rcv+0x402/0x24e0 net/tipc/crypto.c:1844\n tipc_rcv+0x57e/0x12a0 net/tipc/node.c:2109\n tipc_l2_rcv_msg+0x2bd/0x450 net/tipc/bearer.c:668\n __netif_receive_skb_list_ptype net/core/dev.c:5720 [inline]\n __netif_receive_skb_list_core+0x8b7/0x980 net/core/dev.c:5762\n __netif_receive_skb_list net/core/dev.c:5814 [inline]\n netif_receive_skb_list_internal+0xa51/0xe30 net/core/dev.c:5905\n gro_normal_list include/net/gro.h:515 [inline]\n napi_complete_done+0x2b5/0x870 net/core/dev.c:6256\n napi_complete include/linux/netdevice.h:567 [inline]\n tun_get_user+0x2ea0/0x4890 drivers/net/tun.c:1982\n tun_chr_write_iter+0x10d/0x1f0 drivers/net/tun.c:2057\n do_iter_readv_writev+0x600/0x880\n vfs_writev+0x376/0xba0 fs/read_write.c:1050\n do_writev+0x1b6/0x360 fs/read_write.c:1096\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56372",
"url": "https://www.suse.com/security/cve/CVE-2024-56372"
},
{
"category": "external",
"summary": "SUSE Bug 1235753 for CVE-2024-56372",
"url": "https://bugzilla.suse.com/1235753"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56372"
},
{
"cve": "CVE-2024-56531",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56531"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: caiaq: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThis patch also splits the code to the disconnect and the free phases;\nthe former is called immediately at the USB disconnect callback while\nthe latter is called from the card destructor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56531",
"url": "https://www.suse.com/security/cve/CVE-2024-56531"
},
{
"category": "external",
"summary": "SUSE Bug 1235057 for CVE-2024-56531",
"url": "https://bugzilla.suse.com/1235057"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56531"
},
{
"cve": "CVE-2024-56532",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56532"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: us122l: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.\n\nThe loop of us122l-\u003emmap_count check is dropped as well. The check is\nuseless for the asynchronous operation with *_when_closed().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56532",
"url": "https://www.suse.com/security/cve/CVE-2024-56532"
},
{
"category": "external",
"summary": "SUSE Bug 1235059 for CVE-2024-56532",
"url": "https://bugzilla.suse.com/1235059"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56532"
},
{
"cve": "CVE-2024-56533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56533"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usx2y: Use snd_card_free_when_closed() at disconnection\n\nThe USB disconnect callback is supposed to be short and not too-long\nwaiting. OTOH, the current code uses snd_card_free() at\ndisconnection, but this waits for the close of all used fds, hence it\ncan take long. It eventually blocks the upper layer USB ioctls, which\nmay trigger a soft lockup.\n\nAn easy workaround is to replace snd_card_free() with\nsnd_card_free_when_closed(). This variant returns immediately while\nthe release of resources is done asynchronously by the card device\nrelease at the last close.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56533",
"url": "https://www.suse.com/security/cve/CVE-2024-56533"
},
{
"category": "external",
"summary": "SUSE Bug 1235053 for CVE-2024-56533",
"url": "https://bugzilla.suse.com/1235053"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56533"
},
{
"cve": "CVE-2024-56536",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56536"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cw1200: Fix potential NULL dereference\n\nA recent refactoring was identified by static analysis to\ncause a potential NULL dereference, fix this!",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56536",
"url": "https://www.suse.com/security/cve/CVE-2024-56536"
},
{
"category": "external",
"summary": "SUSE Bug 1234911 for CVE-2024-56536",
"url": "https://bugzilla.suse.com/1234911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56536"
},
{
"cve": "CVE-2024-56538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56538"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: zynqmp_kms: Unplug DRM device before removal\n\nPrevent userspace accesses to the DRM device from causing\nuse-after-frees by unplugging the device before we remove it. This\ncauses any further userspace accesses to result in an error without\nfurther calls into this driver\u0027s internals.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56538",
"url": "https://www.suse.com/security/cve/CVE-2024-56538"
},
{
"category": "external",
"summary": "SUSE Bug 1235051 for CVE-2024-56538",
"url": "https://bugzilla.suse.com/1235051"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56538"
},
{
"cve": "CVE-2024-56539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56539"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()\n\nReplace one-element array with a flexible-array member in `struct\nmwifiex_ie_types_wildcard_ssid_params` to fix the following warning\non a MT8173 Chromebook (mt8173-elm-hana):\n\n[ 356.775250] ------------[ cut here ]------------\n[ 356.784543] memcpy: detected field-spanning write (size 6) of single field \"wildcard_ssid_tlv-\u003essid\" at drivers/net/wireless/marvell/mwifiex/scan.c:904 (size 1)\n[ 356.813403] WARNING: CPU: 3 PID: 742 at drivers/net/wireless/marvell/mwifiex/scan.c:904 mwifiex_scan_networks+0x4fc/0xf28 [mwifiex]\n\nThe \"(size 6)\" above is exactly the length of the SSID of the network\nthis device was connected to. The source of the warning looks like:\n\n ssid_len = user_scan_in-\u003essid_list[i].ssid_len;\n [...]\n memcpy(wildcard_ssid_tlv-\u003essid,\n user_scan_in-\u003essid_list[i].ssid, ssid_len);\n\nThere is a #define WILDCARD_SSID_TLV_MAX_SIZE that uses sizeof() on this\nstruct, but it already didn\u0027t account for the size of the one-element\narray, so it doesn\u0027t need to be changed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56539",
"url": "https://www.suse.com/security/cve/CVE-2024-56539"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1234963 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234963"
},
{
"category": "external",
"summary": "SUSE Bug 1234964 for CVE-2024-56539",
"url": "https://bugzilla.suse.com/1234964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56539"
},
{
"cve": "CVE-2024-56543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56543"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Skip Rx TID cleanup for self peer\n\nDuring peer create, dp setup for the peer is done where Rx TID is\nupdated for all the TIDs. Peer object for self peer will not go through\ndp setup.\n\nWhen core halts, dp cleanup is done for all the peers. While cleanup,\nrx_tid::ab is accessed which causes below stack trace for self peer.\n\nWARNING: CPU: 6 PID: 12297 at drivers/net/wireless/ath/ath12k/dp_rx.c:851\nCall Trace:\n__warn+0x7b/0x1a0\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nreport_bug+0x10b/0x200\nhandle_bug+0x3f/0x70\nexc_invalid_op+0x13/0x60\nasm_exc_invalid_op+0x16/0x20\nath12k_dp_rx_frags_cleanup+0xd2/0xe0 [ath12k]\nath12k_dp_rx_frags_cleanup+0xca/0xe0 [ath12k]\nath12k_dp_rx_peer_tid_cleanup+0x39/0xa0 [ath12k]\nath12k_mac_peer_cleanup_all+0x61/0x100 [ath12k]\nath12k_core_halt+0x3b/0x100 [ath12k]\nath12k_core_reset+0x494/0x4c0 [ath12k]\n\nsta object in peer will be updated when remote peer is created. Hence\nuse peer::sta to detect the self peer and skip the cleanup.\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1\nTested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56543",
"url": "https://www.suse.com/security/cve/CVE-2024-56543"
},
{
"category": "external",
"summary": "SUSE Bug 1235065 for CVE-2024-56543",
"url": "https://bugzilla.suse.com/1235065"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56543"
},
{
"cve": "CVE-2024-56546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56546"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()\n\nIf we fail to allocate memory for cb_data by kmalloc, the memory\nallocation for eve_data is never freed, add the missing kfree()\nin the error handling path.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56546",
"url": "https://www.suse.com/security/cve/CVE-2024-56546"
},
{
"category": "external",
"summary": "SUSE Bug 1235070 for CVE-2024-56546",
"url": "https://bugzilla.suse.com/1235070"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56546"
},
{
"cve": "CVE-2024-56548",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56548"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhfsplus: don\u0027t query the device logical block size multiple times\n\nDevices block sizes may change. One of these cases is a loop device by\nusing ioctl LOOP_SET_BLOCK_SIZE.\n\nWhile this may cause other issues like IO being rejected, in the case of\nhfsplus, it will allocate a block by using that size and potentially write\nout-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the\nlatter function reads a different io_size.\n\nUsing a new min_io_size initally set to sb_min_blocksize works for the\npurposes of the original fix, since it will be set to the max between\nHFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the\nmax between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not\ninitialized.\n\nTested by mounting an hfsplus filesystem with loop block sizes 512, 1024\nand 4096.\n\nThe produced KASAN report before the fix looks like this:\n\n[ 419.944641] ==================================================================\n[ 419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a\n[ 419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678\n[ 419.947612]\n[ 419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84\n[ 419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014\n[ 419.950035] Call Trace:\n[ 419.950384] \u003cTASK\u003e\n[ 419.950676] dump_stack_lvl+0x57/0x78\n[ 419.951212] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.951830] print_report+0x14c/0x49e\n[ 419.952361] ? __virt_addr_valid+0x267/0x278\n[ 419.952979] ? kmem_cache_debug_flags+0xc/0x1d\n[ 419.953561] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.954231] kasan_report+0x89/0xb0\n[ 419.954748] ? hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955367] hfsplus_read_wrapper+0x659/0xa0a\n[ 419.955948] ? __pfx_hfsplus_read_wrapper+0x10/0x10\n[ 419.956618] ? do_raw_spin_unlock+0x59/0x1a9\n[ 419.957214] ? _raw_spin_unlock+0x1a/0x2e\n[ 419.957772] hfsplus_fill_super+0x348/0x1590\n[ 419.958355] ? hlock_class+0x4c/0x109\n[ 419.958867] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.959499] ? __pfx_string+0x10/0x10\n[ 419.960006] ? lock_acquire+0x3e2/0x454\n[ 419.960532] ? bdev_name.constprop.0+0xce/0x243\n[ 419.961129] ? __pfx_bdev_name.constprop.0+0x10/0x10\n[ 419.961799] ? pointer+0x3f0/0x62f\n[ 419.962277] ? __pfx_pointer+0x10/0x10\n[ 419.962761] ? vsnprintf+0x6c4/0xfba\n[ 419.963178] ? __pfx_vsnprintf+0x10/0x10\n[ 419.963621] ? setup_bdev_super+0x376/0x3b3\n[ 419.964029] ? snprintf+0x9d/0xd2\n[ 419.964344] ? __pfx_snprintf+0x10/0x10\n[ 419.964675] ? lock_acquired+0x45c/0x5e9\n[ 419.965016] ? set_blocksize+0x139/0x1c1\n[ 419.965381] ? sb_set_blocksize+0x6d/0xae\n[ 419.965742] ? __pfx_hfsplus_fill_super+0x10/0x10\n[ 419.966179] mount_bdev+0x12f/0x1bf\n[ 419.966512] ? __pfx_mount_bdev+0x10/0x10\n[ 419.966886] ? vfs_parse_fs_string+0xce/0x111\n[ 419.967293] ? __pfx_vfs_parse_fs_string+0x10/0x10\n[ 419.967702] ? __pfx_hfsplus_mount+0x10/0x10\n[ 419.968073] legacy_get_tree+0x104/0x178\n[ 419.968414] vfs_get_tree+0x86/0x296\n[ 419.968751] path_mount+0xba3/0xd0b\n[ 419.969157] ? __pfx_path_mount+0x10/0x10\n[ 419.969594] ? kmem_cache_free+0x1e2/0x260\n[ 419.970311] do_mount+0x99/0xe0\n[ 419.970630] ? __pfx_do_mount+0x10/0x10\n[ 419.971008] __do_sys_mount+0x199/0x1c9\n[ 419.971397] do_syscall_64+0xd0/0x135\n[ 419.971761] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ 419.972233] RIP: 0033:0x7c3cb812972e\n[ 419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48\n[ 419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5\n[ 419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e\n[ 419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI:\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56548",
"url": "https://www.suse.com/security/cve/CVE-2024-56548"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235073 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235073"
},
{
"category": "external",
"summary": "SUSE Bug 1235074 for CVE-2024-56548",
"url": "https://bugzilla.suse.com/1235074"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56548"
},
{
"cve": "CVE-2024-56549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56549"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncachefiles: Fix NULL pointer dereference in object-\u003efile\n\nAt present, the object-\u003efile has the NULL pointer dereference problem in\nondemand-mode. The root cause is that the allocated fd and object-\u003efile\nlifetime are inconsistent, and the user-space invocation to anon_fd uses\nobject-\u003efile. Following is the process that triggers the issue:\n\n\t [write fd]\t\t\t\t[umount]\ncachefiles_ondemand_fd_write_iter\n\t\t\t\t fscache_cookie_state_machine\n\t\t\t\t\t cachefiles_withdraw_cookie\n if (!file) return -ENOBUFS\n\t\t\t\t\t cachefiles_clean_up_object\n\t\t\t\t\t cachefiles_unmark_inode_in_use\n\t\t\t\t\t fput(object-\u003efile)\n\t\t\t\t\t object-\u003efile = NULL\n // file NULL pointer dereference!\n __cachefiles_write(..., file, ...)\n\nFix this issue by add an additional reference count to the object-\u003efile\nbefore write/llseek, and decrement after it finished.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56549",
"url": "https://www.suse.com/security/cve/CVE-2024-56549"
},
{
"category": "external",
"summary": "SUSE Bug 1234912 for CVE-2024-56549",
"url": "https://bugzilla.suse.com/1234912"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56549"
},
{
"cve": "CVE-2024-56551",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56551"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix usage slab after free\n\n[ +0.000021] BUG: KASAN: slab-use-after-free in drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000027] Read of size 8 at addr ffff8881b8605f88 by task amd_pci_unplug/2147\n\n[ +0.000023] CPU: 6 PID: 2147 Comm: amd_pci_unplug Not tainted 6.10.0+ #1\n[ +0.000016] Hardware name: ASUS System Product Name/ROG STRIX B550-F GAMING (WI-FI), BIOS 1401 12/03/2020\n[ +0.000016] Call Trace:\n[ +0.000008] \u003cTASK\u003e\n[ +0.000009] dump_stack_lvl+0x76/0xa0\n[ +0.000017] print_report+0xce/0x5f0\n[ +0.000017] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] ? srso_return_thunk+0x5/0x5f\n[ +0.000015] ? kasan_complete_mode_report_info+0x72/0x200\n[ +0.000016] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000019] kasan_report+0xbe/0x110\n[ +0.000015] ? drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000023] __asan_report_load8_noabort+0x14/0x30\n[ +0.000014] drm_sched_entity_flush+0x6cb/0x7a0 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000016] ? __pfx_drm_sched_entity_flush+0x10/0x10 [gpu_sched]\n[ +0.000020] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? enable_work+0x124/0x220\n[ +0.000015] ? __pfx_enable_work+0x10/0x10\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? free_large_kmalloc+0x85/0xf0\n[ +0.000016] drm_sched_entity_destroy+0x18/0x30 [gpu_sched]\n[ +0.000020] amdgpu_vce_sw_fini+0x55/0x170 [amdgpu]\n[ +0.000735] ? __kasan_check_read+0x11/0x20\n[ +0.000016] vce_v4_0_sw_fini+0x80/0x110 [amdgpu]\n[ +0.000726] amdgpu_device_fini_sw+0x331/0xfc0 [amdgpu]\n[ +0.000679] ? mutex_unlock+0x80/0xe0\n[ +0.000017] ? __pfx_amdgpu_device_fini_sw+0x10/0x10 [amdgpu]\n[ +0.000662] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? __kasan_check_write+0x14/0x30\n[ +0.000013] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? mutex_unlock+0x80/0xe0\n[ +0.000016] amdgpu_driver_release_kms+0x16/0x80 [amdgpu]\n[ +0.000663] drm_minor_release+0xc9/0x140 [drm]\n[ +0.000081] drm_release+0x1fd/0x390 [drm]\n[ +0.000082] __fput+0x36c/0xad0\n[ +0.000018] __fput_sync+0x3c/0x50\n[ +0.000014] __x64_sys_close+0x7d/0xe0\n[ +0.000014] x64_sys_call+0x1bc6/0x2680\n[ +0.000014] do_syscall_64+0x70/0x130\n[ +0.000014] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit_to_user_mode+0x60/0x190\n[ +0.000015] ? srso_return_thunk+0x5/0x5f\n[ +0.000014] ? irqentry_exit+0x43/0x50\n[ +0.000012] ? srso_return_thunk+0x5/0x5f\n[ +0.000013] ? exc_page_fault+0x7c/0x110\n[ +0.000015] entry_SYSCALL_64_after_hwframe+0x76/0x7e\n[ +0.000014] RIP: 0033:0x7ffff7b14f67\n[ +0.000013] Code: ff e8 0d 16 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 03 00 00 00 0f 05 \u003c48\u003e 3d 00 f0 ff ff 77 41 c3 48 83 ec 18 89 7c 24 0c e8 73 ba f7 ff\n[ +0.000026] RSP: 002b:00007fffffffe378 EFLAGS: 00000246 ORIG_RAX: 0000000000000003\n[ +0.000019] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffff7b14f67\n[ +0.000014] RDX: 0000000000000000 RSI: 00007ffff7f6f47a RDI: 0000000000000003\n[ +0.000014] RBP: 00007fffffffe3a0 R08: 0000555555569890 R09: 0000000000000000\n[ +0.000014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffffffe5c8\n[ +0.000013] R13: 00005555555552a9 R14: 0000555555557d48 R15: 00007ffff7ffd040\n[ +0.000020] \u003c/TASK\u003e\n\n[ +0.000016] Allocated by task 383 on cpu 7 at 26.880319s:\n[ +0.000014] kasan_save_stack+0x28/0x60\n[ +0.000008] kasan_save_track+0x18/0x70\n[ +0.000007] kasan_save_alloc_info+0x38/0x60\n[ +0.000007] __kasan_kmalloc+0xc1/0xd0\n[ +0.000007] kmalloc_trace_noprof+0x180/0x380\n[ +0.000007] drm_sched_init+0x411/0xec0 [gpu_sched]\n[ +0.000012] amdgpu_device_init+0x695f/0xa610 [amdgpu]\n[ +0.000658] amdgpu_driver_load_kms+0x1a/0x120 [amdgpu]\n[ +0.000662] amdgpu_pci_p\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56551",
"url": "https://www.suse.com/security/cve/CVE-2024-56551"
},
{
"category": "external",
"summary": "SUSE Bug 1235075 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235075"
},
{
"category": "external",
"summary": "SUSE Bug 1235102 for CVE-2024-56551",
"url": "https://bugzilla.suse.com/1235102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56551"
},
{
"cve": "CVE-2024-56557",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56557"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer\n\nThe AD7923 was updated to support devices with 8 channels, but the size\nof tx_buf and ring_xfer was not increased accordingly, leading to a\npotential buffer overflow in ad7923_update_scan_mode().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56557",
"url": "https://www.suse.com/security/cve/CVE-2024-56557"
},
{
"category": "external",
"summary": "SUSE Bug 1235122 for CVE-2024-56557",
"url": "https://bugzilla.suse.com/1235122"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56557"
},
{
"cve": "CVE-2024-56558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56558"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: make sure exp active before svc_export_show\n\nThe function `e_show` was called with protection from RCU. This only\nensures that `exp` will not be freed. Therefore, the reference count for\n`exp` can drop to zero, which will trigger a refcount use-after-free\nwarning when `exp_get` is called. To resolve this issue, use\n`cache_get_rcu` to ensure that `exp` remains active.\n\n------------[ cut here ]------------\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 3 PID: 819 at lib/refcount.c:25\nrefcount_warn_saturate+0xb1/0x120\nCPU: 3 UID: 0 PID: 819 Comm: cat Not tainted 6.12.0-rc3+ #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:refcount_warn_saturate+0xb1/0x120\n...\nCall Trace:\n \u003cTASK\u003e\n e_show+0x20b/0x230 [nfsd]\n seq_read_iter+0x589/0x770\n seq_read+0x1e5/0x270\n vfs_read+0x125/0x530\n ksys_read+0xc1/0x160\n do_syscall_64+0x5f/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56558",
"url": "https://www.suse.com/security/cve/CVE-2024-56558"
},
{
"category": "external",
"summary": "SUSE Bug 1235100 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1235100"
},
{
"category": "external",
"summary": "SUSE Bug 1243648 for CVE-2024-56558",
"url": "https://bugzilla.suse.com/1243648"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56558"
},
{
"cve": "CVE-2024-56562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56562"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()\n\nif (dev-\u003eboardinfo \u0026\u0026 dev-\u003eboardinfo-\u003einit_dyn_addr)\n ^^^ here check \"init_dyn_addr\"\n\ti3c_bus_set_addr_slot_status(\u0026master-\u003ebus, dev-\u003einfo.dyn_addr, ...)\n\t\t\t\t\t\t ^^^^\n\t\t\t\t\t\t\tfree \"dyn_addr\"\nFix copy/paste error \"dyn_addr\" by replacing it with \"init_dyn_addr\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56562",
"url": "https://www.suse.com/security/cve/CVE-2024-56562"
},
{
"category": "external",
"summary": "SUSE Bug 1234930 for CVE-2024-56562",
"url": "https://bugzilla.suse.com/1234930"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56562"
},
{
"cve": "CVE-2024-56566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56566"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/slub: Avoid list corruption when removing a slab from the full list\n\nBoot with slub_debug=UFPZ.\n\nIf allocated object failed in alloc_consistency_checks, all objects of\nthe slab will be marked as used, and then the slab will be removed from\nthe partial list.\n\nWhen an object belonging to the slab got freed later, the remove_full()\nfunction is called. Because the slab is neither on the partial list nor\non the full list, it eventually lead to a list corruption (actually a\nlist poison being detected).\n\nSo we need to mark and isolate the slab page with metadata corruption,\ndo not put it back in circulation.\n\nBecause the debug caches avoid all the fastpaths, reusing the frozen bit\nto mark slab page with metadata corruption seems to be fine.\n\n[ 4277.385669] list_del corruption, ffffea00044b3e50-\u003enext is LIST_POISON1 (dead000000000100)\n[ 4277.387023] ------------[ cut here ]------------\n[ 4277.387880] kernel BUG at lib/list_debug.c:56!\n[ 4277.388680] invalid opcode: 0000 [#1] PREEMPT SMP PTI\n[ 4277.389562] CPU: 5 PID: 90 Comm: kworker/5:1 Kdump: loaded Tainted: G OE 6.6.1-1 #1\n[ 4277.392113] Workqueue: xfs-inodegc/vda1 xfs_inodegc_worker [xfs]\n[ 4277.393551] RIP: 0010:__list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.394518] Code: 48 91 82 e8 37 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 28 49 91 82 e8 26 f9 9a ff 0f 0b 48 89 fe 48 c7 c7 58 49 91\n[ 4277.397292] RSP: 0018:ffffc90000333b38 EFLAGS: 00010082\n[ 4277.398202] RAX: 000000000000004e RBX: ffffea00044b3e50 RCX: 0000000000000000\n[ 4277.399340] RDX: 0000000000000002 RSI: ffffffff828f8715 RDI: 00000000ffffffff\n[ 4277.400545] RBP: ffffea00044b3e40 R08: 0000000000000000 R09: ffffc900003339f0\n[ 4277.401710] R10: 0000000000000003 R11: ffffffff82d44088 R12: ffff888112cf9910\n[ 4277.402887] R13: 0000000000000001 R14: 0000000000000001 R15: ffff8881000424c0\n[ 4277.404049] FS: 0000000000000000(0000) GS:ffff88842fd40000(0000) knlGS:0000000000000000\n[ 4277.405357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 4277.406389] CR2: 00007f2ad0b24000 CR3: 0000000102a3a006 CR4: 00000000007706e0\n[ 4277.407589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 4277.408780] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 4277.410000] PKRU: 55555554\n[ 4277.410645] Call Trace:\n[ 4277.411234] \u003cTASK\u003e\n[ 4277.411777] ? die+0x32/0x80\n[ 4277.412439] ? do_trap+0xd6/0x100\n[ 4277.413150] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.414158] ? do_error_trap+0x6a/0x90\n[ 4277.414948] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.415915] ? exc_invalid_op+0x4c/0x60\n[ 4277.416710] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.417675] ? asm_exc_invalid_op+0x16/0x20\n[ 4277.418482] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.419466] ? __list_del_entry_valid_or_report+0x7b/0xc0\n[ 4277.420410] free_to_partial_list+0x515/0x5e0\n[ 4277.421242] ? xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.422298] xfs_iext_remove+0x41a/0xa10 [xfs]\n[ 4277.423316] ? xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.424383] xfs_bmap_del_extent_delay+0x4fe/0x7d0 [xfs]\n[ 4277.425490] __xfs_bunmapi+0x50d/0x840 [xfs]\n[ 4277.426445] xfs_itruncate_extents_flags+0x13a/0x490 [xfs]\n[ 4277.427553] xfs_inactive_truncate+0xa3/0x120 [xfs]\n[ 4277.428567] xfs_inactive+0x22d/0x290 [xfs]\n[ 4277.429500] xfs_inodegc_worker+0xb4/0x1a0 [xfs]\n[ 4277.430479] process_one_work+0x171/0x340\n[ 4277.431227] worker_thread+0x277/0x390\n[ 4277.431962] ? __pfx_worker_thread+0x10/0x10\n[ 4277.432752] kthread+0xf0/0x120\n[ 4277.433382] ? __pfx_kthread+0x10/0x10\n[ 4277.434134] ret_from_fork+0x2d/0x50\n[ 4277.434837] ? __pfx_kthread+0x10/0x10\n[ 4277.435566] ret_from_fork_asm+0x1b/0x30\n[ 4277.436280] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56566",
"url": "https://www.suse.com/security/cve/CVE-2024-56566"
},
{
"category": "external",
"summary": "SUSE Bug 1235033 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235033"
},
{
"category": "external",
"summary": "SUSE Bug 1235034 for CVE-2024-56566",
"url": "https://bugzilla.suse.com/1235034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56566"
},
{
"cve": "CVE-2024-56567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56567"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nad7780: fix division by zero in ad7780_write_raw()\n\nIn the ad7780_write_raw() , val2 can be zero, which might lead to a\ndivision by zero error in DIV_ROUND_CLOSEST(). The ad7780_write_raw()\nis based on iio_info\u0027s write_raw. While val is explicitly declared that\ncan be zero (in read mode), val2 is not specified to be non-zero.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56567",
"url": "https://www.suse.com/security/cve/CVE-2024-56567"
},
{
"category": "external",
"summary": "SUSE Bug 1234916 for CVE-2024-56567",
"url": "https://bugzilla.suse.com/1234916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56567"
},
{
"cve": "CVE-2024-56568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56568"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/arm-smmu: Defer probe of clients after smmu device bound\n\nNull pointer dereference occurs due to a race between smmu\ndriver probe and client driver probe, when of_dma_configure()\nfor client is called after the iommu_device_register() for smmu driver\nprobe has executed but before the driver_bound() for smmu driver\nhas been called.\n\nFollowing is how the race occurs:\n\nT1:Smmu device probe\t\tT2: Client device probe\n\nreally_probe()\narm_smmu_device_probe()\niommu_device_register()\n\t\t\t\t\treally_probe()\n\t\t\t\t\tplatform_dma_configure()\n\t\t\t\t\tof_dma_configure()\n\t\t\t\t\tof_dma_configure_id()\n\t\t\t\t\tof_iommu_configure()\n\t\t\t\t\tiommu_probe_device()\n\t\t\t\t\tiommu_init_device()\n\t\t\t\t\tarm_smmu_probe_device()\n\t\t\t\t\tarm_smmu_get_by_fwnode()\n\t\t\t\t\t\tdriver_find_device_by_fwnode()\n\t\t\t\t\t\tdriver_find_device()\n\t\t\t\t\t\tnext_device()\n\t\t\t\t\t\tklist_next()\n\t\t\t\t\t\t /* null ptr\n\t\t\t\t\t\t assigned to smmu */\n\t\t\t\t\t/* null ptr dereference\n\t\t\t\t\t while smmu-\u003estreamid_mask */\ndriver_bound()\n\tklist_add_tail()\n\nWhen this null smmu pointer is dereferenced later in\narm_smmu_probe_device, the device crashes.\n\nFix this by deferring the probe of the client device\nuntil the smmu device has bound to the arm smmu driver.\n\n[will: Add comment]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56568",
"url": "https://www.suse.com/security/cve/CVE-2024-56568"
},
{
"category": "external",
"summary": "SUSE Bug 1235032 for CVE-2024-56568",
"url": "https://bugzilla.suse.com/1235032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56568"
},
{
"cve": "CVE-2024-56569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56569"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix regression with module command in stack_trace_filter\n\nWhen executing the following command:\n\n # echo \"write*:mod:ext3\" \u003e /sys/kernel/tracing/stack_trace_filter\n\nThe current mod command causes a null pointer dereference. While commit\n0f17976568b3f (\"ftrace: Fix regression with module command in stack_trace_filter\")\nhas addressed part of the issue, it left a corner case unhandled, which still\nresults in a kernel crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56569",
"url": "https://www.suse.com/security/cve/CVE-2024-56569"
},
{
"category": "external",
"summary": "SUSE Bug 1235031 for CVE-2024-56569",
"url": "https://bugzilla.suse.com/1235031"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56569"
},
{
"cve": "CVE-2024-56570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56570"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\novl: Filter invalid inodes with missing lookup function\n\nAdd a check to the ovl_dentry_weird() function to prevent the\nprocessing of directory inodes that lack the lookup function.\nThis is important because such inodes can cause errors in overlayfs\nwhen passed to the lowerstack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56570",
"url": "https://www.suse.com/security/cve/CVE-2024-56570"
},
{
"category": "external",
"summary": "SUSE Bug 1235035 for CVE-2024-56570",
"url": "https://bugzilla.suse.com/1235035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56570"
},
{
"cve": "CVE-2024-56571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56571"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56571",
"url": "https://www.suse.com/security/cve/CVE-2024-56571"
},
{
"category": "external",
"summary": "SUSE Bug 1235037 for CVE-2024-56571",
"url": "https://bugzilla.suse.com/1235037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56571"
},
{
"cve": "CVE-2024-56572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56572"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()\n\nThe buffer in the loop should be released under the exception path,\notherwise there may be a memory leak here.\n\nTo mitigate this, free the buffer when allegro_alloc_buffer fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56572",
"url": "https://www.suse.com/security/cve/CVE-2024-56572"
},
{
"category": "external",
"summary": "SUSE Bug 1235043 for CVE-2024-56572",
"url": "https://bugzilla.suse.com/1235043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56572"
},
{
"cve": "CVE-2024-56573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56573"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefi/libstub: Free correct pointer on failure\n\ncmdline_ptr is an out parameter, which is not allocated by the function\nitself, and likely points into the caller\u0027s stack.\n\ncmdline refers to the pool allocation that should be freed when cleaning\nup after a failure, so pass this instead to free_pool().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56573",
"url": "https://www.suse.com/security/cve/CVE-2024-56573"
},
{
"category": "external",
"summary": "SUSE Bug 1235042 for CVE-2024-56573",
"url": "https://bugzilla.suse.com/1235042"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56573"
},
{
"cve": "CVE-2024-56574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56574"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: ts2020: fix null-ptr-deref in ts2020_probe()\n\nKASAN reported a null-ptr-deref issue when executing the following\ncommand:\n\n # echo ts2020 0x20 \u003e /sys/bus/i2c/devices/i2c-0/new_device\n KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]\n CPU: 53 UID: 0 PID: 970 Comm: systemd-udevd Not tainted 6.12.0-rc2+ #24\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009)\n RIP: 0010:ts2020_probe+0xad/0xe10 [ts2020]\n RSP: 0018:ffffc9000abbf598 EFLAGS: 00010202\n RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffffc0714809\n RDX: 0000000000000002 RSI: ffff88811550be00 RDI: 0000000000000010\n RBP: ffff888109868800 R08: 0000000000000001 R09: fffff52001577eb6\n R10: 0000000000000000 R11: ffffc9000abbff50 R12: ffffffffc0714790\n R13: 1ffff92001577eb8 R14: ffffffffc07190d0 R15: 0000000000000001\n FS: 00007f95f13b98c0(0000) GS:ffff888149280000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000555d2634b000 CR3: 0000000152236000 CR4: 00000000000006f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \u003cTASK\u003e\n ts2020_probe+0xad/0xe10 [ts2020]\n i2c_device_probe+0x421/0xb40\n really_probe+0x266/0x850\n ...\n\nThe cause of the problem is that when using sysfs to dynamically register\nan i2c device, there is no platform data, but the probe process of ts2020\nneeds to use platform data, resulting in a null pointer being accessed.\n\nSolve this problem by adding checks to platform data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56574",
"url": "https://www.suse.com/security/cve/CVE-2024-56574"
},
{
"category": "external",
"summary": "SUSE Bug 1235040 for CVE-2024-56574",
"url": "https://bugzilla.suse.com/1235040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56574"
},
{
"cve": "CVE-2024-56575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56575"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Ensure power suppliers be suspended before detach them\n\nThe power suppliers are always requested to suspend asynchronously,\ndev_pm_domain_detach() requires the caller to ensure proper\nsynchronization of this function with power management callbacks.\notherwise the detach may led to kernel panic, like below:\n\n[ 1457.107934] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000040\n[ 1457.116777] Mem abort info:\n[ 1457.119589] ESR = 0x0000000096000004\n[ 1457.123358] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 1457.128692] SET = 0, FnV = 0\n[ 1457.131764] EA = 0, S1PTW = 0\n[ 1457.134920] FSC = 0x04: level 0 translation fault\n[ 1457.139812] Data abort info:\n[ 1457.142707] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 1457.148196] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 1457.153256] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 1457.158563] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001138b6000\n[ 1457.165000] [0000000000000040] pgd=0000000000000000, p4d=0000000000000000\n[ 1457.171792] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 1457.178045] Modules linked in: v4l2_jpeg wave6_vpu_ctrl(-) [last unloaded: mxc_jpeg_encdec]\n[ 1457.186383] CPU: 0 PID: 51938 Comm: kworker/0:3 Not tainted 6.6.36-gd23d64eea511 #66\n[ 1457.194112] Hardware name: NXP i.MX95 19X19 board (DT)\n[ 1457.199236] Workqueue: pm pm_runtime_work\n[ 1457.203247] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 1457.210188] pc : genpd_runtime_suspend+0x20/0x290\n[ 1457.214886] lr : __rpm_callback+0x48/0x1d8\n[ 1457.218968] sp : ffff80008250bc50\n[ 1457.222270] x29: ffff80008250bc50 x28: 0000000000000000 x27: 0000000000000000\n[ 1457.229394] x26: 0000000000000000 x25: 0000000000000008 x24: 00000000000f4240\n[ 1457.236518] x23: 0000000000000000 x22: ffff00008590f0e4 x21: 0000000000000008\n[ 1457.243642] x20: ffff80008099c434 x19: ffff00008590f000 x18: ffffffffffffffff\n[ 1457.250766] x17: 5300326563697665 x16: 645f676e696c6f6f x15: 63343a6d726f6674\n[ 1457.257890] x14: 0000000000000004 x13: 00000000000003a4 x12: 0000000000000002\n[ 1457.265014] x11: 0000000000000000 x10: 0000000000000a60 x9 : ffff80008250bbb0\n[ 1457.272138] x8 : ffff000092937200 x7 : ffff0003fdf6af80 x6 : 0000000000000000\n[ 1457.279262] x5 : 00000000410fd050 x4 : 0000000000200000 x3 : 0000000000000000\n[ 1457.286386] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff00008590f000\n[ 1457.293510] Call trace:\n[ 1457.295946] genpd_runtime_suspend+0x20/0x290\n[ 1457.300296] __rpm_callback+0x48/0x1d8\n[ 1457.304038] rpm_callback+0x6c/0x78\n[ 1457.307515] rpm_suspend+0x10c/0x570\n[ 1457.311077] pm_runtime_work+0xc4/0xc8\n[ 1457.314813] process_one_work+0x138/0x248\n[ 1457.318816] worker_thread+0x320/0x438\n[ 1457.322552] kthread+0x110/0x114\n[ 1457.325767] ret_from_fork+0x10/0x20",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56575",
"url": "https://www.suse.com/security/cve/CVE-2024-56575"
},
{
"category": "external",
"summary": "SUSE Bug 1235039 for CVE-2024-56575",
"url": "https://bugzilla.suse.com/1235039"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56575"
},
{
"cve": "CVE-2024-56576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56576"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: i2c: tc358743: Fix crash in the probe error path when using polling\n\nIf an error occurs in the probe() function, we should remove the polling\ntimer that was alarmed earlier, otherwise the timer is called with\narguments that are already freed, which results in a crash.\n\n------------[ cut here ]------------\nWARNING: CPU: 3 PID: 0 at kernel/time/timer.c:1830 __run_timers+0x244/0x268\nModules linked in:\nCPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.11.0 #226\nHardware name: Diasom DS-RK3568-SOM-EVB (DT)\npstate: 804000c9 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : __run_timers+0x244/0x268\nlr : __run_timers+0x1d4/0x268\nsp : ffffff80eff2baf0\nx29: ffffff80eff2bb50 x28: 7fffffffffffffff x27: ffffff80eff2bb00\nx26: ffffffc080f669c0 x25: ffffff80efef6bf0 x24: ffffff80eff2bb00\nx23: 0000000000000000 x22: dead000000000122 x21: 0000000000000000\nx20: ffffff80efef6b80 x19: ffffff80041c8bf8 x18: ffffffffffffffff\nx17: ffffffc06f146000 x16: ffffff80eff27dc0 x15: 000000000000003e\nx14: 0000000000000000 x13: 00000000000054da x12: 0000000000000000\nx11: 00000000000639c0 x10: 000000000000000c x9 : 0000000000000009\nx8 : ffffff80eff2cb40 x7 : ffffff80eff2cb40 x6 : ffffff8002bee480\nx5 : ffffffc080cb2220 x4 : ffffffc080cb2150 x3 : 00000000000f4240\nx2 : 0000000000000102 x1 : ffffff80eff2bb00 x0 : ffffff80041c8bf0\nCall trace:\n __run_timers+0x244/0x268\n timer_expire_remote+0x50/0x68\n tmigr_handle_remote+0x388/0x39c\n run_timer_softirq+0x38/0x44\n handle_softirqs+0x138/0x298\n __do_softirq+0x14/0x20\n ____do_softirq+0x10/0x1c\n call_on_irq_stack+0x24/0x4c\n do_softirq_own_stack+0x1c/0x2c\n irq_exit_rcu+0x9c/0xcc\n el1_interrupt+0x48/0xc0\n el1h_64_irq_handler+0x18/0x24\n el1h_64_irq+0x7c/0x80\n default_idle_call+0x34/0x68\n do_idle+0x23c/0x294\n cpu_startup_entry+0x38/0x3c\n secondary_start_kernel+0x128/0x160\n __secondary_switched+0xb8/0xbc\n---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56576",
"url": "https://www.suse.com/security/cve/CVE-2024-56576"
},
{
"category": "external",
"summary": "SUSE Bug 1235019 for CVE-2024-56576",
"url": "https://bugzilla.suse.com/1235019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56576"
},
{
"cve": "CVE-2024-56577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56577"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mtk-jpeg: Fix null-ptr-deref during unload module\n\nThe workqueue should be destroyed in mtk_jpeg_core.c since commit\n09aea13ecf6f (\"media: mtk-jpeg: refactor some variables\"), otherwise\nthe below calltrace can be easily triggered.\n\n[ 677.862514] Unable to handle kernel paging request at virtual address dfff800000000023\n[ 677.863633] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]\n...\n[ 677.879654] CPU: 6 PID: 1071 Comm: modprobe Tainted: G O 6.8.12-mtk+gfa1a78e5d24b+ #17\n...\n[ 677.882838] pc : destroy_workqueue+0x3c/0x770\n[ 677.883413] lr : mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.884314] sp : ffff80008ad974f0\n[ 677.884744] x29: ffff80008ad974f0 x28: ffff0000d7115580 x27: ffff0000dd691070\n[ 677.885669] x26: ffff0000dd691408 x25: ffff8000844af3e0 x24: ffff80008ad97690\n[ 677.886592] x23: ffff0000e051d400 x22: ffff0000dd691010 x21: dfff800000000000\n[ 677.887515] x20: 0000000000000000 x19: 0000000000000000 x18: ffff800085397ac0\n[ 677.888438] x17: 0000000000000000 x16: ffff8000801b87c8 x15: 1ffff000115b2e10\n[ 677.889361] x14: 00000000f1f1f1f1 x13: 0000000000000000 x12: ffff7000115b2e4d\n[ 677.890285] x11: 1ffff000115b2e4c x10: ffff7000115b2e4c x9 : ffff80000aa43e90\n[ 677.891208] x8 : 00008fffeea4d1b4 x7 : ffff80008ad97267 x6 : 0000000000000001\n[ 677.892131] x5 : ffff80008ad97260 x4 : ffff7000115b2e4d x3 : 0000000000000000\n[ 677.893054] x2 : 0000000000000023 x1 : dfff800000000000 x0 : 0000000000000118\n[ 677.893977] Call trace:\n[ 677.894297] destroy_workqueue+0x3c/0x770\n[ 677.894826] mtk_jpegdec_destroy_workqueue+0x70/0x88 [mtk_jpeg_dec_hw]\n[ 677.895677] devm_action_release+0x50/0x90\n[ 677.896211] release_nodes+0xe8/0x170\n[ 677.896688] devres_release_all+0xf8/0x178\n[ 677.897219] device_unbind_cleanup+0x24/0x170\n[ 677.897785] device_release_driver_internal+0x35c/0x480\n[ 677.898461] device_release_driver+0x20/0x38\n...\n[ 677.912665] ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56577",
"url": "https://www.suse.com/security/cve/CVE-2024-56577"
},
{
"category": "external",
"summary": "SUSE Bug 1235112 for CVE-2024-56577",
"url": "https://bugzilla.suse.com/1235112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56577"
},
{
"cve": "CVE-2024-56578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56578"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: imx-jpeg: Set video drvdata before register video device\n\nThe video drvdata should be set before the video device is registered,\notherwise video_drvdata() may return NULL in the open() file ops, and led\nto oops.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56578",
"url": "https://www.suse.com/security/cve/CVE-2024-56578"
},
{
"category": "external",
"summary": "SUSE Bug 1235115 for CVE-2024-56578",
"url": "https://bugzilla.suse.com/1235115"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56578"
},
{
"cve": "CVE-2024-56582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56582"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free in btrfs_encoded_read_endio()\n\nShinichiro reported the following use-after free that sometimes is\nhappening in our CI system when running fstests\u0027 btrfs/284 on a TCMU\nrunner device:\n\n BUG: KASAN: slab-use-after-free in lock_release+0x708/0x780\n Read of size 8 at addr ffff888106a83f18 by task kworker/u80:6/219\n\n CPU: 8 UID: 0 PID: 219 Comm: kworker/u80:6 Not tainted 6.12.0-rc6-kts+ #15\n Hardware name: Supermicro Super Server/X11SPi-TF, BIOS 3.3 02/21/2020\n Workqueue: btrfs-endio btrfs_end_bio_work [btrfs]\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x6e/0xa0\n ? lock_release+0x708/0x780\n print_report+0x174/0x505\n ? lock_release+0x708/0x780\n ? __virt_addr_valid+0x224/0x410\n ? lock_release+0x708/0x780\n kasan_report+0xda/0x1b0\n ? lock_release+0x708/0x780\n ? __wake_up+0x44/0x60\n lock_release+0x708/0x780\n ? __pfx_lock_release+0x10/0x10\n ? __pfx_do_raw_spin_lock+0x10/0x10\n ? lock_is_held_type+0x9a/0x110\n _raw_spin_unlock_irqrestore+0x1f/0x60\n __wake_up+0x44/0x60\n btrfs_encoded_read_endio+0x14b/0x190 [btrfs]\n btrfs_check_read_bio+0x8d9/0x1360 [btrfs]\n ? lock_release+0x1b0/0x780\n ? trace_lock_acquire+0x12f/0x1a0\n ? __pfx_btrfs_check_read_bio+0x10/0x10 [btrfs]\n ? process_one_work+0x7e3/0x1460\n ? lock_acquire+0x31/0xc0\n ? process_one_work+0x7e3/0x1460\n process_one_work+0x85c/0x1460\n ? __pfx_process_one_work+0x10/0x10\n ? assign_work+0x16c/0x240\n worker_thread+0x5e6/0xfc0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x2c3/0x3a0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x31/0x70\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\n Allocated by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n __kasan_kmalloc+0xaa/0xb0\n btrfs_encoded_read_regular_fill_pages+0x16c/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n Freed by task 3661:\n kasan_save_stack+0x30/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x70\n __kasan_slab_free+0x4f/0x70\n kfree+0x143/0x490\n btrfs_encoded_read_regular_fill_pages+0x531/0x6d0 [btrfs]\n send_extent_data+0xf0f/0x24a0 [btrfs]\n process_extent+0x48a/0x1830 [btrfs]\n changed_cb+0x178b/0x2ea0 [btrfs]\n btrfs_ioctl_send+0x3bf9/0x5c20 [btrfs]\n _btrfs_ioctl_send+0x117/0x330 [btrfs]\n btrfs_ioctl+0x184a/0x60a0 [btrfs]\n __x64_sys_ioctl+0x12e/0x1a0\n do_syscall_64+0x95/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n The buggy address belongs to the object at ffff888106a83f00\n which belongs to the cache kmalloc-rnd-07-96 of size 96\n The buggy address is located 24 bytes inside of\n freed 96-byte region [ffff888106a83f00, ffff888106a83f60)\n\n The buggy address belongs to the physical page:\n page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888106a83800 pfn:0x106a83\n flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff)\n page_type: f5(slab)\n raw: 0017ffffc0000000 ffff888100053680 ffffea0004917200 0000000000000004\n raw: ffff888106a83800 0000000080200019 00000001f5000000 0000000000000000\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff888106a83e00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a83e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n \u003effff888106a83f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ^\n ffff888106a83f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc\n ffff888106a84000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ==================================================================\n\nFurther analyzing the trace and \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56582",
"url": "https://www.suse.com/security/cve/CVE-2024-56582"
},
{
"category": "external",
"summary": "SUSE Bug 1235128 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235128"
},
{
"category": "external",
"summary": "SUSE Bug 1235129 for CVE-2024-56582",
"url": "https://bugzilla.suse.com/1235129"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56582"
},
{
"cve": "CVE-2024-56584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56584"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/tctx: work around xa_store() allocation error issue\n\nsyzbot triggered the following WARN_ON:\n\nWARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51\n\nwhich is the\n\nWARN_ON_ONCE(!xa_empty(\u0026tctx-\u003exa));\n\nsanity check in __io_uring_free() when a io_uring_task is going through\nits final put. The syzbot test case includes injecting memory allocation\nfailures, and it very much looks like xa_store() can fail one of its\nmemory allocations and end up with -\u003ehead being non-NULL even though no\nentries exist in the xarray.\n\nUntil this issue gets sorted out, work around it by attempting to\niterate entries in our xarray, and WARN_ON_ONCE() if one is found.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56584",
"url": "https://www.suse.com/security/cve/CVE-2024-56584"
},
{
"category": "external",
"summary": "SUSE Bug 1235117 for CVE-2024-56584",
"url": "https://bugzilla.suse.com/1235117"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56584"
},
{
"cve": "CVE-2024-56587",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56587"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nleds: class: Protect brightness_show() with led_cdev-\u003eled_access mutex\n\nThere is NULL pointer issue observed if from Process A where hid device\nbeing added which results in adding a led_cdev addition and later a\nanother call to access of led_cdev attribute from Process B can result\nin NULL pointer issue.\n\nUse mutex led_cdev-\u003eled_access to protect access to led-\u003ecdev and its\nattribute inside brightness_show() and max_brightness_show() and also\nupdate the comment for mutex that it should be used to protect the led\nclass device fields.\n\n\tProcess A \t\t\t\tProcess B\n\n kthread+0x114\n worker_thread+0x244\n process_scheduled_works+0x248\n uhid_device_add_worker+0x24\n hid_add_device+0x120\n device_add+0x268\n bus_probe_device+0x94\n device_initial_probe+0x14\n __device_attach+0xfc\n bus_for_each_drv+0x10c\n __device_attach_driver+0x14c\n driver_probe_device+0x3c\n __driver_probe_device+0xa0\n really_probe+0x190\n hid_device_probe+0x130\n ps_probe+0x990\n ps_led_register+0x94\n devm_led_classdev_register_ext+0x58\n led_classdev_register_ext+0x1f8\n device_create_with_groups+0x48\n device_create_groups_vargs+0xc8\n device_add+0x244\n kobject_uevent+0x14\n kobject_uevent_env[jt]+0x224\n mutex_unlock[jt]+0xc4\n __mutex_unlock_slowpath+0xd4\n wake_up_q+0x70\n try_to_wake_up[jt]+0x48c\n preempt_schedule_common+0x28\n __schedule+0x628\n __switch_to+0x174\n\t\t\t\t\t\tel0t_64_sync+0x1a8/0x1ac\n\t\t\t\t\t\tel0t_64_sync_handler+0x68/0xbc\n\t\t\t\t\t\tel0_svc+0x38/0x68\n\t\t\t\t\t\tdo_el0_svc+0x1c/0x28\n\t\t\t\t\t\tel0_svc_common+0x80/0xe0\n\t\t\t\t\t\tinvoke_syscall+0x58/0x114\n\t\t\t\t\t\t__arm64_sys_read+0x1c/0x2c\n\t\t\t\t\t\tksys_read+0x78/0xe8\n\t\t\t\t\t\tvfs_read+0x1e0/0x2c8\n\t\t\t\t\t\tkernfs_fop_read_iter+0x68/0x1b4\n\t\t\t\t\t\tseq_read_iter+0x158/0x4ec\n\t\t\t\t\t\tkernfs_seq_show+0x44/0x54\n\t\t\t\t\t\tsysfs_kf_seq_show+0xb4/0x130\n\t\t\t\t\t\tdev_attr_show+0x38/0x74\n\t\t\t\t\t\tbrightness_show+0x20/0x4c\n\t\t\t\t\t\tdualshock4_led_get_brightness+0xc/0x74\n\n[ 3313.874295][ T4013] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[ 3313.874301][ T4013] Mem abort info:\n[ 3313.874303][ T4013] ESR = 0x0000000096000006\n[ 3313.874305][ T4013] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 3313.874307][ T4013] SET = 0, FnV = 0\n[ 3313.874309][ T4013] EA = 0, S1PTW = 0\n[ 3313.874311][ T4013] FSC = 0x06: level 2 translation fault\n[ 3313.874313][ T4013] Data abort info:\n[ 3313.874314][ T4013] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000\n[ 3313.874316][ T4013] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 3313.874318][ T4013] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 3313.874320][ T4013] user pgtable: 4k pages, 39-bit VAs, pgdp=00000008f2b0a000\n..\n\n[ 3313.874332][ T4013] Dumping ftrace buffer:\n[ 3313.874334][ T4013] (ftrace buffer empty)\n..\n..\n[ dd3313.874639][ T4013] CPU: 6 PID: 4013 Comm: InputReader\n[ 3313.874648][ T4013] pc : dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874653][ T4013] lr : led_update_brightness+0x38/0x60\n[ 3313.874656][ T4013] sp : ffffffc0b910bbd0\n..\n..\n[ 3313.874685][ T4013] Call trace:\n[ 3313.874687][ T4013] dualshock4_led_get_brightness+0xc/0x74\n[ 3313.874690][ T4013] brightness_show+0x20/0x4c\n[ 3313.874692][ T4013] dev_attr_show+0x38/0x74\n[ 3313.874696][ T4013] sysfs_kf_seq_show+0xb4/0x130\n[ 3313.874700][ T4013] kernfs_seq_show+0x44/0x54\n[ 3313.874703][ T4013] seq_read_iter+0x158/0x4ec\n[ 3313.874705][ T4013] kernfs_fop_read_iter+0x68/0x1b4\n[ 3313.874708][ T4013] vfs_read+0x1e0/0x2c8\n[ 3313.874711][ T4013] ksys_read+0x78/0xe8\n[ 3313.874714][ T4013] __arm64_sys_read+0x1c/0x2c\n[ 3313.874718][ T4013] invoke_syscall+0x58/0x114\n[ 3313.874721][ T4013] el0_svc_common+0x80/0xe0\n[ 3313.874724][ T4013] do_el0_svc+0x1c/0x28\n[ 3313.874727][ T4013] el0_svc+0x38/0x68\n[ 3313.874730][ T4013] el0t_64_sync_handler+0x68/0xbc\n[ 3313.874732][ T4013] el0t_64_sync+0x1a8/0x1ac",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56587",
"url": "https://www.suse.com/security/cve/CVE-2024-56587"
},
{
"category": "external",
"summary": "SUSE Bug 1235125 for CVE-2024-56587",
"url": "https://bugzilla.suse.com/1235125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56587"
},
{
"cve": "CVE-2024-56588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56588"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Create all dump files during debugfs initialization\n\nFor the current debugfs of hisi_sas, after user triggers dump, the\ndriver allocate memory space to save the register information and create\ndebugfs files to display the saved information. In this process, the\ndebugfs files created after each dump.\n\nTherefore, when the dump is triggered while the driver is unbind, the\nfollowing hang occurs:\n\n[67840.853907] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0\n[67840.862947] Mem abort info:\n[67840.865855] ESR = 0x0000000096000004\n[67840.869713] EC = 0x25: DABT (current EL), IL = 32 bits\n[67840.875125] SET = 0, FnV = 0\n[67840.878291] EA = 0, S1PTW = 0\n[67840.881545] FSC = 0x04: level 0 translation fault\n[67840.886528] Data abort info:\n[67840.889524] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[67840.895117] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[67840.900284] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[67840.905709] user pgtable: 4k pages, 48-bit VAs, pgdp=0000002803a1f000\n[67840.912263] [00000000000000a0] pgd=0000000000000000, p4d=0000000000000000\n[67840.919177] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[67840.996435] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[67841.003628] pc : down_write+0x30/0x98\n[67841.007546] lr : start_creating.part.0+0x60/0x198\n[67841.012495] sp : ffff8000b979ba20\n[67841.016046] x29: ffff8000b979ba20 x28: 0000000000000010 x27: 0000000000024b40\n[67841.023412] x26: 0000000000000012 x25: ffff20202b355ae8 x24: ffff20202b35a8c8\n[67841.030779] x23: ffffa36877928208 x22: ffffa368b4972240 x21: ffff8000b979bb18\n[67841.038147] x20: ffff00281dc1e3c0 x19: fffffffffffffffe x18: 0000000000000020\n[67841.045515] x17: 0000000000000000 x16: ffffa368b128a530 x15: ffffffffffffffff\n[67841.052888] x14: ffff8000b979bc18 x13: ffffffffffffffff x12: ffff8000b979bb18\n[67841.060263] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffa368b1289b18\n[67841.067640] x8 : 0000000000000012 x7 : 0000000000000000 x6 : 00000000000003a9\n[67841.075014] x5 : 0000000000000000 x4 : ffff002818c5cb00 x3 : 0000000000000001\n[67841.082388] x2 : 0000000000000000 x1 : ffff002818c5cb00 x0 : 00000000000000a0\n[67841.089759] Call trace:\n[67841.092456] down_write+0x30/0x98\n[67841.096017] start_creating.part.0+0x60/0x198\n[67841.100613] debugfs_create_dir+0x48/0x1f8\n[67841.104950] debugfs_create_files_v3_hw+0x88/0x348 [hisi_sas_v3_hw]\n[67841.111447] debugfs_snapshot_regs_v3_hw+0x708/0x798 [hisi_sas_v3_hw]\n[67841.118111] debugfs_trigger_dump_v3_hw_write+0x9c/0x120 [hisi_sas_v3_hw]\n[67841.125115] full_proxy_write+0x68/0xc8\n[67841.129175] vfs_write+0xd8/0x3f0\n[67841.132708] ksys_write+0x70/0x108\n[67841.136317] __arm64_sys_write+0x24/0x38\n[67841.140440] invoke_syscall+0x50/0x128\n[67841.144385] el0_svc_common.constprop.0+0xc8/0xf0\n[67841.149273] do_el0_svc+0x24/0x38\n[67841.152773] el0_svc+0x38/0xd8\n[67841.156009] el0t_64_sync_handler+0xc0/0xc8\n[67841.160361] el0t_64_sync+0x1a4/0x1a8\n[67841.164189] Code: b9000882 d2800002 d2800023 f9800011 (c85ffc05)\n[67841.170443] ---[ end trace 0000000000000000 ]---\n\nTo fix this issue, create all directories and files during debugfs\ninitialization. In this way, the driver only needs to allocate memory\nspace to save information each time the user triggers dumping.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56588",
"url": "https://www.suse.com/security/cve/CVE-2024-56588"
},
{
"category": "external",
"summary": "SUSE Bug 1235123 for CVE-2024-56588",
"url": "https://bugzilla.suse.com/1235123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56588"
},
{
"cve": "CVE-2024-56589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56589"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hisi_sas: Add cond_resched() for no forced preemption model\n\nFor no forced preemption model kernel, in the scenario where the\nexpander is connected to 12 high performance SAS SSDs, the following\ncall trace may occur:\n\n[ 214.409199][ C240] watchdog: BUG: soft lockup - CPU#240 stuck for 22s! [irq/149-hisi_sa:3211]\n[ 214.568533][ C240] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--)\n[ 214.575224][ C240] pc : fput_many+0x8c/0xdc\n[ 214.579480][ C240] lr : fput+0x1c/0xf0\n[ 214.583302][ C240] sp : ffff80002de2b900\n[ 214.587298][ C240] x29: ffff80002de2b900 x28: ffff1082aa412000\n[ 214.593291][ C240] x27: ffff3062a0348c08 x26: ffff80003a9f6000\n[ 214.599284][ C240] x25: ffff1062bbac5c40 x24: 0000000000001000\n[ 214.605277][ C240] x23: 000000000000000a x22: 0000000000000001\n[ 214.611270][ C240] x21: 0000000000001000 x20: 0000000000000000\n[ 214.617262][ C240] x19: ffff3062a41ae580 x18: 0000000000010000\n[ 214.623255][ C240] x17: 0000000000000001 x16: ffffdb3a6efe5fc0\n[ 214.629248][ C240] x15: ffffffffffffffff x14: 0000000003ffffff\n[ 214.635241][ C240] x13: 000000000000ffff x12: 000000000000029c\n[ 214.641234][ C240] x11: 0000000000000006 x10: ffff80003a9f7fd0\n[ 214.647226][ C240] x9 : ffffdb3a6f0482fc x8 : 0000000000000001\n[ 214.653219][ C240] x7 : 0000000000000002 x6 : 0000000000000080\n[ 214.659212][ C240] x5 : ffff55480ee9b000 x4 : fffffde7f94c6554\n[ 214.665205][ C240] x3 : 0000000000000002 x2 : 0000000000000020\n[ 214.671198][ C240] x1 : 0000000000000021 x0 : ffff3062a41ae5b8\n[ 214.677191][ C240] Call trace:\n[ 214.680320][ C240] fput_many+0x8c/0xdc\n[ 214.684230][ C240] fput+0x1c/0xf0\n[ 214.687707][ C240] aio_complete_rw+0xd8/0x1fc\n[ 214.692225][ C240] blkdev_bio_end_io+0x98/0x140\n[ 214.696917][ C240] bio_endio+0x160/0x1bc\n[ 214.701001][ C240] blk_update_request+0x1c8/0x3bc\n[ 214.705867][ C240] scsi_end_request+0x3c/0x1f0\n[ 214.710471][ C240] scsi_io_completion+0x7c/0x1a0\n[ 214.715249][ C240] scsi_finish_command+0x104/0x140\n[ 214.720200][ C240] scsi_softirq_done+0x90/0x180\n[ 214.724892][ C240] blk_mq_complete_request+0x5c/0x70\n[ 214.730016][ C240] scsi_mq_done+0x48/0xac\n[ 214.734194][ C240] sas_scsi_task_done+0xbc/0x16c [libsas]\n[ 214.739758][ C240] slot_complete_v3_hw+0x260/0x760 [hisi_sas_v3_hw]\n[ 214.746185][ C240] cq_thread_v3_hw+0xbc/0x190 [hisi_sas_v3_hw]\n[ 214.752179][ C240] irq_thread_fn+0x34/0xa4\n[ 214.756435][ C240] irq_thread+0xc4/0x130\n[ 214.760520][ C240] kthread+0x108/0x13c\n[ 214.764430][ C240] ret_from_fork+0x10/0x18\n\nThis is because in the hisi_sas driver, both the hardware interrupt\nhandler and the interrupt thread are executed on the same CPU. In the\nperformance test scenario, function irq_wait_for_interrupt() will always\nreturn 0 if lots of interrupts occurs and the CPU will be continuously\nconsumed. As a result, the CPU cannot run the watchdog thread. When the\nwatchdog time exceeds the specified time, call trace occurs.\n\nTo fix it, add cond_resched() to execute the watchdog thread.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56589",
"url": "https://www.suse.com/security/cve/CVE-2024-56589"
},
{
"category": "external",
"summary": "SUSE Bug 1235241 for CVE-2024-56589",
"url": "https://bugzilla.suse.com/1235241"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56589"
},
{
"cve": "CVE-2024-56590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56590"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix not checking skb length on hci_acldata_packet\n\nThis fixes not checking if skb really contains an ACL header otherwise\nthe code may attempt to access some uninitilized/invalid memory past the\nvalid skb-\u003edata.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56590",
"url": "https://www.suse.com/security/cve/CVE-2024-56590"
},
{
"category": "external",
"summary": "SUSE Bug 1235038 for CVE-2024-56590",
"url": "https://bugzilla.suse.com/1235038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56590"
},
{
"cve": "CVE-2024-56593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56593"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw()\n\nThis patch fixes a NULL pointer dereference bug in brcmfmac that occurs\nwhen a high \u0027sd_sgentry_align\u0027 value applies (e.g. 512) and a lot of queued SKBs\nare sent from the pkt queue.\n\nThe problem is the number of entries in the pre-allocated sgtable, it is\nnents = max(rxglom_size, txglom_size) + max(rxglom_size, txglom_size) \u003e\u003e 4 + 1.\nGiven the default [rt]xglom_size=32 it\u0027s actually 35 which is too small.\nWorst case, the pkt queue can end up with 64 SKBs. This occurs when a new SKB\nis added for each original SKB if tailroom isn\u0027t enough to hold tail_pad.\nAt least one sg entry is needed for each SKB. So, eventually the \"skb_queue_walk loop\"\nin brcmf_sdiod_sglist_rw may run out of sg entries. This makes sg_next return\nNULL and this causes the oops.\n\nThe patch sets nents to max(rxglom_size, txglom_size) * 2 to be able handle\nthe worst-case.\nBtw. this requires only 64-35=29 * 16 (or 20 if CONFIG_NEED_SG_DMA_LENGTH) = 464\nadditional bytes of memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56593",
"url": "https://www.suse.com/security/cve/CVE-2024-56593"
},
{
"category": "external",
"summary": "SUSE Bug 1235252 for CVE-2024-56593",
"url": "https://bugzilla.suse.com/1235252"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56593"
},
{
"cve": "CVE-2024-56594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56594"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: set the right AMDGPU sg segment limitation\n\nThe driver needs to set the correct max_segment_size;\notherwise debug_dma_map_sg() will complain about the\nover-mapping of the AMDGPU sg length as following:\n\nWARNING: CPU: 6 PID: 1964 at kernel/dma/debug.c:1178 debug_dma_map_sg+0x2dc/0x370\n[ 364.049444] Modules linked in: veth amdgpu(OE) amdxcp drm_exec gpu_sched drm_buddy drm_ttm_helper ttm(OE) drm_suballoc_helper drm_display_helper drm_kms_helper i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc amd_atl intel_rapl_msr intel_rapl_common sunrpc sch_fq_codel snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd binfmt_misc snd_hda_codec snd_pci_acp6x snd_hda_core snd_acp_config snd_hwdep snd_soc_acpi kvm_amd snd_pcm kvm snd_seq_midi snd_seq_midi_event crct10dif_pclmul ghash_clmulni_intel sha512_ssse3 snd_rawmidi sha256_ssse3 sha1_ssse3 aesni_intel snd_seq nls_iso8859_1 crypto_simd snd_seq_device cryptd snd_timer rapl input_leds snd\n[ 364.049532] ipmi_devintf wmi_bmof ccp serio_raw k10temp sp5100_tco soundcore ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport drm efi_pstore ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 364.049576] CPU: 6 PID: 1964 Comm: rocminfo Tainted: G OE 6.10.0-custom #492\n[ 364.049579] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 364.049582] RIP: 0010:debug_dma_map_sg+0x2dc/0x370\n[ 364.049585] Code: 89 4d b8 e8 36 b1 86 00 8b 4d b8 48 8b 55 b0 44 8b 45 a8 4c 8b 4d a0 48 89 c6 48 c7 c7 00 4b 74 bc 4c 89 4d b8 e8 b4 73 f3 ff \u003c0f\u003e 0b 4c 8b 4d b8 8b 15 c8 2c b8 01 85 d2 0f 85 ee fd ff ff 8b 05\n[ 364.049588] RSP: 0018:ffff9ca600b57ac0 EFLAGS: 00010286\n[ 364.049590] RAX: 0000000000000000 RBX: ffff88b7c132b0c8 RCX: 0000000000000027\n[ 364.049592] RDX: ffff88bb0f521688 RSI: 0000000000000001 RDI: ffff88bb0f521680\n[ 364.049594] RBP: ffff9ca600b57b20 R08: 000000000000006f R09: ffff9ca600b57930\n[ 364.049596] R10: ffff9ca600b57928 R11: ffffffffbcb46328 R12: 0000000000000000\n[ 364.049597] R13: 0000000000000001 R14: ffff88b7c19c0700 R15: ffff88b7c9059800\n[ 364.049599] FS: 00007fb2d3516e80(0000) GS:ffff88bb0f500000(0000) knlGS:0000000000000000\n[ 364.049601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 364.049603] CR2: 000055610bd03598 CR3: 00000001049f6000 CR4: 0000000000350ef0\n[ 364.049605] Call Trace:\n[ 364.049607] \u003cTASK\u003e\n[ 364.049609] ? show_regs+0x6d/0x80\n[ 364.049614] ? __warn+0x8c/0x140\n[ 364.049618] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049621] ? report_bug+0x193/0x1a0\n[ 364.049627] ? handle_bug+0x46/0x80\n[ 364.049631] ? exc_invalid_op+0x1d/0x80\n[ 364.049635] ? asm_exc_invalid_op+0x1f/0x30\n[ 364.049642] ? debug_dma_map_sg+0x2dc/0x370\n[ 364.049647] __dma_map_sg_attrs+0x90/0xe0\n[ 364.049651] dma_map_sgtable+0x25/0x40\n[ 364.049654] amdgpu_bo_move+0x59a/0x850 [amdgpu]\n[ 364.049935] ? srso_return_thunk+0x5/0x5f\n[ 364.049939] ? amdgpu_ttm_tt_populate+0x5d/0xc0 [amdgpu]\n[ 364.050095] ttm_bo_handle_move_mem+0xc3/0x180 [ttm]\n[ 364.050103] ttm_bo_validate+0xc1/0x160 [ttm]\n[ 364.050108] ? amdgpu_ttm_tt_get_user_pages+0xe5/0x1b0 [amdgpu]\n[ 364.050263] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0xa12/0xc90 [amdgpu]\n[ 364.050473] kfd_ioctl_alloc_memory_of_gpu+0x16b/0x3b0 [amdgpu]\n[ 364.050680] kfd_ioctl+0x3c2/0x530 [amdgpu]\n[ 364.050866] ? __pfx_kfd_ioctl_alloc_memory_of_gpu+0x10/0x10 [amdgpu]\n[ 364.05105\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56594",
"url": "https://www.suse.com/security/cve/CVE-2024-56594"
},
{
"category": "external",
"summary": "SUSE Bug 1235413 for CVE-2024-56594",
"url": "https://bugzilla.suse.com/1235413"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56594"
},
{
"cve": "CVE-2024-56595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56595"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: add a check to prevent array-index-out-of-bounds in dbAdjTree\n\nWhen the value of lp is 0 at the beginning of the for loop, it will\nbecome negative in the next assignment and we should bail out.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56595",
"url": "https://www.suse.com/security/cve/CVE-2024-56595"
},
{
"category": "external",
"summary": "SUSE Bug 1235410 for CVE-2024-56595",
"url": "https://bugzilla.suse.com/1235410"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56595"
},
{
"cve": "CVE-2024-56596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56596"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in jfs_readdir\n\nThe stbl might contain some invalid values. Added a check to\nreturn error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56596",
"url": "https://www.suse.com/security/cve/CVE-2024-56596"
},
{
"category": "external",
"summary": "SUSE Bug 1235458 for CVE-2024-56596",
"url": "https://bugzilla.suse.com/1235458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56596"
},
{
"cve": "CVE-2024-56597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56597"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix shift-out-of-bounds in dbSplit\n\nWhen dmt_budmin is less than zero, it causes errors\nin the later stages. Added a check to return an error beforehand\nin dbAllocCtl itself.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56597",
"url": "https://www.suse.com/security/cve/CVE-2024-56597"
},
{
"category": "external",
"summary": "SUSE Bug 1235222 for CVE-2024-56597",
"url": "https://bugzilla.suse.com/1235222"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56597"
},
{
"cve": "CVE-2024-56598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56598"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: array-index-out-of-bounds fix in dtReadFirst\n\nThe value of stbl can be sometimes out of bounds due\nto a bad filesystem. Added a check with appopriate return\nof error code in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56598",
"url": "https://www.suse.com/security/cve/CVE-2024-56598"
},
{
"category": "external",
"summary": "SUSE Bug 1235220 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235220"
},
{
"category": "external",
"summary": "SUSE Bug 1235221 for CVE-2024-56598",
"url": "https://bugzilla.suse.com/1235221"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56598"
},
{
"cve": "CVE-2024-56599",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56599"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath10k: avoid NULL pointer error during sdio remove\n\nWhen running \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will free sdio\nworkqueue by destroy_workqueue(). But if CONFIG_INIT_ON_FREE_DEFAULT_ON\nis set to yes, kernel panic will happen:\nCall trace:\n destroy_workqueue+0x1c/0x258\n ath10k_sdio_remove+0x84/0x94\n sdio_bus_remove+0x50/0x16c\n device_release_driver_internal+0x188/0x25c\n device_driver_detach+0x20/0x2c\n\nThis is because during \u0027rmmod ath10k\u0027, ath10k_sdio_remove() will call\nath10k_core_destroy() before destroy_workqueue(). wiphy_dev_release()\nwill finally be called in ath10k_core_destroy(). This function will free\nstruct cfg80211_registered_device *rdev and all its members, including\nwiphy, dev and the pointer of sdio workqueue. Then the pointer of sdio\nworkqueue will be set to NULL due to CONFIG_INIT_ON_FREE_DEFAULT_ON.\n\nAfter device release, destroy_workqueue() will use NULL pointer then the\nkernel panic happen.\n\nCall trace:\nath10k_sdio_remove\n -\u003eath10k_core_unregister\n \u2026\u2026\n -\u003eath10k_core_stop\n -\u003eath10k_hif_stop\n -\u003eath10k_sdio_irq_disable\n -\u003eath10k_hif_power_down\n -\u003edel_timer_sync(\u0026ar_sdio-\u003esleep_timer)\n -\u003eath10k_core_destroy\n -\u003eath10k_mac_destroy\n -\u003eieee80211_free_hw\n -\u003ewiphy_free\n \u2026\u2026\n -\u003ewiphy_dev_release\n -\u003edestroy_workqueue\n\nNeed to call destroy_workqueue() before ath10k_core_destroy(), free\nthe work queue buffer first and then free pointer of work queue by\nath10k_core_destroy(). This order matches the error path order in\nath10k_sdio_probe().\n\nNo work will be queued on sdio workqueue between it is destroyed and\nath10k_core_destroy() is called. Based on the call_stack above, the\nreason is:\nOnly ath10k_sdio_sleep_timer_handler(), ath10k_sdio_hif_tx_sg() and\nath10k_sdio_irq_disable() will queue work on sdio workqueue.\nSleep timer will be deleted before ath10k_core_destroy() in\nath10k_hif_power_down().\nath10k_sdio_irq_disable() only be called in ath10k_hif_stop().\nath10k_core_unregister() will call ath10k_hif_power_down() to stop hif\nbus, so ath10k_sdio_hif_tx_sg() won\u0027t be called anymore.\n\nTested-on: QCA6174 hw3.2 SDIO WLAN.RMH.4.4.1-00189",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56599",
"url": "https://www.suse.com/security/cve/CVE-2024-56599"
},
{
"category": "external",
"summary": "SUSE Bug 1235138 for CVE-2024-56599",
"url": "https://bugzilla.suse.com/1235138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56599"
},
{
"cve": "CVE-2024-56600",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56600"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet6: do not leave a dangling sk pointer in inet6_create()\n\nsock_init_data() attaches the allocated sk pointer to the provided sock\nobject. If inet6_create() fails later, the sk object is released, but the\nsock object retains the dangling sk pointer, which may cause use-after-free\nlater.\n\nClear the sock sk pointer on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56600",
"url": "https://www.suse.com/security/cve/CVE-2024-56600"
},
{
"category": "external",
"summary": "SUSE Bug 1235217 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235217"
},
{
"category": "external",
"summary": "SUSE Bug 1235218 for CVE-2024-56600",
"url": "https://bugzilla.suse.com/1235218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56600"
},
{
"cve": "CVE-2024-56601",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56601"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: inet: do not leave a dangling sk pointer in inet_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If inet_create() fails later, the sk object is freed, but the\nsock object retains the dangling pointer, which may create use-after-free\nlater.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56601",
"url": "https://www.suse.com/security/cve/CVE-2024-56601"
},
{
"category": "external",
"summary": "SUSE Bug 1235230 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235230"
},
{
"category": "external",
"summary": "SUSE Bug 1235231 for CVE-2024-56601",
"url": "https://bugzilla.suse.com/1235231"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56601"
},
{
"cve": "CVE-2024-56602",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56602"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: do not leave a dangling sk pointer in ieee802154_create()\n\nsock_init_data() attaches the allocated sk object to the provided sock\nobject. If ieee802154_create() fails later, the allocated sk object is\nfreed, but the dangling pointer remains in the provided sock object, which\nmay allow use-after-free.\n\nClear the sk pointer in the sock object on error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56602",
"url": "https://www.suse.com/security/cve/CVE-2024-56602"
},
{
"category": "external",
"summary": "SUSE Bug 1235521 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235521"
},
{
"category": "external",
"summary": "SUSE Bug 1235522 for CVE-2024-56602",
"url": "https://bugzilla.suse.com/1235522"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56602"
},
{
"cve": "CVE-2024-56603",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56603"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: af_can: do not leave a dangling sk pointer in can_create()\n\nOn error can_create() frees the allocated sk object, but sock_init_data()\nhas already attached it to the provided sock object. This will leave a\ndangling sk pointer in the sock object and may cause use-after-free later.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56603",
"url": "https://www.suse.com/security/cve/CVE-2024-56603"
},
{
"category": "external",
"summary": "SUSE Bug 1235415 for CVE-2024-56603",
"url": "https://bugzilla.suse.com/1235415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56603"
},
{
"cve": "CVE-2024-56604",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56604"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()\n\nbt_sock_alloc() attaches allocated sk object to the provided sock object.\nIf rfcomm_dlc_alloc() fails, we release the sk object, but leave the\ndangling pointer in the sock object, which may cause use-after-free.\n\nFix this by swapping calls to bt_sock_alloc() and rfcomm_dlc_alloc().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56604",
"url": "https://www.suse.com/security/cve/CVE-2024-56604"
},
{
"category": "external",
"summary": "SUSE Bug 1235056 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235056"
},
{
"category": "external",
"summary": "SUSE Bug 1235058 for CVE-2024-56604",
"url": "https://bugzilla.suse.com/1235058"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56604"
},
{
"cve": "CVE-2024-56605",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56605"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create()\n\nbt_sock_alloc() allocates the sk object and attaches it to the provided\nsock object. On error l2cap_sock_alloc() frees the sk object, but the\ndangling pointer is still attached to the sock object, which may create\nuse-after-free in other code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56605",
"url": "https://www.suse.com/security/cve/CVE-2024-56605"
},
{
"category": "external",
"summary": "SUSE Bug 1234853 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1234853"
},
{
"category": "external",
"summary": "SUSE Bug 1235061 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235061"
},
{
"category": "external",
"summary": "SUSE Bug 1235062 for CVE-2024-56605",
"url": "https://bugzilla.suse.com/1235062"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56605"
},
{
"cve": "CVE-2024-56606",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56606"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_packet: avoid erroring out after sock_init_data() in packet_create()\n\nAfter sock_init_data() the allocated sk object is attached to the provided\nsock object. On error, packet_create() frees the sk object leaving the\ndangling pointer in the sock object on return. Some other code may try\nto use this pointer and cause use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56606",
"url": "https://www.suse.com/security/cve/CVE-2024-56606"
},
{
"category": "external",
"summary": "SUSE Bug 1235417 for CVE-2024-56606",
"url": "https://bugzilla.suse.com/1235417"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56606"
},
{
"cve": "CVE-2024-56607",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56607"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()\n\nWhen I try to manually set bitrates:\n\niw wlan0 set bitrates legacy-2.4 1\n\nI get sleeping from invalid context error, see below. Fix that by switching to\nuse recently introduced ieee80211_iterate_stations_mtx().\n\nDo note that WCN6855 firmware is still crashing, I\u0027m not sure if that firmware\neven supports bitrate WMI commands and should we consider disabling\nath12k_mac_op_set_bitrate_mask() for WCN6855? But that\u0027s for another patch.\n\nBUG: sleeping function called from invalid context at drivers/net/wireless/ath/ath12k/wmi.c:420\nin_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 2236, name: iw\npreempt_count: 0, expected: 0\nRCU nest depth: 1, expected: 0\n3 locks held by iw/2236:\n #0: ffffffffabc6f1d8 (cb_lock){++++}-{3:3}, at: genl_rcv+0x14/0x40\n #1: ffff888138410810 (\u0026rdev-\u003ewiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x54d/0x800 [cfg80211]\n #2: ffffffffab2cfaa0 (rcu_read_lock){....}-{1:2}, at: ieee80211_iterate_stations_atomic+0x2f/0x200 [mac80211]\nCPU: 3 UID: 0 PID: 2236 Comm: iw Not tainted 6.11.0-rc7-wt-ath+ #1772\nHardware name: Intel(R) Client Systems NUC8i7HVK/NUC8i7HVB, BIOS HNKBLi70.86A.0067.2021.0528.1339 05/28/2021\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0xa4/0xe0\n dump_stack+0x10/0x20\n __might_resched+0x363/0x5a0\n ? __alloc_skb+0x165/0x340\n __might_sleep+0xad/0x160\n ath12k_wmi_cmd_send+0xb1/0x3d0 [ath12k]\n ? ath12k_wmi_init_wcn7850+0xa40/0xa40 [ath12k]\n ? __netdev_alloc_skb+0x45/0x7b0\n ? __asan_memset+0x39/0x40\n ? ath12k_wmi_alloc_skb+0xf0/0x150 [ath12k]\n ? reacquire_held_locks+0x4d0/0x4d0\n ath12k_wmi_set_peer_param+0x340/0x5b0 [ath12k]\n ath12k_mac_disable_peer_fixed_rate+0xa3/0x110 [ath12k]\n ? ath12k_mac_vdev_stop+0x4f0/0x4f0 [ath12k]\n ieee80211_iterate_stations_atomic+0xd4/0x200 [mac80211]\n ath12k_mac_op_set_bitrate_mask+0x5d2/0x1080 [ath12k]\n ? ath12k_mac_vif_chan+0x320/0x320 [ath12k]\n drv_set_bitrate_mask+0x267/0x470 [mac80211]\n ieee80211_set_bitrate_mask+0x4cc/0x8a0 [mac80211]\n ? __this_cpu_preempt_check+0x13/0x20\n nl80211_set_tx_bitrate_mask+0x2bc/0x530 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? trace_contention_end+0xef/0x140\n ? rtnl_unlock+0x9/0x10\n ? nl80211_pre_doit+0x557/0x800 [cfg80211]\n genl_family_rcv_msg_doit+0x1f0/0x2e0\n ? genl_family_rcv_msg_attrs_parse.isra.0+0x250/0x250\n ? ns_capable+0x57/0xd0\n genl_family_rcv_msg+0x34c/0x600\n ? genl_family_rcv_msg_dumpit+0x310/0x310\n ? __lock_acquire+0xc62/0x1de0\n ? he_set_mcs_mask.isra.0+0x8d0/0x8d0 [cfg80211]\n ? nl80211_parse_tx_bitrate_mask+0x2320/0x2320 [cfg80211]\n ? cfg80211_external_auth_request+0x690/0x690 [cfg80211]\n genl_rcv_msg+0xa0/0x130\n netlink_rcv_skb+0x14c/0x400\n ? genl_family_rcv_msg+0x600/0x600\n ? netlink_ack+0xd70/0xd70\n ? rwsem_optimistic_spin+0x4f0/0x4f0\n ? genl_rcv+0x14/0x40\n ? down_read_killable+0x580/0x580\n ? netlink_deliver_tap+0x13e/0x350\n ? __this_cpu_preempt_check+0x13/0x20\n genl_rcv+0x23/0x40\n netlink_unicast+0x45e/0x790\n ? netlink_attachskb+0x7f0/0x7f0\n netlink_sendmsg+0x7eb/0xdb0\n ? netlink_unicast+0x790/0x790\n ? __this_cpu_preempt_check+0x13/0x20\n ? selinux_socket_sendmsg+0x31/0x40\n ? netlink_unicast+0x790/0x790\n __sock_sendmsg+0xc9/0x160\n ____sys_sendmsg+0x620/0x990\n ? kernel_sendmsg+0x30/0x30\n ? __copy_msghdr+0x410/0x410\n ? __kasan_check_read+0x11/0x20\n ? mark_lock+0xe6/0x1470\n ___sys_sendmsg+0xe9/0x170\n ? copy_msghdr_from_user+0x120/0x120\n ? __lock_acquire+0xc62/0x1de0\n ? do_fault_around+0x2c6/0x4e0\n ? do_user_addr_fault+0x8c1/0xde0\n ? reacquire_held_locks+0x220/0x4d0\n ? do_user_addr_fault+0x8c1/0xde0\n ? __kasan_check_read+0x11/0x20\n ? __fdget+0x4e/0x1d0\n ? sockfd_lookup_light+0x1a/0x170\n __sys_sendmsg+0xd2/0x180\n ? __sys_sendmsg_sock+0x20/0x20\n ? reacquire_held_locks+0x4d0/0x4d0\n ? debug_smp_processor_id+0x17/0x20\n __x64_sys_sendmsg+0x72/0xb0\n ? lockdep_hardirqs_on+0x7d/0x100\n x64_sys_call+0x894/0x9f0\n do_syscall_64+0x64/0x130\n entry_SYSCALL_64_after_\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56607",
"url": "https://www.suse.com/security/cve/CVE-2024-56607"
},
{
"category": "external",
"summary": "SUSE Bug 1235423 for CVE-2024-56607",
"url": "https://bugzilla.suse.com/1235423"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56607"
},
{
"cve": "CVE-2024-56608",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56608"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix out-of-bounds access in \u0027dcn21_link_encoder_create\u0027\n\nAn issue was identified in the dcn21_link_encoder_create function where\nan out-of-bounds access could occur when the hpd_source index was used\nto reference the link_enc_hpd_regs array. This array has a fixed size\nand the index was not being checked against the array\u0027s bounds before\naccessing it.\n\nThis fix adds a conditional check to ensure that the hpd_source index is\nwithin the valid range of the link_enc_hpd_regs array. If the index is\nout of bounds, the function now returns NULL to prevent undefined\nbehavior.\n\nReferences:\n\n[ 65.920507] ------------[ cut here ]------------\n[ 65.920510] UBSAN: array-index-out-of-bounds in drivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn21/dcn21_resource.c:1312:29\n[ 65.920519] index 7 is out of range for type \u0027dcn10_link_enc_hpd_registers [5]\u0027\n[ 65.920523] CPU: 3 PID: 1178 Comm: modprobe Tainted: G OE 6.8.0-cleanershaderfeatureresetasdntipmi200nv2132 #13\n[ 65.920525] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS WMJ0429N_Weekly_20_04_2 04/29/2020\n[ 65.920527] Call Trace:\n[ 65.920529] \u003cTASK\u003e\n[ 65.920532] dump_stack_lvl+0x48/0x70\n[ 65.920541] dump_stack+0x10/0x20\n[ 65.920543] __ubsan_handle_out_of_bounds+0xa2/0xe0\n[ 65.920549] dcn21_link_encoder_create+0xd9/0x140 [amdgpu]\n[ 65.921009] link_create+0x6d3/0xed0 [amdgpu]\n[ 65.921355] create_links+0x18a/0x4e0 [amdgpu]\n[ 65.921679] dc_create+0x360/0x720 [amdgpu]\n[ 65.921999] ? dmi_matches+0xa0/0x220\n[ 65.922004] amdgpu_dm_init+0x2b6/0x2c90 [amdgpu]\n[ 65.922342] ? console_unlock+0x77/0x120\n[ 65.922348] ? dev_printk_emit+0x86/0xb0\n[ 65.922354] dm_hw_init+0x15/0x40 [amdgpu]\n[ 65.922686] amdgpu_device_init+0x26a8/0x33a0 [amdgpu]\n[ 65.922921] amdgpu_driver_load_kms+0x1b/0xa0 [amdgpu]\n[ 65.923087] amdgpu_pci_probe+0x1b7/0x630 [amdgpu]\n[ 65.923087] local_pci_probe+0x4b/0xb0\n[ 65.923087] pci_device_probe+0xc8/0x280\n[ 65.923087] really_probe+0x187/0x300\n[ 65.923087] __driver_probe_device+0x85/0x130\n[ 65.923087] driver_probe_device+0x24/0x110\n[ 65.923087] __driver_attach+0xac/0x1d0\n[ 65.923087] ? __pfx___driver_attach+0x10/0x10\n[ 65.923087] bus_for_each_dev+0x7d/0xd0\n[ 65.923087] driver_attach+0x1e/0x30\n[ 65.923087] bus_add_driver+0xf2/0x200\n[ 65.923087] driver_register+0x64/0x130\n[ 65.923087] ? __pfx_amdgpu_init+0x10/0x10 [amdgpu]\n[ 65.923087] __pci_register_driver+0x61/0x70\n[ 65.923087] amdgpu_init+0x7d/0xff0 [amdgpu]\n[ 65.923087] do_one_initcall+0x49/0x310\n[ 65.923087] ? kmalloc_trace+0x136/0x360\n[ 65.923087] do_init_module+0x6a/0x270\n[ 65.923087] load_module+0x1fce/0x23a0\n[ 65.923087] init_module_from_file+0x9c/0xe0\n[ 65.923087] ? init_module_from_file+0x9c/0xe0\n[ 65.923087] idempotent_init_module+0x179/0x230\n[ 65.923087] __x64_sys_finit_module+0x5d/0xa0\n[ 65.923087] do_syscall_64+0x76/0x120\n[ 65.923087] entry_SYSCALL_64_after_hwframe+0x6e/0x76\n[ 65.923087] RIP: 0033:0x7f2d80f1e88d\n[ 65.923087] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[ 65.923087] RSP: 002b:00007ffc7bc1aa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139\n[ 65.923087] RAX: ffffffffffffffda RBX: 0000564c9c1db130 RCX: 00007f2d80f1e88d\n[ 65.923087] RDX: 0000000000000000 RSI: 0000564c9c1e5480 RDI: 000000000000000f\n[ 65.923087] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000002\n[ 65.923087] R10: 000000000000000f R11: 0000000000000246 R12: 0000564c9c1e5480\n[ 65.923087] R13: 0000564c9c1db260 R14: 0000000000000000 R15: 0000564c9c1e54b0\n[ 65.923087] \u003c/TASK\u003e\n[ 65.923927] ---[ end trace ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56608",
"url": "https://www.suse.com/security/cve/CVE-2024-56608"
},
{
"category": "external",
"summary": "SUSE Bug 1235487 for CVE-2024-56608",
"url": "https://bugzilla.suse.com/1235487"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56608"
},
{
"cve": "CVE-2024-56609",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56609"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb\n\nWhen removing kernel modules by:\n rmmod rtw88_8723cs rtw88_8703b rtw88_8723x rtw88_sdio rtw88_core\n\nDriver uses skb_queue_purge() to purge TX skb, but not report tx status\ncausing \"Have pending ack frames!\" warning. Use ieee80211_purge_tx_queue()\nto correct this.\n\nSince ieee80211_purge_tx_queue() doesn\u0027t take locks, to prevent racing\nbetween TX work and purge TX queue, flush and destroy TX work in advance.\n\n wlan0: deauthenticating from aa:f5:fd:60:4c:a8 by local\n choice (Reason: 3=DEAUTH_LEAVING)\n ------------[ cut here ]------------\n Have pending ack frames!\n WARNING: CPU: 3 PID: 9232 at net/mac80211/main.c:1691\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n CPU: 3 PID: 9232 Comm: rmmod Tainted: G C\n 6.10.1-200.fc40.aarch64 #1\n Hardware name: pine64 Pine64 PinePhone Braveheart\n (1.1)/Pine64 PinePhone Braveheart (1.1), BIOS 2024.01 01/01/2024\n pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n lr : ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n sp : ffff80008c1b37b0\n x29: ffff80008c1b37b0 x28: ffff000003be8000 x27: 0000000000000000\n x26: 0000000000000000 x25: ffff000003dc14b8 x24: ffff80008c1b37d0\n x23: ffff000000ff9f80 x22: 0000000000000000 x21: 000000007fffffff\n x20: ffff80007c7e93d8 x19: ffff00006e66f400 x18: 0000000000000000\n x17: ffff7ffffd2b3000 x16: ffff800083fc0000 x15: 0000000000000000\n x14: 0000000000000000 x13: 2173656d61726620 x12: 6b636120676e6964\n x11: 0000000000000000 x10: 000000000000005d x9 : ffff8000802af2b0\n x8 : ffff80008c1b3430 x7 : 0000000000000001 x6 : 0000000000000001\n x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000003be8000\n Call trace:\n ieee80211_free_ack_frame+0x5c/0x90 [mac80211]\n idr_for_each+0x74/0x110\n ieee80211_free_hw+0x44/0xe8 [mac80211]\n rtw_sdio_remove+0x9c/0xc0 [rtw88_sdio]\n sdio_bus_remove+0x44/0x180\n device_remove+0x54/0x90\n device_release_driver_internal+0x1d4/0x238\n driver_detach+0x54/0xc0\n bus_remove_driver+0x78/0x108\n driver_unregister+0x38/0x78\n sdio_unregister_driver+0x2c/0x40\n rtw_8723cs_driver_exit+0x18/0x1000 [rtw88_8723cs]\n __do_sys_delete_module.isra.0+0x190/0x338\n __arm64_sys_delete_module+0x1c/0x30\n invoke_syscall+0x74/0x100\n el0_svc_common.constprop.0+0x48/0xf0\n do_el0_svc+0x24/0x38\n el0_svc+0x3c/0x158\n el0t_64_sync_handler+0x120/0x138\n el0t_64_sync+0x194/0x198\n ---[ end trace 0000000000000000 ]---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56609",
"url": "https://www.suse.com/security/cve/CVE-2024-56609"
},
{
"category": "external",
"summary": "SUSE Bug 1235389 for CVE-2024-56609",
"url": "https://bugzilla.suse.com/1235389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56609"
},
{
"cve": "CVE-2024-56610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56610"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcsan: Turn report_filterlist_lock into a raw_spinlock\n\nRan Xiaokai reports that with a KCSAN-enabled PREEMPT_RT kernel, we can see\nsplats like:\n\n| BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48\n| in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 0, name: swapper/1\n| preempt_count: 10002, expected: 0\n| RCU nest depth: 0, expected: 0\n| no locks held by swapper/1/0.\n| irq event stamp: 156674\n| hardirqs last enabled at (156673): [\u003cffffffff81130bd9\u003e] do_idle+0x1f9/0x240\n| hardirqs last disabled at (156674): [\u003cffffffff82254f84\u003e] sysvec_apic_timer_interrupt+0x14/0xc0\n| softirqs last enabled at (0): [\u003cffffffff81099f47\u003e] copy_process+0xfc7/0x4b60\n| softirqs last disabled at (0): [\u003c0000000000000000\u003e] 0x0\n| Preemption disabled at:\n| [\u003cffffffff814a3e2a\u003e] paint_ptr+0x2a/0x90\n| CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0+ #3\n| Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-0-ga698c8995f-prebuilt.qemu.org 04/01/2014\n| Call Trace:\n| \u003cIRQ\u003e\n| dump_stack_lvl+0x7e/0xc0\n| dump_stack+0x1d/0x30\n| __might_resched+0x1a2/0x270\n| rt_spin_lock+0x68/0x170\n| kcsan_skip_report_debugfs+0x43/0xe0\n| print_report+0xb5/0x590\n| kcsan_report_known_origin+0x1b1/0x1d0\n| kcsan_setup_watchpoint+0x348/0x650\n| __tsan_unaligned_write1+0x16d/0x1d0\n| hrtimer_interrupt+0x3d6/0x430\n| __sysvec_apic_timer_interrupt+0xe8/0x3a0\n| sysvec_apic_timer_interrupt+0x97/0xc0\n| \u003c/IRQ\u003e\n\nOn a detected data race, KCSAN\u0027s reporting logic checks if it should\nfilter the report. That list is protected by the report_filterlist_lock\n*non-raw* spinlock which may sleep on RT kernels.\n\nSince KCSAN may report data races in any context, convert it to a\nraw_spinlock.\n\nThis requires being careful about when to allocate memory for the filter\nlist itself which can be done via KCSAN\u0027s debugfs interface. Concurrent\nmodification of the filter list via debugfs should be rare: the chosen\nstrategy is to optimistically pre-allocate memory before the critical\nsection and discard if unused.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56610",
"url": "https://www.suse.com/security/cve/CVE-2024-56610"
},
{
"category": "external",
"summary": "SUSE Bug 1235390 for CVE-2024-56610",
"url": "https://bugzilla.suse.com/1235390"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56610"
},
{
"cve": "CVE-2024-56611",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56611"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM\n\nWe currently assume that there is at least one VMA in a MM, which isn\u0027t\ntrue.\n\nSo we might end up having find_vma() return NULL, to then de-reference\nNULL. So properly handle find_vma() returning NULL.\n\nThis fixes the report:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\nCPU: 1 UID: 0 PID: 6021 Comm: syz-executor284 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nRIP: 0010:migrate_to_node mm/mempolicy.c:1090 [inline]\nRIP: 0010:do_migrate_pages+0x403/0x6f0 mm/mempolicy.c:1194\nCode: ...\nRSP: 0018:ffffc9000375fd08 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffc9000375fd78 RCX: 0000000000000000\nRDX: ffff88807e171300 RSI: dffffc0000000000 RDI: ffff88803390c044\nRBP: ffff88807e171428 R08: 0000000000000014 R09: fffffbfff2039ef1\nR10: ffffffff901cf78f R11: 0000000000000000 R12: 0000000000000003\nR13: ffffc9000375fe90 R14: ffffc9000375fe98 R15: ffffc9000375fdf8\nFS: 00005555919e1380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00005555919e1ca8 CR3: 000000007f12a000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n kernel_migrate_pages+0x5b2/0x750 mm/mempolicy.c:1709\n __do_sys_migrate_pages mm/mempolicy.c:1727 [inline]\n __se_sys_migrate_pages mm/mempolicy.c:1723 [inline]\n __x64_sys_migrate_pages+0x96/0x100 mm/mempolicy.c:1723\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n[akpm@linux-foundation.org: add unlikely()]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56611",
"url": "https://www.suse.com/security/cve/CVE-2024-56611"
},
{
"category": "external",
"summary": "SUSE Bug 1235391 for CVE-2024-56611",
"url": "https://bugzilla.suse.com/1235391"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56611"
},
{
"cve": "CVE-2024-56614",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56614"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxsk: fix OOB map writes when deleting elements\n\nJordy says:\n\n\"\nIn the xsk_map_delete_elem function an unsigned integer\n(map-\u003emax_entries) is compared with a user-controlled signed integer\n(k). Due to implicit type conversion, a large unsigned value for\nmap-\u003emax_entries can bypass the intended bounds check:\n\n\tif (k \u003e= map-\u003emax_entries)\n\t\treturn -EINVAL;\n\nThis allows k to hold a negative value (between -2147483648 and -2),\nwhich is then used as an array index in m-\u003exsk_map[k], which results\nin an out-of-bounds access.\n\n\tspin_lock_bh(\u0026m-\u003elock);\n\tmap_entry = \u0026m-\u003exsk_map[k]; // Out-of-bounds map_entry\n\told_xs = unrcu_pointer(xchg(map_entry, NULL)); // Oob write\n\tif (old_xs)\n\t\txsk_map_sock_delete(old_xs, map_entry);\n\tspin_unlock_bh(\u0026m-\u003elock);\n\nThe xchg operation can then be used to cause an out-of-bounds write.\nMoreover, the invalid map_entry passed to xsk_map_sock_delete can lead\nto further memory corruption.\n\"\n\nIt indeed results in following splat:\n\n[76612.897343] BUG: unable to handle page fault for address: ffffc8fc2e461108\n[76612.904330] #PF: supervisor write access in kernel mode\n[76612.909639] #PF: error_code(0x0002) - not-present page\n[76612.914855] PGD 0 P4D 0\n[76612.917431] Oops: Oops: 0002 [#1] PREEMPT SMP\n[76612.921859] CPU: 11 UID: 0 PID: 10318 Comm: a.out Not tainted 6.12.0-rc1+ #470\n[76612.929189] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[76612.939781] RIP: 0010:xsk_map_delete_elem+0x2d/0x60\n[76612.944738] Code: 00 00 41 54 55 53 48 63 2e 3b 6f 24 73 38 4c 8d a7 f8 00 00 00 48 89 fb 4c 89 e7 e8 2d bf 05 00 48 8d b4 eb 00 01 00 00 31 ff \u003c48\u003e 87 3e 48 85 ff 74 05 e8 16 ff ff ff 4c 89 e7 e8 3e bc 05 00 31\n[76612.963774] RSP: 0018:ffffc9002e407df8 EFLAGS: 00010246\n[76612.969079] RAX: 0000000000000000 RBX: ffffc9002e461000 RCX: 0000000000000000\n[76612.976323] RDX: 0000000000000001 RSI: ffffc8fc2e461108 RDI: 0000000000000000\n[76612.983569] RBP: ffffffff80000001 R08: 0000000000000000 R09: 0000000000000007\n[76612.990812] R10: ffffc9002e407e18 R11: ffff888108a38858 R12: ffffc9002e4610f8\n[76612.998060] R13: ffff888108a38858 R14: 00007ffd1ae0ac78 R15: ffffc9002e4610c0\n[76613.005303] FS: 00007f80b6f59740(0000) GS:ffff8897e0ec0000(0000) knlGS:0000000000000000\n[76613.013517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[76613.019349] CR2: ffffc8fc2e461108 CR3: 000000011e3ef001 CR4: 00000000007726f0\n[76613.026595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[76613.033841] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[76613.041086] PKRU: 55555554\n[76613.043842] Call Trace:\n[76613.046331] \u003cTASK\u003e\n[76613.048468] ? __die+0x20/0x60\n[76613.051581] ? page_fault_oops+0x15a/0x450\n[76613.055747] ? search_extable+0x22/0x30\n[76613.059649] ? search_bpf_extables+0x5f/0x80\n[76613.063988] ? exc_page_fault+0xa9/0x140\n[76613.067975] ? asm_exc_page_fault+0x22/0x30\n[76613.072229] ? xsk_map_delete_elem+0x2d/0x60\n[76613.076573] ? xsk_map_delete_elem+0x23/0x60\n[76613.080914] __sys_bpf+0x19b7/0x23c0\n[76613.084555] __x64_sys_bpf+0x1a/0x20\n[76613.088194] do_syscall_64+0x37/0xb0\n[76613.091832] entry_SYSCALL_64_after_hwframe+0x4b/0x53\n[76613.096962] RIP: 0033:0x7f80b6d1e88d\n[76613.100592] Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 b5 0f 00 f7 d8 64 89 01 48\n[76613.119631] RSP: 002b:00007ffd1ae0ac68 EFLAGS: 00000206 ORIG_RAX: 0000000000000141\n[76613.131330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80b6d1e88d\n[76613.142632] RDX: 0000000000000098 RSI: 00007ffd1ae0ad20 RDI: 0000000000000003\n[76613.153967] RBP: 00007ffd1ae0adc0 R08: 0000000000000000 R09: 0000000000000000\n[76613.166030] R10: 00007f80b6f77040 R11: 0000000000000206 R12: 00007ffd1ae0aed8\n[76613.177130] R13: 000055ddf42ce1e9 R14: 000055ddf42d0d98 R15: 00\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56614",
"url": "https://www.suse.com/security/cve/CVE-2024-56614"
},
{
"category": "external",
"summary": "SUSE Bug 1235424 for CVE-2024-56614",
"url": "https://bugzilla.suse.com/1235424"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56614"
},
{
"cve": "CVE-2024-56615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56615"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix OOB devmap writes when deleting elements\n\nJordy reported issue against XSKMAP which also applies to DEVMAP - the\nindex used for accessing map entry, due to being a signed integer,\ncauses the OOB writes. Fix is simple as changing the type from int to\nu32, however, when compared to XSKMAP case, one more thing needs to be\naddressed.\n\nWhen map is released from system via dev_map_free(), we iterate through\nall of the entries and an iterator variable is also an int, which\nimplies OOB accesses. Again, change it to be u32.\n\nExample splat below:\n\n[ 160.724676] BUG: unable to handle page fault for address: ffffc8fc2c001000\n[ 160.731662] #PF: supervisor read access in kernel mode\n[ 160.736876] #PF: error_code(0x0000) - not-present page\n[ 160.742095] PGD 0 P4D 0\n[ 160.744678] Oops: Oops: 0000 [#1] PREEMPT SMP\n[ 160.749106] CPU: 1 UID: 0 PID: 520 Comm: kworker/u145:12 Not tainted 6.12.0-rc1+ #487\n[ 160.757050] Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0008.031920191559 03/19/2019\n[ 160.767642] Workqueue: events_unbound bpf_map_free_deferred\n[ 160.773308] RIP: 0010:dev_map_free+0x77/0x170\n[ 160.777735] Code: 00 e8 fd 91 ed ff e8 b8 73 ed ff 41 83 7d 18 19 74 6e 41 8b 45 24 49 8b bd f8 00 00 00 31 db 85 c0 74 48 48 63 c3 48 8d 04 c7 \u003c48\u003e 8b 28 48 85 ed 74 30 48 8b 7d 18 48 85 ff 74 05 e8 b3 52 fa ff\n[ 160.796777] RSP: 0018:ffffc9000ee1fe38 EFLAGS: 00010202\n[ 160.802086] RAX: ffffc8fc2c001000 RBX: 0000000080000000 RCX: 0000000000000024\n[ 160.809331] RDX: 0000000000000000 RSI: 0000000000000024 RDI: ffffc9002c001000\n[ 160.816576] RBP: 0000000000000000 R08: 0000000000000023 R09: 0000000000000001\n[ 160.823823] R10: 0000000000000001 R11: 00000000000ee6b2 R12: dead000000000122\n[ 160.831066] R13: ffff88810c928e00 R14: ffff8881002df405 R15: 0000000000000000\n[ 160.838310] FS: 0000000000000000(0000) GS:ffff8897e0c40000(0000) knlGS:0000000000000000\n[ 160.846528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 160.852357] CR2: ffffc8fc2c001000 CR3: 0000000005c32006 CR4: 00000000007726f0\n[ 160.859604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 160.866847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 160.874092] PKRU: 55555554\n[ 160.876847] Call Trace:\n[ 160.879338] \u003cTASK\u003e\n[ 160.881477] ? __die+0x20/0x60\n[ 160.884586] ? page_fault_oops+0x15a/0x450\n[ 160.888746] ? search_extable+0x22/0x30\n[ 160.892647] ? search_bpf_extables+0x5f/0x80\n[ 160.896988] ? exc_page_fault+0xa9/0x140\n[ 160.900973] ? asm_exc_page_fault+0x22/0x30\n[ 160.905232] ? dev_map_free+0x77/0x170\n[ 160.909043] ? dev_map_free+0x58/0x170\n[ 160.912857] bpf_map_free_deferred+0x51/0x90\n[ 160.917196] process_one_work+0x142/0x370\n[ 160.921272] worker_thread+0x29e/0x3b0\n[ 160.925082] ? rescuer_thread+0x4b0/0x4b0\n[ 160.929157] kthread+0xd4/0x110\n[ 160.932355] ? kthread_park+0x80/0x80\n[ 160.936079] ret_from_fork+0x2d/0x50\n[ 160.943396] ? kthread_park+0x80/0x80\n[ 160.950803] ret_from_fork_asm+0x11/0x20\n[ 160.958482] \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56615",
"url": "https://www.suse.com/security/cve/CVE-2024-56615"
},
{
"category": "external",
"summary": "SUSE Bug 1235426 for CVE-2024-56615",
"url": "https://bugzilla.suse.com/1235426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56615"
},
{
"cve": "CVE-2024-56616",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56616"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix MST sideband message body length check\n\nFix the MST sideband message body length check, which must be at least 1\nbyte accounting for the message body CRC (aka message data CRC) at the\nend of the message.\n\nThis fixes a case where an MST branch device returns a header with a\ncorrect header CRC (indicating a correctly received body length), with\nthe body length being incorrectly set to 0. This will later lead to a\nmemory corruption in drm_dp_sideband_append_payload() and the following\nerrors in dmesg:\n\n UBSAN: array-index-out-of-bounds in drivers/gpu/drm/display/drm_dp_mst_topology.c:786:25\n index -1 is out of range for type \u0027u8 [48]\u0027\n Call Trace:\n drm_dp_sideband_append_payload+0x33d/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]\n\n memcpy: detected field-spanning write (size 18446744073709551615) of single field \"\u0026msg-\u003emsg[msg-\u003ecurlen]\" at drivers/gpu/drm/display/drm_dp_mst_topology.c:791 (size 256)\n Call Trace:\n drm_dp_sideband_append_payload+0x324/0x350 [drm_display_helper]\n drm_dp_get_one_sb_msg+0x3ce/0x5f0 [drm_display_helper]\n drm_dp_mst_hpd_irq_handle_event+0xc8/0x1580 [drm_display_helper]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56616",
"url": "https://www.suse.com/security/cve/CVE-2024-56616"
},
{
"category": "external",
"summary": "SUSE Bug 1235427 for CVE-2024-56616",
"url": "https://bugzilla.suse.com/1235427"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56616"
},
{
"cve": "CVE-2024-56617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56617"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU\n\nCommit\n\n 5944ce092b97 (\"arch_topology: Build cacheinfo from primary CPU\")\n\nadds functionality that architectures can use to optionally allocate and\nbuild cacheinfo early during boot. Commit\n\n 6539cffa9495 (\"cacheinfo: Add arch specific early level initializer\")\n\nlets secondary CPUs correct (and reallocate memory) cacheinfo data if\nneeded.\n\nIf the early build functionality is not used and cacheinfo does not need\ncorrection, memory for cacheinfo is never allocated. x86 does not use\nthe early build functionality. Consequently, during the cacheinfo CPU\nhotplug callback, last_level_cache_is_valid() attempts to dereference\na NULL pointer:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000100\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not present page\n PGD 0 P4D 0\n Oops: 0000 [#1] PREEPMT SMP NOPTI\n CPU: 0 PID 19 Comm: cpuhp/0 Not tainted 6.4.0-rc2 #1\n RIP: 0010: last_level_cache_is_valid+0x95/0xe0a\n\nAllocate memory for cacheinfo during the cacheinfo CPU hotplug callback\nif not done earlier.\n\nMoreover, before determining the validity of the last-level cache info,\nensure that it has been allocated. Simply checking for non-zero\ncache_leaves() is not sufficient, as some architectures (e.g., Intel\nprocessors) have non-zero cache_leaves() before allocation.\n\nDereferencing NULL cacheinfo can occur in update_per_cpu_data_slice_size().\nThis function iterates over all online CPUs. However, a CPU may have come\nonline recently, but its cacheinfo may not have been allocated yet.\n\nWhile here, remove an unnecessary indentation in allocate_cache_info().\n\n [ bp: Massage. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56617",
"url": "https://www.suse.com/security/cve/CVE-2024-56617"
},
{
"category": "external",
"summary": "SUSE Bug 1235429 for CVE-2024-56617",
"url": "https://bugzilla.suse.com/1235429"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56617"
},
{
"cve": "CVE-2024-56619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56619"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()\n\nSyzbot reported that when searching for records in a directory where the\ninode\u0027s i_size is corrupted and has a large value, memory access outside\nthe folio/page range may occur, or a use-after-free bug may be detected if\nKASAN is enabled.\n\nThis is because nilfs_last_byte(), which is called by nilfs_find_entry()\nand others to calculate the number of valid bytes of directory data in a\npage from i_size and the page index, loses the upper 32 bits of the 64-bit\nsize information due to an inappropriate type of local variable to which\nthe i_size value is assigned.\n\nThis caused a large byte offset value due to underflow in the end address\ncalculation in the calling nilfs_find_entry(), resulting in memory access\nthat exceeds the folio/page size.\n\nFix this issue by changing the type of the local variable causing the bit\nloss from \"unsigned int\" to \"u64\". The return value of nilfs_last_byte()\nis also of type \"unsigned int\", but it is truncated so as not to exceed\nPAGE_SIZE and no bit loss occurs, so no change is required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56619",
"url": "https://www.suse.com/security/cve/CVE-2024-56619"
},
{
"category": "external",
"summary": "SUSE Bug 1235224 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235224"
},
{
"category": "external",
"summary": "SUSE Bug 1235225 for CVE-2024-56619",
"url": "https://bugzilla.suse.com/1235225"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56619"
},
{
"cve": "CVE-2024-56620",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56620"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: qcom: Only free platform MSIs when ESI is enabled\n\nOtherwise, it will result in a NULL pointer dereference as below:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000008\nCall trace:\n mutex_lock+0xc/0x54\n platform_device_msi_free_irqs_all+0x14/0x20\n ufs_qcom_remove+0x34/0x48 [ufs_qcom]\n platform_remove+0x28/0x44\n device_remove+0x4c/0x80\n device_release_driver_internal+0xd8/0x178\n driver_detach+0x50/0x9c\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n platform_driver_unregister+0x14/0x20\n ufs_qcom_pltform_exit+0x18/0xb94 [ufs_qcom]\n __arm64_sys_delete_module+0x180/0x260\n invoke_syscall+0x44/0x100\n el0_svc_common.constprop.0+0xc0/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x34/0xdc\n el0t_64_sync_handler+0xc0/0xc4\n el0t_64_sync+0x190/0x194",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56620",
"url": "https://www.suse.com/security/cve/CVE-2024-56620"
},
{
"category": "external",
"summary": "SUSE Bug 1235227 for CVE-2024-56620",
"url": "https://bugzilla.suse.com/1235227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56620"
},
{
"cve": "CVE-2024-56622",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56622"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: sysfs: Prevent div by zero\n\nPrevent a division by 0 when monitoring is not enabled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56622",
"url": "https://www.suse.com/security/cve/CVE-2024-56622"
},
{
"category": "external",
"summary": "SUSE Bug 1235251 for CVE-2024-56622",
"url": "https://bugzilla.suse.com/1235251"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56622"
},
{
"cve": "CVE-2024-56623",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56623"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix use after free on unload\n\nSystem crash is observed with stack trace warning of use after\nfree. There are 2 signals to tell dpc_thread to terminate (UNLOADING\nflag and kthread_stop).\n\nOn setting the UNLOADING flag when dpc_thread happens to run at the time\nand sees the flag, this causes dpc_thread to exit and clean up\nitself. When kthread_stop is called for final cleanup, this causes use\nafter free.\n\nRemove UNLOADING signal to terminate dpc_thread. Use the kthread_stop\nas the main signal to exit dpc_thread.\n\n[596663.812935] kernel BUG at mm/slub.c:294!\n[596663.812950] invalid opcode: 0000 [#1] SMP PTI\n[596663.812957] CPU: 13 PID: 1475935 Comm: rmmod Kdump: loaded Tainted: G IOE --------- - - 4.18.0-240.el8.x86_64 #1\n[596663.812960] Hardware name: HP ProLiant DL380p Gen8, BIOS P70 08/20/2012\n[596663.812974] RIP: 0010:__slab_free+0x17d/0x360\n\n...\n[596663.813008] Call Trace:\n[596663.813022] ? __dentry_kill+0x121/0x170\n[596663.813030] ? _cond_resched+0x15/0x30\n[596663.813034] ? _cond_resched+0x15/0x30\n[596663.813039] ? wait_for_completion+0x35/0x190\n[596663.813048] ? try_to_wake_up+0x63/0x540\n[596663.813055] free_task+0x5a/0x60\n[596663.813061] kthread_stop+0xf3/0x100\n[596663.813103] qla2x00_remove_one+0x284/0x440 [qla2xxx]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56623",
"url": "https://www.suse.com/security/cve/CVE-2024-56623"
},
{
"category": "external",
"summary": "SUSE Bug 1235466 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235466"
},
{
"category": "external",
"summary": "SUSE Bug 1235468 for CVE-2024-56623",
"url": "https://bugzilla.suse.com/1235468"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56623"
},
{
"cve": "CVE-2024-56625",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56625"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: dev: can_set_termination(): allow sleeping GPIOs\n\nIn commit 6e86a1543c37 (\"can: dev: provide optional GPIO based\ntermination support\") GPIO based termination support was added.\n\nFor no particular reason that patch uses gpiod_set_value() to set the\nGPIO. This leads to the following warning, if the systems uses a\nsleeping GPIO, i.e. behind an I2C port expander:\n\n| WARNING: CPU: 0 PID: 379 at /drivers/gpio/gpiolib.c:3496 gpiod_set_value+0x50/0x6c\n| CPU: 0 UID: 0 PID: 379 Comm: ip Not tainted 6.11.0-20241016-1 #1 823affae360cc91126e4d316d7a614a8bf86236c\n\nReplace gpiod_set_value() by gpiod_set_value_cansleep() to allow the\nuse of sleeping GPIOs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56625",
"url": "https://www.suse.com/security/cve/CVE-2024-56625"
},
{
"category": "external",
"summary": "SUSE Bug 1235223 for CVE-2024-56625",
"url": "https://bugzilla.suse.com/1235223"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56625"
},
{
"cve": "CVE-2024-56629",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56629"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: wacom: fix when get product name maybe null pointer\n\nDue to incorrect dev-\u003eproduct reporting by certain devices, null\npointer dereferences occur when dev-\u003eproduct is empty, leading to\npotential system crashes.\n\nThis issue was found on EXCELSIOR DL37-D05 device with\nLoongson-LS3A6000-7A2000-DL37 motherboard.\n\nKernel logs:\n[ 56.470885] usb 4-3: new full-speed USB device number 4 using ohci-pci\n[ 56.671638] usb 4-3: string descriptor 0 read error: -22\n[ 56.671644] usb 4-3: New USB device found, idVendor=056a, idProduct=0374, bcdDevice= 1.07\n[ 56.671647] usb 4-3: New USB device strings: Mfr=1, Product=2, SerialNumber=3\n[ 56.678839] hid-generic 0003:056A:0374.0004: hiddev0,hidraw3: USB HID v1.10 Device [HID 056a:0374] on usb-0000:00:05.0-3/input0\n[ 56.697719] CPU 2 Unable to handle kernel paging request at virtual address 0000000000000000, era == 90000000066e35c8, ra == ffff800004f98a80\n[ 56.697732] Oops[#1]:\n[ 56.697734] CPU: 2 PID: 2742 Comm: (udev-worker) Tainted: G OE 6.6.0-loong64-desktop #25.00.2000.015\n[ 56.697737] Hardware name: Inspur CE520L2/C09901N000000000, BIOS 2.09.00 10/11/2024\n[ 56.697739] pc 90000000066e35c8 ra ffff800004f98a80 tp 9000000125478000 sp 900000012547b8a0\n[ 56.697741] a0 0000000000000000 a1 ffff800004818b28 a2 0000000000000000 a3 0000000000000000\n[ 56.697743] a4 900000012547b8f0 a5 0000000000000000 a6 0000000000000000 a7 0000000000000000\n[ 56.697745] t0 ffff800004818b2d t1 0000000000000000 t2 0000000000000003 t3 0000000000000005\n[ 56.697747] t4 0000000000000000 t5 0000000000000000 t6 0000000000000000 t7 0000000000000000\n[ 56.697748] t8 0000000000000000 u0 0000000000000000 s9 0000000000000000 s0 900000011aa48028\n[ 56.697750] s1 0000000000000000 s2 0000000000000000 s3 ffff800004818e80 s4 ffff800004810000\n[ 56.697751] s5 90000001000b98d0 s6 ffff800004811f88 s7 ffff800005470440 s8 0000000000000000\n[ 56.697753] ra: ffff800004f98a80 wacom_update_name+0xe0/0x300 [wacom]\n[ 56.697802] ERA: 90000000066e35c8 strstr+0x28/0x120\n[ 56.697806] CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)\n[ 56.697816] PRMD: 0000000c (PPLV0 +PIE +PWE)\n[ 56.697821] EUEN: 00000000 (-FPE -SXE -ASXE -BTE)\n[ 56.697827] ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7)\n[ 56.697831] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)\n[ 56.697835] BADV: 0000000000000000\n[ 56.697836] PRID: 0014d000 (Loongson-64bit, Loongson-3A6000)\n[ 56.697838] Modules linked in: wacom(+) bnep bluetooth rfkill qrtr nls_iso8859_1 nls_cp437 snd_hda_codec_conexant snd_hda_codec_generic ledtrig_audio snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_timer snd soundcore input_leds mousedev led_class joydev deepin_netmonitor(OE) fuse nfnetlink dmi_sysfs ip_tables x_tables overlay amdgpu amdxcp drm_exec gpu_sched drm_buddy radeon drm_suballoc_helper i2c_algo_bit drm_ttm_helper r8169 ttm drm_display_helper spi_loongson_pci xhci_pci cec xhci_pci_renesas spi_loongson_core hid_generic realtek gpio_loongson_64bit\n[ 56.697887] Process (udev-worker) (pid: 2742, threadinfo=00000000aee0d8b4, task=00000000a9eff1f3)\n[ 56.697890] Stack : 0000000000000000 ffff800004817e00 0000000000000000 0000251c00000000\n[ 56.697896] 0000000000000000 00000011fffffffd 0000000000000000 0000000000000000\n[ 56.697901] 0000000000000000 1b67a968695184b9 0000000000000000 90000001000b98d0\n[ 56.697906] 90000001000bb8d0 900000011aa48028 0000000000000000 ffff800004f9d74c\n[ 56.697911] 90000001000ba000 ffff800004f9ce58 0000000000000000 ffff800005470440\n[ 56.697916] ffff800004811f88 90000001000b98d0 9000000100da2aa8 90000001000bb8d0\n[ 56.697921] 0000000000000000 90000001000ba000 900000011aa48028 ffff800004f9d74c\n[ 56.697926] ffff8000054704e8 90000001000bb8b8 90000001000ba000 0000000000000000\n[ 56.697931] 90000001000bb8d0 \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56629",
"url": "https://www.suse.com/security/cve/CVE-2024-56629"
},
{
"category": "external",
"summary": "SUSE Bug 1235473 for CVE-2024-56629",
"url": "https://bugzilla.suse.com/1235473"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56629"
},
{
"cve": "CVE-2024-56630",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56630"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: free inode when ocfs2_get_init_inode() fails\n\nsyzbot is reporting busy inodes after unmount, for commit 9c89fe0af826\n(\"ocfs2: Handle error from dquot_initialize()\") forgot to call iput() when\nnew_inode() succeeded and dquot_initialize() failed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56630",
"url": "https://www.suse.com/security/cve/CVE-2024-56630"
},
{
"category": "external",
"summary": "SUSE Bug 1235479 for CVE-2024-56630",
"url": "https://bugzilla.suse.com/1235479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56630"
},
{
"cve": "CVE-2024-56631",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56631"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: sg: Fix slab-use-after-free read in sg_release()\n\nFix a use-after-free bug in sg_release(), detected by syzbot with KASAN:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30\nkernel/locking/lockdep.c:5838\n__mutex_unlock_slowpath+0xe2/0x750 kernel/locking/mutex.c:912\nsg_release+0x1f4/0x2e0 drivers/scsi/sg.c:407\n\nIn sg_release(), the function kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) is\ncalled before releasing the open_rel_lock mutex. The kref_put() call may\ndecrement the reference count of sfp to zero, triggering its cleanup\nthrough sg_remove_sfp(). This cleanup includes scheduling deferred work\nvia sg_remove_sfp_usercontext(), which ultimately frees sfp.\n\nAfter kref_put(), sg_release() continues to unlock open_rel_lock and may\nreference sfp or sdp. If sfp has already been freed, this results in a\nslab-use-after-free error.\n\nMove the kref_put(\u0026sfp-\u003ef_ref, sg_remove_sfp) call after unlocking the\nopen_rel_lock mutex. This ensures:\n\n - No references to sfp or sdp occur after the reference count is\n decremented.\n\n - Cleanup functions such as sg_remove_sfp() and\n sg_remove_sfp_usercontext() can safely execute without impacting the\n mutex handling in sg_release().\n\nThe fix has been tested and validated by syzbot. This patch closes the\nbug reported at the following syzkaller link and ensures proper\nsequencing of resource cleanup and mutex operations, eliminating the\nrisk of use-after-free errors in sg_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56631",
"url": "https://www.suse.com/security/cve/CVE-2024-56631"
},
{
"category": "external",
"summary": "SUSE Bug 1235480 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235480"
},
{
"category": "external",
"summary": "SUSE Bug 1235482 for CVE-2024-56631",
"url": "https://bugzilla.suse.com/1235482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56631"
},
{
"cve": "CVE-2024-56632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix the memleak while create new ctrl failed\n\nNow while we create new ctrl failed, we have not free the\ntagset occupied by admin_q, here try to fix it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56632",
"url": "https://www.suse.com/security/cve/CVE-2024-56632"
},
{
"category": "external",
"summary": "SUSE Bug 1235483 for CVE-2024-56632",
"url": "https://bugzilla.suse.com/1235483"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56632"
},
{
"cve": "CVE-2024-56634",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56634"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpio: grgpio: Add NULL check in grgpio_probe\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in grgpio_probe is not checked.\nAdd NULL check in grgpio_probe, to handle kernel NULL\npointer dereference error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56634",
"url": "https://www.suse.com/security/cve/CVE-2024-56634"
},
{
"category": "external",
"summary": "SUSE Bug 1235486 for CVE-2024-56634",
"url": "https://bugzilla.suse.com/1235486"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56634"
},
{
"cve": "CVE-2024-56635",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56635"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: avoid potential UAF in default_operstate()\n\nsyzbot reported an UAF in default_operstate() [1]\n\nIssue is a race between device and netns dismantles.\n\nAfter calling __rtnl_unlock() from netdev_run_todo(),\nwe can not assume the netns of each device is still alive.\n\nMake sure the device is not in NETREG_UNREGISTERED state,\nand add an ASSERT_RTNL() before the call to\n__dev_get_by_index().\n\nWe might move this ASSERT_RTNL() in __dev_get_by_index()\nin the future.\n\n[1]\n\nBUG: KASAN: slab-use-after-free in __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\nRead of size 8 at addr ffff888043eba1b0 by task syz.0.0/5339\n\nCPU: 0 UID: 0 PID: 5339 Comm: syz.0.0 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __dev_get_by_index+0x5d/0x110 net/core/dev.c:852\n default_operstate net/core/link_watch.c:51 [inline]\n rfc2863_policy+0x224/0x300 net/core/link_watch.c:67\n linkwatch_do_dev+0x3e/0x170 net/core/link_watch.c:170\n netdev_run_todo+0x461/0x1000 net/core/dev.c:10894\n rtnl_unlock net/core/rtnetlink.c:152 [inline]\n rtnl_net_unlock include/linux/rtnetlink.h:133 [inline]\n rtnl_dellink+0x760/0x8d0 net/core/rtnetlink.c:3520\n rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x221/0x270 net/socket.c:726\n ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583\n ___sys_sendmsg net/socket.c:2637 [inline]\n __sys_sendmsg+0x269/0x350 net/socket.c:2669\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f2a3cb80809\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f2a3d9cd058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\nRAX: ffffffffffffffda RBX: 00007f2a3cd45fa0 RCX: 00007f2a3cb80809\nRDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008\nRBP: 00007f2a3cbf393e R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007f2a3cd45fa0 R15: 00007ffd03bc65c8\n \u003c/TASK\u003e\n\nAllocated by task 5339:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4314\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kmalloc_array_noprof include/linux/slab.h:945 [inline]\n netdev_create_hash net/core/dev.c:11870 [inline]\n netdev_init+0x10c/0x250 net/core/dev.c:11890\n ops_init+0x31e/0x590 net/core/net_namespace.c:138\n setup_net+0x287/0x9e0 net/core/net_namespace.c:362\n copy_net_ns+0x33f/0x570 net/core/net_namespace.c:500\n create_new_namespaces+0x425/0x7b0 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0x124/0x180 kernel/nsproxy.c:228\n ksys_unshare+0x57d/0xa70 kernel/fork.c:3314\n __do_sys_unshare kernel/fork.c:3385 [inline]\n __se_sys_unshare kernel/fork.c:3383 [inline]\n __x64_sys_unshare+0x38/0x40 kernel/fork.c:3383\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x8\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56635",
"url": "https://www.suse.com/security/cve/CVE-2024-56635"
},
{
"category": "external",
"summary": "SUSE Bug 1235519 for CVE-2024-56635",
"url": "https://bugzilla.suse.com/1235519"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56635"
},
{
"cve": "CVE-2024-56636",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56636"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: do not assume mac header is set in geneve_xmit_skb()\n\nWe should not assume mac header is set in output path.\n\nUse skb_eth_hdr() instead of eth_hdr() to fix the issue.\n\nsysbot reported the following :\n\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 skb_mac_header include/linux/skbuff.h:3052 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 eth_hdr include/linux/if_ether.h:24 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n WARNING: CPU: 0 PID: 11635 at include/linux/skbuff.h:3052 geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nModules linked in:\nCPU: 0 UID: 0 PID: 11635 Comm: syz.4.1423 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n RIP: 0010:skb_mac_header include/linux/skbuff.h:3052 [inline]\n RIP: 0010:eth_hdr include/linux/if_ether.h:24 [inline]\n RIP: 0010:geneve_xmit_skb drivers/net/geneve.c:898 [inline]\n RIP: 0010:geneve_xmit+0x4c38/0x5730 drivers/net/geneve.c:1039\nCode: 21 c6 02 e9 35 d4 ff ff e8 a5 48 4c fb 90 0f 0b 90 e9 fd f5 ff ff e8 97 48 4c fb 90 0f 0b 90 e9 d8 f5 ff ff e8 89 48 4c fb 90 \u003c0f\u003e 0b 90 e9 41 e4 ff ff e8 7b 48 4c fb 90 0f 0b 90 e9 cd e7 ff ff\nRSP: 0018:ffffc90003b2f870 EFLAGS: 00010283\nRAX: 000000000000037a RBX: 000000000000ffff RCX: ffffc9000dc3d000\nRDX: 0000000000080000 RSI: ffffffff86428417 RDI: 0000000000000003\nRBP: ffffc90003b2f9f0 R08: 0000000000000003 R09: 000000000000ffff\nR10: 000000000000ffff R11: 0000000000000002 R12: ffff88806603c000\nR13: 0000000000000000 R14: ffff8880685b2780 R15: 0000000000000e23\nFS: 00007fdc2deed6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b30a1dff8 CR3: 0000000056b8c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n __dev_direct_xmit+0x58a/0x720 net/core/dev.c:4490\n dev_direct_xmit include/linux/netdevice.h:3181 [inline]\n packet_xmit+0x1e4/0x360 net/packet/af_packet.c:285\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x2700/0x5660 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x488/0x4f0 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0xe0/0x1c0 net/socket.c:2200\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56636",
"url": "https://www.suse.com/security/cve/CVE-2024-56636"
},
{
"category": "external",
"summary": "SUSE Bug 1235520 for CVE-2024-56636",
"url": "https://bugzilla.suse.com/1235520"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56636"
},
{
"cve": "CVE-2024-56637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56637"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: Hold module reference while requesting a module\n\nUser space may unload ip_set.ko while it is itself requesting a set type\nbackend module, leading to a kernel crash. The race condition may be\nprovoked by inserting an mdelay() right after the nfnl_unlock() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56637",
"url": "https://www.suse.com/security/cve/CVE-2024-56637"
},
{
"category": "external",
"summary": "SUSE Bug 1235523 for CVE-2024-56637",
"url": "https://bugzilla.suse.com/1235523"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56637"
},
{
"cve": "CVE-2024-56641",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56641"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n Workqueue: events smc_lgr_terminate_work [smc]\n RIP: 0010:__flush_work+0x19e/0x1b0\n Call Trace:\n ? __wake_up_common+0x7a/0x190\n ? work_busy+0x80/0x80\n __cancel_work_timer+0xe3/0x160\n smc_close_cancel_work+0x1a/0x70 [smc]\n smc_close_active_abort+0x207/0x360 [smc]\n __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n process_one_work+0x19e/0x340\n worker_thread+0x30/0x370\n ? process_one_work+0x340/0x340\n kthread+0x117/0x130\n ? __kthread_cancel_work+0x50/0x50\n ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn-\u003eclose_work is\nflushed before initialization, resulting in WARN_ON(!work-\u003efunc).\n\n__smc_lgr_terminate | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr-\u003econns_all |\n\\- smc_conn_kill |\n \\- smc_close_active_abort |\n \\- smc_close_cancel_work |\n \\- cancel_work_sync |\n \\- __flush_work |\n\t (close_work) |\n\t | smc_close_init\n\t | \\- INIT_WORK(\u0026close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56641",
"url": "https://www.suse.com/security/cve/CVE-2024-56641"
},
{
"category": "external",
"summary": "SUSE Bug 1235526 for CVE-2024-56641",
"url": "https://bugzilla.suse.com/1235526"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56641"
},
{
"cve": "CVE-2024-56642",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56642"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free of kernel socket in cleanup_bearer().\n\nsyzkaller reported a use-after-free of UDP kernel socket\nin cleanup_bearer() without repro. [0][1]\n\nWhen bearer_disable() calls tipc_udp_disable(), cleanup\nof the UDP kernel socket is deferred by work calling\ncleanup_bearer().\n\ntipc_exit_net() waits for such works to finish by checking\ntipc_net(net)-\u003ewq_count. However, the work decrements the\ncount too early before releasing the kernel socket,\nunblocking cleanup_net() and resulting in use-after-free.\n\nLet\u0027s move the decrement after releasing the socket in\ncleanup_bearer().\n\n[0]:\nref_tracker: net notrefcnt@000000009b3d1faf has 1/1 users at\n sk_alloc+0x438/0x608\n inet_create+0x4c8/0xcb0\n __sock_create+0x350/0x6b8\n sock_create_kern+0x58/0x78\n udp_sock_create4+0x68/0x398\n udp_sock_create+0x88/0xc8\n tipc_udp_enable+0x5e8/0x848\n __tipc_nl_bearer_enable+0x84c/0xed8\n tipc_nl_bearer_enable+0x38/0x60\n genl_family_rcv_msg_doit+0x170/0x248\n genl_rcv_msg+0x400/0x5b0\n netlink_rcv_skb+0x1dc/0x398\n genl_rcv+0x44/0x68\n netlink_unicast+0x678/0x8b0\n netlink_sendmsg+0x5e4/0x898\n ____sys_sendmsg+0x500/0x830\n\n[1]:\nBUG: KMSAN: use-after-free in udp_hashslot include/net/udp.h:85 [inline]\nBUG: KMSAN: use-after-free in udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n udp_hashslot include/net/udp.h:85 [inline]\n udp_lib_unhash+0x3b8/0x930 net/ipv4/udp.c:1979\n sk_common_release+0xaf/0x3f0 net/core/sock.c:3820\n inet_release+0x1e0/0x260 net/ipv4/af_inet.c:437\n inet6_release+0x6f/0xd0 net/ipv6/af_inet6.c:489\n __sock_release net/socket.c:658 [inline]\n sock_release+0xa0/0x210 net/socket.c:686\n cleanup_bearer+0x42d/0x4c0 net/tipc/udp_media.c:819\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\n slab_free_hook mm/slub.c:2269 [inline]\n slab_free mm/slub.c:4580 [inline]\n kmem_cache_free+0x207/0xc40 mm/slub.c:4682\n net_free net/core/net_namespace.c:454 [inline]\n cleanup_net+0x16f2/0x19d0 net/core/net_namespace.c:647\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xcaf/0x1c90 kernel/workqueue.c:3310\n worker_thread+0xf6c/0x1510 kernel/workqueue.c:3391\n kthread+0x531/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x60/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:244\n\nCPU: 0 UID: 0 PID: 54 Comm: kworker/0:2 Not tainted 6.12.0-rc1-00131-gf66ebf37d69c #7 91723d6f74857f70725e1583cba3cf4adc716cfa\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nWorkqueue: events cleanup_bearer",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56642",
"url": "https://www.suse.com/security/cve/CVE-2024-56642"
},
{
"category": "external",
"summary": "SUSE Bug 1235433 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235433"
},
{
"category": "external",
"summary": "SUSE Bug 1235434 for CVE-2024-56642",
"url": "https://bugzilla.suse.com/1235434"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56642"
},
{
"cve": "CVE-2024-56643",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56643"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: Fix memory leak in dccp_feat_change_recv\n\nIf dccp_feat_push_confirm() fails after new value for SP feature was accepted\nwithout reconciliation (\u0027entry == NULL\u0027 branch), memory allocated for that value\nwith dccp_feat_clone_sp_val() is never freed.\n\nHere is the kmemleak stack for this:\n\nunreferenced object 0xffff88801d4ab488 (size 8):\n comm \"syz-executor310\", pid 1127, jiffies 4295085598 (age 41.666s)\n hex dump (first 8 bytes):\n 01 b4 4a 1d 80 88 ff ff ..J.....\n backtrace:\n [\u003c00000000db7cabfe\u003e] kmemdup+0x23/0x50 mm/util.c:128\n [\u003c0000000019b38405\u003e] kmemdup include/linux/string.h:465 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:371 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_clone_sp_val net/dccp/feat.c:367 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_change_recv net/dccp/feat.c:1145 [inline]\n [\u003c0000000019b38405\u003e] dccp_feat_parse_options+0x1196/0x2180 net/dccp/feat.c:1416\n [\u003c00000000b1f6d94a\u003e] dccp_parse_options+0xa2a/0x1260 net/dccp/options.c:125\n [\u003c0000000030d7b621\u003e] dccp_rcv_state_process+0x197/0x13d0 net/dccp/input.c:650\n [\u003c000000001f74c72e\u003e] dccp_v4_do_rcv+0xf9/0x1a0 net/dccp/ipv4.c:688\n [\u003c00000000a6c24128\u003e] sk_backlog_rcv include/net/sock.h:1041 [inline]\n [\u003c00000000a6c24128\u003e] __release_sock+0x139/0x3b0 net/core/sock.c:2570\n [\u003c00000000cf1f3a53\u003e] release_sock+0x54/0x1b0 net/core/sock.c:3111\n [\u003c000000008422fa23\u003e] inet_wait_for_connect net/ipv4/af_inet.c:603 [inline]\n [\u003c000000008422fa23\u003e] __inet_stream_connect+0x5d0/0xf70 net/ipv4/af_inet.c:696\n [\u003c0000000015b6f64d\u003e] inet_stream_connect+0x53/0xa0 net/ipv4/af_inet.c:735\n [\u003c0000000010122488\u003e] __sys_connect_file+0x15c/0x1a0 net/socket.c:1865\n [\u003c00000000b4b70023\u003e] __sys_connect+0x165/0x1a0 net/socket.c:1882\n [\u003c00000000f4cb3815\u003e] __do_sys_connect net/socket.c:1892 [inline]\n [\u003c00000000f4cb3815\u003e] __se_sys_connect net/socket.c:1889 [inline]\n [\u003c00000000f4cb3815\u003e] __x64_sys_connect+0x6e/0xb0 net/socket.c:1889\n [\u003c00000000e7b1e839\u003e] do_syscall_64+0x33/0x40 arch/x86/entry/common.c:46\n [\u003c0000000055e91434\u003e] entry_SYSCALL_64_after_hwframe+0x67/0xd1\n\nClean up the allocated memory in case of dccp_feat_push_confirm() failure\nand bail out with an error reset code.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56643",
"url": "https://www.suse.com/security/cve/CVE-2024-56643"
},
{
"category": "external",
"summary": "SUSE Bug 1235132 for CVE-2024-56643",
"url": "https://bugzilla.suse.com/1235132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56643"
},
{
"cve": "CVE-2024-56644",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56644"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/ipv6: release expired exception dst cached in socket\n\nDst objects get leaked in ip6_negative_advice() when this function is\nexecuted for an expired IPv6 route located in the exception table. There\nare several conditions that must be fulfilled for the leak to occur:\n* an ICMPv6 packet indicating a change of the MTU for the path is received,\n resulting in an exception dst being created\n* a TCP connection that uses the exception dst for routing packets must\n start timing out so that TCP begins retransmissions\n* after the exception dst expires, the FIB6 garbage collector must not run\n before TCP executes ip6_negative_advice() for the expired exception dst\n\nWhen TCP executes ip6_negative_advice() for an exception dst that has\nexpired and if no other socket holds a reference to the exception dst, the\nrefcount of the exception dst is 2, which corresponds to the increment\nmade by dst_init() and the increment made by the TCP socket for which the\nconnection is timing out. The refcount made by the socket is never\nreleased. The refcount of the dst is decremented in sk_dst_reset() but\nthat decrement is counteracted by a dst_hold() intentionally placed just\nbefore the sk_dst_reset() in ip6_negative_advice(). After\nip6_negative_advice() has finished, there is no other object tied to the\ndst. The socket lost its reference stored in sk_dst_cache and the dst is\nno longer in the exception table. The exception dst becomes a leaked\nobject.\n\nAs a result of this dst leak, an unbalanced refcount is reported for the\nloopback device of a net namespace being destroyed under kernels that do\nnot contain e5f80fcf869a (\"ipv6: give an IPv6 dev to blackhole_netdev\"):\nunregister_netdevice: waiting for lo to become free. Usage count = 2\n\nFix the dst leak by removing the dst_hold() in ip6_negative_advice(). The\npatch that introduced the dst_hold() in ip6_negative_advice() was\n92f1655aa2b22 (\"net: fix __dst_negative_advice() race\"). But 92f1655aa2b22\nmerely refactored the code with regards to the dst refcount so the issue\nwas present even before 92f1655aa2b22. The bug was introduced in\n54c1a859efd9f (\"ipv6: Don\u0027t drop cache route entry unless timer actually\nexpired.\") where the expired cached route is deleted and the sk_dst_cache\nmember of the socket is set to NULL by calling dst_negative_advice() but\nthe refcount belonging to the socket is left unbalanced.\n\nThe IPv4 version - ipv4_negative_advice() - is not affected by this bug.\nWhen the TCP connection times out ipv4_negative_advice() merely resets the\nsk_dst_cache of the socket while decrementing the refcount of the\nexception dst.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56644",
"url": "https://www.suse.com/security/cve/CVE-2024-56644"
},
{
"category": "external",
"summary": "SUSE Bug 1235133 for CVE-2024-56644",
"url": "https://bugzilla.suse.com/1235133"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56644"
},
{
"cve": "CVE-2024-56645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: j1939: j1939_session_new(): fix skb reference counting\n\nSince j1939_session_skb_queue() does an extra skb_get() for each new\nskb, do the same for the initial one in j1939_session_new() to avoid\nrefcount underflow.\n\n[mkl: clean up commit message]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56645",
"url": "https://www.suse.com/security/cve/CVE-2024-56645"
},
{
"category": "external",
"summary": "SUSE Bug 1235134 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235134"
},
{
"category": "external",
"summary": "SUSE Bug 1235135 for CVE-2024-56645",
"url": "https://bugzilla.suse.com/1235135"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56645"
},
{
"cve": "CVE-2024-56648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56648"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hsr: avoid potential out-of-bound access in fill_frame_info()\n\nsyzbot is able to feed a packet with 14 bytes, pretending\nit is a vlan one.\n\nSince fill_frame_info() is relying on skb-\u003emac_len already,\nextend the check to cover this case.\n\nBUG: KMSAN: uninit-value in fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n fill_frame_info net/hsr/hsr_forward.c:709 [inline]\n hsr_forward_skb+0x9ee/0x3b10 net/hsr/hsr_forward.c:724\n hsr_dev_xmit+0x2f0/0x350 net/hsr/hsr_device.c:235\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3606\n __dev_queue_xmit+0x366a/0x57d0 net/core/dev.c:4434\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276\n packet_snd net/packet/af_packet.c:3146 [inline]\n packet_sendmsg+0x91ae/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n slab_post_alloc_hook mm/slub.c:4091 [inline]\n slab_alloc_node mm/slub.c:4134 [inline]\n kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4186\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:587\n __alloc_skb+0x363/0x7b0 net/core/skbuff.c:678\n alloc_skb include/linux/skbuff.h:1323 [inline]\n alloc_skb_with_frags+0xc8/0xd00 net/core/skbuff.c:6612\n sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2881\n packet_alloc_skb net/packet/af_packet.c:2995 [inline]\n packet_snd net/packet/af_packet.c:3089 [inline]\n packet_sendmsg+0x74c6/0xa6f0 net/packet/af_packet.c:3178\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg+0x30f/0x380 net/socket.c:726\n __sys_sendto+0x594/0x750 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __x64_sys_sendto+0x125/0x1d0 net/socket.c:2200\n x64_sys_call+0x346a/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:45\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56648",
"url": "https://www.suse.com/security/cve/CVE-2024-56648"
},
{
"category": "external",
"summary": "SUSE Bug 1235451 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235451"
},
{
"category": "external",
"summary": "SUSE Bug 1235452 for CVE-2024-56648",
"url": "https://bugzilla.suse.com/1235452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56648"
},
{
"cve": "CVE-2024-56649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: enetc: Do not configure preemptible TCs if SIs do not support\n\nBoth ENETC PF and VF drivers share enetc_setup_tc_mqprio() to configure\nMQPRIO. And enetc_setup_tc_mqprio() calls enetc_change_preemptible_tcs()\nto configure preemptible TCs. However, only PF is able to configure\npreemptible TCs. Because only PF has related registers, while VF does not\nhave these registers. So for VF, its hw-\u003eport pointer is NULL. Therefore,\nVF will access an invalid pointer when accessing a non-existent register,\nwhich will cause a crash issue. The simplified log is as follows.\n\nroot@ls1028ardb:~# tc qdisc add dev eno0vf0 parent root handle 100: \\\nmqprio num_tc 4 map 0 0 1 1 2 2 3 3 queues 1@0 1@1 1@2 1@3 hw 1\n[ 187.290775] Unable to handle kernel paging request at virtual address 0000000000001f00\n[ 187.424831] pc : enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.430518] lr : enetc_mm_commit_preemptible_tcs+0x30c/0x400\n[ 187.511140] Call trace:\n[ 187.513588] enetc_mm_commit_preemptible_tcs+0x1c4/0x400\n[ 187.518918] enetc_setup_tc_mqprio+0x180/0x214\n[ 187.523374] enetc_vf_setup_tc+0x1c/0x30\n[ 187.527306] mqprio_enable_offload+0x144/0x178\n[ 187.531766] mqprio_init+0x3ec/0x668\n[ 187.535351] qdisc_create+0x15c/0x488\n[ 187.539023] tc_modify_qdisc+0x398/0x73c\n[ 187.542958] rtnetlink_rcv_msg+0x128/0x378\n[ 187.547064] netlink_rcv_skb+0x60/0x130\n[ 187.550910] rtnetlink_rcv+0x18/0x24\n[ 187.554492] netlink_unicast+0x300/0x36c\n[ 187.558425] netlink_sendmsg+0x1a8/0x420\n[ 187.606759] ---[ end trace 0000000000000000 ]---\n\nIn addition, some PFs also do not support configuring preemptible TCs,\nsuch as eno1 and eno3 on LS1028A. It won\u0027t crash like it does for VFs,\nbut we should prevent these PFs from accessing these unimplemented\nregisters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56649",
"url": "https://www.suse.com/security/cve/CVE-2024-56649"
},
{
"category": "external",
"summary": "SUSE Bug 1235449 for CVE-2024-56649",
"url": "https://bugzilla.suse.com/1235449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56649"
},
{
"cve": "CVE-2024-56650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: x_tables: fix LED ID check in led_tg_check()\n\nSyzbot has reported the following BUG detected by KASAN:\n\nBUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70\nRead of size 1 at addr ffff8881022da0c8 by task repro/5879\n...\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x241/0x360\n ? __pfx_dump_stack_lvl+0x10/0x10\n ? __pfx__printk+0x10/0x10\n ? _printk+0xd5/0x120\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n print_report+0x169/0x550\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x183/0x530\n ? __virt_addr_valid+0x45f/0x530\n ? __phys_addr+0xba/0x170\n ? strlen+0x58/0x70\n kasan_report+0x143/0x180\n ? strlen+0x58/0x70\n strlen+0x58/0x70\n kstrdup+0x20/0x80\n led_tg_check+0x18b/0x3c0\n xt_check_target+0x3bb/0xa40\n ? __pfx_xt_check_target+0x10/0x10\n ? stack_depot_save_flags+0x6e4/0x830\n ? nft_target_init+0x174/0xc30\n nft_target_init+0x82d/0xc30\n ? __pfx_nft_target_init+0x10/0x10\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? rcu_is_watching+0x15/0xb0\n ? nf_tables_newrule+0x1609/0x2980\n ? nf_tables_newrule+0x1609/0x2980\n ? __kmalloc_noprof+0x21a/0x400\n nf_tables_newrule+0x1860/0x2980\n ? __pfx_nf_tables_newrule+0x10/0x10\n ? __nla_parse+0x40/0x60\n nfnetlink_rcv+0x14e5/0x2ab0\n ? __pfx_validate_chain+0x10/0x10\n ? __pfx_nfnetlink_rcv+0x10/0x10\n ? __lock_acquire+0x1384/0x2050\n ? netlink_deliver_tap+0x2e/0x1b0\n ? __pfx_lock_release+0x10/0x10\n ? netlink_deliver_tap+0x2e/0x1b0\n netlink_unicast+0x7f8/0x990\n ? __pfx_netlink_unicast+0x10/0x10\n ? __virt_addr_valid+0x183/0x530\n ? __check_object_size+0x48e/0x900\n netlink_sendmsg+0x8e4/0xcb0\n ? __pfx_netlink_sendmsg+0x10/0x10\n ? aa_sock_msg_perm+0x91/0x160\n ? __pfx_netlink_sendmsg+0x10/0x10\n __sock_sendmsg+0x223/0x270\n ____sys_sendmsg+0x52a/0x7e0\n ? __pfx_____sys_sendmsg+0x10/0x10\n __sys_sendmsg+0x292/0x380\n ? __pfx___sys_sendmsg+0x10/0x10\n ? lockdep_hardirqs_on_prepare+0x43d/0x780\n ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10\n ? exc_page_fault+0x590/0x8c0\n ? do_syscall_64+0xb6/0x230\n do_syscall_64+0xf3/0x230\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n...\n \u003c/TASK\u003e\n\nSince an invalid (without \u0027\\0\u0027 byte at all) byte sequence may be passed\nfrom userspace, add an extra check to ensure that such a sequence is\nrejected as possible ID and so never passed to \u0027kstrdup()\u0027 and further.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56650",
"url": "https://www.suse.com/security/cve/CVE-2024-56650"
},
{
"category": "external",
"summary": "SUSE Bug 1235430 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235430"
},
{
"category": "external",
"summary": "SUSE Bug 1235431 for CVE-2024-56650",
"url": "https://bugzilla.suse.com/1235431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56650"
},
{
"cve": "CVE-2024-56651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: hi311x: hi3110_can_ist(): fix potential use-after-free\n\nThe commit a22bd630cfff (\"can: hi311x: do not report txerr and rxerr\nduring bus-off\") removed the reporting of rxerr and txerr even in case\nof correct operation (i. e. not bus-off).\n\nThe error count information added to the CAN frame after netif_rx() is\na potential use after free, since there is no guarantee that the skb\nis in the same state. It might be freed or reused.\n\nFix the issue by postponing the netif_rx() call in case of txerr and\nrxerr reporting.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56651",
"url": "https://www.suse.com/security/cve/CVE-2024-56651"
},
{
"category": "external",
"summary": "SUSE Bug 1235528 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1235528"
},
{
"category": "external",
"summary": "SUSE Bug 1236570 for CVE-2024-56651",
"url": "https://bugzilla.suse.com/1236570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56651"
},
{
"cve": "CVE-2024-56654",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56654"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_event: Fix using rcu_read_(un)lock while iterating\n\nThe usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is\nnot safe since for the most part entries fetched this way shall be\ntreated as rcu_dereference:\n\n\tNote that the value returned by rcu_dereference() is valid\n\tonly within the enclosing RCU read-side critical section [1]_.\n\tFor example, the following is **not** legal::\n\n\t\trcu_read_lock();\n\t\tp = rcu_dereference(head.next);\n\t\trcu_read_unlock();\n\t\tx = p-\u003eaddress;\t/* BUG!!! */\n\t\trcu_read_lock();\n\t\ty = p-\u003edata;\t/* BUG!!! */\n\t\trcu_read_unlock();",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56654",
"url": "https://www.suse.com/security/cve/CVE-2024-56654"
},
{
"category": "external",
"summary": "SUSE Bug 1235532 for CVE-2024-56654",
"url": "https://bugzilla.suse.com/1235532"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56654"
},
{
"cve": "CVE-2024-56656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips\n\nThe 5760X (P7) chip\u0027s HW GRO/LRO interface is very similar to that of\nthe previous generation (5750X or P5). However, the aggregation ID\nfields in the completion structures on P7 have been redefined from\n16 bits to 12 bits. The freed up 4 bits are redefined for part of the\nmetadata such as the VLAN ID. The aggregation ID mask was not modified\nwhen adding support for P7 chips. Including the extra 4 bits for the\naggregation ID can potentially cause the driver to store or fetch the\npacket header of GRO/LRO packets in the wrong TPA buffer. It may hit\nthe BUG() condition in __skb_pull() because the SKB contains no valid\npacket header:\n\nkernel BUG at include/linux/skbuff.h:2766!\nOops: invalid opcode: 0000 1 PREEMPT SMP NOPTI\nCPU: 4 UID: 0 PID: 0 Comm: swapper/4 Kdump: loaded Tainted: G OE 6.12.0-rc2+ #7\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: Dell Inc. PowerEdge R760/0VRV9X, BIOS 1.0.1 12/27/2022\nRIP: 0010:eth_type_trans+0xda/0x140\nCode: 80 00 00 00 eb c1 8b 47 70 2b 47 74 48 8b 97 d0 00 00 00 83 f8 01 7e 1b 48 85 d2 74 06 66 83 3a ff 74 09 b8 00 04 00 00 eb a5 \u003c0f\u003e 0b b8 00 01 00 00 eb 9c 48 85 ff 74 eb 31 f6 b9 02 00 00 00 48\nRSP: 0018:ff615003803fcc28 EFLAGS: 00010283\nRAX: 00000000000022d2 RBX: 0000000000000003 RCX: ff2e8c25da334040\nRDX: 0000000000000040 RSI: ff2e8c25c1ce8000 RDI: ff2e8c25869f9000\nRBP: ff2e8c258c31c000 R08: ff2e8c25da334000 R09: 0000000000000001\nR10: ff2e8c25da3342c0 R11: ff2e8c25c1ce89c0 R12: ff2e8c258e0990b0\nR13: ff2e8c25bb120000 R14: ff2e8c25c1ce89c0 R15: ff2e8c25869f9000\nFS: 0000000000000000(0000) GS:ff2e8c34be300000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055f05317e4c8 CR3: 000000108bac6006 CR4: 0000000000773ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \u003cIRQ\u003e\n ? die+0x33/0x90\n ? do_trap+0xd9/0x100\n ? eth_type_trans+0xda/0x140\n ? do_error_trap+0x65/0x80\n ? eth_type_trans+0xda/0x140\n ? exc_invalid_op+0x4e/0x70\n ? eth_type_trans+0xda/0x140\n ? asm_exc_invalid_op+0x16/0x20\n ? eth_type_trans+0xda/0x140\n bnxt_tpa_end+0x10b/0x6b0 [bnxt_en]\n ? bnxt_tpa_start+0x195/0x320 [bnxt_en]\n bnxt_rx_pkt+0x902/0xd90 [bnxt_en]\n ? __bnxt_tx_int.constprop.0+0x89/0x300 [bnxt_en]\n ? kmem_cache_free+0x343/0x440\n ? __bnxt_tx_int.constprop.0+0x24f/0x300 [bnxt_en]\n __bnxt_poll_work+0x193/0x370 [bnxt_en]\n bnxt_poll_p5+0x9a/0x300 [bnxt_en]\n ? try_to_wake_up+0x209/0x670\n __napi_poll+0x29/0x1b0\n\nFix it by redefining the aggregation ID mask for P5_PLUS chips to be\n12 bits. This will work because the maximum aggregation ID is less\nthan 4096 on all P5_PLUS chips.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56656",
"url": "https://www.suse.com/security/cve/CVE-2024-56656"
},
{
"category": "external",
"summary": "SUSE Bug 1235444 for CVE-2024-56656",
"url": "https://bugzilla.suse.com/1235444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56656"
},
{
"cve": "CVE-2024-56659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56659"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lapb: increase LAPB_HEADER_LEN\n\nIt is unclear if net/lapb code is supposed to be ready for 8021q.\n\nWe can at least avoid crashes like the following :\n\nskbuff: skb_under_panic: text:ffffffff8aabe1f6 len:24 put:20 head:ffff88802824a400 data:ffff88802824a3fe tail:0x16 end:0x140 dev:nr0.2\n------------[ cut here ]------------\n kernel BUG at net/core/skbuff.c:206 !\nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 1 UID: 0 PID: 5508 Comm: dhcpcd Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]\n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216\nCode: 0d 8d 48 c7 c6 2e 9e 29 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 1a 6f 37 02 48 83 c4 20 90 \u003c0f\u003e 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3\nRSP: 0018:ffffc90002ddf638 EFLAGS: 00010282\nRAX: 0000000000000086 RBX: dffffc0000000000 RCX: 7a24750e538ff600\nRDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000\nRBP: ffff888034a86650 R08: ffffffff8174b13c R09: 1ffff920005bbe60\nR10: dffffc0000000000 R11: fffff520005bbe61 R12: 0000000000000140\nR13: ffff88802824a400 R14: ffff88802824a3fe R15: 0000000000000016\nFS: 00007f2a5990d740(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000000110c2631fd CR3: 0000000029504000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \u003cTASK\u003e\n skb_push+0xe5/0x100 net/core/skbuff.c:2636\n nr_header+0x36/0x320 net/netrom/nr_dev.c:69\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n vlan_dev_hard_header+0x359/0x480 net/8021q/vlan_dev.c:83\n dev_hard_header include/linux/netdevice.h:3148 [inline]\n lapbeth_data_transmit+0x1f6/0x2a0 drivers/net/wan/lapbether.c:257\n lapb_data_transmit+0x91/0xb0 net/lapb/lapb_iface.c:447\n lapb_transmit_buffer+0x168/0x1f0 net/lapb/lapb_out.c:149\n lapb_establish_data_link+0x84/0xd0\n lapb_device_event+0x4e0/0x670\n notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:93\n __dev_notify_flags+0x207/0x400\n dev_change_flags+0xf0/0x1a0 net/core/dev.c:8922\n devinet_ioctl+0xa4e/0x1aa0 net/ipv4/devinet.c:1188\n inet_ioctl+0x3d7/0x4f0 net/ipv4/af_inet.c:1003\n sock_do_ioctl+0x158/0x460 net/socket.c:1227\n sock_ioctl+0x626/0x8e0 net/socket.c:1346\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56659",
"url": "https://www.suse.com/security/cve/CVE-2024-56659"
},
{
"category": "external",
"summary": "SUSE Bug 1235439 for CVE-2024-56659",
"url": "https://bugzilla.suse.com/1235439"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56659"
},
{
"cve": "CVE-2024-56660",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56660"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: DR, prevent potential error pointer dereference\n\nThe dr_domain_add_vport_cap() function generally returns NULL on error\nbut sometimes we want it to return ERR_PTR(-EBUSY) so the caller can\nretry. The problem here is that \"ret\" can be either -EBUSY or -ENOMEM\nand if it\u0027s and -ENOMEM then the error pointer is propogated back and\neventually dereferenced in dr_ste_v0_build_src_gvmi_qpn_tag().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56660",
"url": "https://www.suse.com/security/cve/CVE-2024-56660"
},
{
"category": "external",
"summary": "SUSE Bug 1235437 for CVE-2024-56660",
"url": "https://bugzilla.suse.com/1235437"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56660"
},
{
"cve": "CVE-2024-56661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56661"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix NULL deref in cleanup_bearer()\n\nsyzbot found [1] that after blamed commit, ub-\u003eubsock-\u003esk\nwas NULL when attempting the atomic_dec() :\n\natomic_dec(\u0026tipc_net(sock_net(ub-\u003eubsock-\u003esk))-\u003ewq_count);\n\nFix this by caching the tipc_net pointer.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]\nCPU: 0 UID: 0 PID: 5896 Comm: kworker/0:3 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: events cleanup_bearer\n RIP: 0010:read_pnet include/net/net_namespace.h:387 [inline]\n RIP: 0010:sock_net include/net/sock.h:655 [inline]\n RIP: 0010:cleanup_bearer+0x1f7/0x280 net/tipc/udp_media.c:820\nCode: 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 3c f7 99 f6 48 8b 1b 48 83 c3 30 e8 f0 e4 60 00 48 89 d8 48 c1 e8 03 \u003c42\u003e 80 3c 28 00 74 08 48 89 df e8 1a f7 99 f6 49 83 c7 e8 48 8b 1b\nRSP: 0018:ffffc9000410fb70 EFLAGS: 00010206\nRAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88802fe45a00\nRDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000410f900\nRBP: ffff88807e1f0908 R08: ffffc9000410f907 R09: 1ffff92000821f20\nR10: dffffc0000000000 R11: fffff52000821f21 R12: ffff888031d19980\nR13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e1f0918\nFS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556ca050b000 CR3: 0000000031c0c000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56661",
"url": "https://www.suse.com/security/cve/CVE-2024-56661"
},
{
"category": "external",
"summary": "SUSE Bug 1234931 for CVE-2024-56661",
"url": "https://bugzilla.suse.com/1234931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56661"
},
{
"cve": "CVE-2024-56662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nacpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl\n\nFix an issue detected by syzbot with KASAN:\n\nBUG: KASAN: vmalloc-out-of-bounds in cmd_to_func drivers/acpi/nfit/\ncore.c:416 [inline]\nBUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x20e8/0x24a0\ndrivers/acpi/nfit/core.c:459\n\nThe issue occurs in cmd_to_func when the call_pkg-\u003end_reserved2\narray is accessed without verifying that call_pkg points to a buffer\nthat is appropriately sized as a struct nd_cmd_pkg. This can lead\nto out-of-bounds access and undefined behavior if the buffer does not\nhave sufficient space.\n\nTo address this, a check was added in acpi_nfit_ctl() to ensure that\nbuf is not NULL and that buf_len is less than sizeof(*call_pkg)\nbefore accessing it. This ensures safe access to the members of\ncall_pkg, including the nd_reserved2 array.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56662",
"url": "https://www.suse.com/security/cve/CVE-2024-56662"
},
{
"category": "external",
"summary": "SUSE Bug 1235533 for CVE-2024-56662",
"url": "https://bugzilla.suse.com/1235533"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56662"
},
{
"cve": "CVE-2024-56663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one\n\nSince the netlink attribute range validation provides inclusive\nchecking, the *max* of attribute NL80211_ATTR_MLO_LINK_ID should be\nIEEE80211_MLD_MAX_NUM_LINKS - 1 otherwise causing an off-by-one.\n\nOne crash stack for demonstration:\n==================================================================\nBUG: KASAN: wild-memory-access in ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\nRead of size 6 at addr 001102080000000c by task fuzzer.386/9508\n\nCPU: 1 PID: 9508 Comm: syz.1.386 Not tainted 6.1.70 #2\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x177/0x231 lib/dump_stack.c:106\n print_report+0xe0/0x750 mm/kasan/report.c:398\n kasan_report+0x139/0x170 mm/kasan/report.c:495\n kasan_check_range+0x287/0x290 mm/kasan/generic.c:189\n memcpy+0x25/0x60 mm/kasan/shadow.c:65\n ieee80211_tx_control_port+0x3b6/0xca0 net/mac80211/tx.c:5939\n rdev_tx_control_port net/wireless/rdev-ops.h:761 [inline]\n nl80211_tx_control_port+0x7b3/0xc40 net/wireless/nl80211.c:15453\n genl_family_rcv_msg_doit+0x22e/0x320 net/netlink/genetlink.c:756\n genl_family_rcv_msg net/netlink/genetlink.c:833 [inline]\n genl_rcv_msg+0x539/0x740 net/netlink/genetlink.c:850\n netlink_rcv_skb+0x1de/0x420 net/netlink/af_netlink.c:2508\n genl_rcv+0x24/0x40 net/netlink/genetlink.c:861\n netlink_unicast_kernel net/netlink/af_netlink.c:1326 [inline]\n netlink_unicast+0x74b/0x8c0 net/netlink/af_netlink.c:1352\n netlink_sendmsg+0x882/0xb90 net/netlink/af_netlink.c:1874\n sock_sendmsg_nosec net/socket.c:716 [inline]\n __sock_sendmsg net/socket.c:728 [inline]\n ____sys_sendmsg+0x5cc/0x8f0 net/socket.c:2499\n ___sys_sendmsg+0x21c/0x290 net/socket.c:2553\n __sys_sendmsg net/socket.c:2582 [inline]\n __do_sys_sendmsg net/socket.c:2591 [inline]\n __se_sys_sendmsg+0x19e/0x270 net/socket.c:2589\n do_syscall_x64 arch/x86/entry/common.c:51 [inline]\n do_syscall_64+0x45/0x90 arch/x86/entry/common.c:81\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nUpdate the policy to ensure correct validation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56663",
"url": "https://www.suse.com/security/cve/CVE-2024-56663"
},
{
"category": "external",
"summary": "SUSE Bug 1235454 for CVE-2024-56663",
"url": "https://bugzilla.suse.com/1235454"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56663"
},
{
"cve": "CVE-2024-56664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Fix race between element replace and close()\n\nElement replace (with a socket different from the one stored) may race\nwith socket\u0027s close() link popping \u0026 unlinking. __sock_map_delete()\nunconditionally unrefs the (wrong) element:\n\n// set map[0] = s0\nmap_update_elem(map, 0, s0)\n\n// drop fd of s0\nclose(s0)\n sock_map_close()\n lock_sock(sk) (s0!)\n sock_map_remove_links(sk)\n link = sk_psock_link_pop()\n sock_map_unlink(sk, link)\n sock_map_delete_from_link\n // replace map[0] with s1\n map_update_elem(map, 0, s1)\n sock_map_update_elem\n (s1!) lock_sock(sk)\n sock_map_update_common\n psock = sk_psock(sk)\n spin_lock(\u0026stab-\u003elock)\n osk = stab-\u003esks[idx]\n sock_map_add_link(..., \u0026stab-\u003esks[idx])\n sock_map_unref(osk, \u0026stab-\u003esks[idx])\n psock = sk_psock(osk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test(\u0026psock))\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n unlock_sock(sk)\n __sock_map_delete\n spin_lock(\u0026stab-\u003elock)\n sk = *psk // s1 replaced s0; sk == s1\n if (!sk_test || sk_test == sk) // sk_test (s0) != sk (s1); no branch\n sk = xchg(psk, NULL)\n if (sk)\n sock_map_unref(sk, psk) // unref s1; sks[idx] will dangle\n psock = sk_psock(sk)\n sk_psock_put(sk, psock)\n if (refcount_dec_and_test())\n sk_psock_drop(sk, psock)\n spin_unlock(\u0026stab-\u003elock)\n release_sock(sk)\n\nThen close(map) enqueues bpf_map_free_deferred, which finally calls\nsock_map_free(). This results in some refcount_t warnings along with\na KASAN splat [1].\n\nFix __sock_map_delete(), do not allow sock_map_unref() on elements that\nmay have been replaced.\n\n[1]:\nBUG: KASAN: slab-use-after-free in sock_map_free+0x10e/0x330\nWrite of size 4 at addr ffff88811f5b9100 by task kworker/u64:12/1063\n\nCPU: 14 UID: 0 PID: 1063 Comm: kworker/u64:12 Not tainted 6.12.0+ #125\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Arch Linux 1.16.3-1-1 04/01/2014\nWorkqueue: events_unbound bpf_map_free_deferred\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x68/0x90\n print_report+0x174/0x4f6\n kasan_report+0xb9/0x190\n kasan_check_range+0x10f/0x1e0\n sock_map_free+0x10e/0x330\n bpf_map_free_deferred+0x173/0x320\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 1202:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n __kasan_slab_alloc+0x85/0x90\n kmem_cache_alloc_noprof+0x131/0x450\n sk_prot_alloc+0x5b/0x220\n sk_alloc+0x2c/0x870\n unix_create1+0x88/0x8a0\n unix_create+0xc5/0x180\n __sock_create+0x241/0x650\n __sys_socketpair+0x1ce/0x420\n __x64_sys_socketpair+0x92/0x100\n do_syscall_64+0x93/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 46:\n kasan_save_stack+0x1e/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x37/0x60\n __kasan_slab_free+0x4b/0x70\n kmem_cache_free+0x1a1/0x590\n __sk_destruct+0x388/0x5a0\n sk_psock_destroy+0x73e/0xa50\n process_one_work+0x846/0x1420\n worker_thread+0x5b3/0xf80\n kthread+0x29e/0x360\n ret_from_fork+0x2d/0x70\n ret_from_fork_asm+0x1a/0x30\n\nThe bu\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56664",
"url": "https://www.suse.com/security/cve/CVE-2024-56664"
},
{
"category": "external",
"summary": "SUSE Bug 1235249 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235249"
},
{
"category": "external",
"summary": "SUSE Bug 1235250 for CVE-2024-56664",
"url": "https://bugzilla.suse.com/1235250"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56664"
},
{
"cve": "CVE-2024-56665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56665"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog\n\nSyzbot reported [1] crash that happens for following tracing scenario:\n\n - create tracepoint perf event with attr.inherit=1, attach it to the\n process and set bpf program to it\n - attached process forks -\u003e chid creates inherited event\n\n the new child event shares the parent\u0027s bpf program and tp_event\n (hence prog_array) which is global for tracepoint\n\n - exit both process and its child -\u003e release both events\n - first perf_event_detach_bpf_prog call will release tp_event-\u003eprog_array\n and second perf_event_detach_bpf_prog will crash, because\n tp_event-\u003eprog_array is NULL\n\nThe fix makes sure the perf_event_detach_bpf_prog checks prog_array\nis valid before it tries to remove the bpf program from it.\n\n[1] https://lore.kernel.org/bpf/Z1MR6dCIKajNS6nU@krava/T/#m91dbf0688221ec7a7fc95e896a7ef9ff93b0b8ad",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56665",
"url": "https://www.suse.com/security/cve/CVE-2024-56665"
},
{
"category": "external",
"summary": "SUSE Bug 1235489 for CVE-2024-56665",
"url": "https://bugzilla.suse.com/1235489"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56665"
},
{
"cve": "CVE-2024-56667",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56667"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: Fix NULL pointer dereference in capture_engine\n\nWhen the intel_context structure contains NULL,\nit raises a NULL pointer dereference error in drm_info().\n\n(cherry picked from commit 754302a5bc1bd8fd3b7d85c168b0a1af6d4bba4d)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56667",
"url": "https://www.suse.com/security/cve/CVE-2024-56667"
},
{
"category": "external",
"summary": "SUSE Bug 1235016 for CVE-2024-56667",
"url": "https://bugzilla.suse.com/1235016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56667"
},
{
"cve": "CVE-2024-56670",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56670"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer\n\nConsidering that in some extreme cases,\nwhen u_serial driver is accessed by multiple threads,\nThread A is executing the open operation and calling the gs_open,\nThread B is executing the disconnect operation and calling the\ngserial_disconnect function,The port-\u003eport_usb pointer will be set to NULL.\n\nE.g.\n Thread A Thread B\n gs_open() gadget_unbind_driver()\n gs_start_io() composite_disconnect()\n gs_start_rx() gserial_disconnect()\n ... ...\n spin_unlock(\u0026port-\u003eport_lock)\n status = usb_ep_queue() spin_lock(\u0026port-\u003eport_lock)\n spin_lock(\u0026port-\u003eport_lock) port-\u003eport_usb = NULL\n gs_free_requests(port-\u003eport_usb-\u003ein) spin_unlock(\u0026port-\u003eport_lock)\n Crash\n\nThis causes thread A to access a null pointer (port-\u003eport_usb is null)\nwhen calling the gs_free_requests function, causing a crash.\n\nIf port_usb is NULL, the release request will be skipped as it\nwill be done by gserial_disconnect.\n\nSo add a null pointer check to gs_start_io before attempting\nto access the value of the pointer port-\u003eport_usb.\n\nCall trace:\n gs_start_io+0x164/0x25c\n gs_open+0x108/0x13c\n tty_open+0x314/0x638\n chrdev_open+0x1b8/0x258\n do_dentry_open+0x2c4/0x700\n vfs_open+0x2c/0x3c\n path_openat+0xa64/0xc60\n do_filp_open+0xb8/0x164\n do_sys_openat2+0x84/0xf0\n __arm64_sys_openat+0x70/0x9c\n invoke_syscall+0x58/0x114\n el0_svc_common+0x80/0xe0\n do_el0_svc+0x1c/0x28\n el0_svc+0x38/0x68",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56670",
"url": "https://www.suse.com/security/cve/CVE-2024-56670"
},
{
"category": "external",
"summary": "SUSE Bug 1235488 for CVE-2024-56670",
"url": "https://bugzilla.suse.com/1235488"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56670"
},
{
"cve": "CVE-2024-56672",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56672"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-cgroup: Fix UAF in blkcg_unpin_online()\n\nblkcg_unpin_online() walks up the blkcg hierarchy putting the online pin. To\nwalk up, it uses blkcg_parent(blkcg) but it was calling that after\nblkcg_destroy_blkgs(blkcg) which could free the blkcg, leading to the\nfollowing UAF:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in blkcg_unpin_online+0x15a/0x270\n Read of size 8 at addr ffff8881057678c0 by task kworker/9:1/117\n\n CPU: 9 UID: 0 PID: 117 Comm: kworker/9:1 Not tainted 6.13.0-rc1-work-00182-gb8f52214c61a-dirty #48\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 02/02/2022\n Workqueue: cgwb_release cgwb_release_workfn\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x27/0x80\n print_report+0x151/0x710\n kasan_report+0xc0/0x100\n blkcg_unpin_online+0x15a/0x270\n cgwb_release_workfn+0x194/0x480\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n ...\n Freed by task 1944:\n kasan_save_track+0x2b/0x70\n kasan_save_free_info+0x3c/0x50\n __kasan_slab_free+0x33/0x50\n kfree+0x10c/0x330\n css_free_rwork_fn+0xe6/0xb30\n process_scheduled_works+0x71b/0xe20\n worker_thread+0x82a/0xbd0\n kthread+0x242/0x2c0\n ret_from_fork+0x33/0x70\n ret_from_fork_asm+0x1a/0x30\n\nNote that the UAF is not easy to trigger as the free path is indirected\nbehind a couple RCU grace periods and a work item execution. I could only\ntrigger it with artifical msleep() injected in blkcg_unpin_online().\n\nFix it by reading the parent pointer before destroying the blkcg\u0027s blkg\u0027s.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56672",
"url": "https://www.suse.com/security/cve/CVE-2024-56672"
},
{
"category": "external",
"summary": "SUSE Bug 1235534 for CVE-2024-56672",
"url": "https://bugzilla.suse.com/1235534"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56672"
},
{
"cve": "CVE-2024-56675",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56675"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors\n\nUprobes always use bpf_prog_run_array_uprobe() under tasks-trace-RCU\nprotection. But it is possible to attach a non-sleepable BPF program to a\nuprobe, and non-sleepable BPF programs are freed via normal RCU (see\n__bpf_prog_put_noref()). This leads to UAF of the bpf_prog because a normal\nRCU grace period does not imply a tasks-trace-RCU grace period.\n\nFix it by explicitly waiting for a tasks-trace-RCU grace period after\nremoving the attachment of a bpf_prog to a perf_event.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56675",
"url": "https://www.suse.com/security/cve/CVE-2024-56675"
},
{
"category": "external",
"summary": "SUSE Bug 1235555 for CVE-2024-56675",
"url": "https://bugzilla.suse.com/1235555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56675"
},
{
"cve": "CVE-2024-56677",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56677"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()\n\nDuring early init CMA_MIN_ALIGNMENT_BYTES can be PAGE_SIZE,\nsince pageblock_order is still zero and it gets initialized\nlater during initmem_init() e.g.\nsetup_arch() -\u003e initmem_init() -\u003e sparse_init() -\u003e set_pageblock_order()\n\nOne such use case where this causes issue is -\nearly_setup() -\u003e early_init_devtree() -\u003e fadump_reserve_mem() -\u003e fadump_cma_init()\n\nThis causes CMA memory alignment check to be bypassed in\ncma_init_reserved_mem(). Then later cma_activate_area() can hit\na VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1)) if the reserved memory\narea was not pageblock_order aligned.\n\nFix it by moving the fadump_cma_init() after initmem_init(),\nwhere other such cma reservations also gets called.\n\n\u003cstack trace\u003e\n==============\npage: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10010\nflags: 0x13ffff800000000(node=1|zone=0|lastcpupid=0x7ffff) CMA\nraw: 013ffff800000000 5deadbeef0000100 5deadbeef0000122 0000000000000000\nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: VM_BUG_ON_PAGE(pfn \u0026 ((1 \u003c\u003c order) - 1))\n------------[ cut here ]------------\nkernel BUG at mm/page_alloc.c:778!\n\nCall Trace:\n__free_one_page+0x57c/0x7b0 (unreliable)\nfree_pcppages_bulk+0x1a8/0x2c8\nfree_unref_page_commit+0x3d4/0x4e4\nfree_unref_page+0x458/0x6d0\ninit_cma_reserved_pageblock+0x114/0x198\ncma_init_reserved_areas+0x270/0x3e0\ndo_one_initcall+0x80/0x2f8\nkernel_init_freeable+0x33c/0x530\nkernel_init+0x34/0x26c\nret_from_kernel_user_thread+0x14/0x1c",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56677",
"url": "https://www.suse.com/security/cve/CVE-2024-56677"
},
{
"category": "external",
"summary": "SUSE Bug 1235494 for CVE-2024-56677",
"url": "https://bugzilla.suse.com/1235494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56677"
},
{
"cve": "CVE-2024-56678",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56678"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/mm/fault: Fix kfence page fault reporting\n\ncopy_from_kernel_nofault() can be called when doing read of /proc/kcore.\n/proc/kcore can have some unmapped kfence objects which when read via\ncopy_from_kernel_nofault() can cause page faults. Since *_nofault()\nfunctions define their own fixup table for handling fault, use that\ninstead of asking kfence to handle such faults.\n\nHence we search the exception tables for the nip which generated the\nfault. If there is an entry then we let the fixup table handler handle the\npage fault by returning an error from within ___do_page_fault().\n\nThis can be easily triggered if someone tries to do dd from /proc/kcore.\neg. dd if=/proc/kcore of=/dev/null bs=1M\n\nSome example false negatives:\n\n ===============================\n BUG: KFENCE: invalid read in copy_from_kernel_nofault+0x9c/0x1a0\n Invalid read at 0xc0000000fdff0000:\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec\n\n BUG: KFENCE: use-after-free read in copy_from_kernel_nofault+0x9c/0x1a0\n Use-after-free read at 0xc0000000fe050000 (in kfence-#2):\n copy_from_kernel_nofault+0x9c/0x1a0\n 0xc00000000665f950\n read_kcore_iter+0x57c/0xa04\n proc_reg_read_iter+0xe4/0x16c\n vfs_read+0x320/0x3ec\n ksys_read+0x90/0x154\n system_call_exception+0x120/0x310\n system_call_vectored_common+0x15c/0x2ec",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56678",
"url": "https://www.suse.com/security/cve/CVE-2024-56678"
},
{
"category": "external",
"summary": "SUSE Bug 1235495 for CVE-2024-56678",
"url": "https://bugzilla.suse.com/1235495"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56678"
},
{
"cve": "CVE-2024-56679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56679"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56679",
"url": "https://www.suse.com/security/cve/CVE-2024-56679"
},
{
"category": "external",
"summary": "SUSE Bug 1235498 for CVE-2024-56679",
"url": "https://bugzilla.suse.com/1235498"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56679"
},
{
"cve": "CVE-2024-56681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56681"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: bcm - add error check in the ahash_hmac_init function\n\nThe ahash_init functions may return fails. The ahash_hmac_init should\nnot return ok when ahash_init returns error. For an example, ahash_init\nwill return -ENOMEM when allocation memory is error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56681",
"url": "https://www.suse.com/security/cve/CVE-2024-56681"
},
{
"category": "external",
"summary": "SUSE Bug 1235557 for CVE-2024-56681",
"url": "https://bugzilla.suse.com/1235557"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56681"
},
{
"cve": "CVE-2024-56683",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56683"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vc4: hdmi: Avoid hang with debug registers when suspended\n\nTrying to read /sys/kernel/debug/dri/1/hdmi1_regs\nwhen the hdmi is disconnected results in a fatal system hang.\n\nThis is due to the pm suspend code disabling the dvp clock.\nThat is just a gate of the 108MHz clock in DVP_HT_RPI_MISC_CONFIG,\nwhich results in accesses hanging AXI bus.\n\nProtect against this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56683",
"url": "https://www.suse.com/security/cve/CVE-2024-56683"
},
{
"category": "external",
"summary": "SUSE Bug 1235497 for CVE-2024-56683",
"url": "https://bugzilla.suse.com/1235497"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56683"
},
{
"cve": "CVE-2024-56687",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56687"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: musb: Fix hardware lockup on first Rx endpoint request\n\nThere is a possibility that a request\u0027s callback could be invoked from\nusb_ep_queue() (call trace below, supplemented with missing calls):\n\nreq-\u003ecomplete from usb_gadget_giveback_request\n\t(drivers/usb/gadget/udc/core.c:999)\nusb_gadget_giveback_request from musb_g_giveback\n\t(drivers/usb/musb/musb_gadget.c:147)\nmusb_g_giveback from rxstate\n\t(drivers/usb/musb/musb_gadget.c:784)\nrxstate from musb_ep_restart\n\t(drivers/usb/musb/musb_gadget.c:1169)\nmusb_ep_restart from musb_ep_restart_resume_work\n\t(drivers/usb/musb/musb_gadget.c:1176)\nmusb_ep_restart_resume_work from musb_queue_resume_work\n\t(drivers/usb/musb/musb_core.c:2279)\nmusb_queue_resume_work from musb_gadget_queue\n\t(drivers/usb/musb/musb_gadget.c:1241)\nmusb_gadget_queue from usb_ep_queue\n\t(drivers/usb/gadget/udc/core.c:300)\n\nAccording to the docstring of usb_ep_queue(), this should not happen:\n\n\"Note that @req\u0027s -\u003ecomplete() callback must never be called from within\nusb_ep_queue() as that can create deadlock situations.\"\n\nIn fact, a hardware lockup might occur in the following sequence:\n\n1. The gadget is initialized using musb_gadget_enable().\n2. Meanwhile, a packet arrives, and the RXPKTRDY flag is set, raising an\n interrupt.\n3. If IRQs are enabled, the interrupt is handled, but musb_g_rx() finds an\n empty queue (next_request() returns NULL). The interrupt flag has\n already been cleared by the glue layer handler, but the RXPKTRDY flag\n remains set.\n4. The first request is enqueued using usb_ep_queue(), leading to the call\n of req-\u003ecomplete(), as shown in the call trace above.\n5. If the callback enables IRQs and another packet is waiting, step (3)\n repeats. The request queue is empty because usb_g_giveback() removes the\n request before invoking the callback.\n6. The endpoint remains locked up, as the interrupt triggered by hardware\n setting the RXPKTRDY flag has been handled, but the flag itself remains\n set.\n\nFor this scenario to occur, it is only necessary for IRQs to be enabled at\nsome point during the complete callback. This happens with the USB Ethernet\ngadget, whose rx_complete() callback calls netif_rx(). If called in the\ntask context, netif_rx() disables the bottom halves (BHs). When the BHs are\nre-enabled, IRQs are also enabled to allow soft IRQs to be processed. The\ngadget itself is initialized at module load (or at boot if built-in), but\nthe first request is enqueued when the network interface is brought up,\ntriggering rx_complete() in the task context via ioctl(). If a packet\narrives while the interface is down, it can prevent the interface from\nreceiving any further packets from the USB host.\n\nThe situation is quite complicated with many parties involved. This\nparticular issue can be resolved in several possible ways:\n\n1. Ensure that callbacks never enable IRQs. This would be difficult to\n enforce, as discovering how netif_rx() interacts with interrupts was\n already quite challenging and u_ether is not the only function driver.\n Similar \"bugs\" could be hidden in other drivers as well.\n2. Disable MUSB interrupts in musb_g_giveback() before calling the callback\n and re-enable them afterwars (by calling musb_{dis,en}able_interrupts(),\n for example). This would ensure that MUSB interrupts are not handled\n during the callback, even if IRQs are enabled. In fact, it would allow\n IRQs to be enabled when releasing the lock. However, this feels like an\n inelegant hack.\n3. Modify the interrupt handler to clear the RXPKTRDY flag if the request\n queue is empty. While this approach also feels like a hack, it wastes\n CPU time by attempting to handle incoming packets when the software is\n not ready to process them.\n4. Flush the Rx FIFO instead of calling rxstate() in musb_ep_restart().\n This ensures that the hardware can receive packets when there is at\n least one request in the queue. Once I\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56687",
"url": "https://www.suse.com/security/cve/CVE-2024-56687"
},
{
"category": "external",
"summary": "SUSE Bug 1235537 for CVE-2024-56687",
"url": "https://bugzilla.suse.com/1235537"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56687"
},
{
"cve": "CVE-2024-56688",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56688"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport\n\nSince transport-\u003esock has been set to NULL during reset transport,\nXPRT_SOCK_UPD_TIMEOUT also needs to be cleared. Otherwise, the\nxs_tcp_set_socket_timeouts() may be triggered in xs_tcp_send_request()\nto dereference the transport-\u003esock that has been set to NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56688",
"url": "https://www.suse.com/security/cve/CVE-2024-56688"
},
{
"category": "external",
"summary": "SUSE Bug 1235538 for CVE-2024-56688",
"url": "https://bugzilla.suse.com/1235538"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56688"
},
{
"cve": "CVE-2024-56690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56690"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY\n\nSince commit 8f4f68e788c3 (\"crypto: pcrypt - Fix hungtask for\nPADATA_RESET\"), the pcrypt encryption and decryption operations return\n-EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is\ngenerated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns\n-EAGAIN, the unnecessary panic will occur when panic_on_warn set 1.\nFix this issue by calling crypto layer directly without parallelization\nin that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56690",
"url": "https://www.suse.com/security/cve/CVE-2024-56690"
},
{
"category": "external",
"summary": "SUSE Bug 1235428 for CVE-2024-56690",
"url": "https://bugzilla.suse.com/1235428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56690"
},
{
"cve": "CVE-2024-56691",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56691"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56691",
"url": "https://www.suse.com/security/cve/CVE-2024-56691"
},
{
"category": "external",
"summary": "SUSE Bug 1235425 for CVE-2024-56691",
"url": "https://bugzilla.suse.com/1235425"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56691"
},
{
"cve": "CVE-2024-56693",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56693"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbrd: defer automatic disk creation until module initialization succeeds\n\nMy colleague Wupeng found the following problems during fault injection:\n\nBUG: unable to handle page fault for address: fffffbfff809d073\nPGD 6e648067 P4D 123ec8067 PUD 123ec4067 PMD 100e38067 PTE 0\nOops: Oops: 0000 [#1] PREEMPT SMP KASAN NOPTI\nCPU: 5 UID: 0 PID: 755 Comm: modprobe Not tainted 6.12.0-rc3+ #17\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nRIP: 0010:__asan_load8+0x4c/0xa0\n...\nCall Trace:\n \u003cTASK\u003e\n blkdev_put_whole+0x41/0x70\n bdev_release+0x1a3/0x250\n blkdev_release+0x11/0x20\n __fput+0x1d7/0x4a0\n task_work_run+0xfc/0x180\n syscall_exit_to_user_mode+0x1de/0x1f0\n do_syscall_64+0x6b/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nloop_init() is calling loop_add() after __register_blkdev() succeeds and\nis ignoring disk_add() failure from loop_add(), for loop_add() failure\nis not fatal and successfully created disks are already visible to\nbdev_open().\n\nbrd_init() is currently calling brd_alloc() before __register_blkdev()\nsucceeds and is releasing successfully created disks when brd_init()\nreturns an error. This can cause UAF for the latter two case:\n\ncase 1:\n T1:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n add_disk\n disk_scan_partitions\n bdev_file_open_by_dev // alloc file\n fput // won\u0027t free until back to userspace\n brd_alloc(1) // failed since mem alloc error inject\n // error path for modprobe will release code segment\n // back to userspace\n __fput\n blkdev_release\n bdev_release\n blkdev_put_whole\n bdev-\u003ebd_disk-\u003efops-\u003erelease // fops is freed now, UAF!\n\ncase 2:\n T1: T2:\nmodprobe brd\n brd_init\n brd_alloc(0) // success\n open(/dev/ram0)\n brd_alloc(1) // fail\n // error path for modprobe\n\n close(/dev/ram0)\n ...\n /* UAF! */\n bdev-\u003ebd_disk-\u003efops-\u003erelease\n\nFix this problem by following what loop_init() does. Besides,\nreintroduce brd_devices_mutex to help serialize modifications to\nbrd_list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56693",
"url": "https://www.suse.com/security/cve/CVE-2024-56693"
},
{
"category": "external",
"summary": "SUSE Bug 1235418 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235418"
},
{
"category": "external",
"summary": "SUSE Bug 1235419 for CVE-2024-56693",
"url": "https://bugzilla.suse.com/1235419"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56693"
},
{
"cve": "CVE-2024-56694",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56694"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: fix recursive lock when verdict program return SK_PASS\n\nWhen the stream_verdict program returns SK_PASS, it places the received skb\ninto its own receive queue, but a recursive lock eventually occurs, leading\nto an operating system deadlock. This issue has been present since v6.9.\n\n\u0027\u0027\u0027\nsk_psock_strp_data_ready\n write_lock_bh(\u0026sk-\u003esk_callback_lock)\n strp_data_ready\n strp_read_sock\n read_sock -\u003e tcp_read_sock\n strp_recv\n cb.rcv_msg -\u003e sk_psock_strp_read\n # now stream_verdict return SK_PASS without peer sock assign\n __SK_PASS = sk_psock_map_verd(SK_PASS, NULL)\n sk_psock_verdict_apply\n sk_psock_skb_ingress_self\n sk_psock_skb_ingress_enqueue\n sk_psock_data_ready\n read_lock_bh(\u0026sk-\u003esk_callback_lock) \u003c= dead lock\n\n\u0027\u0027\u0027\n\nThis topic has been discussed before, but it has not been fixed.\nPrevious discussion:\nhttps://lore.kernel.org/all/6684a5864ec86_403d20898@john.notmuch",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56694",
"url": "https://www.suse.com/security/cve/CVE-2024-56694"
},
{
"category": "external",
"summary": "SUSE Bug 1235412 for CVE-2024-56694",
"url": "https://bugzilla.suse.com/1235412"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56694"
},
{
"cve": "CVE-2024-56698",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56698"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: Fix looping of queued SG entries\n\nThe dwc3_request-\u003enum_queued_sgs is decremented on completion. If a\npartially completed request is handled, then the\ndwc3_request-\u003enum_queued_sgs no longer reflects the total number of\nnum_queued_sgs (it would be cleared).\n\nCorrectly check the number of request SG entries remained to be prepare\nand queued. Failure to do this may cause null pointer dereference when\naccessing non-existent SG entry.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56698",
"url": "https://www.suse.com/security/cve/CVE-2024-56698"
},
{
"category": "external",
"summary": "SUSE Bug 1235491 for CVE-2024-56698",
"url": "https://bugzilla.suse.com/1235491"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56698"
},
{
"cve": "CVE-2024-56700",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56700"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: wl128x: Fix atomicity violation in fmc_send_cmd()\n\nAtomicity violation occurs when the fmc_send_cmd() function is executed\nsimultaneously with the modification of the fmdev-\u003eresp_skb value.\nConsider a scenario where, after passing the validity check within the\nfunction, a non-null fmdev-\u003eresp_skb variable is assigned a null value.\nThis results in an invalid fmdev-\u003eresp_skb variable passing the validity\ncheck. As seen in the later part of the function, skb = fmdev-\u003eresp_skb;\nwhen the invalid fmdev-\u003eresp_skb passes the check, a null pointer\ndereference error may occur at line 478, evt_hdr = (void *)skb-\u003edata;\n\nTo address this issue, it is recommended to include the validity check of\nfmdev-\u003eresp_skb within the locked section of the function. This\nmodification ensures that the value of fmdev-\u003eresp_skb does not change\nduring the validation process, thereby maintaining its validity.\n\nThis possible bug is found by an experimental static analysis tool\ndeveloped by our team. This tool analyzes the locking APIs\nto extract function pairs that can be concurrently executed, and then\nanalyzes the instructions in the paired functions to identify possible\nconcurrency bugs including data races and atomicity violations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56700",
"url": "https://www.suse.com/security/cve/CVE-2024-56700"
},
{
"category": "external",
"summary": "SUSE Bug 1235500 for CVE-2024-56700",
"url": "https://bugzilla.suse.com/1235500"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56700"
},
{
"cve": "CVE-2024-56701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Fix dtl_access_lock to be a rw_semaphore\n\nThe dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because\nthe code calls kmalloc() while holding it, which can sleep:\n\n # echo 1 \u003e /proc/powerpc/vcpudispatch_stats\n BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 199, name: sh\n preempt_count: 1, expected: 0\n 3 locks held by sh/199:\n #0: c00000000a0743f8 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x324/0x438\n #1: c0000000028c7058 (dtl_enable_mutex){+.+.}-{3:3}, at: vcpudispatch_stats_write+0xd4/0x5f4\n #2: c0000000028c70b8 (dtl_access_lock){+.+.}-{2:2}, at: vcpudispatch_stats_write+0x220/0x5f4\n CPU: 0 PID: 199 Comm: sh Not tainted 6.10.0-rc4 #152\n Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1202 0xf000005 of:SLOF,HEAD hv:linux,kvm pSeries\n Call Trace:\n dump_stack_lvl+0x130/0x148 (unreliable)\n __might_resched+0x174/0x410\n kmem_cache_alloc_noprof+0x340/0x3d0\n alloc_dtl_buffers+0x124/0x1ac\n vcpudispatch_stats_write+0x2a8/0x5f4\n proc_reg_write+0xf4/0x150\n vfs_write+0xfc/0x438\n ksys_write+0x88/0x148\n system_call_exception+0x1c4/0x5a0\n system_call_common+0xf4/0x258",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56701",
"url": "https://www.suse.com/security/cve/CVE-2024-56701"
},
{
"category": "external",
"summary": "SUSE Bug 1235496 for CVE-2024-56701",
"url": "https://bugzilla.suse.com/1235496"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56701"
},
{
"cve": "CVE-2024-56704",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56704"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\n9p/xen: fix release of IRQ\n\nKernel logs indicate an IRQ was double-freed.\n\nPass correct device ID during IRQ release.\n\n[Dominique: remove confusing variable reset to 0]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56704",
"url": "https://www.suse.com/security/cve/CVE-2024-56704"
},
{
"category": "external",
"summary": "SUSE Bug 1235584 for CVE-2024-56704",
"url": "https://bugzilla.suse.com/1235584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56704"
},
{
"cve": "CVE-2024-56705",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56705"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: atomisp: Add check for rgby_data memory allocation failure\n\nIn ia_css_3a_statistics_allocate(), there is no check on the allocation\nresult of the rgby_data memory. If rgby_data is not successfully\nallocated, it may trigger the assert(host_stats-\u003ergby_data) assertion in\nia_css_s3a_hmem_decode(). Adding a check to fix this potential issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56705",
"url": "https://www.suse.com/security/cve/CVE-2024-56705"
},
{
"category": "external",
"summary": "SUSE Bug 1235568 for CVE-2024-56705",
"url": "https://bugzilla.suse.com/1235568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56705"
},
{
"cve": "CVE-2024-56707",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56707"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c\n\nAdd error pointer checks after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56707",
"url": "https://www.suse.com/security/cve/CVE-2024-56707"
},
{
"category": "external",
"summary": "SUSE Bug 1235545 for CVE-2024-56707",
"url": "https://bugzilla.suse.com/1235545"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56707"
},
{
"cve": "CVE-2024-56708",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56708"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/igen6: Avoid segmentation fault on module unload\n\nThe segmentation fault happens because:\n\nDuring modprobe:\n1. In igen6_probe(), igen6_pvt will be allocated with kzalloc()\n2. In igen6_register_mci(), mci-\u003epvt_info will point to\n \u0026igen6_pvt-\u003eimc[mc]\n\nDuring rmmod:\n1. In mci_release() in edac_mc.c, it will kfree(mci-\u003epvt_info)\n2. In igen6_remove(), it will kfree(igen6_pvt);\n\nFix this issue by setting mci-\u003epvt_info to NULL to avoid the double\nkfree.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56708",
"url": "https://www.suse.com/security/cve/CVE-2024-56708"
},
{
"category": "external",
"summary": "SUSE Bug 1235564 for CVE-2024-56708",
"url": "https://bugzilla.suse.com/1235564"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56708"
},
{
"cve": "CVE-2024-56709",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56709"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: check if iowq is killed before queuing\n\ntask work can be executed after the task has gone through io_uring\ntermination, whether it\u0027s the final task_work run or the fallback path.\nIn this case, task work will find -\u003eio_wq being already killed and\nnull\u0027ed, which is a problem if it then tries to forward the request to\nio_queue_iowq(). Make io_queue_iowq() fail requests in this case.\n\nNote that it also checks PF_KTHREAD, because the user can first close\na DEFER_TASKRUN ring and shortly after kill the task, in which case\n-\u003eiowq check would race.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56709",
"url": "https://www.suse.com/security/cve/CVE-2024-56709"
},
{
"category": "external",
"summary": "SUSE Bug 1235552 for CVE-2024-56709",
"url": "https://bugzilla.suse.com/1235552"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56709"
},
{
"cve": "CVE-2024-56712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56712"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: fix memory leak on last export_udmabuf() error path\n\nIn export_udmabuf(), if dma_buf_fd() fails because the FD table is full, a\ndma_buf owning the udmabuf has already been created; but the error handling\nin udmabuf_create() will tear down the udmabuf without doing anything about\nthe containing dma_buf.\n\nThis leaves a dma_buf in memory that contains a dangling pointer; though\nthat doesn\u0027t seem to lead to anything bad except a memory leak.\n\nFix it by moving the dma_buf_fd() call out of export_udmabuf() so that we\ncan give it different error handling.\n\nNote that the shape of this code changed a lot in commit 5e72b2b41a21\n(\"udmabuf: convert udmabuf driver to use folios\"); but the memory leak\nseems to have existed since the introduction of udmabuf.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56712",
"url": "https://www.suse.com/security/cve/CVE-2024-56712"
},
{
"category": "external",
"summary": "SUSE Bug 1235565 for CVE-2024-56712",
"url": "https://bugzilla.suse.com/1235565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56712"
},
{
"cve": "CVE-2024-56715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56715"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nionic: Fix netdev notifier unregister on failure\n\nIf register_netdev() fails, then the driver leaks the netdev notifier.\nFix this by calling ionic_lif_unregister() on register_netdev()\nfailure. This will also call ionic_lif_unregister_phc() if it has\nalready been registered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56715",
"url": "https://www.suse.com/security/cve/CVE-2024-56715"
},
{
"category": "external",
"summary": "SUSE Bug 1235612 for CVE-2024-56715",
"url": "https://bugzilla.suse.com/1235612"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56715"
},
{
"cve": "CVE-2024-56716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56716"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetdevsim: prevent bad user input in nsim_dev_health_break_write()\n\nIf either a zero count or a large one is provided, kernel can crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56716",
"url": "https://www.suse.com/security/cve/CVE-2024-56716"
},
{
"category": "external",
"summary": "SUSE Bug 1235587 for CVE-2024-56716",
"url": "https://bugzilla.suse.com/1235587"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56716"
},
{
"cve": "CVE-2024-56722",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56722"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix cpu stuck caused by printings during reset\n\nDuring reset, cmd to destroy resources such as qp, cq, and mr may fail,\nand error logs will be printed. When a large number of resources are\ndestroyed, there will be lots of printings, and it may lead to a cpu\nstuck.\n\nDelete some unnecessary printings and replace other printing functions\nin these paths with the ratelimited version.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56722",
"url": "https://www.suse.com/security/cve/CVE-2024-56722"
},
{
"category": "external",
"summary": "SUSE Bug 1235570 for CVE-2024-56722",
"url": "https://bugzilla.suse.com/1235570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56722"
},
{
"cve": "CVE-2024-56723",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56723"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56723",
"url": "https://www.suse.com/security/cve/CVE-2024-56723"
},
{
"category": "external",
"summary": "SUSE Bug 1235571 for CVE-2024-56723",
"url": "https://bugzilla.suse.com/1235571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56723"
},
{
"cve": "CVE-2024-56724",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56724"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device\n\nWhile design wise the idea of converting the driver to use\nthe hierarchy of the IRQ chips is correct, the implementation\nhas (inherited) flaws. This was unveiled when platform_get_irq()\nhad started WARN() on IRQ 0 that is supposed to be a Linux\nIRQ number (also known as vIRQ).\n\nRework the driver to respect IRQ domain when creating each MFD\ndevice separately, as the domain is not the same for all of them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56724",
"url": "https://www.suse.com/security/cve/CVE-2024-56724"
},
{
"category": "external",
"summary": "SUSE Bug 1235577 for CVE-2024-56724",
"url": "https://bugzilla.suse.com/1235577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56724"
},
{
"cve": "CVE-2024-56725",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56725"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56725",
"url": "https://www.suse.com/security/cve/CVE-2024-56725"
},
{
"category": "external",
"summary": "SUSE Bug 1235578 for CVE-2024-56725",
"url": "https://bugzilla.suse.com/1235578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56725"
},
{
"cve": "CVE-2024-56726",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56726"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56726",
"url": "https://www.suse.com/security/cve/CVE-2024-56726"
},
{
"category": "external",
"summary": "SUSE Bug 1235582 for CVE-2024-56726",
"url": "https://bugzilla.suse.com/1235582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56726"
},
{
"cve": "CVE-2024-56727",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56727"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c\n\nAdding error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56727",
"url": "https://www.suse.com/security/cve/CVE-2024-56727"
},
{
"category": "external",
"summary": "SUSE Bug 1235583 for CVE-2024-56727",
"url": "https://bugzilla.suse.com/1235583"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56727"
},
{
"cve": "CVE-2024-56728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56728"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c\n\nAdd error pointer check after calling otx2_mbox_get_rsp().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56728",
"url": "https://www.suse.com/security/cve/CVE-2024-56728"
},
{
"category": "external",
"summary": "SUSE Bug 1235656 for CVE-2024-56728",
"url": "https://bugzilla.suse.com/1235656"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56728"
},
{
"cve": "CVE-2024-56729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56729"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: Initialize cfid-\u003etcon before performing network ops\n\nAvoid leaking a tcon ref when a lease break races with opening the\ncached directory. Processing the leak break might take a reference to\nthe tcon in cached_dir_lease_break() and then fail to release the ref in\ncached_dir_offload_close, since cfid-\u003etcon is still NULL.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56729",
"url": "https://www.suse.com/security/cve/CVE-2024-56729"
},
{
"category": "external",
"summary": "SUSE Bug 1235503 for CVE-2024-56729",
"url": "https://bugzilla.suse.com/1235503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56729"
},
{
"cve": "CVE-2024-56739",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56739"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: check if __rtc_read_time was successful in rtc_timer_do_work()\n\nIf the __rtc_read_time call fails,, the struct rtc_time tm; may contain\nuninitialized data, or an illegal date/time read from the RTC hardware.\n\nWhen calling rtc_tm_to_ktime later, the result may be a very large value\n(possibly KTIME_MAX). If there are periodic timers in rtc-\u003etimerqueue,\nthey will continually expire, may causing kernel softlockup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56739",
"url": "https://www.suse.com/security/cve/CVE-2024-56739"
},
{
"category": "external",
"summary": "SUSE Bug 1235611 for CVE-2024-56739",
"url": "https://bugzilla.suse.com/1235611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56739"
},
{
"cve": "CVE-2024-56741",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56741"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56741",
"url": "https://www.suse.com/security/cve/CVE-2024-56741"
},
{
"category": "external",
"summary": "SUSE Bug 1235502 for CVE-2024-56741",
"url": "https://bugzilla.suse.com/1235502"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56741"
},
{
"cve": "CVE-2024-56745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56745"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix reset_method_store() memory leak\n\nIn reset_method_store(), a string is allocated via kstrndup() and assigned\nto the local \"options\". options is then used in with strsep() to find\nspaces:\n\n while ((name = strsep(\u0026options, \" \")) != NULL) {\n\nIf there are no remaining spaces, then options is set to NULL by strsep(),\nso the subsequent kfree(options) doesn\u0027t free the memory allocated via\nkstrndup().\n\nFix by using a separate tmp_options to iterate with strsep() so options is\npreserved.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56745",
"url": "https://www.suse.com/security/cve/CVE-2024-56745"
},
{
"category": "external",
"summary": "SUSE Bug 1235563 for CVE-2024-56745",
"url": "https://bugzilla.suse.com/1235563"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56745"
},
{
"cve": "CVE-2024-56746",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56746"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()\n\nWhen information such as info-\u003escreen_base is not ready, calling\nsh7760fb_free_mem() does not release memory correctly. Call\ndma_free_coherent() instead.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56746",
"url": "https://www.suse.com/security/cve/CVE-2024-56746"
},
{
"category": "external",
"summary": "SUSE Bug 1235622 for CVE-2024-56746",
"url": "https://bugzilla.suse.com/1235622"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56746"
},
{
"cve": "CVE-2024-56747",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56747"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()\n\nHook \"qedi_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56747",
"url": "https://www.suse.com/security/cve/CVE-2024-56747"
},
{
"category": "external",
"summary": "SUSE Bug 1234934 for CVE-2024-56747",
"url": "https://bugzilla.suse.com/1234934"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56747"
},
{
"cve": "CVE-2024-56748",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56748"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()\n\nHook \"qed_ops-\u003ecommon-\u003esb_init = qed_sb_init\" does not release the DMA\nmemory sb_virt when it fails. Add dma_free_coherent() to free it. This\nis the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56748",
"url": "https://www.suse.com/security/cve/CVE-2024-56748"
},
{
"category": "external",
"summary": "SUSE Bug 1235627 for CVE-2024-56748",
"url": "https://bugzilla.suse.com/1235627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56748"
},
{
"cve": "CVE-2024-56752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56752"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()\n\nWhen the call to gf100_grctx_generate() fails, unlock gr-\u003efecs.mutex\nbefore returning the error.\n\nFixes smatch warning:\n\ndrivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c:480 gf100_gr_chan_new() warn: inconsistent returns \u0027\u0026gr-\u003efecs.mutex\u0027.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56752",
"url": "https://www.suse.com/security/cve/CVE-2024-56752"
},
{
"category": "external",
"summary": "SUSE Bug 1234937 for CVE-2024-56752",
"url": "https://bugzilla.suse.com/1234937"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56752"
},
{
"cve": "CVE-2024-56754",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56754"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: caam - Fix the pointer passed to caam_qi_shutdown()\n\nThe type of the last parameter given to devm_add_action_or_reset() is\n\"struct caam_drv_private *\", but in caam_qi_shutdown(), it is casted to\n\"struct device *\".\n\nPass the correct parameter to devm_add_action_or_reset() so that the\nresources are released as expected.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56754",
"url": "https://www.suse.com/security/cve/CVE-2024-56754"
},
{
"category": "external",
"summary": "SUSE Bug 1234918 for CVE-2024-56754",
"url": "https://bugzilla.suse.com/1234918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56754"
},
{
"cve": "CVE-2024-56755",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56755"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING\n\nIn fscache_create_volume(), there is a missing memory barrier between the\nbit-clearing operation and the wake-up operation. This may cause a\nsituation where, after a wake-up, the bit-clearing operation hasn\u0027t been\ndetected yet, leading to an indefinite wait. The triggering process is as\nfollows:\n\n [cookie1] [cookie2] [volume_work]\nfscache_perform_lookup\n fscache_create_volume\n fscache_perform_lookup\n fscache_create_volume\n\t\t\t fscache_create_volume_work\n cachefiles_acquire_volume\n clear_and_wake_up_bit\n test_and_set_bit\n test_and_set_bit\n goto maybe_wait\n goto no_wait\n\nIn the above process, cookie1 and cookie2 has the same volume. When cookie1\nenters the -no_wait- process, it will clear the bit and wake up the waiting\nprocess. If a barrier is missing, it may cause cookie2 to remain in the\n-wait- process indefinitely.\n\nIn commit 3288666c7256 (\"fscache: Use clear_and_wake_up_bit() in\nfscache_create_volume_work()\"), barriers were added to similar operations\nin fscache_create_volume_work(), but fscache_create_volume() was missed.\n\nBy combining the clear and wake operations into clear_and_wake_up_bit() to\nfix this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56755",
"url": "https://www.suse.com/security/cve/CVE-2024-56755"
},
{
"category": "external",
"summary": "SUSE Bug 1234920 for CVE-2024-56755",
"url": "https://bugzilla.suse.com/1234920"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-56755"
},
{
"cve": "CVE-2024-56756",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56756"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix freeing of the HMB descriptor table\n\nThe HMB descriptor table is sized to the maximum number of descriptors\nthat could be used for a given device, but __nvme_alloc_host_mem could\nbreak out of the loop earlier on memory allocation failure and end up\nusing less descriptors than planned for, which leads to an incorrect\nsize passed to dma_free_coherent.\n\nIn practice this was not showing up because the number of descriptors\ntends to be low and the dma coherent allocator always allocates and\nfrees at least a page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56756",
"url": "https://www.suse.com/security/cve/CVE-2024-56756"
},
{
"category": "external",
"summary": "SUSE Bug 1234922 for CVE-2024-56756",
"url": "https://bugzilla.suse.com/1234922"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56756"
},
{
"cve": "CVE-2024-56759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56759"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix use-after-free when COWing tree bock and tracing is enabled\n\nWhen a COWing a tree block, at btrfs_cow_block(), and we have the\ntracepoint trace_btrfs_cow_block() enabled and preemption is also enabled\n(CONFIG_PREEMPT=y), we can trigger a use-after-free in the COWed extent\nbuffer while inside the tracepoint code. This is because in some paths\nthat call btrfs_cow_block(), such as btrfs_search_slot(), we are holding\nthe last reference on the extent buffer @buf so btrfs_force_cow_block()\ndrops the last reference on the @buf extent buffer when it calls\nfree_extent_buffer_stale(buf), which schedules the release of the extent\nbuffer with RCU. This means that if we are on a kernel with preemption,\nthe current task may be preempted before calling trace_btrfs_cow_block()\nand the extent buffer already released by the time trace_btrfs_cow_block()\nis called, resulting in a use-after-free.\n\nFix this by moving the trace_btrfs_cow_block() from btrfs_cow_block() to\nbtrfs_force_cow_block() before the COWed extent buffer is freed.\nThis also has a side effect of invoking the tracepoint in the tree defrag\ncode, at defrag.c:btrfs_realloc_node(), since btrfs_force_cow_block() is\ncalled there, but this is fine and it was actually missing there.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56759",
"url": "https://www.suse.com/security/cve/CVE-2024-56759"
},
{
"category": "external",
"summary": "SUSE Bug 1235645 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1235645"
},
{
"category": "external",
"summary": "SUSE Bug 1236569 for CVE-2024-56759",
"url": "https://bugzilla.suse.com/1236569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56759"
},
{
"cve": "CVE-2024-56760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/MSI: Handle lack of irqdomain gracefully\n\nAlexandre observed a warning emitted from pci_msi_setup_msi_irqs() on a\nRISCV platform which does not provide PCI/MSI support:\n\n WARNING: CPU: 1 PID: 1 at drivers/pci/msi/msi.h:121 pci_msi_setup_msi_irqs+0x2c/0x32\n __pci_enable_msix_range+0x30c/0x596\n pci_msi_setup_msi_irqs+0x2c/0x32\n pci_alloc_irq_vectors_affinity+0xb8/0xe2\n\nRISCV uses hierarchical interrupt domains and correctly does not implement\nthe legacy fallback. The warning triggers from the legacy fallback stub.\n\nThat warning is bogus as the PCI/MSI layer knows whether a PCI/MSI parent\ndomain is associated with the device or not. There is a check for MSI-X,\nwhich has a legacy assumption. But that legacy fallback assumption is only\nvalid when legacy support is enabled, but otherwise the check should simply\nreturn -ENOTSUPP.\n\nLoongarch tripped over the same problem and blindly enabled legacy support\nwithout implementing the legacy fallbacks. There are weak implementations\nwhich return an error, so the problem was papered over.\n\nCorrect pci_msi_domain_supports() to evaluate the legacy mode and add\nthe missing supported check into the MSI enable path to complete it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56760",
"url": "https://www.suse.com/security/cve/CVE-2024-56760"
},
{
"category": "external",
"summary": "SUSE Bug 1235616 for CVE-2024-56760",
"url": "https://bugzilla.suse.com/1235616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56760"
},
{
"cve": "CVE-2024-56763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56763"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Prevent bad count for tracing_cpumask_write\n\nIf a large count is provided, it will trigger a warning in bitmap_parse_user.\nAlso check zero for it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56763",
"url": "https://www.suse.com/security/cve/CVE-2024-56763"
},
{
"category": "external",
"summary": "SUSE Bug 1235638 for CVE-2024-56763",
"url": "https://bugzilla.suse.com/1235638"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56763"
},
{
"cve": "CVE-2024-56765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56765"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/vas: Add close() callback in vas_vm_ops struct\n\nThe mapping VMA address is saved in VAS window struct when the\npaste address is mapped. This VMA address is used during migration\nto unmap the paste address if the window is active. The paste\naddress mapping will be removed when the window is closed or with\nthe munmap(). But the VMA address in the VAS window is not updated\nwith munmap() which is causing invalid access during migration.\n\nThe KASAN report shows:\n[16386.254991] BUG: KASAN: slab-use-after-free in reconfig_close_windows+0x1a0/0x4e8\n[16386.255043] Read of size 8 at addr c00000014a819670 by task drmgr/696928\n\n[16386.255096] CPU: 29 UID: 0 PID: 696928 Comm: drmgr Kdump: loaded Tainted: G B 6.11.0-rc5-nxgzip #2\n[16386.255128] Tainted: [B]=BAD_PAGE\n[16386.255148] Hardware name: IBM,9080-HEX Power11 (architected) 0x820200 0xf000007 of:IBM,FW1110.00 (NH1110_016) hv:phyp pSeries\n[16386.255181] Call Trace:\n[16386.255202] [c00000016b297660] [c0000000018ad0ac] dump_stack_lvl+0x84/0xe8 (unreliable)\n[16386.255246] [c00000016b297690] [c0000000006e8a90] print_report+0x19c/0x764\n[16386.255285] [c00000016b297760] [c0000000006e9490] kasan_report+0x128/0x1f8\n[16386.255309] [c00000016b297880] [c0000000006eb5c8] __asan_load8+0xac/0xe0\n[16386.255326] [c00000016b2978a0] [c00000000013f898] reconfig_close_windows+0x1a0/0x4e8\n[16386.255343] [c00000016b297990] [c000000000140e58] vas_migration_handler+0x3a4/0x3fc\n[16386.255368] [c00000016b297a90] [c000000000128848] pseries_migrate_partition+0x4c/0x4c4\n...\n\n[16386.256136] Allocated by task 696554 on cpu 31 at 16377.277618s:\n[16386.256149] kasan_save_stack+0x34/0x68\n[16386.256163] kasan_save_track+0x34/0x80\n[16386.256175] kasan_save_alloc_info+0x58/0x74\n[16386.256196] __kasan_slab_alloc+0xb8/0xdc\n[16386.256209] kmem_cache_alloc_noprof+0x200/0x3d0\n[16386.256225] vm_area_alloc+0x44/0x150\n[16386.256245] mmap_region+0x214/0x10c4\n[16386.256265] do_mmap+0x5fc/0x750\n[16386.256277] vm_mmap_pgoff+0x14c/0x24c\n[16386.256292] ksys_mmap_pgoff+0x20c/0x348\n[16386.256303] sys_mmap+0xd0/0x160\n...\n\n[16386.256350] Freed by task 0 on cpu 31 at 16386.204848s:\n[16386.256363] kasan_save_stack+0x34/0x68\n[16386.256374] kasan_save_track+0x34/0x80\n[16386.256384] kasan_save_free_info+0x64/0x10c\n[16386.256396] __kasan_slab_free+0x120/0x204\n[16386.256415] kmem_cache_free+0x128/0x450\n[16386.256428] vm_area_free_rcu_cb+0xa8/0xd8\n[16386.256441] rcu_do_batch+0x2c8/0xcf0\n[16386.256458] rcu_core+0x378/0x3c4\n[16386.256473] handle_softirqs+0x20c/0x60c\n[16386.256495] do_softirq_own_stack+0x6c/0x88\n[16386.256509] do_softirq_own_stack+0x58/0x88\n[16386.256521] __irq_exit_rcu+0x1a4/0x20c\n[16386.256533] irq_exit+0x20/0x38\n[16386.256544] interrupt_async_exit_prepare.constprop.0+0x18/0x2c\n...\n\n[16386.256717] Last potentially related work creation:\n[16386.256729] kasan_save_stack+0x34/0x68\n[16386.256741] __kasan_record_aux_stack+0xcc/0x12c\n[16386.256753] __call_rcu_common.constprop.0+0x94/0xd04\n[16386.256766] vm_area_free+0x28/0x3c\n[16386.256778] remove_vma+0xf4/0x114\n[16386.256797] do_vmi_align_munmap.constprop.0+0x684/0x870\n[16386.256811] __vm_munmap+0xe0/0x1f8\n[16386.256821] sys_munmap+0x54/0x6c\n[16386.256830] system_call_exception+0x1a0/0x4a0\n[16386.256841] system_call_vectored_common+0x15c/0x2ec\n\n[16386.256868] The buggy address belongs to the object at c00000014a819670\n which belongs to the cache vm_area_struct of size 168\n[16386.256887] The buggy address is located 0 bytes inside of\n freed 168-byte region [c00000014a819670, c00000014a819718)\n\n[16386.256915] The buggy address belongs to the physical page:\n[16386.256928] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14a81\n[16386.256950] memcg:c0000000ba430001\n[16386.256961] anon flags: 0x43ffff800000000(node=4|zone=0|lastcpupid=0x7ffff)\n[16386.256975] page_type: 0xfdffffff(slab)\n[16386\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56765",
"url": "https://www.suse.com/security/cve/CVE-2024-56765"
},
{
"category": "external",
"summary": "SUSE Bug 1235643 for CVE-2024-56765",
"url": "https://bugzilla.suse.com/1235643"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56765"
},
{
"cve": "CVE-2024-56766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56766"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: fix double free in atmel_pmecc_create_user()\n\nThe \"user\" pointer was converted from being allocated with kzalloc() to\nbeing allocated by devm_kzalloc(). Calling kfree(user) will lead to a\ndouble free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56766",
"url": "https://www.suse.com/security/cve/CVE-2024-56766"
},
{
"category": "external",
"summary": "SUSE Bug 1235219 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1235219"
},
{
"category": "external",
"summary": "SUSE Bug 1240426 for CVE-2024-56766",
"url": "https://bugzilla.suse.com/1240426"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-56766"
},
{
"cve": "CVE-2024-56767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56767"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset\n\nThe at_xdmac_memset_create_desc may return NULL, which will lead to a\nnull pointer dereference. For example, the len input is error, or the\natchan-\u003efree_descs_list is empty and memory is exhausted. Therefore, add\ncheck to avoid this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56767",
"url": "https://www.suse.com/security/cve/CVE-2024-56767"
},
{
"category": "external",
"summary": "SUSE Bug 1235160 for CVE-2024-56767",
"url": "https://bugzilla.suse.com/1235160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56767"
},
{
"cve": "CVE-2024-56769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56769"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg\n\nSyzbot reports [1] an uninitialized value issue found by KMSAN in\ndib3000_read_reg().\n\nLocal u8 rb[2] is used in i2c_transfer() as a read buffer; in case\nthat call fails, the buffer may end up with some undefined values.\n\nSince no elaborate error handling is expected in dib3000_write_reg(),\nsimply zero out rb buffer to mitigate the problem.\n\n[1] Syzkaller report\ndvb-usb: bulk message failed: -22 (6/0)\n=====================================================\nBUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dib3000mb_attach+0x2d8/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n dibusb_dib3000mb_frontend_attach+0x155/0x2f0 drivers/media/usb/dvb-usb/dibusb-mb.c:31\n dvb_usb_adapter_frontend_init+0xed/0x9a0 drivers/media/usb/dvb-usb/dvb-usb-dvb.c:290\n dvb_usb_adapter_init drivers/media/usb/dvb-usb/dvb-usb-init.c:90 [inline]\n dvb_usb_init drivers/media/usb/dvb-usb/dvb-usb-init.c:186 [inline]\n dvb_usb_device_init+0x25a8/0x3760 drivers/media/usb/dvb-usb/dvb-usb-init.c:310\n dibusb_probe+0x46/0x250 drivers/media/usb/dvb-usb/dibusb-mb.c:110\n...\nLocal variable rb created at:\n dib3000_read_reg+0x86/0x4e0 drivers/media/dvb-frontends/dib3000mb.c:54\n dib3000mb_attach+0x123/0x3c0 drivers/media/dvb-frontends/dib3000mb.c:758\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56769",
"url": "https://www.suse.com/security/cve/CVE-2024-56769"
},
{
"category": "external",
"summary": "SUSE Bug 1235155 for CVE-2024-56769",
"url": "https://bugzilla.suse.com/1235155"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56769"
},
{
"cve": "CVE-2024-56774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56774"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: add a sanity check for btrfs root in btrfs_search_slot()\n\nSyzbot reports a null-ptr-deref in btrfs_search_slot().\n\nThe reproducer is using rescue=ibadroots, and the extent tree root is\ncorrupted thus the extent tree is NULL.\n\nWhen scrub tries to search the extent tree to gather the needed extent\ninfo, btrfs_search_slot() doesn\u0027t check if the target root is NULL or\nnot, resulting the null-ptr-deref.\n\nAdd sanity check for btrfs root before using it in btrfs_search_slot().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56774",
"url": "https://www.suse.com/security/cve/CVE-2024-56774"
},
{
"category": "external",
"summary": "SUSE Bug 1235653 for CVE-2024-56774",
"url": "https://bugzilla.suse.com/1235653"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56774"
},
{
"cve": "CVE-2024-56775",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56775"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix handling of plane refcount\n\n[Why]\nThe mechanism to backup and restore plane states doesn\u0027t maintain\nrefcount, which can cause issues if the refcount of the plane changes\nin between backup and restore operations, such as memory leaks if the\nrefcount was supposed to go down, or double frees / invalid memory\naccesses if the refcount was supposed to go up.\n\n[How]\nCache and re-apply current refcount when restoring plane states.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56775",
"url": "https://www.suse.com/security/cve/CVE-2024-56775"
},
{
"category": "external",
"summary": "SUSE Bug 1235657 for CVE-2024-56775",
"url": "https://bugzilla.suse.com/1235657"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56775"
},
{
"cve": "CVE-2024-56776",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56776"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56776",
"url": "https://www.suse.com/security/cve/CVE-2024-56776"
},
{
"category": "external",
"summary": "SUSE Bug 1235647 for CVE-2024-56776",
"url": "https://bugzilla.suse.com/1235647"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56776"
},
{
"cve": "CVE-2024-56777",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56777"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56777",
"url": "https://www.suse.com/security/cve/CVE-2024-56777"
},
{
"category": "external",
"summary": "SUSE Bug 1235641 for CVE-2024-56777",
"url": "https://bugzilla.suse.com/1235641"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56777"
},
{
"cve": "CVE-2024-56778",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56778"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check\n\nThe return value of drm_atomic_get_crtc_state() needs to be\nchecked. To avoid use of error pointer \u0027crtc_state\u0027 in case\nof the failure.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56778",
"url": "https://www.suse.com/security/cve/CVE-2024-56778"
},
{
"category": "external",
"summary": "SUSE Bug 1235635 for CVE-2024-56778",
"url": "https://bugzilla.suse.com/1235635"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56778"
},
{
"cve": "CVE-2024-56779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56779"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur\n\nThe action force umount(umount -f) will attempt to kill all rpc_task even\numount operation may ultimately fail if some files remain open.\nConsequently, if an action attempts to open a file, it can potentially\nsend two rpc_task to nfs server.\n\n NFS CLIENT\nthread1 thread2\nopen(\"file\")\n...\nnfs4_do_open\n _nfs4_do_open\n _nfs4_open_and_get_state\n _nfs4_proc_open\n nfs4_run_open_task\n /* rpc_task1 */\n rpc_run_task\n rpc_wait_for_completion_task\n\n umount -f\n nfs_umount_begin\n rpc_killall_tasks\n rpc_signal_task\n rpc_task1 been wakeup\n and return -512\n _nfs4_do_open // while loop\n ...\n nfs4_run_open_task\n /* rpc_task2 */\n rpc_run_task\n rpc_wait_for_completion_task\n\nWhile processing an open request, nfsd will first attempt to find or\nallocate an nfs4_openowner. If it finds an nfs4_openowner that is not\nmarked as NFS4_OO_CONFIRMED, this nfs4_openowner will released. Since\ntwo rpc_task can attempt to open the same file simultaneously from the\nclient to server, and because two instances of nfsd can run\nconcurrently, this situation can lead to lots of memory leak.\nAdditionally, when we echo 0 to /proc/fs/nfsd/threads, warning will be\ntriggered.\n\n NFS SERVER\nnfsd1 nfsd2 echo 0 \u003e /proc/fs/nfsd/threads\n\nnfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // alloc oo1, stateid1\n nfsd4_open\n nfsd4_process_open1\n find_or_alloc_open_stateowner\n // find oo1, without NFS4_OO_CONFIRMED\n release_openowner\n unhash_openowner_locked\n list_del_init(\u0026oo-\u003eoo_perclient)\n // cannot find this oo\n // from client, LEAK!!!\n alloc_stateowner // alloc oo2\n\n nfsd4_process_open2\n init_open_stateid\n // associate oo1\n // with stateid1, stateid1 LEAK!!!\n nfs4_get_vfs_file\n // alloc nfsd_file1 and nfsd_file_mark1\n // all LEAK!!!\n\n nfsd4_process_open2\n ...\n\n write_threads\n ...\n nfsd_destroy_serv\n nfsd_shutdown_net\n nfs4_state_shutdown_net\n nfs4_state_destroy_net\n destroy_client\n __destroy_client\n // won\u0027t find oo1!!!\n nfsd_shutdown_generic\n nfsd_file_cache_shutdown\n kmem_cache_destroy\n for nfsd_file_slab\n and nfsd_file_mark_slab\n // bark since nfsd_file1\n // and nfsd_file_mark1\n // still alive\n\n=======================================================================\nBUG nfsd_file (Not tainted): Objects remaining in nfsd_file on\n__kmem_cache_shutdown()\n-----------------------------------------------------------------------\n\nSlab 0xffd4000004438a80 objects=34 used=1 fp=0xff11000110e2ad28\nflags=0x17ffffc0000240(workingset|head|node=0|zone=2|lastcpupid=0x1fffff)\nCPU: 4 UID: 0 PID: 757 Comm: sh Not tainted 6.12.0-rc6+ #19\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.1-2.fc37 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dum\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56779",
"url": "https://www.suse.com/security/cve/CVE-2024-56779"
},
{
"category": "external",
"summary": "SUSE Bug 1235632 for CVE-2024-56779",
"url": "https://bugzilla.suse.com/1235632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56779"
},
{
"cve": "CVE-2024-56780",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56780"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nquota: flush quota_release_work upon quota writeback\n\nOne of the paths quota writeback is called from is:\n\nfreeze_super()\n sync_filesystem()\n ext4_sync_fs()\n dquot_writeback_dquots()\n\nSince we currently don\u0027t always flush the quota_release_work queue in\nthis path, we can end up with the following race:\n\n 1. dquot are added to releasing_dquots list during regular operations.\n 2. FS Freeze starts, however, this does not flush the quota_release_work queue.\n 3. Freeze completes.\n 4. Kernel eventually tries to flush the workqueue while FS is frozen which\n hits a WARN_ON since transaction gets started during frozen state:\n\n ext4_journal_check_start+0x28/0x110 [ext4] (unreliable)\n __ext4_journal_start_sb+0x64/0x1c0 [ext4]\n ext4_release_dquot+0x90/0x1d0 [ext4]\n quota_release_workfn+0x43c/0x4d0\n\nWhich is the following line:\n\n WARN_ON(sb-\u003es_writers.frozen == SB_FREEZE_COMPLETE);\n\nWhich ultimately results in generic/390 failing due to dmesg\nnoise. This was detected on powerpc machine 15 cores.\n\nTo avoid this, make sure to flush the workqueue during\ndquot_writeback_dquots() so we dont have any pending workitems after\nfreeze.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56780",
"url": "https://www.suse.com/security/cve/CVE-2024-56780"
},
{
"category": "external",
"summary": "SUSE Bug 1235650 for CVE-2024-56780",
"url": "https://bugzilla.suse.com/1235650"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56780"
},
{
"cve": "CVE-2024-56787",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-56787"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: imx8m: Probe the SoC driver as platform driver\n\nWith driver_async_probe=* on kernel command line, the following trace is\nproduced because on i.MX8M Plus hardware because the soc-imx8m.c driver\ncalls of_clk_get_by_name() which returns -EPROBE_DEFER because the clock\ndriver is not yet probed. This was not detected during regular testing\nwithout driver_async_probe.\n\nConvert the SoC code to platform driver and instantiate a platform device\nin its current device_initcall() to probe the platform driver. Rework\n.soc_revision callback to always return valid error code and return SoC\nrevision via parameter. This way, if anything in the .soc_revision callback\nreturn -EPROBE_DEFER, it gets propagated to .probe and the .probe will get\nretried later.\n\n\"\n------------[ cut here ]------------\nWARNING: CPU: 1 PID: 1 at drivers/soc/imx/soc-imx8m.c:115 imx8mm_soc_revision+0xdc/0x180\nCPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-next-20240924-00002-g2062bb554dea #603\nHardware name: DH electronics i.MX8M Plus DHCOM Premium Developer Kit (3) (DT)\npstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : imx8mm_soc_revision+0xdc/0x180\nlr : imx8mm_soc_revision+0xd0/0x180\nsp : ffff8000821fbcc0\nx29: ffff8000821fbce0 x28: 0000000000000000 x27: ffff800081810120\nx26: ffff8000818a9970 x25: 0000000000000006 x24: 0000000000824311\nx23: ffff8000817f42c8 x22: ffff0000df8be210 x21: fffffffffffffdfb\nx20: ffff800082780000 x19: 0000000000000001 x18: ffffffffffffffff\nx17: ffff800081fff418 x16: ffff8000823e1000 x15: ffff0000c03b65e8\nx14: ffff0000c00051b0 x13: ffff800082790000 x12: 0000000000000801\nx11: ffff80008278ffff x10: ffff80008209d3a6 x9 : ffff80008062e95c\nx8 : ffff8000821fb9a0 x7 : 0000000000000000 x6 : 00000000000080e3\nx5 : ffff0000df8c03d8 x4 : 0000000000000000 x3 : 0000000000000000\nx2 : 0000000000000000 x1 : fffffffffffffdfb x0 : fffffffffffffdfb\nCall trace:\n imx8mm_soc_revision+0xdc/0x180\n imx8_soc_init+0xb0/0x1e0\n do_one_initcall+0x94/0x1a8\n kernel_init_freeable+0x240/0x2a8\n kernel_init+0x28/0x140\n ret_from_fork+0x10/0x20\n---[ end trace 0000000000000000 ]---\nSoC: i.MX8MP revision 1.1\n\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-56787",
"url": "https://www.suse.com/security/cve/CVE-2024-56787"
},
{
"category": "external",
"summary": "SUSE Bug 1235663 for CVE-2024-56787",
"url": "https://bugzilla.suse.com/1235663"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-56787"
},
{
"cve": "CVE-2024-57791",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57791"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check return value of sock_recvmsg when draining clc data\n\nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the\nlength of msg should be received from network and the value should not be\nfully trusted as it is from the network. Once the value of length exceeds\nthe value of buflen in function smc_clc_wait_msg it may run into deadloop\nwhen trying to drain the remaining data exceeding buflen.\n\nThis patch checks the return value of sock_recvmsg when draining data in\ncase of deadloop in draining.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57791",
"url": "https://www.suse.com/security/cve/CVE-2024-57791"
},
{
"category": "external",
"summary": "SUSE Bug 1235759 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235759"
},
{
"category": "external",
"summary": "SUSE Bug 1235760 for CVE-2024-57791",
"url": "https://bugzilla.suse.com/1235760"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57791"
},
{
"cve": "CVE-2024-57792",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57792"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57792",
"url": "https://www.suse.com/security/cve/CVE-2024-57792"
},
{
"category": "external",
"summary": "SUSE Bug 1235764 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1235764"
},
{
"category": "external",
"summary": "SUSE Bug 1236568 for CVE-2024-57792",
"url": "https://bugzilla.suse.com/1236568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57792"
},
{
"cve": "CVE-2024-57793",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57793"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors\n\nIn CoCo VMs it is possible for the untrusted host to cause\nset_memory_decrypted() to fail such that an error is returned\nand the resulting memory is shared. Callers need to take care\nto handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional\nor security issues.\n\nLeak the decrypted memory when set_memory_decrypted() fails,\nand don\u0027t need to print an error since set_memory_decrypted()\nwill call WARN_ONCE().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57793",
"url": "https://www.suse.com/security/cve/CVE-2024-57793"
},
{
"category": "external",
"summary": "SUSE Bug 1235768 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235768"
},
{
"category": "external",
"summary": "SUSE Bug 1235769 for CVE-2024-57793",
"url": "https://bugzilla.suse.com/1235769"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57793"
},
{
"cve": "CVE-2024-57795",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57795"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Remove the direct link to net_device\n\nThe similar patch in siw is in the link:\nhttps://git.kernel.org/rdma/rdma/c/16b87037b48889\n\nThis problem also occurred in RXE. The following analyze this problem.\nIn the following Call Traces:\n\"\nBUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\nRead of size 4 at addr ffff8880554640b0 by task kworker/1:4/5295\n\nCPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted\n6.12.0-rc3-syzkaller-00399-g9197b73fd7bb #0\nHardware name: Google Compute Engine/Google Compute Engine,\nBIOS Google 09/13/2024\nWorkqueue: infiniband ib_cache_event_task\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n dev_get_flags+0x188/0x1d0 net/core/dev.c:8782\n rxe_query_port+0x12d/0x260 drivers/infiniband/sw/rxe/rxe_verbs.c:60\n __ib_query_port drivers/infiniband/core/device.c:2111 [inline]\n ib_query_port+0x168/0x7d0 drivers/infiniband/core/device.c:2143\n ib_cache_update+0x1a9/0xb80 drivers/infiniband/core/cache.c:1494\n ib_cache_event_task+0xf3/0x1e0 drivers/infiniband/core/cache.c:1568\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa65/0x1850 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f2/0x390 kernel/kthread.c:389\n ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\"\n\n1). In the link [1],\n\n\"\n infiniband syz2: set down\n\"\n\nThis means that on 839.350575, the event ib_cache_event_task was sent andi\nqueued in ib_wq.\n\n2). In the link [1],\n\n\"\n team0 (unregistering): Port device team_slave_0 removed\n\"\n\nIt indicates that before 843.251853, the net device should be freed.\n\n3). In the link [1],\n\n\"\n BUG: KASAN: slab-use-after-free in dev_get_flags+0x188/0x1d0\n\"\n\nThis means that on 850.559070, this slab-use-after-free problem occurred.\n\nIn all, on 839.350575, the event ib_cache_event_task was sent and queued\nin ib_wq,\n\nbefore 843.251853, the net device veth was freed.\n\non 850.559070, this event was executed, and the mentioned freed net device\nwas called. Thus, the above call trace occurred.\n\n[1] https://syzkaller.appspot.com/x/log.txt?x=12e7025f980000",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57795",
"url": "https://www.suse.com/security/cve/CVE-2024-57795"
},
{
"category": "external",
"summary": "SUSE Bug 1235906 for CVE-2024-57795",
"url": "https://bugzilla.suse.com/1235906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57795"
},
{
"cve": "CVE-2024-57798",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57798"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()\n\nWhile receiving an MST up request message from one thread in\ndrm_dp_mst_handle_up_req(), the MST topology could be removed from\nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing\nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.\nThis could lead to a NULL deref/use-after-free of mst_primary in\ndrm_dp_mst_handle_up_req().\n\nAvoid the above by holding a reference for mst_primary in\ndrm_dp_mst_handle_up_req() while it\u0027s used.\n\nv2: Fix kfreeing the request if getting an mst_primary reference fails.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57798",
"url": "https://www.suse.com/security/cve/CVE-2024-57798"
},
{
"category": "external",
"summary": "SUSE Bug 1235818 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235818"
},
{
"category": "external",
"summary": "SUSE Bug 1235819 for CVE-2024-57798",
"url": "https://bugzilla.suse.com/1235819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57798"
},
{
"cve": "CVE-2024-57801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57801"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Skip restore TC rules for vport rep without loaded flag\n\nDuring driver unload, unregister_netdev is called after unloading\nvport rep. So, the mlx5e_rep_priv is already freed while trying to get\nrpriv-\u003enetdev, or walk rpriv-\u003etc_ht, which results in use-after-free.\nSo add the checking to make sure access the data of vport rep which is\nstill loaded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57801",
"url": "https://www.suse.com/security/cve/CVE-2024-57801"
},
{
"category": "external",
"summary": "SUSE Bug 1235940 for CVE-2024-57801",
"url": "https://bugzilla.suse.com/1235940"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57801"
},
{
"cve": "CVE-2024-57802",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57802"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: check buffer length before accessing it\n\nSyzkaller reports an uninit value read from ax25cmp when sending raw message\nthrough ieee802154 implementation.\n\n=====================================================\nBUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601\n nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774\n nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\n xmit_one net/core/dev.c:3548 [inline]\n dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564\n __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\n raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x318/0x740 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1286 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2780\n sock_alloc_send_skb include/net/sock.h:1884 [inline]\n raw_sendmsg+0x36d/0xc10 net/ieee802154/socket.c:282\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nCPU: 0 PID: 5037 Comm: syz-executor166 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\n=====================================================\n\nThis issue occurs because the skb buffer is too small, and it\u0027s actual\nallocation is aligned. This hides an actual issue, which is that nr_route_frame\ndoes not validate the buffer size before using it.\n\nFix this issue by checking skb-\u003elen before accessing any fields in skb-\u003edata.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57802",
"url": "https://www.suse.com/security/cve/CVE-2024-57802"
},
{
"category": "external",
"summary": "SUSE Bug 1235941 for CVE-2024-57802",
"url": "https://bugzilla.suse.com/1235941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57802"
},
{
"cve": "CVE-2024-57804",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57804"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs\n\nThe driver, through the SAS transport, exposes a sysfs interface to\nenable/disable PHYs in a controller/expander setup. When multiple PHYs\nare disabled and enabled in rapid succession, the persistent and current\nconfig pages related to SAS IO unit/SAS Expander pages could get\ncorrupted.\n\nUse separate memory for each config request.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57804",
"url": "https://www.suse.com/security/cve/CVE-2024-57804"
},
{
"category": "external",
"summary": "SUSE Bug 1235779 for CVE-2024-57804",
"url": "https://bugzilla.suse.com/1235779"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57804"
},
{
"cve": "CVE-2024-57809",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57809"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: imx6: Fix suspend/resume support on i.MX6QDL\n\nThe suspend/resume functionality is currently broken on the i.MX6QDL\nplatform, as documented in the NXP errata (ERR005723):\n\n https://www.nxp.com/docs/en/errata/IMX6DQCE.pdf\n\nThis patch addresses the issue by sharing most of the suspend/resume\nsequences used by other i.MX devices, while avoiding modifications to\ncritical registers that disrupt the PCIe functionality. It targets the\nsame problem as the following downstream commit:\n\n https://github.com/nxp-imx/linux-imx/commit/4e92355e1f79d225ea842511fcfd42b343b32995\n\nUnlike the downstream commit, this patch also resets the connected PCIe\ndevice if possible. Without this reset, certain drivers, such as ath10k\nor iwlwifi, will crash on resume. The device reset is also done by the\ndriver on other i.MX platforms, making this patch consistent with\nexisting practices.\n\nUpon resuming, the kernel will hang and display an error. Here\u0027s an\nexample of the error encountered with the ath10k driver:\n\n ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible\n Unhandled fault: imprecise external abort (0x1406) at 0x0106f944\n\nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a\nPCIe device is connected.\n\n[kwilczynski: commit log, added tag for stable releases]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57809",
"url": "https://www.suse.com/security/cve/CVE-2024-57809"
},
{
"category": "external",
"summary": "SUSE Bug 1235793 for CVE-2024-57809",
"url": "https://bugzilla.suse.com/1235793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57809"
},
{
"cve": "CVE-2024-57838",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57838"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Mark IRQ entries to fix stack depot warnings\n\nThe stack depot filters out everything outside of the top interrupt\ncontext as an uninteresting or irrelevant part of the stack traces. This\nhelps with stack trace de-duplication, avoiding an explosion of saved\nstack traces that share the same IRQ context code path but originate\nfrom different randomly interrupted points, eventually exhausting the\nstack depot.\n\nFiltering uses in_irqentry_text() to identify functions within the\n.irqentry.text and .softirqentry.text sections, which then become the\nlast stack trace entries being saved.\n\nWhile __do_softirq() is placed into the .softirqentry.text section by\ncommon code, populating .irqentry.text is architecture-specific.\n\nCurrently, the .irqentry.text section on s390 is empty, which prevents\nstack depot filtering and de-duplication and could result in warnings\nlike:\n\nStack depot reached limit capacity\nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8\n\nwith PREEMPT and KASAN enabled.\n\nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into\nthe .irqentry.text section and updating the kprobes blacklist to include\nthe .irqentry.text section.\n\nThis is done only for asynchronous interrupts and explicitly not for\nprogram checks, which are synchronous and where the context beyond the\nprogram check is important to preserve. Despite machine checks being\nsomewhat in between, they are extremely rare, and preserving context\nwhen possible is also of value.\n\nSVCs and Restart Interrupts are not relevant, one being always at the\nboundary to user space and the other being a one-time thing.\n\nIRQ entries filtering is also optionally used in ftrace function graph,\nwhere the same logic applies.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57838",
"url": "https://www.suse.com/security/cve/CVE-2024-57838"
},
{
"category": "external",
"summary": "SUSE Bug 1235798 for CVE-2024-57838",
"url": "https://bugzilla.suse.com/1235798"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57838"
},
{
"cve": "CVE-2024-57849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_sf: Handle CPU hotplug remove during sampling\n\nCPU hotplug remove handling triggers the following function\ncall sequence:\n\n CPUHP_AP_PERF_S390_SF_ONLINE --\u003e s390_pmu_sf_offline_cpu()\n ...\n CPUHP_AP_PERF_ONLINE --\u003e perf_event_exit_cpu()\n\nThe s390 CPUMF sampling CPU hotplug handler invokes:\n\n s390_pmu_sf_offline_cpu()\n +--\u003e cpusf_pmu_setup()\n +--\u003e setup_pmc_cpu()\n +--\u003e deallocate_buffers()\n\nThis function de-allocates all sampling data buffers (SDBs) allocated\nfor that CPU at event initialization. It also clears the\nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.\n\nWith the event still being active on the removed CPU, the CPU event\nhotplug support in kernel performance subsystem triggers the\nfollowing function calls on the removed CPU:\n\n perf_event_exit_cpu()\n +--\u003e perf_event_exit_cpu_context()\n +--\u003e __perf_event_exit_context()\n\t +--\u003e __perf_remove_from_context()\n\t +--\u003e event_sched_out()\n\t +--\u003e cpumsf_pmu_del()\n\t +--\u003e cpumsf_pmu_stop()\n +--\u003e hw_perf_event_update()\n\nto stop and remove the event. During removal of the event, the\nsampling device driver tries to read out the remaining samples from\nthe sample data buffers (SDBs). But they have already been freed\n(and may have been re-assigned). This may lead to a use after free\nsituation in which case the samples are most likely invalid. In the\nbest case the memory has not been reassigned and still contains\nvalid data.\n\nRemedy this situation and check if the CPU is still in reserved\nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been\nreleased an contain valid data. This is always the case when\nthe event is removed (and no CPU hotplug off occured).\nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57849",
"url": "https://www.suse.com/security/cve/CVE-2024-57849"
},
{
"category": "external",
"summary": "SUSE Bug 1235814 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235814"
},
{
"category": "external",
"summary": "SUSE Bug 1235815 for CVE-2024-57849",
"url": "https://bugzilla.suse.com/1235815"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57849"
},
{
"cve": "CVE-2024-57850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57850"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: Prevent rtime decompress memory corruption\n\nThe rtime decompression routine does not fully check bounds during the\nentirety of the decompression pass and can corrupt memory outside the\ndecompression buffer if the compressed data is corrupted. This adds the\nrequired check to prevent this failure mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57850",
"url": "https://www.suse.com/security/cve/CVE-2024-57850"
},
{
"category": "external",
"summary": "SUSE Bug 1235812 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235812"
},
{
"category": "external",
"summary": "SUSE Bug 1235813 for CVE-2024-57850",
"url": "https://bugzilla.suse.com/1235813"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57850"
},
{
"cve": "CVE-2024-57857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57857"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Remove direct link to net_device\n\nDo not manage a per device direct link to net_device. Rely\non associated ib_devices net_device management, not doubling\nthe effort locally. A badly managed local link to net_device\nwas causing a \u0027KASAN: slab-use-after-free\u0027 exception during\nsiw_query_port() call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57857",
"url": "https://www.suse.com/security/cve/CVE-2024-57857"
},
{
"category": "external",
"summary": "SUSE Bug 1235946 for CVE-2024-57857",
"url": "https://bugzilla.suse.com/1235946"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57857"
},
{
"cve": "CVE-2024-57874",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57874"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL\n\nCurrently tagged_addr_ctrl_set() doesn\u0027t initialize the temporary \u0027ctrl\u0027\nvariable, and a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently tagged_addr_ctrl_set() will consume an\narbitrary value, potentially leaking up to 64 bits of memory from the\nkernel stack. The read is limited to a specific slot on the stack, and\nthe issue does not provide a write mechanism.\n\nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and\nrejects other values, a partial SETREGSET attempt will randomly succeed\nor fail depending on the value of the uninitialized value, and the\nexposure is significantly limited.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\nvalue of the tagged address ctrl will be retained.\n\nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the\nuser_aarch64_view used by a native AArch64 task to manipulate another\nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error\nvalue when called for a compat task, tagged_addr_ctrl_get() and\ntagged_addr_ctrl_set() should never observe an error value from\nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that\nsuch an error would be unexpected, and error handlnig is not missing in\neither case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57874",
"url": "https://www.suse.com/security/cve/CVE-2024-57874"
},
{
"category": "external",
"summary": "SUSE Bug 1235808 for CVE-2024-57874",
"url": "https://bugzilla.suse.com/1235808"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-57874"
},
{
"cve": "CVE-2024-57876",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57876"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix resetting msg rx state after topology removal\n\nIf the MST topology is removed during the reception of an MST down reply\nor MST up request sideband message, the\ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset\nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with\nthe reading/parsing of the message from another thread via\ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is\npossible since the reader/parser doesn\u0027t hold any lock while accessing\nthe reception state. This in turn can lead to a memory corruption in the\nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST\nsideband message body length check\").\n\nFix the above by resetting the message reception state if needed before\nreading/parsing a message. Another solution would be to hold the\ndrm_dp_mst_topology_mgr::lock for the whole duration of the message\nreception/parsing in drm_dp_mst_handle_down_rep() and\ndrm_dp_mst_handle_up_req(), however this would require a bigger change.\nSince the fix is also needed for stable, opting for the simpler solution\nin this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57876",
"url": "https://www.suse.com/security/cve/CVE-2024-57876"
},
{
"category": "external",
"summary": "SUSE Bug 1235806 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235806"
},
{
"category": "external",
"summary": "SUSE Bug 1235807 for CVE-2024-57876",
"url": "https://bugzilla.suse.com/1235807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57876"
},
{
"cve": "CVE-2024-57884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57884"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()\n\nThe task sometimes continues looping in throttle_direct_reclaim() because\nallow_direct_reclaim(pgdat) keeps returning false. \n\n #0 [ffff80002cb6f8d0] __switch_to at ffff8000080095ac\n #1 [ffff80002cb6f900] __schedule at ffff800008abbd1c\n #2 [ffff80002cb6f990] schedule at ffff800008abc50c\n #3 [ffff80002cb6f9b0] throttle_direct_reclaim at ffff800008273550\n #4 [ffff80002cb6fa20] try_to_free_pages at ffff800008277b68\n #5 [ffff80002cb6fae0] __alloc_pages_nodemask at ffff8000082c4660\n #6 [ffff80002cb6fc50] alloc_pages_vma at ffff8000082e4a98\n #7 [ffff80002cb6fca0] do_anonymous_page at ffff80000829f5a8\n #8 [ffff80002cb6fce0] __handle_mm_fault at ffff8000082a5974\n #9 [ffff80002cb6fd90] handle_mm_fault at ffff8000082a5bd4\n\nAt this point, the pgdat contains the following two zones:\n\n NODE: 4 ZONE: 0 ADDR: ffff00817fffe540 NAME: \"DMA32\"\n SIZE: 20480 MIN/LOW/HIGH: 11/28/45\n VM_STAT:\n NR_FREE_PAGES: 359\n NR_ZONE_INACTIVE_ANON: 18813\n NR_ZONE_ACTIVE_ANON: 0\n NR_ZONE_INACTIVE_FILE: 50\n NR_ZONE_ACTIVE_FILE: 0\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\n NODE: 4 ZONE: 1 ADDR: ffff00817fffec00 NAME: \"Normal\"\n SIZE: 8454144 PRESENT: 98304 MIN/LOW/HIGH: 68/166/264\n VM_STAT:\n NR_FREE_PAGES: 146\n NR_ZONE_INACTIVE_ANON: 94668\n NR_ZONE_ACTIVE_ANON: 3\n NR_ZONE_INACTIVE_FILE: 735\n NR_ZONE_ACTIVE_FILE: 78\n NR_ZONE_UNEVICTABLE: 0\n NR_ZONE_WRITE_PENDING: 0\n NR_MLOCK: 0\n NR_BOUNCE: 0\n NR_ZSPAGES: 0\n NR_FREE_CMA_PAGES: 0\n\nIn allow_direct_reclaim(), while processing ZONE_DMA32, the sum of\ninactive/active file-backed pages calculated in zone_reclaimable_pages()\nbased on the result of zone_page_state_snapshot() is zero. \n\nAdditionally, since this system lacks swap, the calculation of inactive/\nactive anonymous pages is skipped.\n\n crash\u003e p nr_swap_pages\n nr_swap_pages = $1937 = {\n counter = 0\n }\n\nAs a result, ZONE_DMA32 is deemed unreclaimable and skipped, moving on to\nthe processing of the next zone, ZONE_NORMAL, despite ZONE_DMA32 having\nfree pages significantly exceeding the high watermark.\n\nThe problem is that the pgdat-\u003ekswapd_failures hasn\u0027t been incremented.\n\n crash\u003e px ((struct pglist_data *) 0xffff00817fffe540)-\u003ekswapd_failures\n $1935 = 0x0\n\nThis is because the node deemed balanced. The node balancing logic in\nbalance_pgdat() evaluates all zones collectively. If one or more zones\n(e.g., ZONE_DMA32) have enough free pages to meet their watermarks, the\nentire node is deemed balanced. This causes balance_pgdat() to exit early\nbefore incrementing the kswapd_failures, as it considers the overall\nmemory state acceptable, even though some zones (like ZONE_NORMAL) remain\nunder significant pressure.\n\n\nThe patch ensures that zone_reclaimable_pages() includes free pages\n(NR_FREE_PAGES) in its calculation when no other reclaimable pages are\navailable (e.g., file-backed or anonymous pages). This change prevents\nzones like ZONE_DMA32, which have sufficient free pages, from being\nmistakenly deemed unreclaimable. By doing so, the patch ensures proper\nnode balancing, avoids masking pressure on other zones like ZONE_NORMAL,\nand prevents infinite loops in throttle_direct_reclaim() caused by\nallow_direct_reclaim(pgdat) repeatedly returning false.\n\n\nThe kernel hangs due to a task stuck in throttle_direct_reclaim(), caused\nby a node being incorrectly deemed balanced despite pressure in certain\nzones, such as ZONE_NORMAL. This issue arises from\nzone_reclaimable_pages\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57884",
"url": "https://www.suse.com/security/cve/CVE-2024-57884"
},
{
"category": "external",
"summary": "SUSE Bug 1235948 for CVE-2024-57884",
"url": "https://bugzilla.suse.com/1235948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57884"
},
{
"cve": "CVE-2024-57887",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57887"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()\n\nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and\nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue\nby dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()\nin error path of probe() and also in the remove().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57887",
"url": "https://www.suse.com/security/cve/CVE-2024-57887"
},
{
"category": "external",
"summary": "SUSE Bug 1235952 for CVE-2024-57887",
"url": "https://bugzilla.suse.com/1235952"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57887"
},
{
"cve": "CVE-2024-57888",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57888"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nworkqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker\n\nAfter commit\n746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")\namdgpu started seeing the following warning:\n\n [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu]\n...\n [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched]\n...\n [ ] Call Trace:\n [ ] \u003cTASK\u003e\n...\n [ ] ? check_flush_dependency+0xf5/0x110\n...\n [ ] cancel_delayed_work_sync+0x6e/0x80\n [ ] amdgpu_gfx_off_ctrl+0xab/0x140 [amdgpu]\n [ ] amdgpu_ring_alloc+0x40/0x50 [amdgpu]\n [ ] amdgpu_ib_schedule+0xf4/0x810 [amdgpu]\n [ ] ? drm_sched_run_job_work+0x22c/0x430 [gpu_sched]\n [ ] amdgpu_job_run+0xaa/0x1f0 [amdgpu]\n [ ] drm_sched_run_job_work+0x257/0x430 [gpu_sched]\n [ ] process_one_work+0x217/0x720\n...\n [ ] \u003c/TASK\u003e\n\nThe intent of the verifcation done in check_flush_depedency is to ensure\nforward progress during memory reclaim, by flagging cases when either a\nmemory reclaim process, or a memory reclaim work item is flushed from a\ncontext not marked as memory reclaim safe.\n\nThis is correct when flushing, but when called from the\ncancel(_delayed)_work_sync() paths it is a false positive because work is\neither already running, or will not be running at all. Therefore\ncancelling it is safe and we can relax the warning criteria by letting the\nhelper know of the calling context.\n\nReferences: 746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57888",
"url": "https://www.suse.com/security/cve/CVE-2024-57888"
},
{
"category": "external",
"summary": "SUSE Bug 1235918 for CVE-2024-57888",
"url": "https://bugzilla.suse.com/1235918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57888"
},
{
"cve": "CVE-2024-57890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping. Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap. The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it\u0027s fine on\n64bit systems.\n\nThis patch does two things. First, I\u0027ve re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math. Then I\u0027ve modified\nall the callers to use size_mul() for the multiplications.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57890",
"url": "https://www.suse.com/security/cve/CVE-2024-57890"
},
{
"category": "external",
"summary": "SUSE Bug 1235919 for CVE-2024-57890",
"url": "https://bugzilla.suse.com/1235919"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57890"
},
{
"cve": "CVE-2024-57892",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57892"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv\n\nWhen mounting ocfs2 and then remounting it as read-only, a\nslab-use-after-free occurs after the user uses a syscall to\nquota_getnextquota. Specifically, sb_dqinfo(sb, type)-\u003edqi_priv is the\ndangling pointer.\n\nDuring the remounting process, the pointer dqi_priv is freed but is never\nset as null leaving it to be accessed. Additionally, the read-only option\nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the\nDQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the\nnext quota, the function ocfs2_get_next_id is called and only checks the\nquota usage flags and not the quota suspended flags.\n\nTo fix this, I set dqi_priv to null when it is freed after remounting with\nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.\n\n[akpm@linux-foundation.org: coding-style cleanups]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57892",
"url": "https://www.suse.com/security/cve/CVE-2024-57892"
},
{
"category": "external",
"summary": "SUSE Bug 1235964 for CVE-2024-57892",
"url": "https://bugzilla.suse.com/1235964"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57892"
},
{
"cve": "CVE-2024-57893",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57893"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix races at processing SysEx messages\n\nOSS sequencer handles the SysEx messages split in 6 bytes packets, and\nALSA sequencer OSS layer tries to combine those. It stores the data\nin the internal buffer and this access is racy as of now, which may\nlead to the out-of-bounds access.\n\nAs a temporary band-aid fix, introduce a mutex for serializing the\nprocess of the SysEx message packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57893",
"url": "https://www.suse.com/security/cve/CVE-2024-57893"
},
{
"category": "external",
"summary": "SUSE Bug 1235920 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235920"
},
{
"category": "external",
"summary": "SUSE Bug 1235921 for CVE-2024-57893",
"url": "https://bugzilla.suse.com/1235921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57893"
},
{
"cve": "CVE-2024-57896",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57896"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e\n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57896",
"url": "https://www.suse.com/security/cve/CVE-2024-57896"
},
{
"category": "external",
"summary": "SUSE Bug 1235965 for CVE-2024-57896",
"url": "https://bugzilla.suse.com/1235965"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57896"
},
{
"cve": "CVE-2024-57897",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57897"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Correct the migration DMA map direction\n\nThe SVM DMA device map direction should be set the same as\nthe DMA unmap setting, otherwise the DMA core will report\nthe following warning.\n\nBefore finialize this solution, there\u0027re some discussion on\nthe DMA mapping type(stream-based or coherent) in this KFD\nmigration case, followed by https://lore.kernel.org/all/04d4ab32\n-45a1-4b88-86ee-fb0f35a0ca40@amd.com/T/.\n\nAs there\u0027s no dma_sync_single_for_*() in the DMA buffer accessed\nthat because this migration operation should be sync properly and\nautomatically. Give that there\u0027s might not be a performance problem\nin various cache sync policy of DMA sync. Therefore, in order to\nsimplify the DMA direction setting alignment, let\u0027s set the DMA map\ndirection as BIDIRECTIONAL.\n\n[ 150.834218] WARNING: CPU: 8 PID: 1812 at kernel/dma/debug.c:1028 check_unmap+0x1cc/0x930\n[ 150.834225] Modules linked in: amdgpu(OE) amdxcp drm_exec(OE) gpu_sched drm_buddy(OE) drm_ttm_helper(OE) ttm(OE) drm_suballoc_helper(OE) drm_display_helper(OE) drm_kms_helper(OE) i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc sch_fq_codel intel_rapl_msr amd_atl intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd snd_pci_acp6x snd_hda_codec snd_acp_config snd_hda_core snd_hwdep snd_soc_acpi kvm_amd sunrpc snd_pcm kvm binfmt_misc snd_seq_midi crct10dif_pclmul snd_seq_midi_event ghash_clmulni_intel sha512_ssse3 snd_rawmidi nls_iso8859_1 sha256_ssse3 sha1_ssse3 snd_seq aesni_intel snd_seq_device crypto_simd snd_timer cryptd input_leds\n[ 150.834310] wmi_bmof serio_raw k10temp rapl snd sp5100_tco ipmi_devintf soundcore ccp ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport efi_pstore drm(OE) ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii\n[ 150.834354] CPU: 8 PID: 1812 Comm: rocrtst64 Tainted: G OE 6.10.0-custom #492\n[ 150.834358] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021\n[ 150.834360] RIP: 0010:check_unmap+0x1cc/0x930\n[ 150.834363] Code: c0 4c 89 4d c8 e8 34 bf 86 00 4c 8b 4d c8 4c 8b 45 c0 48 8b 4d b8 48 89 c6 41 57 4c 89 ea 48 c7 c7 80 49 b4 84 e8 b4 81 f3 ff \u003c0f\u003e 0b 48 c7 c7 04 83 ac 84 e8 76 ba fc ff 41 8b 76 4c 49 8d 7e 50\n[ 150.834365] RSP: 0018:ffffaac5023739e0 EFLAGS: 00010086\n[ 150.834368] RAX: 0000000000000000 RBX: ffffffff8566a2e0 RCX: 0000000000000027\n[ 150.834370] RDX: ffff8f6a8f621688 RSI: 0000000000000001 RDI: ffff8f6a8f621680\n[ 150.834372] RBP: ffffaac502373a30 R08: 00000000000000c9 R09: ffffaac502373850\n[ 150.834373] R10: ffffaac502373848 R11: ffffffff84f46328 R12: ffffaac502373a40\n[ 150.834375] R13: ffff8f6741045330 R14: ffff8f6741a77700 R15: ffffffff84ac831b\n[ 150.834377] FS: 00007faf0fc94c00(0000) GS:ffff8f6a8f600000(0000) knlGS:0000000000000000\n[ 150.834379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 150.834381] CR2: 00007faf0b600020 CR3: 000000010a52e000 CR4: 0000000000350ef0\n[ 150.834383] Call Trace:\n[ 150.834385] \u003cTASK\u003e\n[ 150.834387] ? show_regs+0x6d/0x80\n[ 150.834393] ? __warn+0x8c/0x140\n[ 150.834397] ? check_unmap+0x1cc/0x930\n[ 150.834400] ? report_bug+0x193/0x1a0\n[ 150.834406] ? handle_bug+0x46/0x80\n[ 150.834410] ? exc_invalid_op+0x1d/0x80\n[ 150.834413] ? asm_exc_invalid_op+0x1f/0x30\n[ 150.834420] ? check_unmap+0x1cc/0x930\n[ 150.834425] debug_dma_unmap_page+0x86/0x90\n[ 150.834431] ? srso_return_thunk+0x5/0x5f\n[ 150.834435] \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57897",
"url": "https://www.suse.com/security/cve/CVE-2024-57897"
},
{
"category": "external",
"summary": "SUSE Bug 1235969 for CVE-2024-57897",
"url": "https://bugzilla.suse.com/1235969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57897"
},
{
"cve": "CVE-2024-57899",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57899"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, \u0026bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n ? show_regs+0x54/0x58\n ? __warn+0x6b/0xd4\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? report_bug+0x113/0x150\n ? exc_overflow+0x30/0x30\n ? handle_bug+0x27/0x44\n ? exc_invalid_op+0x18/0x50\n ? handle_exception+0xf6/0xf6\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? exc_overflow+0x30/0x30\n ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n ? process_one_work+0xf1/0x1fc\n ? worker_thread+0x2c0/0x3b4\n ? kthread+0xc7/0xf0\n ? mod_delayed_work_on+0x4c/0x4c\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork+0x24/0x38\n ? kthread_complete_and_exit+0x14/0x14\n ? ret_from_fork_asm+0xf/0x14\n ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57899",
"url": "https://www.suse.com/security/cve/CVE-2024-57899"
},
{
"category": "external",
"summary": "SUSE Bug 1235924 for CVE-2024-57899",
"url": "https://bugzilla.suse.com/1235924"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57899"
},
{
"cve": "CVE-2024-57903",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57903"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: restrict SO_REUSEPORT to inet sockets\n\nAfter blamed commit, crypto sockets could accidentally be destroyed\nfrom RCU call back, as spotted by zyzbot [1].\n\nTrying to acquire a mutex in RCU callback is not allowed.\n\nRestrict SO_REUSEPORT socket option to inet sockets.\n\nv1 of this patch supported TCP, UDP and SCTP sockets,\nbut fcnal-test.sh test needed RAW and ICMP support.\n\n[1]\nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562\nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1\npreempt_count: 100, expected: 0\nRCU nest depth: 0, expected: 0\n1 lock held by ksoftirqd/1/24:\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]\n #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823\nPreemption disabled at:\n [\u003cffffffff8161c8c8\u003e] softirq_handle_begin kernel/softirq.c:402 [inline]\n [\u003cffffffff8161c8c8\u003e] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537\nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n __might_resched+0x5d4/0x780 kernel/sched/core.c:8758\n __mutex_lock_common kernel/locking/mutex.c:562 [inline]\n __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735\n crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179\n aead_release+0x3d/0x50 crypto/algif_aead.c:489\n alg_do_release crypto/af_alg.c:118 [inline]\n alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502\n __sk_destruct+0x58/0x5f0 net/core/sock.c:2260\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:950\n smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57903",
"url": "https://www.suse.com/security/cve/CVE-2024-57903"
},
{
"category": "external",
"summary": "SUSE Bug 1235967 for CVE-2024-57903",
"url": "https://bugzilla.suse.com/1235967"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57903"
},
{
"cve": "CVE-2024-57904",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57904"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: at91: call input_free_device() on allocated iio_dev\n\nCurrent implementation of at91_ts_register() calls input_free_deivce()\non st-\u003ets_input, however, the err label can be reached before the\nallocated iio_dev is stored to st-\u003ets_input. Thus call\ninput_free_device() on input instead of st-\u003ets_input.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57904",
"url": "https://www.suse.com/security/cve/CVE-2024-57904"
},
{
"category": "external",
"summary": "SUSE Bug 1236078 for CVE-2024-57904",
"url": "https://bugzilla.suse.com/1236078"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57904"
},
{
"cve": "CVE-2024-57906",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57906"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads8688: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57906",
"url": "https://www.suse.com/security/cve/CVE-2024-57906"
},
{
"category": "external",
"summary": "SUSE Bug 1236088 for CVE-2024-57906",
"url": "https://bugzilla.suse.com/1236088"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-57906"
},
{
"cve": "CVE-2024-57907",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57907"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe \u0027data\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57907",
"url": "https://www.suse.com/security/cve/CVE-2024-57907"
},
{
"category": "external",
"summary": "SUSE Bug 1236090 for CVE-2024-57907",
"url": "https://bugzilla.suse.com/1236090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2024-57907"
},
{
"cve": "CVE-2024-57908",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57908"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57908",
"url": "https://www.suse.com/security/cve/CVE-2024-57908"
},
{
"category": "external",
"summary": "SUSE Bug 1236091 for CVE-2024-57908",
"url": "https://bugzilla.suse.com/1236091"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57908"
},
{
"cve": "CVE-2024-57910",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57910"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: vcnl4035: fix information leak in triggered buffer\n\nThe \u0027buffer\u0027 local array is used to push data to userspace from a\ntriggered buffer, but it does not set an initial value for the single\ndata element, which is an u16 aligned to 8 bytes. That leaves at least\n4 bytes uninitialized even after writing an integer value with\nregmap_read().\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57910",
"url": "https://www.suse.com/security/cve/CVE-2024-57910"
},
{
"category": "external",
"summary": "SUSE Bug 1236097 for CVE-2024-57910",
"url": "https://bugzilla.suse.com/1236097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57910"
},
{
"cve": "CVE-2024-57911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57911"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n\nThe \u0027data\u0027 array is allocated via kmalloc() and it is used to push data\nto user space from a triggered buffer, but it does not set values for\ninactive channels, as it only uses iio_for_each_active_channel()\nto assign new values.\n\nUse kzalloc for the memory allocation to avoid pushing uninitialized\ninformation to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57911",
"url": "https://www.suse.com/security/cve/CVE-2024-57911"
},
{
"category": "external",
"summary": "SUSE Bug 1236098 for CVE-2024-57911",
"url": "https://bugzilla.suse.com/1236098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57911"
},
{
"cve": "CVE-2024-57912",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57912"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe \u0027sample\u0027 local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57912",
"url": "https://www.suse.com/security/cve/CVE-2024-57912"
},
{
"category": "external",
"summary": "SUSE Bug 1236101 for CVE-2024-57912",
"url": "https://bugzilla.suse.com/1236101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57912"
},
{
"cve": "CVE-2024-57913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57913"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n\nThis commit addresses an issue related to below kernel panic where\npanic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON\nin functionsfs_bind, which easily leads to the following scenarios.\n\n1.adb_write in adbd 2. UDC write via configfs\n =================\t =====================\n\n-\u003eusb_ffs_open_thread() -\u003eUDC write\n -\u003eopen_functionfs() -\u003econfigfs_write_iter()\n -\u003eadb_open() -\u003egadget_dev_desc_UDC_store()\n -\u003eadb_write() -\u003eusb_gadget_register_driver_owner\n -\u003edriver_register()\n-\u003eStartMonitor() -\u003ebus_add_driver()\n -\u003eadb_read() -\u003egadget_bind_driver()\n\u003ctimes-out without BIND event\u003e -\u003econfigfs_composite_bind()\n -\u003eusb_add_function()\n-\u003eopen_functionfs() -\u003effs_func_bind()\n -\u003eadb_open() -\u003efunctionfs_bind()\n \u003cffs-\u003estate !=FFS_ACTIVE\u003e\n\nThe adb_open, adb_read, and adb_write operations are invoked from the\ndaemon, but trying to bind the function is a process that is invoked by\nUDC write through configfs, which opens up the possibility of a race\ncondition between the two paths. In this race scenario, the kernel panic\noccurs due to the WARN_ON from functionfs_bind when panic_on_warn is\nenabled. This commit fixes the kernel panic by removing the unnecessary\nWARN_ON.\n\nKernel panic - not syncing: kernel: panic_on_warn set ...\n[ 14.542395] Call trace:\n[ 14.542464] ffs_func_bind+0x1c8/0x14a8\n[ 14.542468] usb_add_function+0xcc/0x1f0\n[ 14.542473] configfs_composite_bind+0x468/0x588\n[ 14.542478] gadget_bind_driver+0x108/0x27c\n[ 14.542483] really_probe+0x190/0x374\n[ 14.542488] __driver_probe_device+0xa0/0x12c\n[ 14.542492] driver_probe_device+0x3c/0x220\n[ 14.542498] __driver_attach+0x11c/0x1fc\n[ 14.542502] bus_for_each_dev+0x104/0x160\n[ 14.542506] driver_attach+0x24/0x34\n[ 14.542510] bus_add_driver+0x154/0x270\n[ 14.542514] driver_register+0x68/0x104\n[ 14.542518] usb_gadget_register_driver_owner+0x48/0xf4\n[ 14.542523] gadget_dev_desc_UDC_store+0xf8/0x144\n[ 14.542526] configfs_write_iter+0xf0/0x138",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57913",
"url": "https://www.suse.com/security/cve/CVE-2024-57913"
},
{
"category": "external",
"summary": "SUSE Bug 1236102 for CVE-2024-57913",
"url": "https://bugzilla.suse.com/1236102"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57913"
},
{
"cve": "CVE-2024-57915",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57915"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57915",
"url": "https://www.suse.com/security/cve/CVE-2024-57915"
},
{
"category": "external",
"summary": "SUSE Bug 1236120 for CVE-2024-57915",
"url": "https://bugzilla.suse.com/1236120"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57915"
},
{
"cve": "CVE-2024-57916",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57916"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n\nResolve kernel panic caused by improper handling of IRQs while\naccessing GPIO values. This is done by replacing generic_handle_irq with\nhandle_nested_irq.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57916",
"url": "https://www.suse.com/security/cve/CVE-2024-57916"
},
{
"category": "external",
"summary": "SUSE Bug 1236125 for CVE-2024-57916",
"url": "https://bugzilla.suse.com/1236125"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57916"
},
{
"cve": "CVE-2024-57917",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57917"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntopology: Keep the cpumask unchanged when printing cpumap\n\nDuring fuzz testing, the following warning was discovered:\n\n different return values (15 and 11) from vsnprintf(\"%*pbl\n \", ...)\n\n test:keyward is WARNING in kvasprintf\n WARNING: CPU: 55 PID: 1168477 at lib/kasprintf.c:30 kvasprintf+0x121/0x130\n Call Trace:\n kvasprintf+0x121/0x130\n kasprintf+0xa6/0xe0\n bitmap_print_to_buf+0x89/0x100\n core_siblings_list_read+0x7e/0xb0\n kernfs_file_read_iter+0x15b/0x270\n new_sync_read+0x153/0x260\n vfs_read+0x215/0x290\n ksys_read+0xb9/0x160\n do_syscall_64+0x56/0x100\n entry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nThe call trace shows that kvasprintf() reported this warning during the\nprinting of core_siblings_list. kvasprintf() has several steps:\n\n (1) First, calculate the length of the resulting formatted string.\n\n (2) Allocate a buffer based on the returned length.\n\n (3) Then, perform the actual string formatting.\n\n (4) Check whether the lengths of the formatted strings returned in\n steps (1) and (2) are consistent.\n\nIf the core_cpumask is modified between steps (1) and (3), the lengths\nobtained in these two steps may not match. Indeed our test includes cpu\nhotplugging, which should modify core_cpumask while printing.\n\nTo fix this issue, cache the cpumask into a temporary variable before\ncalling cpumap_print_{list, cpumask}_to_buf(), to keep it unchanged\nduring the printing process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57917",
"url": "https://www.suse.com/security/cve/CVE-2024-57917"
},
{
"category": "external",
"summary": "SUSE Bug 1236127 for CVE-2024-57917",
"url": "https://bugzilla.suse.com/1236127"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57917"
},
{
"cve": "CVE-2024-57922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57922"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57922",
"url": "https://www.suse.com/security/cve/CVE-2024-57922"
},
{
"category": "external",
"summary": "SUSE Bug 1236080 for CVE-2024-57922",
"url": "https://bugzilla.suse.com/1236080"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57922"
},
{
"cve": "CVE-2024-57926",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57926"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Set private-\u003eall_drm_private[i]-\u003edrm to NULL if mtk_drm_bind returns err\n\nThe pointer need to be set to NULL, otherwise KASAN complains about\nuse-after-free. Because in mtk_drm_bind, all private\u0027s drm are set\nas follows.\n\nprivate-\u003eall_drm_private[i]-\u003edrm = drm;\n\nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns\nfailure. However, the shutdown path still accesses the previous allocated\nmemory in drm_atomic_helper_shutdown.\n\n[ 84.874820] watchdog: watchdog0: watchdog did not stop!\n[ 86.512054] ==================================================================\n[ 86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1\n[ 86.515213]\n[ 86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55\n[ 86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022\n[ 86.517960] Call trace:\n[ 86.518333] show_stack+0x20/0x38 (C)\n[ 86.518891] dump_stack_lvl+0x90/0xd0\n[ 86.519443] print_report+0xf8/0x5b0\n[ 86.519985] kasan_report+0xb4/0x100\n[ 86.520526] __asan_report_load8_noabort+0x20/0x30\n[ 86.521240] drm_atomic_helper_shutdown+0x33c/0x378\n[ 86.521966] mtk_drm_shutdown+0x54/0x80\n[ 86.522546] platform_shutdown+0x64/0x90\n[ 86.523137] device_shutdown+0x260/0x5b8\n[ 86.523728] kernel_restart+0x78/0xf0\n[ 86.524282] __do_sys_reboot+0x258/0x2f0\n[ 86.524871] __arm64_sys_reboot+0x90/0xd8\n[ 86.525473] invoke_syscall+0x74/0x268\n[ 86.526041] el0_svc_common.constprop.0+0xb0/0x240\n[ 86.526751] do_el0_svc+0x4c/0x70\n[ 86.527251] el0_svc+0x4c/0xc0\n[ 86.527719] el0t_64_sync_handler+0x144/0x168\n[ 86.528367] el0t_64_sync+0x198/0x1a0\n[ 86.528920]\n[ 86.529157] The buggy address belongs to the physical page:\n[ 86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc\n[ 86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)\n[ 86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000\n[ 86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000\n[ 86.534511] page dumped because: kasan: bad access detected\n[ 86.535323]\n[ 86.535559] Memory state around the buggy address:\n[ 86.536265] ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.537314] ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.538363] \u003effff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.544733] ^\n[ 86.551057] ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.557510] ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[ 86.563928] ==================================================================\n[ 86.571093] Disabling lock debugging due to kernel taint\n[ 86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b\n[ 86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]\n...",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57926",
"url": "https://www.suse.com/security/cve/CVE-2024-57926"
},
{
"category": "external",
"summary": "SUSE Bug 1236082 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236082"
},
{
"category": "external",
"summary": "SUSE Bug 1236084 for CVE-2024-57926",
"url": "https://bugzilla.suse.com/1236084"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-57926"
},
{
"cve": "CVE-2024-57929",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57929"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm array: fix releasing a faulty array block twice in dm_array_cursor_end\n\nWhen dm_bm_read_lock() fails due to locking or checksum errors, it\nreleases the faulty block implicitly while leaving an invalid output\npointer behind. The caller of dm_bm_read_lock() should not operate on\nthis invalid dm_block pointer, or it will lead to undefined result.\nFor example, the dm_array_cursor incorrectly caches the invalid pointer\non reading a faulty array block, causing a double release in\ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().\n\nReproduce steps:\n\n1. initialize a cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\n2. wipe the second array block offline\n\ndmsteup remove cache cmeta cdata corig\nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\\n2\u003e/dev/null | hexdump -e \u00271/8 \"%u\\n\"\u0027)\ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock\n\n3. try reopen the cache device\n\ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"\ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"\ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"\ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\\n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"\n\nKernel logs:\n\n(snip)\ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10\ndevice-mapper: block manager: array validator check failed for block 10\ndevice-mapper: array: get_ablock failed\ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed\n------------[ cut here ]------------\nkernel BUG at drivers/md/dm-bufio.c:638!\n\nFix by setting the cached block pointer to NULL on errors.\n\nIn addition to the reproducer described above, this fix can be\nverified using the \"array_cursor/damaged\" test in dm-unit:\n dm-unit run /pdata/array_cursor/damaged --kernel-dir \u003cKERNEL_DIR\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57929",
"url": "https://www.suse.com/security/cve/CVE-2024-57929"
},
{
"category": "external",
"summary": "SUSE Bug 1236096 for CVE-2024-57929",
"url": "https://bugzilla.suse.com/1236096"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57929"
},
{
"cve": "CVE-2024-57931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57931"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: ignore unknown extended permissions\n\nWhen evaluating extended permissions, ignore unknown permissions instead\nof calling BUG(). This commit ensures that future permissions can be\nadded without interfering with older kernels.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57931",
"url": "https://www.suse.com/security/cve/CVE-2024-57931"
},
{
"category": "external",
"summary": "SUSE Bug 1236192 for CVE-2024-57931",
"url": "https://bugzilla.suse.com/1236192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57931"
},
{
"cve": "CVE-2024-57932",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57932"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv-\u003enum_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57932",
"url": "https://www.suse.com/security/cve/CVE-2024-57932"
},
{
"category": "external",
"summary": "SUSE Bug 1236190 for CVE-2024-57932",
"url": "https://bugzilla.suse.com/1236190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57932"
},
{
"cve": "CVE-2024-57933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XSK operations on the existence of queues\n\nThis patch predicates the enabling and disabling of XSK pools on the\nexistence of queues. As it stands, if the interface is down, disabling\nor enabling XSK pools would result in a crash, as the RX queue pointer\nwould be NULL. XSK pool registration will occur as part of the next\ninterface up.\n\nSimilarly, xsk_wakeup needs be guarded against queues disappearing\nwhile the function is executing, so a check against the\nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the\ndisabling of the bit and the synchronize_net() in gve_turndown.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57933",
"url": "https://www.suse.com/security/cve/CVE-2024-57933"
},
{
"category": "external",
"summary": "SUSE Bug 1236178 for CVE-2024-57933",
"url": "https://bugzilla.suse.com/1236178"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57933"
},
{
"cve": "CVE-2024-57935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57935"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57935",
"url": "https://www.suse.com/security/cve/CVE-2024-57935"
},
{
"category": "external",
"summary": "SUSE Bug 1236180 for CVE-2024-57935",
"url": "https://bugzilla.suse.com/1236180"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57935"
},
{
"cve": "CVE-2024-57936",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57936"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Fix max SGEs for the Work Request\n\nGen P7 supports up to 13 SGEs for now. WQE software structure\ncan hold only 6 now. Since the max send sge is reported as\n13, the stack can give requests up to 13 SGEs. This is causing\ntraffic failures and system crashes.\n\nUse the define for max SGE supported for variable size. This\nwill work for both static and variable WQEs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57936",
"url": "https://www.suse.com/security/cve/CVE-2024-57936"
},
{
"category": "external",
"summary": "SUSE Bug 1236181 for CVE-2024-57936",
"url": "https://bugzilla.suse.com/1236181"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57936"
},
{
"cve": "CVE-2024-57938",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57938"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()\n\nWhile by default max_autoclose equals to INT_MAX / HZ, one may set\nnet.sctp.max_autoclose to UINT_MAX. There is code in\nsctp_association_init() that can consequently trigger overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57938",
"url": "https://www.suse.com/security/cve/CVE-2024-57938"
},
{
"category": "external",
"summary": "SUSE Bug 1236182 for CVE-2024-57938",
"url": "https://bugzilla.suse.com/1236182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57938"
},
{
"cve": "CVE-2024-57940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57940"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix the infinite loop in exfat_readdir()\n\nIf the file system is corrupted so that a cluster is linked to\nitself in the cluster chain, and there is an unused directory\nentry in the cluster, \u0027dentry\u0027 will not be incremented, causing\ncondition \u0027dentry \u003c max_dentries\u0027 unable to prevent an infinite\nloop.\n\nThis infinite loop causes s_lock not to be released, and other\ntasks will hang, such as exfat_sync_fs().\n\nThis commit stops traversing the cluster chain when there is unused\ndirectory entry in the cluster to avoid this infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57940",
"url": "https://www.suse.com/security/cve/CVE-2024-57940"
},
{
"category": "external",
"summary": "SUSE Bug 1236227 for CVE-2024-57940",
"url": "https://bugzilla.suse.com/1236227"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57940"
},
{
"cve": "CVE-2024-57946",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57946"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: don\u0027t keep queue frozen during system suspend\n\nCommit 4ce6e2db00de (\"virtio-blk: Ensure no requests in virtqueues before\ndeleting vqs.\") replaces queue quiesce with queue freeze in virtio-blk\u0027s\nPM callbacks. And the motivation is to drain inflight IOs before suspending.\n\nblock layer\u0027s queue freeze looks very handy, but it is also easy to cause\ndeadlock, such as, any attempt to call into bio_queue_enter() may run into\ndeadlock if the queue is frozen in current context. There are all kinds\nof -\u003esuspend() called in suspend context, so keeping queue frozen in the\nwhole suspend context isn\u0027t one good idea. And Marek reported lockdep\nwarning[1] caused by virtio-blk\u0027s freeze queue in virtblk_freeze().\n\n[1] https://lore.kernel.org/linux-block/ca16370e-d646-4eee-b9cc-87277c89c43c@samsung.com/\n\nGiven the motivation is to drain in-flight IOs, it can be done by calling\nfreeze \u0026 unfreeze, meantime restore to previous behavior by keeping queue\nquiesced during suspend.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57946",
"url": "https://www.suse.com/security/cve/CVE-2024-57946"
},
{
"category": "external",
"summary": "SUSE Bug 1236247 for CVE-2024-57946",
"url": "https://bugzilla.suse.com/1236247"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2024-57946"
},
{
"cve": "CVE-2024-8805",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-8805"
}
],
"notes": [
{
"category": "general",
"text": "BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-8805",
"url": "https://www.suse.com/security/cve/CVE-2024-8805"
},
{
"category": "external",
"summary": "SUSE Bug 1230697 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1230697"
},
{
"category": "external",
"summary": "SUSE Bug 1240804 for CVE-2024-8805",
"url": "https://bugzilla.suse.com/1240804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "important"
}
],
"title": "CVE-2024-8805"
},
{
"cve": "CVE-2025-21632",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21632"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Ensure shadow stack is active before \"getting\" registers\n\nThe x86 shadow stack support has its own set of registers. Those registers\nare XSAVE-managed, but they are \"supervisor state components\" which means\nthat userspace can not touch them with XSAVE/XRSTOR. It also means that\nthey are not accessible from the existing ptrace ABI for XSAVE state.\nThus, there is a new ptrace get/set interface for it.\n\nThe regset code that ptrace uses provides an -\u003eactive() handler in\naddition to the get/set ones. For shadow stack this -\u003eactive() handler\nverifies that shadow stack is enabled via the ARCH_SHSTK_SHSTK bit in the\nthread struct. The -\u003eactive() handler is checked from some call sites of\nthe regset get/set handlers, but not the ptrace ones. This was not\nunderstood when shadow stack support was put in place.\n\nAs a result, both the set/get handlers can be called with\nXFEATURE_CET_USER in its init state, which would cause get_xsave_addr() to\nreturn NULL and trigger a WARN_ON(). The ssp_set() handler luckily has an\nssp_active() check to avoid surprising the kernel with shadow stack\nbehavior when the kernel is not ready for it (ARCH_SHSTK_SHSTK==0). That\ncheck just happened to avoid the warning.\n\nBut the -\u003eget() side wasn\u0027t so lucky. It can be called with shadow stacks\ndisabled, triggering the warning in practice, as reported by Christina\nSchimpe:\n\nWARNING: CPU: 5 PID: 1773 at arch/x86/kernel/fpu/regset.c:198 ssp_get+0x89/0xa0\n[...]\nCall Trace:\n\u003cTASK\u003e\n? show_regs+0x6e/0x80\n? ssp_get+0x89/0xa0\n? __warn+0x91/0x150\n? ssp_get+0x89/0xa0\n? report_bug+0x19d/0x1b0\n? handle_bug+0x46/0x80\n? exc_invalid_op+0x1d/0x80\n? asm_exc_invalid_op+0x1f/0x30\n? __pfx_ssp_get+0x10/0x10\n? ssp_get+0x89/0xa0\n? ssp_get+0x52/0xa0\n__regset_get+0xad/0xf0\ncopy_regset_to_user+0x52/0xc0\nptrace_regset+0x119/0x140\nptrace_request+0x13c/0x850\n? wait_task_inactive+0x142/0x1d0\n? do_syscall_64+0x6d/0x90\narch_ptrace+0x102/0x300\n[...]\n\nEnsure that shadow stacks are active in a thread before looking them up\nin the XSAVE buffer. Since ARCH_SHSTK_SHSTK and user_ssp[SHSTK_EN] are\nset at the same time, the active check ensures that there will be\nsomething to find in the XSAVE buffer.\n\n[ dhansen: changelog/subject tweaks ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21632",
"url": "https://www.suse.com/security/cve/CVE-2025-21632"
},
{
"category": "external",
"summary": "SUSE Bug 1236106 for CVE-2025-21632",
"url": "https://bugzilla.suse.com/1236106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21632"
},
{
"cve": "CVE-2025-21645",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21645"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it\n\nWakeup for IRQ1 should be disabled only in cases where i8042 had\nactually enabled it, otherwise \"wake_depth\" for this IRQ will try to\ndrop below zero and there will be an unpleasant WARN() logged:\n\nkernel: atkbd serio0: Disabling IRQ1 wakeup source to avoid platform firmware bug\nkernel: ------------[ cut here ]------------\nkernel: Unbalanced IRQ 1 wake disable\nkernel: WARNING: CPU: 10 PID: 6431 at kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0\n\nThe PMC driver uses DEFINE_SIMPLE_DEV_PM_OPS() to define its dev_pm_ops\nwhich sets amd_pmc_suspend_handler() to the .suspend, .freeze, and\n.poweroff handlers. i8042_pm_suspend(), however, is only set as\nthe .suspend handler.\n\nFix the issue by call PMC suspend handler only from the same set of\ndev_pm_ops handlers as i8042_pm_suspend(), which currently means just\nthe .suspend handler.\n\nTo reproduce this issue try hibernating (S4) the machine after a fresh boot\nwithout putting it into s2idle first.\n\n[ij: edited the commit message.]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21645",
"url": "https://www.suse.com/security/cve/CVE-2025-21645"
},
{
"category": "external",
"summary": "SUSE Bug 1236131 for CVE-2025-21645",
"url": "https://bugzilla.suse.com/1236131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21645"
},
{
"cve": "CVE-2025-21646",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21646"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the maximum cell name length\n\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\nproblem occurs if someone actually does that: kafs tries to create a\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\nwith a warning:\n\n WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\n\nbecause procfs limits the maximum filename length to 255.\n\nHowever, the DNS limits the maximum lookup length and, by extension, the\nmaximum cell name, to 255 less two (length count and trailing NUL).\n\nFix this by limiting the maximum acceptable cellname length to 253. This\nalso allows us to be sure we can create the \"/afs/.\u003ccell\u003e/\" mountpoint too.\n\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\nexceeds 253.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21646",
"url": "https://www.suse.com/security/cve/CVE-2025-21646"
},
{
"category": "external",
"summary": "SUSE Bug 1236168 for CVE-2025-21646",
"url": "https://bugzilla.suse.com/1236168"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21646"
},
{
"cve": "CVE-2025-21649",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21649"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix kernel crash when 1588 is sent on HIP08 devices\n\nCurrently, HIP08 devices does not register the ptp devices, so the\nhdev-\u003eptp is NULL. But the tx process would still try to set hardware time\nstamp info with SKBTX_HW_TSTAMP flag and cause a kernel crash.\n\n[ 128.087798] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000018\n...\n[ 128.280251] pc : hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.286600] lr : hclge_ptp_set_tx_info+0x20/0x140 [hclge]\n[ 128.292938] sp : ffff800059b93140\n[ 128.297200] x29: ffff800059b93140 x28: 0000000000003280\n[ 128.303455] x27: ffff800020d48280 x26: ffff0cb9dc814080\n[ 128.309715] x25: ffff0cb9cde93fa0 x24: 0000000000000001\n[ 128.315969] x23: 0000000000000000 x22: 0000000000000194\n[ 128.322219] x21: ffff0cd94f986000 x20: 0000000000000000\n[ 128.328462] x19: ffff0cb9d2a166c0 x18: 0000000000000000\n[ 128.334698] x17: 0000000000000000 x16: ffffcf1fc523ed24\n[ 128.340934] x15: 0000ffffd530a518 x14: 0000000000000000\n[ 128.347162] x13: ffff0cd6bdb31310 x12: 0000000000000368\n[ 128.353388] x11: ffff0cb9cfbc7070 x10: ffff2cf55dd11e02\n[ 128.359606] x9 : ffffcf1f85a212b4 x8 : ffff0cd7cf27dab0\n[ 128.365831] x7 : 0000000000000a20 x6 : ffff0cd7cf27d000\n[ 128.372040] x5 : 0000000000000000 x4 : 000000000000ffff\n[ 128.378243] x3 : 0000000000000400 x2 : ffffcf1f85a21294\n[ 128.384437] x1 : ffff0cb9db520080 x0 : ffff0cb9db500080\n[ 128.390626] Call trace:\n[ 128.393964] hclge_ptp_set_tx_info+0x2c/0x140 [hclge]\n[ 128.399893] hns3_nic_net_xmit+0x39c/0x4c4 [hns3]\n[ 128.405468] xmit_one.constprop.0+0xc4/0x200\n[ 128.410600] dev_hard_start_xmit+0x54/0xf0\n[ 128.415556] sch_direct_xmit+0xe8/0x634\n[ 128.420246] __dev_queue_xmit+0x224/0xc70\n[ 128.425101] dev_queue_xmit+0x1c/0x40\n[ 128.429608] ovs_vport_send+0xac/0x1a0 [openvswitch]\n[ 128.435409] do_output+0x60/0x17c [openvswitch]\n[ 128.440770] do_execute_actions+0x898/0x8c4 [openvswitch]\n[ 128.446993] ovs_execute_actions+0x64/0xf0 [openvswitch]\n[ 128.453129] ovs_dp_process_packet+0xa0/0x224 [openvswitch]\n[ 128.459530] ovs_vport_receive+0x7c/0xfc [openvswitch]\n[ 128.465497] internal_dev_xmit+0x34/0xb0 [openvswitch]\n[ 128.471460] xmit_one.constprop.0+0xc4/0x200\n[ 128.476561] dev_hard_start_xmit+0x54/0xf0\n[ 128.481489] __dev_queue_xmit+0x968/0xc70\n[ 128.486330] dev_queue_xmit+0x1c/0x40\n[ 128.490856] ip_finish_output2+0x250/0x570\n[ 128.495810] __ip_finish_output+0x170/0x1e0\n[ 128.500832] ip_finish_output+0x3c/0xf0\n[ 128.505504] ip_output+0xbc/0x160\n[ 128.509654] ip_send_skb+0x58/0xd4\n[ 128.513892] udp_send_skb+0x12c/0x354\n[ 128.518387] udp_sendmsg+0x7a8/0x9c0\n[ 128.522793] inet_sendmsg+0x4c/0x8c\n[ 128.527116] __sock_sendmsg+0x48/0x80\n[ 128.531609] __sys_sendto+0x124/0x164\n[ 128.536099] __arm64_sys_sendto+0x30/0x5c\n[ 128.540935] invoke_syscall+0x50/0x130\n[ 128.545508] el0_svc_common.constprop.0+0x10c/0x124\n[ 128.551205] do_el0_svc+0x34/0xdc\n[ 128.555347] el0_svc+0x20/0x30\n[ 128.559227] el0_sync_handler+0xb8/0xc0\n[ 128.563883] el0_sync+0x160/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21649",
"url": "https://www.suse.com/security/cve/CVE-2025-21649"
},
{
"category": "external",
"summary": "SUSE Bug 1236143 for CVE-2025-21649",
"url": "https://bugzilla.suse.com/1236143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21649"
},
{
"cve": "CVE-2025-21650",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21650"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue\n\nThe TQP BAR space is divided into two segments. TQPs 0-1023 and TQPs\n1024-1279 are in different BAR space addresses. However,\nhclge_fetch_pf_reg does not distinguish the tqp space information when\nreading the tqp space information. When the number of TQPs is greater\nthan 1024, access bar space overwriting occurs.\nThe problem of different segments has been considered during the\ninitialization of tqp.io_base. Therefore, tqp.io_base is directly used\nwhen the queue is read in hclge_fetch_pf_reg.\n\nThe error message:\n\nUnable to handle kernel paging request at virtual address ffff800037200000\npc : hclge_fetch_pf_reg+0x138/0x250 [hclge]\nlr : hclge_get_regs+0x84/0x1d0 [hclge]\nCall trace:\n hclge_fetch_pf_reg+0x138/0x250 [hclge]\n hclge_get_regs+0x84/0x1d0 [hclge]\n hns3_get_regs+0x2c/0x50 [hns3]\n ethtool_get_regs+0xf4/0x270\n dev_ethtool+0x674/0x8a0\n dev_ioctl+0x270/0x36c\n sock_do_ioctl+0x110/0x2a0\n sock_ioctl+0x2ac/0x530\n __arm64_sys_ioctl+0xa8/0x100\n invoke_syscall+0x4c/0x124\n el0_svc_common.constprop.0+0x140/0x15c\n do_el0_svc+0x30/0xd0\n el0_svc+0x1c/0x2c\n el0_sync_handler+0xb0/0xb4\n el0_sync+0x168/0x180",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21650",
"url": "https://www.suse.com/security/cve/CVE-2025-21650"
},
{
"category": "external",
"summary": "SUSE Bug 1236144 for CVE-2025-21650",
"url": "https://bugzilla.suse.com/1236144"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21650"
},
{
"cve": "CVE-2025-21651",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21651"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: don\u0027t auto enable misc vector\n\nCurrently, there is a time window between misc irq enabled\nand service task inited. If an interrupte is reported at\nthis time, it will cause warning like below:\n\n[ 16.324639] Call trace:\n[ 16.324641] __queue_delayed_work+0xb8/0xe0\n[ 16.324643] mod_delayed_work_on+0x78/0xd0\n[ 16.324655] hclge_errhand_task_schedule+0x58/0x90 [hclge]\n[ 16.324662] hclge_misc_irq_handle+0x168/0x240 [hclge]\n[ 16.324666] __handle_irq_event_percpu+0x64/0x1e0\n[ 16.324667] handle_irq_event+0x80/0x170\n[ 16.324670] handle_fasteoi_edge_irq+0x110/0x2bc\n[ 16.324671] __handle_domain_irq+0x84/0xfc\n[ 16.324673] gic_handle_irq+0x88/0x2c0\n[ 16.324674] el1_irq+0xb8/0x140\n[ 16.324677] arch_cpu_idle+0x18/0x40\n[ 16.324679] default_idle_call+0x5c/0x1bc\n[ 16.324682] cpuidle_idle_call+0x18c/0x1c4\n[ 16.324684] do_idle+0x174/0x17c\n[ 16.324685] cpu_startup_entry+0x30/0x6c\n[ 16.324687] secondary_start_kernel+0x1a4/0x280\n[ 16.324688] ---[ end trace 6aa0bff672a964aa ]---\n\nSo don\u0027t auto enable misc vector when request irq..",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21651",
"url": "https://www.suse.com/security/cve/CVE-2025-21651"
},
{
"category": "external",
"summary": "SUSE Bug 1236145 for CVE-2025-21651",
"url": "https://bugzilla.suse.com/1236145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21651"
},
{
"cve": "CVE-2025-21652",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21652"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: Fix use-after-free in ipvlan_get_iflink().\n\nsyzbot presented an use-after-free report [0] regarding ipvlan and\nlinkwatch.\n\nipvlan does not hold a refcnt of the lower device unlike vlan and\nmacvlan.\n\nIf the linkwatch work is triggered for the ipvlan dev, the lower dev\nmight have already been freed, resulting in UAF of ipvlan-\u003ephy_dev in\nipvlan_get_iflink().\n\nWe can delay the lower dev unregistration like vlan and macvlan by\nholding the lower dev\u0027s refcnt in dev-\u003enetdev_ops-\u003endo_init() and\nreleasing it in dev-\u003epriv_destructor().\n\nJakub pointed out calling .ndo_XXX after unregister_netdevice() has\nreturned is error prone and suggested [1] addressing this UAF in the\ncore by taking commit 750e51603395 (\"net: avoid potential UAF in\ndefault_operstate()\") further.\n\nLet\u0027s assume unregistering devices DOWN and use RCU protection in\ndefault_operstate() not to race with the device unregistration.\n\n[0]:\nBUG: KASAN: slab-use-after-free in ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\nRead of size 4 at addr ffff0000d768c0e0 by task kworker/u8:35/6944\n\nCPU: 0 UID: 0 PID: 6944 Comm: kworker/u8:35 Not tainted 6.13.0-rc2-g9bc5c9515b48 #12 4c3cb9e8b4565456f6a355f312ff91f4f29b3c47\nHardware name: linux,dummy-virt (DT)\nWorkqueue: events_unbound linkwatch_event\nCall trace:\n show_stack+0x38/0x50 arch/arm64/kernel/stacktrace.c:484 (C)\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xbc/0x108 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x16c/0x6f0 mm/kasan/report.c:489\n kasan_report+0xc0/0x120 mm/kasan/report.c:602\n __asan_report_load4_noabort+0x20/0x30 mm/kasan/report_generic.c:380\n ipvlan_get_iflink+0x84/0x88 drivers/net/ipvlan/ipvlan_main.c:353\n dev_get_iflink+0x7c/0xd8 net/core/dev.c:674\n default_operstate net/core/link_watch.c:45 [inline]\n rfc2863_policy+0x144/0x360 net/core/link_watch.c:72\n linkwatch_do_dev+0x60/0x228 net/core/link_watch.c:175\n __linkwatch_run_queue+0x2f4/0x5b8 net/core/link_watch.c:239\n linkwatch_event+0x64/0xa8 net/core/link_watch.c:282\n process_one_work+0x700/0x1398 kernel/workqueue.c:3229\n process_scheduled_works kernel/workqueue.c:3310 [inline]\n worker_thread+0x8c4/0xe10 kernel/workqueue.c:3391\n kthread+0x2b0/0x360 kernel/kthread.c:389\n ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862\n\nAllocated by task 9303:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x30/0x68 mm/kasan/common.c:68\n kasan_save_alloc_info+0x44/0x58 mm/kasan/generic.c:568\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x84/0xa0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4283 [inline]\n __kmalloc_node_noprof+0x2a0/0x560 mm/slub.c:4289\n __kvmalloc_node_noprof+0x9c/0x230 mm/util.c:650\n alloc_netdev_mqs+0xb4/0x1118 net/core/dev.c:11209\n rtnl_create_link+0x2b8/0xb60 net/core/rtnetlink.c:3595\n rtnl_newlink_create+0x19c/0x868 net/core/rtnetlink.c:3771\n __rtnl_newlink net/core/rtnetlink.c:3896 [inline]\n rtnl_newlink+0x122c/0x15c0 net/core/rtnetlink.c:4011\n rtnetlink_rcv_msg+0x61c/0x918 net/core/rtnetlink.c:6901\n netlink_rcv_skb+0x1dc/0x398 net/netlink/af_netlink.c:2542\n rtnetlink_rcv+0x34/0x50 net/core/rtnetlink.c:6928\n netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]\n netlink_unicast+0x618/0x838 net/netlink/af_netlink.c:1347\n netlink_sendmsg+0x5fc/0x8b0 net/netlink/af_netlink.c:1891\n sock_sendmsg_nosec net/socket.c:711 [inline]\n __sock_sendmsg net/socket.c:726 [inline]\n __sys_sendto+0x2ec/0x438 net/socket.c:2197\n __do_sys_sendto net/socket.c:2204 [inline]\n __se_sys_sendto net/socket.c:2200 [inline]\n __arm64_sys_sendto+0xe4/0x110 net/socket.c:2200\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x90/0x278 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x13c/0x250 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x54/0x70 arch/arm64/kernel/syscall.c:151\n el\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21652",
"url": "https://www.suse.com/security/cve/CVE-2025-21652"
},
{
"category": "external",
"summary": "SUSE Bug 1236160 for CVE-2025-21652",
"url": "https://bugzilla.suse.com/1236160"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21652"
},
{
"cve": "CVE-2025-21653",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21653"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute\n\nsyzbot found that TCA_FLOW_RSHIFT attribute was not validated.\nRight shitfing a 32bit integer is undefined for large shift values.\n\nUBSAN: shift-out-of-bounds in net/sched/cls_flow.c:329:23\nshift exponent 9445 is too large for 32-bit type \u0027u32\u0027 (aka \u0027unsigned int\u0027)\nCPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 Not tainted 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: ipv6_addrconf addrconf_dad_work\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n ubsan_epilogue lib/ubsan.c:231 [inline]\n __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468\n flow_classify+0x24d5/0x25b0 net/sched/cls_flow.c:329\n tc_classify include/net/tc_wrapper.h:197 [inline]\n __tcf_classify net/sched/cls_api.c:1771 [inline]\n tcf_classify+0x420/0x1160 net/sched/cls_api.c:1867\n sfb_classify net/sched/sch_sfb.c:260 [inline]\n sfb_enqueue+0x3ad/0x18b0 net/sched/sch_sfb.c:318\n dev_qdisc_enqueue+0x4b/0x290 net/core/dev.c:3793\n __dev_xmit_skb net/core/dev.c:3889 [inline]\n __dev_queue_xmit+0xf0e/0x3f50 net/core/dev.c:4400\n dev_queue_xmit include/linux/netdevice.h:3168 [inline]\n neigh_hh_output include/net/neighbour.h:523 [inline]\n neigh_output include/net/neighbour.h:537 [inline]\n ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236\n iptunnel_xmit+0x55d/0x9b0 net/ipv4/ip_tunnel_core.c:82\n udp_tunnel_xmit_skb+0x262/0x3b0 net/ipv4/udp_tunnel_core.c:173\n geneve_xmit_skb drivers/net/geneve.c:916 [inline]\n geneve_xmit+0x21dc/0x2d00 drivers/net/geneve.c:1039\n __netdev_start_xmit include/linux/netdevice.h:5002 [inline]\n netdev_start_xmit include/linux/netdevice.h:5011 [inline]\n xmit_one net/core/dev.c:3590 [inline]\n dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606\n __dev_queue_xmit+0x1b73/0x3f50 net/core/dev.c:4434",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21653",
"url": "https://www.suse.com/security/cve/CVE-2025-21653"
},
{
"category": "external",
"summary": "SUSE Bug 1236161 for CVE-2025-21653",
"url": "https://bugzilla.suse.com/1236161"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21653"
},
{
"cve": "CVE-2025-21655",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21655"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/eventfd: ensure io_eventfd_signal() defers another RCU period\n\nio_eventfd_do_signal() is invoked from an RCU callback, but when\ndropping the reference to the io_ev_fd, it calls io_eventfd_free()\ndirectly if the refcount drops to zero. This isn\u0027t correct, as any\npotential freeing of the io_ev_fd should be deferred another RCU grace\nperiod.\n\nJust call io_eventfd_put() rather than open-code the dec-and-test and\nfree, which will correctly defer it another RCU grace period.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21655",
"url": "https://www.suse.com/security/cve/CVE-2025-21655"
},
{
"category": "external",
"summary": "SUSE Bug 1236163 for CVE-2025-21655",
"url": "https://bugzilla.suse.com/1236163"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21655"
},
{
"cve": "CVE-2025-21656",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21656"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur\n\nscsi_execute_cmd() function can return both negative (linux codes) and\npositive (scsi_cmnd result field) error codes.\n\nCurrently the driver just passes error codes of scsi_execute_cmd() to\nhwmon core, which is incorrect because hwmon only checks for negative\nerror codes. This leads to hwmon reporting uninitialized data to\nuserspace in case of SCSI errors (for example if the disk drive was\ndisconnected).\n\nThis patch checks scsi_execute_cmd() output and returns -EIO if it\u0027s\nerror code is positive.\n\n[groeck: Avoid inline variable declaration for portability]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21656",
"url": "https://www.suse.com/security/cve/CVE-2025-21656"
},
{
"category": "external",
"summary": "SUSE Bug 1236248 for CVE-2025-21656",
"url": "https://bugzilla.suse.com/1236248"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "low"
}
],
"title": "CVE-2025-21656"
},
{
"cve": "CVE-2025-21662",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21662"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Fix variable not being completed when function returns\n\nWhen cmd_alloc_index(), fails cmd_work_handler() needs\nto complete ent-\u003eslotted before returning early.\nOtherwise the task which issued the command may hang:\n\n mlx5_core 0000:01:00.0: cmd_work_handler:877:(pid 3880418): failed to allocate command entry\n INFO: task kworker/13:2:4055883 blocked for more than 120 seconds.\n Not tainted 4.19.90-25.44.v2101.ky10.aarch64 #1\n \"echo 0 \u003e /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n kworker/13:2 D 0 4055883 2 0x00000228\n Workqueue: events mlx5e_tx_dim_work [mlx5_core]\n Call trace:\n __switch_to+0xe8/0x150\n __schedule+0x2a8/0x9b8\n schedule+0x2c/0x88\n schedule_timeout+0x204/0x478\n wait_for_common+0x154/0x250\n wait_for_completion+0x28/0x38\n cmd_exec+0x7a0/0xa00 [mlx5_core]\n mlx5_cmd_exec+0x54/0x80 [mlx5_core]\n mlx5_core_modify_cq+0x6c/0x80 [mlx5_core]\n mlx5_core_modify_cq_moderation+0xa0/0xb8 [mlx5_core]\n mlx5e_tx_dim_work+0x54/0x68 [mlx5_core]\n process_one_work+0x1b0/0x448\n worker_thread+0x54/0x468\n kthread+0x134/0x138\n ret_from_fork+0x10/0x18",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21662",
"url": "https://www.suse.com/security/cve/CVE-2025-21662"
},
{
"category": "external",
"summary": "SUSE Bug 1236198 for CVE-2025-21662",
"url": "https://bugzilla.suse.com/1236198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21662"
},
{
"cve": "CVE-2025-21663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21663"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: stmmac: dwmac-tegra: Read iommu stream id from device tree\n\nNvidia\u0027s Tegra MGBE controllers require the IOMMU \"Stream ID\" (SID) to be\nwritten to the MGBE_WRAP_AXI_ASID0_CTRL register.\n\nThe current driver is hard coded to use MGBE0\u0027s SID for all controllers.\nThis causes softirq time outs and kernel panics when using controllers\nother than MGBE0.\n\nExample dmesg errors when an ethernet cable is connected to MGBE1:\n\n[ 116.133290] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 121.851283] tegra-mgbe 6910000.ethernet eth1: NETDEV WATCHDOG: CPU: 5: transmit queue 0 timed out 5690 ms\n[ 121.851782] tegra-mgbe 6910000.ethernet eth1: Reset adapter.\n[ 121.892464] tegra-mgbe 6910000.ethernet eth1: Register MEM_TYPE_PAGE_POOL RxQ-0\n[ 121.905920] tegra-mgbe 6910000.ethernet eth1: PHY [stmmac-1:00] driver [Aquantia AQR113] (irq=171)\n[ 121.907356] tegra-mgbe 6910000.ethernet eth1: Enabling Safety Features\n[ 121.907578] tegra-mgbe 6910000.ethernet eth1: IEEE 1588-2008 Advanced Timestamp supported\n[ 121.908399] tegra-mgbe 6910000.ethernet eth1: registered PTP clock\n[ 121.908582] tegra-mgbe 6910000.ethernet eth1: configuring for phy/10gbase-r link mode\n[ 125.961292] tegra-mgbe 6910000.ethernet eth1: Link is Up - 1Gbps/Full - flow control rx/tx\n[ 181.921198] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:\n[ 181.921404] rcu: \t7-....: (1 GPs behind) idle=540c/1/0x4000000000000002 softirq=1748/1749 fqs=2337\n[ 181.921684] rcu: \t(detected by 4, t=6002 jiffies, g=1357, q=1254 ncpus=8)\n[ 181.921878] Sending NMI from CPU 4 to CPUs 7:\n[ 181.921886] NMI backtrace for cpu 7\n[ 181.922131] CPU: 7 UID: 0 PID: 0 Comm: swapper/7 Kdump: loaded Not tainted 6.13.0-rc3+ #6\n[ 181.922390] Hardware name: NVIDIA CTI Forge + Orin AGX/Jetson, BIOS 202402.1-Unknown 10/28/2024\n[ 181.922658] pstate: 40400009 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 181.922847] pc : handle_softirqs+0x98/0x368\n[ 181.922978] lr : __do_softirq+0x18/0x20\n[ 181.923095] sp : ffff80008003bf50\n[ 181.923189] x29: ffff80008003bf50 x28: 0000000000000008 x27: 0000000000000000\n[ 181.923379] x26: ffffce78ea277000 x25: 0000000000000000 x24: 0000001c61befda0\n[ 181.924486] x23: 0000000060400009 x22: ffffce78e99918bc x21: ffff80008018bd70\n[ 181.925568] x20: ffffce78e8bb00d8 x19: ffff80008018bc20 x18: 0000000000000000\n[ 181.926655] x17: ffff318ebe7d3000 x16: ffff800080038000 x15: 0000000000000000\n[ 181.931455] x14: ffff000080816680 x13: ffff318ebe7d3000 x12: 000000003464d91d\n[ 181.938628] x11: 0000000000000040 x10: ffff000080165a70 x9 : ffffce78e8bb0160\n[ 181.945804] x8 : ffff8000827b3160 x7 : f9157b241586f343 x6 : eeb6502a01c81c74\n[ 181.953068] x5 : a4acfcdd2e8096bb x4 : ffffce78ea277340 x3 : 00000000ffffd1e1\n[ 181.960329] x2 : 0000000000000101 x1 : ffffce78ea277340 x0 : ffff318ebe7d3000\n[ 181.967591] Call trace:\n[ 181.970043] handle_softirqs+0x98/0x368 (P)\n[ 181.974240] __do_softirq+0x18/0x20\n[ 181.977743] ____do_softirq+0x14/0x28\n[ 181.981415] call_on_irq_stack+0x24/0x30\n[ 181.985180] do_softirq_own_stack+0x20/0x30\n[ 181.989379] __irq_exit_rcu+0x114/0x140\n[ 181.993142] irq_exit_rcu+0x14/0x28\n[ 181.996816] el1_interrupt+0x44/0xb8\n[ 182.000316] el1h_64_irq_handler+0x14/0x20\n[ 182.004343] el1h_64_irq+0x80/0x88\n[ 182.007755] cpuidle_enter_state+0xc4/0x4a8 (P)\n[ 182.012305] cpuidle_enter+0x3c/0x58\n[ 182.015980] cpuidle_idle_call+0x128/0x1c0\n[ 182.020005] do_idle+0xe0/0xf0\n[ 182.023155] cpu_startup_entry+0x3c/0x48\n[ 182.026917] secondary_start_kernel+0xdc/0x120\n[ 182.031379] __secondary_switched+0x74/0x78\n[ 212.971162] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 7-.... } 6103 jiffies s: 417 root: 0x80/.\n[ 212.985935] rcu: blocking rcu_node structures (internal RCU debug):\n[ 212.992758] Sending NMI from CPU 0 to CPUs 7:\n[ 212.998539] NMI backtrace for cpu 7\n[ 213.004304] CPU: 7 UID: 0 PI\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21663",
"url": "https://www.suse.com/security/cve/CVE-2025-21663"
},
{
"category": "external",
"summary": "SUSE Bug 1236260 for CVE-2025-21663",
"url": "https://bugzilla.suse.com/1236260"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21663"
},
{
"cve": "CVE-2025-21664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21664"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm thin: make get_first_thin use rcu-safe list first function\n\nThe documentation in rculist.h explains the absence of list_empty_rcu()\nand cautions programmers against relying on a list_empty() -\u003e\nlist_first() sequence in RCU safe code. This is because each of these\nfunctions performs its own READ_ONCE() of the list head. This can lead\nto a situation where the list_empty() sees a valid list entry, but the\nsubsequent list_first() sees a different view of list head state after a\nmodification.\n\nIn the case of dm-thin, this author had a production box crash from a GP\nfault in the process_deferred_bios path. This function saw a valid list\nhead in get_first_thin() but when it subsequently dereferenced that and\nturned it into a thin_c, it got the inside of the struct pool, since the\nlist was now empty and referring to itself. The kernel on which this\noccurred printed both a warning about a refcount_t being saturated, and\na UBSAN error for an out-of-bounds cpuid access in the queued spinlock,\nprior to the fault itself. When the resulting kdump was examined, it\nwas possible to see another thread patiently waiting in thin_dtr\u0027s\nsynchronize_rcu.\n\nThe thin_dtr call managed to pull the thin_c out of the active thins\nlist (and have it be the last entry in the active_thins list) at just\nthe wrong moment which lead to this crash.\n\nFortunately, the fix here is straight forward. Switch get_first_thin()\nfunction to use list_first_or_null_rcu() which performs just a single\nREAD_ONCE() and returns NULL if the list is already empty.\n\nThis was run against the devicemapper test suite\u0027s thin-provisioning\nsuites for delete and suspend and no regressions were observed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21664",
"url": "https://www.suse.com/security/cve/CVE-2025-21664"
},
{
"category": "external",
"summary": "SUSE Bug 1236262 for CVE-2025-21664",
"url": "https://bugzilla.suse.com/1236262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21664"
},
{
"cve": "CVE-2025-21674",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21674"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel\n\nAttempt to enable IPsec packet offload in tunnel mode in debug kernel\ngenerates the following kernel panic, which is happening due to two\nissues:\n1. In SA add section, the should be _bh() variant when marking SA mode.\n2. There is not needed flush_workqueue in SA delete routine. It is not\nneeded as at this stage as it is removed from SADB and the running work\nwill be canceled later in SA free.\n\n =====================================================\n WARNING: SOFTIRQ-safe -\u003e SOFTIRQ-unsafe lock order detected\n 6.12.0+ #4 Not tainted\n -----------------------------------------------------\n charon/1337 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:\n ffff88810f365020 (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}, at: mlx5e_xfrm_del_state+0xca/0x1e0 [mlx5_core]\n\n and this task is already holding:\n ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n which would create a new lock dependency:\n (\u0026x-\u003elock){+.-.}-{3:3} -\u003e (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n but this new dependency connects a SOFTIRQ-irq-safe lock:\n (\u0026x-\u003elock){+.-.}-{3:3}\n\n ... which became SOFTIRQ-irq-safe at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n hrtimer_run_softirq+0x146/0x2e0\n handle_softirqs+0x266/0x860\n irq_exit_rcu+0x115/0x1a0\n sysvec_apic_timer_interrupt+0x6e/0x90\n asm_sysvec_apic_timer_interrupt+0x16/0x20\n default_idle+0x13/0x20\n default_idle_call+0x67/0xa0\n do_idle+0x2da/0x320\n cpu_startup_entry+0x50/0x60\n start_secondary+0x213/0x2a0\n common_startup_64+0x129/0x138\n\n to a SOFTIRQ-irq-unsafe lock:\n (\u0026xa-\u003exa_lock#24){+.+.}-{3:3}\n\n ... which became SOFTIRQ-irq-unsafe at:\n ...\n lock_acquire+0x1be/0x520\n _raw_spin_lock+0x2c/0x40\n xa_set_mark+0x70/0x110\n mlx5e_xfrm_add_state+0xe48/0x2290 [mlx5_core]\n xfrm_dev_state_add+0x3bb/0xd70\n xfrm_add_sa+0x2451/0x4a90\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\n other info that might help us debug this:\n\n Possible interrupt unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(\u0026xa-\u003exa_lock#24);\n local_irq_disable();\n lock(\u0026x-\u003elock);\n lock(\u0026xa-\u003exa_lock#24);\n \u003cInterrupt\u003e\n lock(\u0026x-\u003elock);\n\n *** DEADLOCK ***\n\n 2 locks held by charon/1337:\n #0: ffffffff87f8f858 (\u0026net-\u003exfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x5e/0x90\n #1: ffff88813e0f0d48 (\u0026x-\u003elock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30\n\n the dependencies between SOFTIRQ-irq-safe lock and the holding lock:\n -\u003e (\u0026x-\u003elock){+.-.}-{3:3} ops: 29 {\n HARDIRQ-ON-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_alloc_spi+0xc0/0xe60\n xfrm_alloc_userspi+0x5f6/0xbc0\n xfrm_user_rcv_msg+0x493/0x880\n netlink_rcv_skb+0x12e/0x380\n xfrm_netlink_rcv+0x6d/0x90\n netlink_unicast+0x42f/0x740\n netlink_sendmsg+0x745/0xbe0\n __sock_sendmsg+0xc5/0x190\n __sys_sendto+0x1fe/0x2c0\n __x64_sys_sendto+0xdc/0x1b0\n do_syscall_64+0x6d/0x140\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n IN-SOFTIRQ-W at:\n lock_acquire+0x1be/0x520\n _raw_spin_lock_bh+0x34/0x40\n xfrm_timer_handler+0x91/0xd70\n __hrtimer_run_queues+0x1dd/0xa60\n \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21674",
"url": "https://www.suse.com/security/cve/CVE-2025-21674"
},
{
"category": "external",
"summary": "SUSE Bug 1236688 for CVE-2025-21674",
"url": "https://bugzilla.suse.com/1236688"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21674"
},
{
"cve": "CVE-2025-21676",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21676"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fec: handle page_pool_dev_alloc_pages error\n\nThe fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did\nnot handle the case when it returned NULL. There was a WARN_ON(!new_page)\nbut it would still proceed to use the NULL pointer and then crash.\n\nThis case does seem somewhat rare but when the system is under memory\npressure it can happen. One case where I can duplicate this with some\nfrequency is when writing over a smbd share to a SATA HDD attached to an\nimx6q.\n\nSetting /proc/sys/vm/min_free_kbytes to higher values also seems to solve\nthe problem for my test case. But it still seems wrong that the fec driver\nignores the memory allocation error and can crash.\n\nThis commit handles the allocation error by dropping the current packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21676",
"url": "https://www.suse.com/security/cve/CVE-2025-21676"
},
{
"category": "external",
"summary": "SUSE Bug 1236696 for CVE-2025-21676",
"url": "https://bugzilla.suse.com/1236696"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21676"
},
{
"cve": "CVE-2025-21682",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21682"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: bnxt: always recalculate features after XDP clearing, fix null-deref\n\nRecalculate features when XDP is detached.\n\nBefore:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: off [requested on]\n\nAfter:\n # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp\n # ip li set dev eth0 xdp off\n # ethtool -k eth0 | grep gro\n rx-gro-hw: on\n\nThe fact that HW-GRO doesn\u0027t get re-enabled automatically is just\na minor annoyance. The real issue is that the features will randomly\ncome back during another reconfiguration which just happens to invoke\nnetdev_update_features(). The driver doesn\u0027t handle reconfiguring\ntwo things at a time very robustly.\n\nStarting with commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") we only reconfigure the RSS hash table\nif the \"effective\" number of Rx rings has changed. If HW-GRO is\nenabled \"effective\" number of rings is 2x what user sees.\nSo if we are in the bad state, with HW-GRO re-enablement \"pending\"\nafter XDP off, and we lower the rings by / 2 - the HW-GRO rings\ndoing 2x and the ethtool -L doing / 2 may cancel each other out,\nand the:\n\n if (old_rx_rings != bp-\u003ehw_resc.resv_rx_rings \u0026\u0026\n\ncondition in __bnxt_reserve_rings() will be false.\nThe RSS map won\u0027t get updated, and we\u0027ll crash with:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000168\n RIP: 0010:__bnxt_hwrm_vnic_set_rss+0x13a/0x1a0\n bnxt_hwrm_vnic_rss_cfg_p5+0x47/0x180\n __bnxt_setup_vnic_p5+0x58/0x110\n bnxt_init_nic+0xb72/0xf50\n __bnxt_open_nic+0x40d/0xab0\n bnxt_open_nic+0x2b/0x60\n ethtool_set_channels+0x18c/0x1d0\n\nAs we try to access a freed ring.\n\nThe issue is present since XDP support was added, really, but\nprior to commit 98ba1d931f61 (\"bnxt_en: Fix RSS logic in\n__bnxt_reserve_rings()\") it wasn\u0027t causing major issues.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21682",
"url": "https://www.suse.com/security/cve/CVE-2025-21682"
},
{
"category": "external",
"summary": "SUSE Bug 1236703 for CVE-2025-21682",
"url": "https://bugzilla.suse.com/1236703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.aarch64",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.aarch64",
"SUSE Linux Micro 6.0:kernel-default-base-6.4.0-24.1.21.4.x86_64",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.s390x",
"SUSE Linux Micro 6.0:kernel-default-livepatch-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-devel-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-kvmsmall-6.4.0-25.1.x86_64",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.s390x",
"SUSE Linux Micro 6.0:kernel-livepatch-6_4_0-25-default-1-1.2.x86_64",
"SUSE Linux Micro 6.0:kernel-macros-6.4.0-25.1.noarch",
"SUSE Linux Micro 6.0:kernel-source-6.4.0-25.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-03-27T15:23:42Z",
"details": "moderate"
}
],
"title": "CVE-2025-21682"
}
]
}
suse-su-2025:0499-1
Vulnerability from csaf_suse
Published
2025-02-13 08:14
Modified
2025-02-13 08:14
Summary
Security update for the Linux Kernel
Notes
Title of the patch
Security update for the Linux Kernel
Description of the patch
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703).
- CVE-2025-21678: gtp: Destroy device along with udp socket's netns dismantle (bsc#1236698).
- CVE-2025-21676: net: fec: handle page_pool_dev_alloc_pages error (bsc#1236696).
- CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
- CVE-2025-21674: net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel (bsc#1236688).
- CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
- CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
- CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
- CVE-2025-21664: dm thin: make get_first_thin use rcu-safe list first function (bsc#1236262).
- CVE-2025-21663: net: stmmac: dwmac-tegra: Read iommu stream id from device tree (bsc#1236260).
- CVE-2025-21662: net/mlx5: Fix variable not being completed when function returns (bsc#1236198).
- CVE-2025-21655: io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (bsc#1236163).
- CVE-2025-21653: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (bsc#1236161).
- CVE-2025-21652: ipvlan: Fix use-after-free in ipvlan_get_iflink() (bsc#1236160).
- CVE-2025-21651: net: hns3: do not auto enable misc vector (bsc#1236145).
- CVE-2025-21650: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue (bsc#1236144).
- CVE-2025-21649: net: hns3: fix kernel crash when 1588 is sent on HIP08 devices (bsc#1236143).
- CVE-2025-21632: x86/fpu: Ensure shadow stack is active before 'getting' registers (bsc#1236106).
- CVE-2024-57946: virtio-blk: do not keep queue frozen during system suspend (bsc#1236247).
- CVE-2024-57938: net/sctp: Prevent autoclose integer overflow in sctp_association_init() (bsc#1236182).
- CVE-2024-57933: gve: guard XSK operations on the existence of queues (bsc#1236178).
- CVE-2024-57932: gve: guard XDP xmit NDO on existence of xdp queues (bsc#1236190).
- CVE-2024-57931: selinux: ignore unknown extended permissions (bsc#1236192).
- CVE-2024-57929: dm array: fix releasing a faulty array block twice in dm_array_cursor_end (bsc#1236096).
- CVE-2024-57917: topology: Keep the cpumask unchanged when printing cpumap (bsc#1236127).
- CVE-2024-57903: net: restrict SO_REUSEPORT to inet sockets (bsc#1235967).
- CVE-2024-57896: btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (bsc#1235965).
- CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (bsc#1235964).
- CVE-2024-57884: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (bsc#1235948).
- CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
- CVE-2024-57857: RDMA/siw: Remove direct link to net_device (bsc#1235946).
- CVE-2024-57838: s390/entry: Mark IRQ entries to fix stack depot warnings (bsc#1235798).
- CVE-2024-57809: PCI: imx6: Fix suspend/resume support on i.MX6QDL (bsc#1235793).
- CVE-2024-57804: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (bsc#1235779).
- CVE-2024-57802: netrom: check buffer length before accessing it (bsc#1235941).
- CVE-2024-57801: net/mlx5e: Skip restore TC rules for vport rep without loaded flag (bsc#1235940).
- CVE-2024-57795: RDMA/rxe: Remove the direct link to net_device (bsc#1235906).
- CVE-2024-57793: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors (bsc#1235768).
- CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
- CVE-2024-56775: drm/amd/display: Fix handling of plane refcount (bsc#1235657).
- CVE-2024-56774: btrfs: add a sanity check for btrfs root in btrfs_search_slot() (bsc#1235653).
- CVE-2024-56763: tracing: Prevent bad count for tracing_cpumask_write (bsc#1235638).
- CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
- CVE-2024-56748: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (bsc#1235627).
- CVE-2024-56747: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (bsc#1234934).
- CVE-2024-56729: smb: Initialize cfid->tcon before performing network ops (bsc#1235503).
- CVE-2024-56728: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (bsc#1235656).
- CVE-2024-56727: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c (bsc#1235583).
- CVE-2024-56726: octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (bsc#1235582).
- CVE-2024-56725: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c (bsc#1235578).
- CVE-2024-56716: netdevsim: prevent bad user input in nsim_dev_health_break_write() (bsc#1235587).
- CVE-2024-56715: ionic: Fix netdev notifier unregister on failure (bsc#1235612).
- CVE-2024-56712: udmabuf: fix memory leak on last export_udmabuf() error path (bsc#1235565).
- CVE-2024-56708: EDAC/igen6: Avoid segmentation fault on module unload (bsc#1235564).
- CVE-2024-56707: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c (bsc#1235545).
- CVE-2024-56704: 9p/xen: fix release of IRQ (bsc#1235584).
- CVE-2024-56694: bpf: fix recursive lock when verdict program return SK_PASS (bsc#1235412).
- CVE-2024-56693: brd: defer automatic disk creation until module initialization succeeds (bsc#1235418).
- CVE-2024-56679: octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (bsc#1235498).
- CVE-2024-56675: bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (bsc#1235555).
- CVE-2024-56665: bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog (bsc#1235489).
- CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
- CVE-2024-56660: net/mlx5: DR, prevent potential error pointer dereference (bsc#1235437).
- CVE-2024-56659: net: lapb: increase LAPB_HEADER_LEN (bsc#1235439).
- CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
- CVE-2024-56656: bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (bsc#1235444).
- CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
- CVE-2024-56649: net: enetc: Do not configure preemptible TCs if SIs do not support (bsc#1235449).
- CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235451).
- CVE-2024-56643: dccp: Fix memory leak in dccp_feat_change_recv (bsc#1235132).
- CVE-2024-56641: net/smc: initialize close_work early to avoid warning (bsc#1235526).
- CVE-2024-56637: netfilter: ipset: Hold module reference while requesting a module (bsc#1235523).
- CVE-2024-56636: geneve: do not assume mac header is set in geneve_xmit_skb() (bsc#1235520).
- CVE-2024-56635: net: avoid potential UAF in default_operstate() (bsc#1235519).
- CVE-2024-56631: scsi: sg: Fix slab-use-after-free read in sg_release() (bsc#1235480).
- CVE-2024-56622: scsi: ufs: core: sysfs: Prevent div by zero (bsc#1235251).
- CVE-2024-56620: scsi: ufs: qcom: Only free platform MSIs when ESI is enabled (bsc#1235227).
- CVE-2024-56617: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU (bsc#1235429).
- CVE-2024-56615: bpf: fix OOB devmap writes when deleting elements (bsc#1235426).
- CVE-2024-56614: xsk: fix OOB map writes when deleting elements (bsc#1235424).
- CVE-2024-56611: mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (bsc#1235391).
- CVE-2024-56610: kcsan: Turn report_filterlist_lock into a raw_spinlock (bsc#1235390).
- CVE-2024-56608: drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (bsc#1235487).
- CVE-2024-56603: net: af_can: do not leave a dangling sk pointer in can_create() (bsc#1235415).
- CVE-2024-56602: net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (bsc#1235521).
- CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
- CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
- CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
- CVE-2024-56589: scsi: hisi_sas: Add cond_resched() for no forced preemption model (bsc#1235241).
- CVE-2024-56588: scsi: hisi_sas: Create all dump files during debugfs initialization (bsc#1235123).
- CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
- CVE-2024-56569: ftrace: Fix regression with module command in stack_trace_filter (bsc#1235031).
- CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
- CVE-2024-56372: net: tun: fix tun_napi_alloc_frags() (bsc#1235753).
- CVE-2024-55881: KVM: x86: Play nice with protected guests in complete_hypercall_exit() (bsc#1235745).
- CVE-2024-55639: net: renesas: rswitch: avoid use-after-put for a device tree node (bsc#1235737).
- CVE-2024-53685: ceph: give up on paths longer than PATH_MAX (bsc#1235720).
- CVE-2024-53236: xsk: Free skb when TX metadata options are invalid (bsc#1235000).
- CVE-2024-53232: iommu/s390: Implement blocking domain (bsc#1235050).
- CVE-2024-53227: scsi: bfa: Fix use-after-free in bfad_im_module_exit() (bsc#1235011).
- CVE-2024-53203: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (bsc#1235001).
- CVE-2024-53198: xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (bsc#1234923).
- CVE-2024-53196: KVM: arm64: Do not retire aborted MMIO instruction (bsc#1234906).
- CVE-2024-53195: KVM: arm64: Get rid of userspace_irqchip_in_use (bsc#1234957).
- CVE-2024-53187: io_uring: check for overflows in io_pin_pages (bsc#1234947).
- CVE-2024-53185: smb: client: fix NULL ptr deref in crypto_aead_setkey() (bsc#1234901).
- CVE-2024-53175: ipc: fix memleak if msg_init_ns failed in create_ipc_ns (bsc#1234893).
- CVE-2024-53172: ubi: fastmap: Fix duplicate slab cache names while attaching (bsc#1234898).
- CVE-2024-53170: block: fix uaf for flush rq while iterating tags (bsc#1234888).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-53091: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx (bsc#1233638).
- CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
- CVE-2024-50299: sctp: properly validate chunk size in sctp_sf_ootb() (bsc#1233488).
- CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
- CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
- CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
- CVE-2024-50151: smb: client: fix OOBs when building SMB2_IOCTL request (bsc#1233055).
- CVE-2024-49998: net: dsa: improve shutdown sequence (bsc#1232087).
- CVE-2024-49978: gso: fix udp gso fraglist segmentation after pull from frag_list (bsc#1232101).
- CVE-2024-49951: Bluetooth: MGMT: Fix possible crash on mgmt_index_removed (bsc#1232158).
- CVE-2024-49948: net: add more sanity checks to qdisc_pkt_len_init() (bsc#1232161).
- CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (bsc#1235727).
- CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
- CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705).
- CVE-2024-26810: vfio/pci: Lock external INTx masking ops (bsc#1222803).
- CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326).
The following non-security bugs were fixed:
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (stable-fixes).
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (stable-fixes).
- ACPI: PCC: Add PCC shared memory region command and status bitfields (stable-fixes).
- ACPI: fan: cleanup resources in the error path of .probe() (git-fixes).
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (stable-fixes).
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (stable-fixes).
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (stable-fixes).
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (stable-fixes).
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (git-fixes).
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (stable-fixes).
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (stable-fixes).
- ALSA: hda/realtek: Add support for Galaxy Book2 Pro (NP950XEE) (stable-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (stable-fixes).
- ALSA: hda/realtek: Enable headset mic on Positivo C6400 (stable-fixes).
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (bsc#1235686).
- ALSA: hda: Fix headset detection failure due to unstable sort (git-fixes).
- ALSA: ump: Use guard() for locking (stable-fixes).
- ALSA: usb-audio: Add delay quirk for USB Audio Device (stable-fixes).
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (stable-fixes).
- ASoC: Intel: avs: Fix theoretical infinite loop (git-fixes).
- ASoC: acp: Support microphone from Lenovo Go S (stable-fixes).
- ASoC: mediatek: disable buffer pre-allocation (stable-fixes).
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback (git-fixes).
- ASoC: rt722: add delay time to wait for the calibration procedure (stable-fixes).
- ASoC: samsung: Add missing depends on I2C (git-fixes).
- ASoC: samsung: Add missing selects for MFD_WM8994 (stable-fixes).
- ASoC: sun4i-spdif: Add clock multiplier settings (git-fixes).
- ASoC: wm8994: Add depends on MFD core (stable-fixes).
- Align git commit ID abbreviation guidelines and checks (git-fixes).
- Bluetooth: Add support ITTIM PE50-M75C (stable-fixes).
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (git-fixes).
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (git-fixes).
- Bluetooth: MGMT: Fix Add Device to responding before completing (git-fixes).
- Bluetooth: btnxpuart: Fix driver sending truncated data (git-fixes).
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming (git-fixes).
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925 (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925 (stable-fixes).
- Bluetooth: btusb: add callback function in btusb suspend/resume (stable-fixes).
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect (stable-fixes).
- Bluetooth: hci_sync: Fix not setting Random Address when required (git-fixes).
- EDAC/{i10nm,skx,skx_common}: Support UV systems (bsc#1234693).
- HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections (git-fixes).
- HID: fix generic desktop D-Pad controls (git-fixes).
- HID: hid-sensor-hub: do not use stale platform-data on remove (git-fixes).
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check (git-fixes).
- HID: multitouch: fix support for Goodix PID 0x01e9 (git-fixes).
- Input: atkbd - map F23 key to support default copilot shortcut (stable-fixes).
- Input: bbnsm_pwrkey - add remove hook (git-fixes).
- Input: bbnsm_pwrkey - fix missed key press after suspend (git-fixes).
- Input: davinci-keyscan - remove leftover header (git-fixes).
- Input: xpad - add QH Electronics VID/PID (stable-fixes).
- Input: xpad - add support for Nacon Evol-X Xbox One Controller (stable-fixes).
- Input: xpad - add support for Nacon Pro Compact (stable-fixes).
- Input: xpad - add support for wooting two he (arm) (stable-fixes).
- Input: xpad - add unofficial Xbox 360 wireless receiver clone (stable-fixes).
- Input: xpad - improve name of 8BitDo controller 2dc8:3106 (stable-fixes).
- KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (bsc#1234635).
- KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (git-fixes bsc#1235776).
- KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (git-fixes bsc#1235777).
- KVM: s390: vsie: fix virtual/physical address in unpin_scb() (git-fixes bsc#1235778).
- NFC: nci: Add bounds checking in nci_hci_create_pipe() (git-fixes).
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation (git-fixes).
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE (git-fixes).
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (git-fixes).
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq (git-fixes).
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (git-fixes).
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (git-fixes).
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy() (git-fixes).
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (git-fixes).
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test (git-fixes).
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error (git-fixes).
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset() (git-fixes).
- PCI: imx6: Skip controller_id generation logic for i.MX7D (git-fixes).
- PCI: microchip: Set inbound address translation for coherent or non-coherent mode (git-fixes).
- PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region() (git-fixes).
- PM: hibernate: Add error handling for syscore_suspend() (git-fixes).
- RDMA/bnxt_re: Add send queue size check for variable wqe (git-fixes)
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode (git-fixes)
- RDMA/bnxt_re: Fix max SGEs for the Work Request (git-fixes)
- RDMA/bnxt_re: Fix the max WQE size for static WQE support (git-fixes)
- RDMA/bnxt_re: Fix the max WQEs used in Static WQE mode (git-fixes)
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error (git-fixes)
- RDMA/bnxt_re: Fix to export port num to ib_query_qp (git-fixes)
- RDMA/mlx4: Avoid false error about access to uninitialized gids array (git-fixes)
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (git-fixes)
- RDMA/mlx5: Fix implicit ODP use after free (git-fixes)
- RDMA/mlx5: Fix indirect mkey ODP page count (git-fixes)
- RDMA/rxe: Fix mismatched max_msg_sz (git-fixes)
- RDMA/rxe: Fix the warning '__rxe_cleanup+0x12c/0x170 [rdma_rxe]' (git-fixes)
- RDMA/srp: Fix error handling in srp_add_port (git-fixes)
- Revert 'HID: multitouch: Add support for lenovo Y9000P Touchpad' (stable-fixes).
- Revert 'drm/i915/dpt: Make DPT object unshrinkable' (stable-fixes).
- Revert 'mtd: spi-nor: core: replace dummy buswidth from addr to data' (git-fixes).
- Revert 'usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null' (stable-fixes).
- USB: core: Disable LPM only for non-suspended ports (git-fixes).
- USB: serial: cp210x: add Phoenix Contact UPS Device (stable-fixes).
- USB: serial: option: add MeiG Smart SRM815 (stable-fixes).
- USB: serial: option: add Neoway N723-EA support (stable-fixes).
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (git-fixes).
- USB: usblp: return error when setting unsupported protocol (git-fixes).
- VFS: use system_unbound_wq for delayed_mntput (bsc#1234683).
- VMCI: fix reference to ioctl-number.rst (git-fixes).
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (git-fixes).
- afs: Fix cleanup of immediately failed async calls (git-fixes).
- afs: Fix directory format encoding struct (git-fixes).
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (git-fixes).
- afs: Fix the maximum cell name length (git-fixes).
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (git-fixes)
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (git-fixes)
- arm64: Kconfig: Make SME depend on BROKEN for now (git-fixes bsc#1236245).
- arm64: dts: rockchip: Add sdmmc/sdio/emmc reset controls for RK3328 (git-fixes)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (git-fixes).
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (git-fixes)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (git-fixes).
- arm64: tegra: Disable Tegra234 sce-fabric node (git-fixes)
- arm64: tegra: Fix Tegra234 PCIe interrupt-map (git-fixes)
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (git-fixes)
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf() (stable-fixes).
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (git-fixes)
- btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#1235445).
- btrfs: fix use-after-free waiting for encoded read endios (bsc#1235445).
- bus: mhi: host: Free mhi_buf vector inside mhi_alloc_bhie_table() (git-fixes).
- ceph: improve error handling and short/overflow-read logic in __ceph_sync_read() (bsc#1228592).
- cleanup: Add conditional guard support (stable-fixes).
- cleanup: Adjust scoped_guard() macros to avoid potential warning (stable-fixes).
- cleanup: Remove address space of returned pointer (git-fixes).
- cpufreq: ACPI: Fix max-frequency computation (git-fixes).
- cpufreq: Do not unregister cpufreq cooling on CPU hotplug (git-fixes).
- cpufreq: amd-pstate: remove global header file (git-fixes).
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization (bsc#1234619).
- cpufreq: intel_pstate: Drop redundant locking from intel_pstate_driver_cleanup() (bsc#1234619).
- cpufreq: intel_pstate: Fix unchecked HWP MSR access (bsc#1234619).
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller (bsc#1234619).
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (bsc#1234619).
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (git-fixes).
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() (bsc#1234619).
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() (bsc#1234619).
- cpufreq: intel_pstate: Refine computation of P-state for given frequency (bsc#1234619).
- cpufreq: intel_pstate: Replace three global.turbo_disabled checks (bsc#1234619).
- cpufreq: intel_pstate: Revise global turbo disable check (bsc#1234619).
- cpufreq: intel_pstate: Simplify spinlock locking (bsc#1234619).
- cpufreq: intel_pstate: Update the maximum CPU frequency consistently (bsc#1234619).
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (git-fixes).
- cpufreq: intel_pstate: Use __ro_after_init for three variables (bsc#1234619).
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (bsc#1234619).
- cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (git-fixes).
- cpuidle: Avoid potential overflow in integer multiplication (git-fixes).
- cpupower: fix TSC MHz calculation (git-fixes).
- crypto: caam - use JobR's space to access page 0 regs (git-fixes).
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes (git-fixes).
- crypto: ecdsa - Avoid signed integer overflow on signature decoding (stable-fixes).
- crypto: ecdsa - Convert byte arrays with key coordinates to digits (stable-fixes).
- crypto: ecdsa - Rename keylen to bufsize where necessary (stable-fixes).
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature (stable-fixes).
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (git-fixes).
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto() (git-fixes).
- crypto: qce - fix goto jump in error path (git-fixes).
- crypto: qce - fix priority to be less than ARMv8 CE (git-fixes).
- crypto: qce - unregister previously registered algos in error path (git-fixes).
- devcoredump: cleanup some comments (git-fixes).
- dlm: fix possible lkb_resource null dereference (git-fixes).
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver (git-fixes).
- docs: media: update location of the media patches (stable-fixes).
- docs: power: Fix footnote reference for Toshiba Satellite P10-554 (git-fixes).
- driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (git-fixes).
- drivers/card_reader/rtsx_usb: Restore interrupt based detection (git-fixes).
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (stable-fixes).
- drm/amd/display: Fix DSC-re-computing (stable-fixes).
- drm/amd/display: Fix incorrect DSC recompute trigger (stable-fixes).
- drm/amd/display: Use HW lock mgr for PSR1 (stable-fixes).
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (stable-fixes).
- drm/amd/pm: Fix an error handling path in vega10_enable_se_edc_force_stall_config() (git-fixes).
- drm/amdgpu/vcn: reset fw_shared under SRIOV (git-fixes).
- drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (git-fixes).
- drm/amdgpu: always sync the GFX pipe on ctx switch (stable-fixes).
- drm/amdgpu: simplify return statement in amdgpu_ras_eeprom_init (git-fixes).
- drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini() (git-fixes).
- drm/amdkfd: Correct the migration DMA map direction (stable-fixes).
- drm/amdkfd: fixed page fault when enable MES shader debugger (git-fixes).
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE (git-fixes).
- drm/etnaviv: Fix page property being used for non writecombine buffers (git-fixes).
- drm/i915/fb: Relax clear color alignment to 64 bytes (stable-fixes).
- drm/mediatek: Add return value check when reading DPCD (git-fixes).
- drm/mediatek: Add support for 180-degree rotation in the display driver (git-fixes).
- drm/mediatek: Fix YCbCr422 color format issue for DP (git-fixes).
- drm/mediatek: Fix mode valid issue for dp (git-fixes).
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err (git-fixes).
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188 (git-fixes).
- drm/mediatek: stop selecting foreign drivers (git-fixes).
- drm/msm/dp: set safe_to_exit_level before printing it (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350 (git-fixes).
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550 (git-fixes).
- drm/msm: Check return value of of_dma_configure() (git-fixes).
- drm/msm: do not clean up priv->kms prematurely (git-fixes).
- drm/rcar-du: dsi: Fix PHY lock bit check (git-fixes).
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (git-fixes).
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8 (git-fixes).
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset (git-fixes).
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0 (git-fixes).
- drm/tidss: Clear the interrupt status for interrupts being disabled (git-fixes).
- drm/tidss: Fix issue in irq handling causing irq-flood issue (git-fixes).
- drm/v3d: Assign job pointer to NULL before signaling the fence (git-fixes).
- drm/v3d: Ensure job pointer is set to NULL after job completion (git-fixes).
- drm/v3d: Stop active perfmon if it is being destroyed (git-fixes).
- drm/vmwgfx: Add new keep_resv BO param (git-fixes).
- exfat: ensure that ctime is updated whenever the mtime is (git-fixes).
- exfat: fix the infinite loop in __exfat_free_cluster() (git-fixes).
- exfat: fix the infinite loop in exfat_readdir() (git-fixes).
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device() (git-fixes).
- genirq: Make handle_enforce_irqctx() unconditionally available (git-fixes).
- genksyms: fix memory leak when the same symbol is added from source (git-fixes).
- genksyms: fix memory leak when the same symbol is read from *.symref file (git-fixes).
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (git-fixes).
- gpio: mxc: remove dead code after switch to DT-only (git-fixes).
- gpio: xilinx: Convert gpio_lock to raw spinlock (git-fixes).
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp() (git-fixes).
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur (git-fixes).
- hwmon: (drivetemp) Set scsi command timeout to 10s (stable-fixes).
- hwmon: (tmp513) Fix division of negative numbers (git-fixes).
- hyperv: Do not overlap the hvcall IO areas in get_vtl() (git-fixes).
- i2c: core: fix reference leak in i2c_register_adapter() (git-fixes).
- i2c: i801: Add support for Intel Arrow Lake-H (stable-fixes).
- i2c: i801: Add support for Intel Panther Lake (stable-fixes).
- i2c: mux: demux-pinctrl: check initial mux selection, too (git-fixes).
- i2c: rcar: fix NACK handling when being a target (git-fixes).
- i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (stable-fixes).
- ibmvnic: Free any outstanding tx skbs during scrq reset (bsc#1226980).
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (git-fixes).
- iio: adc: ad7124: Disable all channels at probe time (git-fixes).
- iio: adc: ad_sigma_delta: Handle CS assertion as intended in ad_sd_read_reg_raw() (git-fixes).
- iio: adc: at91: call input_free_device() on allocated iio_dev (git-fixes).
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (git-fixes).
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (git-fixes).
- iio: adc: ti-ads8688: fix information leak in triggered buffer (git-fixes).
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (git-fixes).
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (git-fixes).
- iio: iio-mux: kzalloc instead of devm_kzalloc to ensure page alignment (git-fixes).
- iio: imu: kmx61: fix information leak in triggered buffer (git-fixes).
- iio: inkern: call iio_device_put() only on mapped devices (git-fixes).
- iio: light: as73211: fix channel handling in only-color triggered buffer (git-fixes).
- iio: light: vcnl4035: fix information leak in triggered buffer (git-fixes).
- iio: pressure: zpa2326: fix information leak in triggered buffer (git-fixes).
- iio: test : check null return of kunit_kmalloc in iio_rescale_test_scale (git-fixes).
- intel_th: core: fix kernel-doc warnings (git-fixes).
- ipmi: ipmb: Add check devm_kasprintf() returned value (git-fixes).
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response (git-fixes).
- irqchip/gic-v3: Force propagation of the active state with a read-back (stable-fixes).
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (stable-fixes).
- kABI workaround for struct auto_pin_cfg_item change (git-fixes).
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST (git-fixes).
- kheaders: Ignore silly-rename files (stable-fixes).
- ktest.pl: Avoid false positives with grub2 skip regex (stable-fixes).
- ktest.pl: Check kernelrelease return in get_version (git-fixes).
- ktest.pl: Fix typo 'accesing' (git-fixes).
- ktest.pl: Fix typo in comment (git-fixes).
- ktest.pl: Remove unused declarations in run_bisect_test function (git-fixes).
- ktest: force $buildonly = 1 for 'make_warnings_file' test type (stable-fixes).
- landlock: Handle weird files (git-fixes).
- latencytop: use correct kernel-doc format for func params (git-fixes).
- leds: lp8860: Write full EEPROM, not only half of it (git-fixes).
- leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata() (git-fixes).
- lib/inflate.c: remove dead code (git-fixes).
- lib/stackdepot: print disabled message only if truly disabled (git-fixes).
- mac802154: check local interfaces before deleting sdata list (stable-fixes).
- mailbox: pcc: Add support for platform notification handling (stable-fixes).
- mailbox: pcc: Support shared interrupt for multiple subspaces (stable-fixes).
- mailbox: tegra-hsp: Clear mailbox before using message (git-fixes).
- maple_tree: simplify split calculation (git-fixes).
- media: camif-core: Add check for clk_enable() (git-fixes).
- media: ccs: Clean up parsed CCS static data on parse failure (git-fixes).
- media: ccs: Fix CCS static data parsing for large block sizes (git-fixes).
- media: ccs: Fix cleanup order in ccs_probe() (git-fixes).
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on af9035_i2c_master_xfer (git-fixes).
- media: dvb: mb86a16: check the return value of mb86a16_read() (git-fixes).
- media: firewire: firedtv-avc.c: replace BUG with proper, error return (git-fixes).
- media: i2c: imx412: Add missing newline to prints (git-fixes).
- media: i2c: ov9282: Correct the exposure offset (git-fixes).
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm() (git-fixes).
- media: imx296: Add standby delay during probe (git-fixes).
- media: lmedm04: Handle errors for lme2510_int_read (git-fixes).
- media: marvell: Add check for clk_enable() (git-fixes).
- media: mc: fix endpoint iteration (git-fixes).
- media: mipi-csis: Add check for clk_enable() (git-fixes).
- media: nxp: imx8-isi: fix v4l2-compliance test errors (git-fixes).
- media: ov08x40: Fix hblank out of range issue (git-fixes).
- media: ov5640: fix get_light_freq on auto (git-fixes).
- media: rc: iguanair: handle timeouts (git-fixes).
- media: rkisp1: Fix unused value issue (git-fixes).
- media: uvcvideo: Drop uvcvideo fix due to regression (bsc#1235894)
- media: uvcvideo: Fix crash during unbind if gpio unit is in use (git-fixes).
- media: uvcvideo: Fix double free in error path (git-fixes).
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events (git-fixes).
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (stable-fixes).
- media: uvcvideo: Only save async fh if success (git-fixes).
- media: uvcvideo: Propagate buf->error to userspace (git-fixes).
- media: uvcvideo: Remove dangling pointers (git-fixes).
- media: uvcvideo: Remove redundant NULL assignment (git-fixes).
- media: uvcvideo: Support partial control reads (git-fixes).
- memory tiering: count PGPROMOTE_SUCCESS when mem tiering is enabled (git-fixes).
- memory-failure: use a folio in me_huge_page() (git-fixes).
- memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (git-fixes).
- misc: fastrpc: Deregister device nodes properly in error scenarios (git-fixes).
- misc: fastrpc: Fix copy buffer page size (git-fixes).
- misc: fastrpc: Fix registered buffer page address (git-fixes).
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling (git-fixes).
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set config (git-fixes).
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (git-fixes).
- mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
- mm,page_owner: do not remove __GFP_NOLOCKDEP in add_stack_record_to_list (git-fixes).
- mm/compaction: fix UBSAN shift-out-of-bounds warning (git fixes (mm/compaction)).
- mm/memory-failure: cast index to loff_t before shifting it (git-fixes).
- mm/memory-failure: check the mapcount of the precise page (git-fixes).
- mm/memory-failure: fix crash in split_huge_page_to_list from soft_offline_page (git-fixes).
- mm/memory-failure: pass the folio and the page to collect_procs() (git-fixes).
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (git-fixes).
- mm/memory_hotplug: add missing mem_hotplug_lock (git-fixes).
- mm/memory_hotplug: fix error handling in add_memory_resource() (git-fixes).
- mm/memory_hotplug: prevent accessing by index=-1 (git-fixes).
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (git-fixes).
- mm/migrate: correct nr_failed in migrate_pages_sync() (git-fixes).
- mm/migrate: fix deadlock in migrate_pages_batch() on large folios (git-fixes).
- mm/migrate: putback split folios when numa hint migration fails (git-fixes).
- mm/migrate: split source folio if it is on deferred split list (git-fixes).
- mm/page_owner: remove free_ts from page_owner output (git-fixes).
- mm/rodata_test: use READ_ONCE() to read const variable (git-fixes).
- mm: convert DAX lock/unlock page to lock/unlock folio (git-fixes).
- mm: memory-failure: ensure moving HWPoison flag to the raw error pages (git-fixes).
- mm: memory-failure: fetch compound head after extra page refcnt is held (git-fixes).
- mm: memory-failure: fix potential page refcnt leak in memory_failure() (git-fixes).
- mm: memory-failure: fix race window when trying to get hugetlb folio (git-fixes).
- mm: memory-failure: remove unneeded PageHuge() check (git-fixes).
- mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
- modpost: fix the missed iteration for the max bit in do_input() (git-fixes).
- mtd: onenand: Fix uninitialized retlen in do_otp_read() (git-fixes).
- mtd: spinand: Remove write_enable_op() in markbad() (git-fixes).
- net/rose: prevent integer overflows in rose_setsockopt() (git-fixes).
- net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
- net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
- net: mana: Enable debugfs files for MANA device (bsc#1236758).
- net: netvsc: Update default VMBus channels (bsc#1236757).
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (git-fixes).
- net: rose: fix timer races against user threads (git-fixes).
- net: usb: qmi_wwan: add Telit FE910C04 compositions (stable-fixes).
- net: usb: rtl8150: enable basic endpoint checking (git-fixes).
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (git-fixes).
- net: wwan: t7xx: Fix FSM command timeout issue (git-fixes).
- netfilter: nf_tables: validate family when identifying table via handle (bsc#1233778 ZDI-24-1454).
- nilfs2: fix possible int overflows in nilfs_fiemap() (git-fixes).
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers (git-fixes).
- nvme: Add error check for xa_store in nvme_get_effects_log (git-fixes).
- nvme: Add error path for xa_store in nvme_init_effects (git-fixes).
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (git-fixes).
- nvmet: propagate npwg topology (git-fixes).
- ocfs2: temporarily disable upstream patch (bsc#1236138)
- padata: add pd get/put refcnt helper (git-fixes).
- padata: avoid UAF for reorder_work (git-fixes).
- padata: fix UAF in padata_reorder (git-fixes).
- pinctrl: amd: Take suspend type into consideration which pins are non-wake (git-fixes).
- pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (git-fixes).
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it (git-fixes).
- platform/x86/intel-uncore-freq: Ignore minor version change (bsc#1225897).
- platform/x86/intel/tpmi: Add defines to get version information (bsc#1225897).
- pm:cpupower: Add missing powercap_set_enabled() stub function (git-fixes).
- power: ip5xxx_power: Fix return value on ADC read errors (git-fixes).
- powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (bsc#1220711 ltc#205755).
- powerpc/iommu: Only build sPAPR access functions on pSeries (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove MVE code (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove ioda1 support (bsc#1220711 ltc#205755).
- powerpc/powernv/pci: Remove last IODA1 defines (bsc#1220711 ltc#205755).
- powerpc/pseries/eeh: Fix get PE state translation (bsc#1215199).
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (bsc#1218470 ltc#204531).
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (bsc#1234825).
- pps: add an error check in parport_attach (git-fixes).
- pps: remove usage of the deprecated ida_simple_xx() API (stable-fixes).
- printk: Add is_printk_legacy_deferred() (bsc#1236733).
- printk: Defer legacy printing when holding printk_cpu_sync (bsc#1236733).
- pwm: stm32-lp: Add check for clk_enable() (git-fixes).
- pwm: stm32: Add check for clk_enable() (git-fixes).
- r8169: enable SG/TSO on selected chip versions per default (bsc#1235874).
- rcu-tasks: Pull sampling of ->percpu_dequeue_lim out of loop (git-fixes)
- rcu/tree: Defer setting of jiffies during stall reset (git-fixes)
- rcu: Dump memory object info if callback function is invalid (git-fixes)
- rcu: Eliminate rcu_gp_slow_unregister() false positive (git-fixes)
- rcuscale: Move rcu_scale_writer() (git-fixes)
- rdma/cxgb4: Prevent potential integer overflow on 32bit (git-fixes)
- regulator: core: Add missing newline character (git-fixes).
- regulator: of: Implement the unwind path of of_regulator_match() (git-fixes).
- remoteproc: core: Fix ida_free call while not allocated (git-fixes).
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (git-fixes).
- rtc: zynqmp: Fix optional clock name property (git-fixes).
- s390x config: IOMMU_DEFAULT_DMA_LAZY=y (bsc#1235646)
- samples/landlock: Fix possible NULL dereference in parse_path() (git-fixes).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat (bsc#1235865).
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat -kabi (bsc#1235865).
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (git-fixes).
- seccomp: Stub for !CONFIG_SECCOMP (stable-fixes).
- selftest: media_tests: fix trivial UAF typo (git-fixes).
- selftests/alsa: Fix circular dependency involving global-timer (stable-fixes).
- selftests/landlock: Fix error message (git-fixes).
- selftests/mm/cow: modify the incorrect checking parameters (git-fixes).
- selftests/powerpc: Fix argument order to timer_sub() (git-fixes).
- selftests: harness: fix printing of mismatch values in __EXPECT() (git-fixes).
- selftests: mptcp: avoid spurious errors on disconnect (git-fixes).
- selftests: tc-testing: reduce rshift value (stable-fixes).
- selftests: timers: clocksource-switch: Adapt progress to kselftest framework (git-fixes).
- selinux: Fix SCTP error inconsistency in selinux_socket_bind() (git-fixes).
- serial: 8250: Adjust the timeout for FIFO mode (git-fixes).
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (git-fixes).
- serial: sh-sci: Drop __initdata macro for port_cfg (git-fixes).
- soc: atmel: fix device_node release in atmel_soc_device_init() (git-fixes).
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (git-fixes).
- soc: qcom: smem_state: fix missing of_node_put in error path (git-fixes).
- soc: qcom: socinfo: Avoid out of bounds read of serial number (git-fixes).
- sound: usb: enable DSD output for ddHiFi TC44C (stable-fixes).
- sound: usb: format: do not warn that raw DSD is unsupported (stable-fixes).
- spi: zynq-qspi: Add check for clk_enable() (git-fixes).
- srcu: Fix srcu_struct node grpmask overflow on 64-bit systems (git-fixes)
- srcu: Only accelerate on enqueue time (git-fixes)
- stackdepot: rename pool_index to pool_index_plus_1 (git-fixes).
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (git-fixes).
- staging: iio: ad9832: Correct phase range check (git-fixes).
- staging: iio: ad9834: Correct phase range check (git-fixes).
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs() (git-fixes).
- staging: media: max96712: fix kernel oops when removing module (git-fixes).
- thermal: of: fix OF node leak in of_thermal_zone_find() (git-fixes).
- thunderbolt: Add support for Intel Lunar Lake (stable-fixes).
- thunderbolt: Add support for Intel Panther Lake-M/P (stable-fixes).
- tipc: fix NULL deref in cleanup_bearer() (bsc#1235433).
- tools: Sync if_xdp.h uapi tooling header (git-fixes).
- tpm: Map the ACPI provided event log (bsc#1233260 bsc#1233259 bsc#1232421).
- tty: serial: 8250: Fix another runtime PM usage counter underflow (git-fixes).
- tty: xilinx_uartps: split sysrq handling (git-fixes).
- ubifs: skip dumping tnc tree when zroot is null (git-fixes).
- uio: Fix return value of poll (git-fixes).
- uio: uio_dmem_genirq: check the return value of devm_kasprintf() (git-fixes).
- usb-storage: Add max sectors quirk for Nokia 208 (stable-fixes).
- usb: chipidea: add CI_HDRC_FORCE_VBUS_ACTIVE_ALWAYS flag (stable-fixes).
- usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in the error path of .probe() (git-fixes).
- usb: dwc3-am62: Disable autosuspend during remove (git-fixes).
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk() (git-fixes).
- usb: dwc3: gadget: fix writing NYET threshold (git-fixes).
- usb: fix reference leak in usb_new_device() (git-fixes).
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev (git-fixes).
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (git-fixes).
- usb: gadget: f_tcm: Decrement command ref count on cleanup (git-fixes).
- usb: gadget: f_tcm: Do not free command immediately (git-fixes).
- usb: gadget: f_tcm: Do not prepare BOT write request twice (git-fixes).
- usb: gadget: f_tcm: Fix Get/SetInterface return value (git-fixes).
- usb: gadget: f_tcm: Translate error to sense (git-fixes).
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (git-fixes).
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (git-fixes).
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (git-fixes).
- usb: host: xhci-plat: Assign shared_hcd->rsrc_start (git-fixes).
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (bsc#1235001)
- usb: typec: tcpm/tcpci_maxim: fix error code in max_contaminant_read_resistance_kohm() (git-fixes).
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE (git-fixes).
- usbnet: ipheth: break up NCM header size computation (git-fixes).
- usbnet: ipheth: check that DPE points past NCM header (git-fixes).
- usbnet: ipheth: fix DPE OoB read (git-fixes).
- usbnet: ipheth: fix possible overflow in DPE length check (git-fixes).
- usbnet: ipheth: refactor NCM datagram loop (git-fixes).
- usbnet: ipheth: use static NDP16 location in URB (git-fixes).
- virtio-mem: check if the config changed before fake offlining memory (git-fixes).
- virtio-mem: convert most offline_and_remove_memory() errors to -EBUSY (git-fixes).
- virtio-mem: keep retrying on offline_and_remove_memory() errors in Sub Block Mode (SBM) (git-fixes).
- virtio-mem: remove unsafe unplug in Big Block Mode (BBM) (git-fixes).
- vmscan,migrate: fix page count imbalance on node stats when demoting pages (git-fixes).
- vsock/virtio: cancel close work in the destructor (git-fixes)
- vsock: Keep the binding until socket destruction (git-fixes)
- vsock: reset socket state when de-assigning the transport (git-fixes)
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler (stable-fixes).
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset (stable-fixes).
- watchdog: rzg2l_wdt: Remove reset de-assert from probe (stable-fixes).
- wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855 (git-fixes).
- wifi: ath11k: cleanup struct ath11k_mon_data (git-fixes).
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() (stable-fixes).
- wifi: ath12k: fix tx power, max reg power update to firmware (git-fixes).
- wifi: brcmfmac: add missing header include for brcmf_dbg (git-fixes).
- wifi: cfg80211: adjust allocation of colocated AP data (git-fixes).
- wifi: iwlwifi: fw: read STEP table from correct UEFI var (git-fixes).
- wifi: mac80211: Add non-atomic station iterator (stable-fixes).
- wifi: mac80211: Fix common size calculation for ML element (git-fixes).
- wifi: mac80211: do not flush non-uploaded STAs (git-fixes).
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers (stable-fixes).
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems (stable-fixes).
- wifi: mac80211: fix tid removal during mesh forwarding (git-fixes).
- wifi: mac80211: prohibit deactivating all links (git-fixes).
- wifi: mac80211: wake the queues in case of failure in resume (stable-fixes).
- wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO (git-fixes).
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC (git-fixes).
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (git-fixes).
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link (git-fixes).
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7915: fix register mapping (git-fixes).
- wifi: mt76: mt7921: fix using incorrect group cipher after disconnection (git-fixes).
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc() (git-fixes).
- wifi: mt76: mt7996: add max mpdu len capability (git-fixes).
- wifi: mt76: mt7996: fix HE Phy capability (git-fixes).
- wifi: mt76: mt7996: fix definition of tx descriptor (git-fixes).
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event (git-fixes).
- wifi: mt76: mt7996: fix ldpc setting (git-fixes).
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes (git-fixes).
- wifi: mt76: mt7996: fix register mapping (git-fixes).
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality (git-fixes).
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU (git-fixes).
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core (git-fixes).
- wifi: rtlwifi: do not complete firmware loading needlessly (git-fixes).
- wifi: rtlwifi: fix init_sw_vars leak when probe fails (git-fixes).
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path (git-fixes).
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtlwifi: remove unused check_buddy_priv (git-fixes).
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step (git-fixes).
- wifi: rtlwifi: rtl8821ae: Fix media status report (git-fixes).
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (git-fixes).
- wifi: rtlwifi: usb: fix workqueue leak when probe fails (git-fixes).
- wifi: rtlwifi: wait for firmware loading before releasing memory (git-fixes).
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb (stable-fixes).
- wifi: rtw89: mcc: consider time limits not divisible by 1024 (git-fixes).
- wifi: wcn36xx: fix channel survey memory allocation size (git-fixes).
- wifi: wlcore: fix unbalanced pm_runtime calls (git-fixes).
- workqueue: Add rcu lock check at the end of work item execution (bsc#1236732).
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (git-fixes).
- xfs: Add error handling for xfs_reflink_cancel_cow_range (git-fixes).
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (git-fixes).
Patchnames
SUSE-2025-499,SUSE-SLE-Module-Basesystem-15-SP6-2025-499,SUSE-SLE-Module-Development-Tools-15-SP6-2025-499,SUSE-SLE-Module-Legacy-15-SP6-2025-499,SUSE-SLE-Module-Live-Patching-15-SP6-2025-499,SUSE-SLE-Product-HA-15-SP6-2025-499,SUSE-SLE-Product-WE-15-SP6-2025-499,openSUSE-SLE-15.6-2025-499
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).